last executing test programs: 3.658877821s ago: executing program 1 (id=50): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40012021) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000700)=""/142, 0x8e}], 0x9, &(0x7f00000008c0)=""/4096, 0x1000}, 0x10}, {{&(0x7f00000018c0)=@nfc, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/102, 0x66}, {&(0x7f0000000280)=""/31, 0x1f}], 0x3, &(0x7f0000002a00)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000003a80)={0x77359400}) 2.874735191s ago: executing program 3 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x74, 0x2, 0x0, 0x50}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10, 0x1, 0x0, 0x2, 0x9, 0xd, 0x0, 0x0, 0x1049, 0x0, 0xff, 0xef, 0x0, '\x00', 0x70}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000280)={0xcc, 0x0, 0x1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.76493126s ago: executing program 1 (id=63): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x430, 0x0, 0x130, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3f5e, 0x4, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x10, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x2ec}]}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="00000000350281", 0x7}], 0x2) 2.65965311s ago: executing program 1 (id=64): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) io_setup(0x2adf, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netfilter\x00') io_destroy(r1) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r2, 0x0}]) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x8100, r2}, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.854902056s ago: executing program 0 (id=68): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) 1.792792194s ago: executing program 0 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x24a481, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x80, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 1.792472644s ago: executing program 0 (id=70): syz_usb_connect(0x2, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0x1, 0x1, 0x44ab, 0x8001, 0xfffffffffffffff6, 0x200, 0x8, 0x5, 0xfff, 0x81, 0x3, 0x2, 0x1, 0x4, 0x5, 0xb, 0x7, 0x80000001, 0x1, 0x4, 0xb6, 0x5, 0xffffffff, 0x4, 0xfc, 0x2}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x11, r4, 0x3000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x1000000002, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x6, 0x4, 0x1, 0x8], 0xeeef0000, 0x4fb40}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 1.640464355s ago: executing program 3 (id=71): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee00) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3a) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) 1.254459401s ago: executing program 0 (id=72): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xfffffff8, 0xd, {{0x9, 0x4, 0x0, 0x19, 0x24, 0x66, 0x0, 0xa4, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0xb, 0x3f, [@multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 1.1968689s ago: executing program 0 (id=73): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffff9100f4f, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x80, 0xffff}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) statx(r7, 0x0, 0x1000, 0x20, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "3d80850c491b39314a25af1b69c4c66f1bada000e1ad5b16a5b00a2b28393ac1da6ad61255f3ce86ebcf6b0c7b168ae5325cfe6eb4ec0982c3e451ffbd03bb62", 0x1c}, 0x48, 0x0) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6, 0x0, 0x0, 0x3, 0x1, 0x0, 0x85, 0x5c}) r11 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r11, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/199, 0xc7}], 0x1}, 0x9}], 0x1, 0x0, 0x0) 1.14417823s ago: executing program 1 (id=74): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x4c000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x11, r1, 0x5401000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x345, 0x0, 0x4}]}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)', @ANYRESHEX=0x0], 0x28}}], 0x2, 0x40000) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket(0x28, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.116471974s ago: executing program 3 (id=75): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='seclab\x00\x00\x00\x00']) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x7, 0x3e16, 0x4, 0x2, 0x3}, {0x80000008, 0x2, 0x8, 0x2, 0x7fd}]}) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.032828198s ago: executing program 3 (id=76): openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x26e1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x1e, 0xda, 0x5, 0x7, {0x4e21, 0x4e22, [0x1000, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xfffffffb, 0x7f]}, 0x8, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x1e, 0xda, 0x5, 0x7, {0x4e21, 0x4e22, [0x1000, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xfffffffb, 0x7f]}, 0x8, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x200001d0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)=""/4096, 0x1000) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) (async) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) 1.032658118s ago: executing program 1 (id=77): gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) syz_io_uring_setup(0x1517, &(0x7f0000000080)={0x0, 0x0, 0x16}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "1fbde0c24a5ee0bf7bc6ddb4aab8f3f561e5aa09fde98dd136ff938aa72a92bbed6d67b6c3aba69a6f3e2d22f2697e7d2ddfbd79bbe025724823180485b5ea68d55263c59b0fd87ea03581931dcfc34fcdd40a98ee131f4a654365da23c948086b1c1d63fd59f1c31beb9f899d190300000000000000da368a7bd9a29a372c6f40695f5ed7c8136661b78764cc5f3615d5fa"}, 0x9d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 1.032488098s ago: executing program 1 (id=78): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503", @ANYRES16], 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) fdatasync(r0) syz_usb_connect$uac1(0x2, 0xe1, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0xe, 0x90, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x80}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x5, "1f99"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0xcb, "02badf"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x8, "17805fb20964"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf5, 0x4, 0x80, 0xe4, "", "ae39"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x6, "50caa2f9a68342f2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x3, 0x4, {0x7, 0x25, 0x1, 0x0, 0x59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x5, 0x4, "0664977a18"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x77, 0x7f, '1'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5, 0x8, '9'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8, 0x4, "aaeab83077"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x6, 0x0, "af1337be854b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x5, 0x8, {0x7, 0x25, 0x1, 0x81, 0xa5, 0x4d5}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x301, 0x6, 0x3, 0xa, 0xff, 0x4}, 0x3a, &(0x7f0000000180)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cdbbcacbb35e6e629404f9a69fdb6bb4"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x94, 0xc, 0xec, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x5d, 0x7, 0x5, 0x4}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x2e, &(0x7f0000000200)=@string={0x2e, 0x3, "7f26ab81fed409c2b97f8aeb0875dc8ce860abe88f42a2e5c98d34f5332b7cdf13017b2a1b57acc18b35eac1"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x810}}, {0xb4, &(0x7f0000000280)=@string={0xb4, 0x3, "015a1e91ec8766392e07f7d65230923940a3fedf7d815e64c31dbaa1ae8b0b2b0d1523e3d937f377f48794deae6b0d00d69bd591614bdfbd2b1ae1957c76a24adba0a9cc511730007f8319b33381e66cdb577d7876c9d2216c7bd73881312b54940f0317a1f4bccdd11045ead546975c03f52c293b6c27e011ceef806776eb02f5607f00dafe3a5032ff2abb46748a5c473f96d56150f82d0f81a109d8e55e25d4a768ef5198ac01924484e39d0cace2621f"}}, {0x22, &(0x7f0000000340)=@string={0x22, 0x3, "616676c79048e488a8155a8b9240107e2f293945b20cab0998580250233642de"}}]}) 677.55007ms ago: executing program 2 (id=80): syz_usb_connect(0x2, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000080)={0x1, 0x1, 0x44ab, 0x8001, 0xfffffffffffffff6, 