last executing test programs: 4.844917016s ago: executing program 3 (id=13): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x89, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 4.613356452s ago: executing program 3 (id=17): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xc, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4.566502624s ago: executing program 3 (id=18): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.499377155s ago: executing program 3 (id=20): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3, r1, 0x0, 0x0, 0xeffffffffffffffe, 0x0, 0x0, r0}]) socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) r7 = gettid() r8 = gettid() kcmp(r7, r8, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x210000, &(0x7f0000000280)="80", 0x1, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)="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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r4, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x40000, 0x3, 0x7}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0x104) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, 0x1}, 0x5c) socket(0x2, 0xa, 0x3a) pwritev2(r10, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x7, 0x17) fstat(r0, &(0x7f00000005c0)) lseek(r3, 0x10001, 0x0) 4.436411347s ago: executing program 3 (id=23): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x1, 0x7, 0x104}, {0x3, 0x9, 0xff, 0x3}, {0xa71, 0x8, 0x5, 0xfffffde2}, {0x343a, 0x7, 0x80, 0x4}, {0x7, 0x6, 0x68, 0x1}]}, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x17b382, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8001, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r5, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) mmap(&(0x7f0000a6d000/0x3000)=nil, 0x3000, 0x2000007, 0x40010, r4, 0xc5ee7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x6, 0x1) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xfc) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) tkill(r2, 0x13) capset(&(0x7f0000000540)={0x20080522, r2}, &(0x7f0000000500)={0x203, 0x2, 0x0, 0x0, 0x0, 0x40200}) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) 1.855620133s ago: executing program 1 (id=65): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480), 0x18044, 0x0) prlimit64(r1, 0x3, &(0x7f0000000000)={0x2, 0x5}, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.515211881s ago: executing program 0 (id=71): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_int(r2, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x6a) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