0x200, 0x8, 0x5, 0xfff, 0x81, 0x3, 0x2, 0x1, 0x4, 0x5, 0xb, 0x7, 0x80000001, 0x1, 0x4, 0xb6, 0x5, 0xffffffff, 0x4, 0xfc, 0x2}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x11, r4, 0x3000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x1000000002, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x6, 0x4, 0x1, 0x8], 0xeeef0000, 0x4fb40}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 256.942239ms ago: executing program 0 (id=81): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYBLOB="96aafa4dd9357a5c3c99a4871e1b1e182ba1b89bb494063b33c4c2a102bdcd2742ce80f38b2f76ca5f2ece", @ANYRESOCT, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="26b5c0ca13024769ea4ca7a8ff198f8942f42095145f4f2e4f2a899da3027530339d69efda8115b395a4e7fb96f5510348dbef399de394b020ae431a0bf6307073f0bdbe9cc2eaf455540103035a57d56e5c5d0f00000065", @ANYRES64, @ANYRESHEX=0x0], 0x0) 213.565342ms ago: executing program 3 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121482, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000001240)='-1\x00', 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x300, 0x0}) ioctl$KDSKBENT(r3, 0x4b47, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x7f, 0x7ff}) 84.459017ms ago: executing program 2 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 28.965106ms ago: executing program 2 (id=84): connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) 28.880936ms ago: executing program 2 (id=85): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffc, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) 28.825496ms ago: executing program 2 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x7, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 18.465484ms ago: executing program 3 (id=87): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_handle={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x6, 0x0, 0x40}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=88): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000e1f000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 23.856019][ T36] audit: type=1400 audit(1772056412.110:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.859414][ T282] cgroup: Unknown subsys name 'net' [ 23.878903][ T36] audit: type=1400 audit(1772056412.110:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.906254][ T36] audit: type=1400 audit(1772056412.130:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.906772][ T282] cgroup: Unknown subsys name 'devices' [ 24.107196][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.113184][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.228155][ T36] audit: type=1400 audit(1772056412.480:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.251366][ T36] audit: type=1400 audit(1772056412.480:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.276131][ T36] audit: type=1400 audit(1772056412.480:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.306459][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.315819][ T36] audit: type=1400 audit(1772056412.570:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.341379][ T36] audit: type=1400 audit(1772056412.570:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.375215][ T36] audit: type=1400 audit(1772056412.630:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.400859][ T36] audit: type=1400 audit(1772056412.630:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.401573][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.171493][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.179244][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.186466][ T289] bridge_slave_0: entered allmulticast mode [ 25.192949][ T289] bridge_slave_0: entered promiscuous mode [ 25.205794][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.212866][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.220067][ T289] bridge_slave_1: entered allmulticast mode [ 25.226573][ T289] bridge_slave_1: entered promiscuous mode [ 25.359712][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.366851][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.373993][ T293] bridge_slave_0: entered allmulticast mode [ 25.380313][ T293] bridge_slave_0: entered promiscuous mode [ 25.388427][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.395583][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.402728][ T293] bridge_slave_1: entered allmulticast mode [ 25.409107][ T293] bridge_slave_1: entered promiscuous mode [ 25.474027][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.481237][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.488389][ T294] bridge_slave_0: entered allmulticast mode [ 25.494742][ T294] bridge_slave_0: entered promiscuous mode [ 25.500990][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.508109][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.515278][ T295] bridge_slave_0: entered allmulticast mode [ 25.521526][ T295] bridge_slave_0: entered promiscuous mode [ 25.528161][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.535237][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.542578][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.549654][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.557614][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.564819][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.571918][ T294] bridge_slave_1: entered allmulticast mode [ 25.578327][ T294] bridge_slave_1: entered promiscuous mode [ 25.590760][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.597895][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.605337][ T295] bridge_slave_1: entered allmulticast mode [ 25.611632][ T295] bridge_slave_1: entered promiscuous mode [ 25.714633][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.721711][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.729033][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.736084][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.773732][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.780920][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.788254][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.795396][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.803680][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.811174][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.818899][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.826329][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.833862][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.841292][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.857251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.864340][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.879639][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.886722][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.930374][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.937607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.957531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.964707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.981870][ T289] veth0_vlan: entered promiscuous mode [ 25.998698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.005790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.013724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.020817][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.043733][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.050851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.059801][ T289] veth1_macvtap: entered promiscuous mode [ 26.069509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.076596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.103561][ T293] veth0_vlan: entered promiscuous mode [ 26.122863][ T295] veth0_vlan: entered promiscuous mode [ 26.155256][ T293] veth1_macvtap: entered promiscuous mode [ 26.162965][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.169790][ T295] veth1_macvtap: entered promiscuous mode [ 26.225961][ T294] veth0_vlan: entered promiscuous mode [ 26.254197][ T294] veth1_macvtap: entered promiscuous mode [ 26.281252][ T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.299099][ T339] fuse: Bad value for 'fd' [ 26.353298][ T348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.366462][ T348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.552810][ T364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9'. [ 26.561841][ T364] tipc: Invalid UDP bearer configuration [ 26.561868][ T364] tipc: Enabling of bearer rejected, failed to enable media [ 26.664394][ T330] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.799558][ T330] usb 2-1: device descriptor read/64, error -71 [ 26.864395][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.904495][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.016217][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.024377][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 27.032850][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.043040][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.052024][ T330] usb 2-1: device descriptor read/64, error -71 [ 27.060232][ T45] usb 4-1: string descriptor 0 read error: -22 [ 27.066500][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.074405][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 27.075574][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.082347][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 27.099588][ T45] usb 4-1: 0:2 : does not exist [ 27.105102][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.115617][ T334] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.123369][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.134093][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.143334][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.151384][ T10] usb 3-1: Product: ⳪꩚㞆㘧⅁ྏ㪤霐㉱避仸柿잷巢ꕢ워㤜叜뷿螲꠆ [ 27.161116][ T10] usb 3-1: Manufacturer: Ϟ㡷⭚͝㆚쥮萕써륀狸魓헝冬 [ 27.169272][ T10] usb 3-1: SerialNumber: 闳뎩뫞ߡ蓣蒿▆㑮ﮗ糷漻ڡᵝ鉏ꢂ阊婖쬮ꪦ胸콢ணᲞ葐ং텲㕺딼釺冘ꑒ囂칻熝⍜랅梅ꈨ΄騸覄㏻뮼뜀峓梢녥礲唠࿮퀸䢠䪢ꮌ堸䋰졙Ƿዬ堟ꉽ昪㷕ࢍ췲켂ݰ꧰꼣ޥ [ 27.275913][ T334] usb 1-1: config 4 has an invalid interface number: 121 but max is 0 [ 27.284175][ T334] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 27.294390][ T334] usb 1-1: config 4 has no interface number 0 [ 27.300534][ T334] usb 1-1: config 4 interface 121 has no altsetting 0 [ 27.304487][ T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.311062][ T334] usb 1-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 27.323992][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.332409][ T334] usb 1-1: Product: syz [ 27.336765][ T334] usb 1-1: Manufacturer: syz [ 27.341411][ T334] usb 1-1: SerialNumber: syz [ 27.444403][ T330] usb 2-1: device descriptor read/64, error -71 [ 27.552836][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.561598][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.571244][ T378] Zero length message leads to an empty skb [ 27.694375][ T330] usb 2-1: device descriptor read/64, error -71 [ 27.804776][ T330] usb usb2-port1: attempt power cycle [ 27.919038][ T370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.928251][ T370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.941255][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 27.953972][ T45] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 27.965141][ T45] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 27.979510][ T45] usb 4-1: USB disconnect, device number 2 [ 27.986710][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.144368][ T330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.165546][ T330] usb 2-1: device descriptor read/8, error -71 [ 28.295869][ T330] usb 2-1: device descriptor read/8, error -71 [ 28.534423][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.555541][ T330] usb 2-1: device descriptor read/8, error -71 [ 28.685525][ T330] usb 2-1: device descriptor read/8, error -71 [ 28.704509][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.794493][ T330] usb usb2-port1: unable to enumerate USB device [ 28.854597][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 28.861105][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.872212][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.882108][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 28.891371][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.900261][ T9] usb 4-1: config 0 descriptor?? [ 29.106653][ T381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.115270][ T381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.124546][ T381] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 29.341841][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.348803][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.355935][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.362815][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.369820][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.377691][ T9] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 29.484785][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 29.484805][ T36] audit: type=1400 audit(1772056417.740:141): avc: denied { read write } for pid=390 comm="syz.1.17" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.515371][ T36] audit: type=1400 audit(1772056417.740:142): avc: denied { open } for pid=390 comm="syz.1.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.539608][ T36] audit: type=1400 audit(1772056417.740:143): avc: denied { ioctl } for pid=390 comm="syz.1.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.566978][ T36] audit: type=1400 audit(1772056417.780:144): avc: denied { read write } for pid=390 comm="syz.1.17" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.600494][ T36] audit: type=1400 audit(1772056417.780:145): avc: denied { open } for pid=390 comm="syz.1.17" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.624399][ T36] audit: type=1400 audit(1772056417.820:146): avc: denied { read append } for pid=380 comm="syz.3.15" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 29.645765][ T10] usb 3-1: 0:2 : does not exist [ 29.651763][ T36] audit: type=1400 audit(1772056417.820:147): avc: denied { open } for pid=380 comm="syz.3.15" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 29.675897][ T10] usb 3-1: USB disconnect, device number 2 [ 29.697324][ T36] audit: type=1326 audit(1772056417.870:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=380 comm="syz.3.15" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc82bb9c629 code=0x0 [ 29.726119][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.833010][ T334] usb 1-1: USB disconnect, device number 2 [ 29.864342][ T36] audit: type=1400 audit(1772056418.110:149): avc: denied { append } for pid=396 comm="syz.0.19" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.014542][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.174612][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 30.193944][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 30.202589][ T334] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.210982][ T10] usb 3-1: config 0 has no interface number 0 [ 30.214908][ T36] audit: type=1400 audit(1772056418.460:150): avc: denied { bind } for pid=398 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.231526][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 30.256306][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 30.266008][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.274084][ T10] usb 3-1: Product: syz [ 30.304052][ T10] usb 3-1: Manufacturer: syz [ 30.308821][ T10] usb 3-1: SerialNumber: syz [ 30.319063][ T10] usb 3-1: config 0 descriptor?? [ 30.330825][ T10] smsc75xx v1.0.0 [ 30.364325][ T334] usb 1-1: Using ep0 maxpacket: 16 [ 30.371093][ T334] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 30.379854][ T334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.390557][ T334] usb 1-1: config 0 has no interface number 0 [ 30.397488][ T334] usb 1-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.408628][ T334] usb 1-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.422586][ T334] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 30.431798][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.458380][ T334] usb 1-1: config 0 descriptor?? [ 30.482967][ T334] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 30.496891][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.671149][ T45] usb 1-1: USB disconnect, device number 3 [ 31.014427][ T334] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 31.165406][ T334] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 31.179491][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.188460][ T334] usb 2-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 31.197920][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.228978][ T334] usb 2-1: config 0 descriptor?? [ 31.234693][ T403] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.269225][ T405] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.327530][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 31.342807][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 31.354699][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 31.365736][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 31.376122][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 31.387679][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 31.401284][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 31.444157][ T10] usb 3-1: USB disconnect, device number 3 [ 31.515985][ T9] kone 0003:1E7D:2CED.0001: couldn't init struct kone_device [ 31.528358][ T9] kone 0003:1E7D:2CED.0001: couldn't install mouse [ 31.542993][ T9] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -5 [ 31.553023][ T9] usb 4-1: USB disconnect, device number 3 [ 31.652563][ T403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.661545][ T403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.671710][ T334] wacom 0003:056A:033D.0002: unknown main item tag 0x0 [ 31.680409][ T334] wacom 0003:056A:033D.0002: unknown main item tag 0x0 [ 31.687352][ T334] wacom 0003:056A:033D.0002: unknown main item tag 0x0 [ 31.694354][ T334] wacom 0003:056A:033D.0002: unknown main item tag 0x0 [ 31.701229][ T334] wacom 0003:056A:033D.0002: unknown main item tag 0x0 [ 31.708538][ T334] wacom 0003:056A:033D.0002: Unknown device_type for 'HID 056a:033d'. Assuming pen. [ 31.719122][ T334] wacom 0003:056A:033D.0002: hidraw0: USB HID v0.02 Device [HID 056a:033d] on usb-dummy_hcd.1-1/input0 [ 31.733630][ T334] input: Wacom Intuos P M 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033D.0002/input/input4 [ 31.844388][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.872157][ C1] usb 2-1: input irq status -75 received [ 31.995546][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 32.003935][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 32.012872][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 32.023225][ T9] usb 4-1: config 220 has no interface number 2 [ 32.029559][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 32.042754][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 32.049607][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 32.057026][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 32.065214][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 32.074388][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.075456][ T371] usb 2-1: USB disconnect, device number 6 [ 32.082408][ T9] usb 4-1: Product: syz [ 32.082433][ T9] usb 4-1: Manufacturer: syz [ 32.098044][ T9] usb 4-1: SerialNumber: syz [ 32.164355][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.246344][ T421] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 32.255028][ T421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 32.314169][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 32.321170][ T9] usb 4-1: No valid video chain found. [ 32.326846][ T9] usb 4-1: selecting invalid altsetting 0 [ 32.333441][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.346242][ T9] usb 4-1: USB disconnect, device number 4 [ 32.349560][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.365157][ T45] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 32.374984][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.390912][ T45] usb 3-1: config 0 descriptor?? [ 32.611810][ T430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 32.620846][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 32.728294][ T439] fuseblk: Unknown parameter 'func' [ 32.801435][ T45] elecom 0003:056E:011C.0003: item fetching failed at offset 4/5 [ 32.811236][ T45] elecom 0003:056E:011C.0003: probe with driver elecom failed with error -22 [ 33.000840][ T379] usb 3-1: USB disconnect, device number 4 [ 33.046372][ T453] overlayfs: statfs failed on './file0' [ 33.084435][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.094415][ T334] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.235599][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 33.245590][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 33.256636][ T334] usb 4-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 33.267145][ T334] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.276250][ T334] usb 4-1: config 1 has no interface number 1 [ 33.282547][ T334] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 33.295671][ T334] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 170, changing to 7 [ 33.295771][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 33.315978][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.324039][ T9] usb 2-1: Product: syz [ 33.328381][ T9] usb 2-1: Manufacturer: syz [ 33.333068][ T9] usb 2-1: SerialNumber: syz [ 33.338537][ T334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.347984][ T9] usb 2-1: config 0 descriptor?? [ 33.353272][ T450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.353861][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.368557][ T334] usb 4-1: Product: syz [ 33.368578][ T450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.372883][ T334] usb 4-1: Manufacturer: syz [ 33.385282][ T334] usb 4-1: SerialNumber: syz [ 33.391161][ T449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.586243][ T450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.593547][ T450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.605598][ T334] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 33.613571][ T334] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 33.628772][ T334] usb 4-1: USB disconnect, device number 5 [ 33.642786][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.764358][ T379] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.804986][ T450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.813561][ T450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.918599][ T379] usb 3-1: Using ep0 maxpacket: 16 [ 33.933970][ T379] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.946324][ T379] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.955430][ T379] usb 3-1: config 1 has no interface number 1 [ 33.961666][ T379] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 33.983519][ T379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.992768][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.001100][ T379] usb 3-1: Product: syz [ 34.024393][ T379] usb 3-1: Manufacturer: syz [ 34.029117][ T379] usb 3-1: SerialNumber: syz [ 34.115973][ T470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=470 comm=syz.0.43 [ 34.130456][ T470] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 34.239074][ T379] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 34.252678][ T379] usb 3-1: USB disconnect, device number 5 [ 34.264364][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.424402][ T334] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.439819][ T9] Error reading MAC address [ 34.446574][ T9] usb 2-1: USB disconnect, device number 7 [ 34.574395][ T334] usb 1-1: Using ep0 maxpacket: 8 [ 34.580645][ T334] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 34.589783][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.598581][ T334] usb 1-1: config 0 descriptor?? [ 34.755454][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 34.755474][ T36] audit: type=1400 audit(1772056423.000:168): avc: denied { create } for pid=481 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.760543][ T482] tipc: Started in network mode [ 34.761713][ T36] audit: type=1400 audit(1772056423.010:169): avc: denied { write } for pid=481 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.782101][ T482] tipc: Node identity 96a67851718a, cluster identity 4711 [ 34.812238][ T482] tipc: Enabled bearer , priority 0 [ 34.819418][ T334] usb 1-1: string descriptor 0 read error: -71 [ 34.825677][ T334] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 34.832257][ T334] usb 1-1: Found UVC 0.00 device (2833:0201) [ 34.839220][ T36] audit: type=1400 audit(1772056423.080:170): avc: denied { ioctl } for pid=481 comm="syz.2.47" path="socket:[4764]" dev="sockfs" ino=4764 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.864507][ T334] usb 1-1: No valid video chain found. [ 34.871100][ T334] usb 1-1: USB disconnect, device number 4 [ 34.883050][ T36] audit: type=1400 audit(1772056423.130:171): avc: denied { shutdown } for pid=483 comm="syz.3.48" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.906163][ T36] audit: type=1400 audit(1772056423.130:172): avc: denied { create } for pid=483 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.925383][ T36] audit: type=1400 audit(1772056423.130:173): avc: denied { bind } for pid=483 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.946306][ T36] audit: type=1400 audit(1772056423.180:174): avc: denied { getopt } for pid=485 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.988606][ T36] audit: type=1400 audit(1772056423.240:175): avc: denied { mount } for pid=492 comm="syz.3.51" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.063422][ T36] audit: type=1400 audit(1772056423.310:176): avc: denied { write } for pid=498 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 35.074607][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.137335][ T36] audit: type=1400 audit(1772056423.390:177): avc: denied { create } for pid=505 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.234350][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 35.240905][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.249503][ T45] usb 3-1: config 5 has an invalid interface number: 33 but max is 1 [ 35.257907][ T45] usb 3-1: config 5 has an invalid interface number: 7 but max is 1 [ 35.266025][ T45] usb 3-1: config 5 has an invalid interface number: 2 but max is 1 [ 35.274083][ T45] usb 3-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 35.283189][ T45] usb 3-1: config 5 has no interface number 0 [ 35.289328][ T45] usb 3-1: config 5 has no interface number 1 [ 35.295522][ T45] usb 3-1: config 5 interface 7 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.308651][ T45] usb 3-1: config 5 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 35.321594][ T45] usb 3-1: config 5 interface 33 has no altsetting 0 [ 35.328345][ T45] usb 3-1: config 5 interface 7 has no altsetting 0 [ 35.335088][ T45] usb 3-1: config 5 interface 2 has no altsetting 0 [ 35.348535][ T45] usb 3-1: string descriptor 0 read error: -22 [ 35.354851][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice=7b.34 [ 35.363916][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.377462][ T45] usb 3-1: selecting invalid altsetting 0 [ 35.587658][ T482] syzkaller0: MTU too low for tipc bearer [ 35.593493][ T482] tipc: Disabling bearer [ 35.600737][ T334] usb 3-1: USB disconnect, device number 6 [ 35.912750][ T535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.214370][ T334] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 36.374337][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 36.380615][ T334] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 36.388842][ T334] usb 2-1: config 0 has no interface number 0 [ 36.396862][ T334] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 36.406999][ T334] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 36.418380][ T334] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 36.427592][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.435653][ T334] usb 2-1: Product: syz [ 36.441706][ T334] usb 2-1: Manufacturer: syz [ 36.446382][ T334] usb 2-1: SerialNumber: syz [ 36.451819][ T334] usb 2-1: config 0 descriptor?? [ 36.457221][ T537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.464672][ T537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.524382][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.674788][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 36.681103][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 36.691906][ T45] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 36.705071][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.712805][ T45] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 36.722034][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.730918][ T45] usb 3-1: config 0 descriptor?? [ 36.730950][ T544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.754654][ T544] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.964472][ T334] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.974645][ T334] asix 2-1:0.34: probe with driver asix failed with error -71 [ 36.983254][ T334] usb 2-1: USB disconnect, device number 8 [ 37.138839][ T45] hid-thrustmaster 0003:044F:B65D.0004: global environment stack underflow [ 37.147637][ T45] hid-thrustmaster 0003:044F:B65D.0004: item 0 4 1 11 parsing failed [ 37.156015][ T45] hid-thrustmaster 0003:044F:B65D.0004: parse failed with error -22 [ 37.164051][ T45] hid-thrustmaster 0003:044F:B65D.0004: probe with driver hid-thrustmaster failed with error -22 [ 37.346002][ T334] usb 3-1: USB disconnect, device number 7 [ 37.529046][ T568] binder: Unknown parameter 'seclab' [ 37.536175][ T568] process 'syz.3.75' launched '/dev/fd/3' with NULL argv: empty string added [ 37.824368][ T334] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 37.994344][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 38.000873][ T334] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 38.014361][ T334] usb 2-1: config 0 has no interface number 0 [ 38.020528][ T334] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 38.045177][ T334] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 38.054261][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.062321][ T334] usb 2-1: Product: syz [ 38.084356][ T334] usb 2-1: Manufacturer: syz [ 38.089025][ T334] usb 2-1: SerialNumber: syz [ 38.094733][ T334] usb 2-1: config 0 descriptor?? [ 38.302668][ T576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.311284][ T576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.320332][ T371] usb 2-1: USB disconnect, device number 9 [ 38.584366][ T334] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.626286][ T598] rust_binder: Error while translating object. [ 38.626351][ C0] BUG: TASK stack guard page was hit at ffffc9000fea7fe8 (stack is ffffc9000fea8000..ffffc9000feb0000) [ 38.626403][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 38.626439][ C0] CPU: 0 UID: 0 PID: 598 Comm: syz.3.87 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 38.626464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.626477][ C0] RIP: 0010:__unwind_start+0x33/0x410 [ 38.626515][ C0] Code: 57 41 56 41 55 41 54 53 48 83 ec 40 48 89 4d c8 49 89 d4 49 89 f7 48 89 fb 49 be 00 00 00 00 00 fc ff df ba 60 00 00 00 31 f6 38 af 9a 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 [ 38.626532][ C0] RSP: 0018:ffffc9000fea7ff0 EFLAGS: 00010246 [ 38.626558][ C0] RAX: ffff88811dbc1300 RBX: ffffc9000fea8068 RCX: ffffc9000fea80f0 [ 38.626582][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc9000fea8068 [ 38.626596][ C0] RBP: ffffc9000fea8058 R08: dffffc0000000000 R09: 0000000000000000 [ 38.626610][ C0] R10: ffffc9000fea81b0 R11: 0000000000000002 R12: 0000000000000000 [ 38.626623][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88811dbc1300 [ 38.626637][ C0] FS: 00007fc82ca656c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.626655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.626670][ C0] CR2: ffffc9000fea7fe8 CR3: 000000011cc48000 CR4: 00000000003526b0 [ 38.626688][ C0] Call Trace: [ 38.626696][ C0] [ 38.626705][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 38.626728][ C0] ? arch_stack_walk+0xf2/0x170 [ 38.626760][ C0] ? stack_trace_save+0xaa/0x100 [ 38.626778][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 38.626797][ C0] ? __asan_memset+0x39/0x50 [ 38.626822][ C0] ? kasan_save_track+0x3e/0x80 [ 38.626857][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 38.626898][ C0] ? kasan_save_free_info+0x4a/0x60 [ 38.626921][ C0] ? __kasan_slab_free+0x5f/0x80 [ 38.626949][ C0] ? kfree+0x158/0x440 [ 38.626971][ C0] ? krealloc_noprof+0xfa/0x130 [ 38.626997][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 38.627018][ C0] ? krealloc_noprof+0xfa/0x130 [ 38.627044][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 38.627079][ C0] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 38.627114][ C0] ? __kasan_check_write+0x18/0x20 [ 38.627137][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.627158][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1378/0x22f0 [ 38.627199][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.627220][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 38.627258][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 38.627278][ C0] ? stack_depot_save_flags+0x399/0x800 [ 38.627304][ C0] ? kasan_save_track+0x4f/0x80 [ 38.627330][ C0] ? kasan_save_track+0x3e/0x80 [ 38.627356][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.627378][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 38.627405][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 38.627431][ C0] ? __set_page_owner+0x2af/0x600 [ 38.627460][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 38.627478][ C0] ? prep_new_page+0x20/0x120 [ 38.627495][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 38.627517][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 38.627537][ C0] ? stack_depot_save_flags+0x672/0x800 [ 38.627560][ C0] ? kasan_save_track+0x4f/0x80 [ 38.627593][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.627614][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 38.627642][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 38.627668][ C0] ? krealloc_noprof+0x8d/0x130 [ 38.627694][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 38.627734][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3ed/0x1e70 [ 38.627772][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 38.627821][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x3691/0x8520 [ 38.627860][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 38.627890][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x30d/0xc20 [ 38.627932][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1bf7/0xa690 [ 38.627966][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 38.627991][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 38.628018][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 38.628046][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 38.628074][ C0] ? do_syscall_64+0x57/0xf0 [ 38.628093][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.628130][ C0] ? __kasan_check_write+0x18/0x20 [ 38.628154][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.628174][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 38.628194][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 38.628219][ C0] ? __set_page_owner+0x2af/0x600 [ 38.628249][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 38.628280][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.628304][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 38.628334][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 38.628367][ C0] ? __kasan_check_write+0x18/0x20 [ 38.628390][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.628407][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.628426][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6cd/0xc90 [ 38.628468][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.628491][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x61e/0xc90 [ 38.628533][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 38.628553][ C0] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 38.628620][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 38.628652][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.628676][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 38.628707][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 38.628739][ C0] ? stack_depot_save+0x12/0x20 [ 38.628760][ C0] ? save_stack+0x149/0x240 [ 38.628789][ C0] ? __reset_page_owner+0x450/0x450 [ 38.628819][ C0] ? __kasan_check_write+0x18/0x20 [ 38.628843][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.628861][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 38.628905][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 38.628945][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x343/0x5680 [ 38.628981][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.629003][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1744/0x5680 [ 38.629041][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.629063][ C0] ? __free_pages+0x6b/0x3b0 [ 38.629082][ C0] ? free_pages+0x86/0x90 [ 38.629100][ C0] ? stack_depot_save_flags+0x3ab/0x800 [ 38.629139][ C0] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 38.629178][ C0] ? kasan_save_track+0x4f/0x80 [ 38.629203][ C0] ? kasan_save_track+0x3e/0x80 [ 38.629228][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.629249][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 38.629276][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 38.629303][ C0] ? krealloc_noprof+0x8d/0x130 [ 38.629328][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 38.629368][ C0] ? __asan_memset+0x39/0x50 [ 38.629402][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 38.629421][ C0] ? _RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x3bd/0x990 [ 38.629488][ C0] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 38.629561][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.629588][ C0] ? __kasan_check_write+0x18/0x20 [ 38.629609][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.629624][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.629642][ C0] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xa7/0x250 [ 38.629672][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 38.629702][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.629723][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 38.629754][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 38.629783][ C0] ? mutex_unlock+0x90/0x240 [ 38.629805][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 38.629827][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 38.629856][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 38.629884][ C0] ? desc_read+0x202/0x3e0 [ 38.629910][ C0] ? __kasan_check_write+0x18/0x20 [ 38.629931][ C0] ? desc_read+0x1ab/0x3e0 [ 38.629956][ C0] ? prb_first_seq+0x109/0x1d0 [ 38.629984][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 38.630011][ C0] ? __kasan_check_write+0x18/0x20 [ 38.630033][ C0] ? desc_read+0x1ab/0x3e0 [ 38.630059][ C0] ? __kasan_check_read+0x15/0x20 [ 38.630081][ C0] ? this_cpu_in_panic+0x56/0x90 [ 38.630099][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 38.630127][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.630149][ C0] ? prb_read_valid+0x80/0x80 [ 38.630174][ C0] ? data_alloc+0x4d0/0x7e0 [ 38.630201][ C0] ? desc_read+0x202/0x3e0 [ 38.630229][ C0] ? __kasan_check_write+0x18/0x20 [ 38.630250][ C0] ? desc_read+0x1ab/0x3e0 [ 38.630279][ C0] ? prb_first_seq+0x109/0x1d0 [ 38.630307][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 38.630335][ C0] ? __kasan_check_write+0x18/0x20 [ 38.630358][ C0] ? desc_read+0x1ab/0x3e0 [ 38.630385][ C0] ? __kasan_check_read+0x15/0x20 [ 38.630406][ C0] ? this_cpu_in_panic+0x56/0x90 [ 38.630423][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 38.630451][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 38.630472][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 38.630509][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 38.630543][ C0] ? prb_read_valid+0x80/0x80 [ 38.630580][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 38.630599][ C0] ? up+0x10a/0x1b0 [ 38.630622][ C0] ? __cfi_up+0x10/0x10 [ 38.630646][ C0] ? krealloc_noprof+0xfa/0x130 [ 38.630671][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 38.630704][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 38.630735][ C0] ? __cfi_llist_add_batch+0x10/0x10 [ 38.630753][ C0] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 38.630784][ C0] ? __cfi_console_unlock+0x10/0x10 [ 38.630803][ C0] ? tick_nohz_tick_stopped+0x4c/0x60 [ 38.630825][ C0] ? __irq_work_queue_local+0xc4/0x260 [ 38.630847][ C0] ? irq_work_queue+0xc2/0x160 [ 38.630866][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x3a3/0x660 [ 38.630913][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 38.630932][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 38.630978][ C0] ? vprintk_default+0x2a/0x40 [ 38.630997][ C0] ? vprintk+0x93/0xa0 [ 38.631019][ C0] ? _printk+0xde/0x140 [ 38.631037][ C0] ? __cfi___check_object_size+0x10/0x10 [ 38.631071][ C0] ? __cfi__printk+0x10/0x10 [ 38.631088][ C0] ? _copy_from_user+0x87/0xa0 [ 38.631128][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 38.631163][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation13NewAllocationEBK_+0x5b/0x80 [ 38.631203][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6e44/0x8520 [ 38.631253][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 38.631338][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.631363][ C0] ? kernel_text_address+0xa9/0xe0 [ 38.631384][ C0] ? __kernel_text_address+0x11/0x40 [ 38.631404][ C0] ? unwind_get_return_address+0x51/0x90 [ 38.631423][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 38.631442][ C0] ? arch_stack_walk+0x10a/0x170 [ 38.631470][ C0] ? stack_depot_save_flags+0x38/0x800 [ 38.631492][ C0] ? kasan_save_track+0x4f/0x80 [ 38.631517][ C0] ? kasan_save_track+0x3e/0x80 [ 38.631541][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.631561][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 38.631595][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 38.631621][ C0] ? krealloc_noprof+0x8d/0x130 [ 38.631645][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 38.631684][ C0] ? __asan_memset+0x39/0x50 [ 38.631706][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 38.631725][ C0] ? _RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x3bd/0x990 [ 38.631792][ C0] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 38.631864][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.631885][ C0] ? __kasan_check_write+0x18/0x20 [ 38.631926][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.631944][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.631964][ C0] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xa7/0x250 [ 38.631999][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 38.632034][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x470/0x540 [ 38.632071][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0xd8/0x1b0 [ 38.632119][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 38.632168][ C0] ? __kasan_check_write+0x18/0x20 [ 38.632192][ C0] ? mutex_unlock+0x90/0x240 [ 38.632215][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 38.632240][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 38.632260][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x11ed/0x1e70 [ 38.632302][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 38.632349][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 38.632382][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.632407][ C0] ? kernel_text_address+0xa9/0xe0 [ 38.632431][ C0] ? __kasan_check_write+0x18/0x20 [ 38.632455][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.632476][ C0] ? stack_trace_save+0xaa/0x100 [ 38.632494][ C0] ? __kasan_check_write+0x18/0x20 [ 38.632517][ C0] ? mutex_unlock+0x90/0x240 [ 38.632541][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 38.632573][ C0] ? kasan_save_track+0x4f/0x80 [ 38.632600][ C0] ? kasan_save_track+0x3e/0x80 [ 38.632626][ C0] ? kasan_save_free_info+0x4a/0x60 [ 38.632648][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 38.632677][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x2c0/0xc20 [ 38.632719][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1bf7/0xa690 [ 38.632752][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 38.632776][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 38.632805][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 38.632840][ C0] ? __kasan_slab_free+0x6a/0x80 [ 38.632867][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 38.632890][ C0] ? __wake_up+0x169/0x190 [ 38.632918][ C0] ? audit_log_end+0x1f1/0x240 [ 38.632945][ C0] ? audit_log_end+0x1f1/0x240 [ 38.632971][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 38.632997][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 38.633022][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 38.633049][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 38.633085][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.633104][ C0] ? call_rcu_hurry+0x30/0x30 [ 38.633132][ C0] ? avc_update_node+0x2f1/0x9c0 [ 38.633156][ C0] ? slow_avc_audit+0x19f/0x220 [ 38.633178][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 38.633202][ C0] ? avc_has_perm_noaudit+0x2bd/0x360 [ 38.633226][ C0] ? avc_has_perm+0x1ec/0x240 [ 38.633248][ C0] ? avc_has_perm+0x211/0x240 [ 38.633271][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 38.633303][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process20get_transaction_node+0x209/0x620 [ 38.633335][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 38.633360][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 38.633382][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x30d/0xc20 [ 38.633424][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 38.633469][ C0] ? __kasan_check_write+0x18/0x20 [ 38.633491][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.633508][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.633526][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1790/0xa690 [ 38.633557][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.633587][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1bf7/0xa690 [ 38.633657][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 38.633766][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.633796][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.633820][ C0] ? kernel_text_address+0xa9/0xe0 [ 38.633854][ C0] ? __kernel_text_address+0x11/0x40 [ 38.633875][ C0] ? unwind_get_return_address+0x51/0x90 [ 38.633896][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 38.633914][ C0] ? arch_stack_walk+0x10a/0x170 [ 38.633943][ C0] ? stack_depot_save_flags+0x38/0x800 [ 38.633966][ C0] ? kasan_save_track+0x4f/0x80 [ 38.633990][ C0] ? kasan_save_track+0x3e/0x80 [ 38.634014][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.634034][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 38.634078][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 38.634105][ C0] ? krealloc_noprof+0x8d/0x130 [ 38.634130][ C0] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 38.634171][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x89e/0x1820 [ 38.634210][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x1b8/0xa50 [ 38.634244][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x183b/0x5da0 [ 38.634269][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 38.634295][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 38.634320][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 38.634347][ C0] ? do_syscall_64+0x57/0xf0 [ 38.634366][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.634399][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 38.634449][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 38.634499][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x4d4/0xe50 [ 38.634531][ C0] ? __kasan_check_write+0x18/0x20 [ 38.634555][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.634596][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.634617][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.634635][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x62d/0xa50 [ 38.634668][ C0] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 38.634701][ C0] ? krealloc_noprof+0xfa/0x130 [ 38.634728][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 38.634773][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 38.634817][ C0] ? __kasan_check_write+0x18/0x20 [ 38.634840][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.634858][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.634876][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 38.634920][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0xfa9/0x1820 [ 38.634960][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.634984][ C0] ? __kasan_check_write+0x18/0x20 [ 38.635008][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.635026][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.635046][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.635065][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 38.635085][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 38.635120][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x10/0x10 [ 38.635162][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 38.635208][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 38.635233][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.635257][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 38.635282][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0xf6/0x490 [ 38.635321][ C0] ? avc_has_perm+0x155/0x240 [ 38.635345][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0x10/0x10 [ 38.635386][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0xf9/0x1f0 [ 38.635438][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 38.635477][ C0] ? __kasan_check_write+0x18/0x20 [ 38.635498][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.635515][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.635532][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x54c/0xa50 [ 38.635564][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.635611][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x794/0xa50 [ 38.635646][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10 [ 38.635680][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.635703][ C0] ? __kasan_check_write+0x18/0x20 [ 38.635727][ C0] ? _raw_spin_lock+0x92/0x120 [ 38.635746][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 38.635772][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.635795][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 38.635822][ C0] ? stack_trace_save+0xaa/0x100 [ 38.635841][ C0] ? stack_depot_save_flags+0x38/0x800 [ 38.635865][ C0] ? kasan_save_stack+0x4d/0x60 [ 38.635891][ C0] ? kasan_save_stack+0x3e/0x60 [ 38.635928][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 38.635947][ C0] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 38.635968][ C0] ? __call_rcu_common+0xd7/0x720 [ 38.636016][ C0] ? call_rcu+0x14/0x20 [ 38.636046][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 38.636071][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 38.636090][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 38.636109][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.636142][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.636160][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 38.636185][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 38.636215][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.636240][ C0] ? kernel_text_address+0xa9/0xe0 [ 38.636263][ C0] ? __kernel_text_address+0x11/0x40 [ 38.636293][ C0] ? __kasan_check_write+0x18/0x20 [ 38.636315][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.636335][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 38.636356][ C0] ? stack_trace_save+0xaa/0x100 [ 38.636393][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 38.636414][ C0] ? stack_depot_save_flags+0x399/0x800 [ 38.636438][ C0] ? kasan_save_track+0x4f/0x80 [ 38.636465][ C0] ? kasan_save_track+0x3e/0x80 [ 38.636491][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 38.636513][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 38.636541][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 38.636576][ C0] ? krealloc_noprof+0x8d/0x130 [ 38.636603][ C0] ? kvrealloc_noprof+0x59/0x120 [ 38.636628][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x7a1/0x1210 [ 38.636654][ C0] ? mmap_region+0x157c/0x1d60 [ 38.636678][ C0] ? do_mmap+0xb85/0x13c0 [ 38.636700][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 38.636723][ C0] ? ksys_mmap_pgoff+0x165/0x1e0 [ 38.636746][ C0] ? __x64_sys_mmap+0x121/0x140 [ 38.636774][ C0] ? x64_sys_call+0x13bf/0x2ee0 [ 38.636802][ C0] ? do_syscall_64+0x57/0xf0 [ 38.636821][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.636860][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 38.636885][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 38.636916][ C0] ? kernel_text_address+0xa9/0xe0 [ 38.636940][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 38.636969][ C0] ? unwind_get_return_address+0x51/0x90 [ 38.636992][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 38.637023][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 38.637057][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 38.637081][ C0] ? update_curr+0x50c/0x9e0 [ 38.637110][ C0] ? update_load_avg+0x506/0x1990 [ 38.637132][ C0] ? __calc_delta+0x280/0x280 [ 38.637163][ C0] ? assign_cfs_rq_runtime+0x350/0x350 [ 38.637194][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 38.637216][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 38.637247][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 38.637273][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 38.637296][ C0] ? update_curr+0xf8/0x9e0 [ 38.637327][ C0] ? xfd_validate_state+0x68/0x140 [ 38.637346][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 38.637360][ C0] ? __kasan_check_write+0x18/0x20 [ 38.637378][ C0] ? __switch_to+0xc4f/0x1300 [ 38.637397][ C0] ? __cfi___switch_to+0x10/0x10 [ 38.637416][ C0] ? psi_task_switch+0x59e/0xa10 [ 38.637433][ C0] ? _raw_spin_unlock+0x45/0x60 [ 38.637446][ C0] ? finish_task_switch+0x139/0x760 [ 38.637462][ C0] ? __switch_to_asm+0x3d/0x70 [ 38.637482][ C0] ? __schedule+0x1357/0x1ea0 [ 38.637497][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 38.637516][ C0] ? __asan_memcpy+0x5a/0x80 [ 38.637534][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 38.637553][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 38.637588][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 38.637609][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 38.637631][ C0] ? schedule+0xc5/0x240 [ 38.637646][ C0] ? futex_unqueue+0x136/0x160 [ 38.637676][ C0] ? ioctl_has_perm+0x39a/0x500 [ 38.637690][ C0] ? __kasan_check_read+0x15/0x20 [ 38.637705][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 38.637719][ C0] ? futex_wait+0x2ac/0x7b0 [ 38.637736][ C0] ? __cfi_futex_wait+0x10/0x10 [ 38.637754][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 38.637767][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 38.637804][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 38.637818][ C0] ? do_futex+0x32a/0x510 [ 38.637834][ C0] ? __cfi_do_futex+0x10/0x10 [ 38.637849][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 38.637867][ C0] ? __fget_files+0x2c5/0x340 [ 38.637887][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 38.637900][ C0] ? security_file_ioctl+0x3e/0x110 [ 38.637914][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 38.637931][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 38.637951][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 38.637971][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 38.637990][ C0] ? do_syscall_64+0x57/0xf0 [ 38.638003][ C0] ? clear_bhb_loop+0x50/0xa0 [ 38.638017][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.638041][ C0] [ 38.638046][ C0] Modules linked in: [ 38.638063][ C0] ---[ end trace 0000000000000000 ]--- [ 38.638070][ C0] RIP: 0010:__unwind_start+0x33/0x410 [ 38.638093][ C0] Code: 57 41 56 41 55 41 54 53 48 83 ec 40 48 89 4d c8 49 89 d4 49 89 f7 48 89 fb 49 be 00 00 00 00 00 fc ff df ba 60 00 00 00 31 f6 38 af 9a 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 [ 38.638105][ C0] RSP: 0018:ffffc9000fea7ff0 EFLAGS: 00010246 [ 38.638117][ C0] RAX: ffff88811dbc1300 RBX: ffffc9000fea8068 RCX: ffffc9000fea80f0 [ 38.638129][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc9000fea8068 [ 38.638139][ C0] RBP: ffffc9000fea8058 R08: dffffc0000000000 R09: 0000000000000000 [ 38.638345][ C0] R10: ffffc9000fea81b0 R11: 0000000000000002 R12: 0000000000000000 [ 38.638358][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88811dbc1300 [ 38.638369][ C0] FS: 00007fc82ca656c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.638381][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.638391][ C0] CR2: ffffc9000fea7fe8 CR3: 000000011cc48000 CR4: 00000000003526b0 [ 38.638407][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 38.639047][ C0] Kernel Offset: disabled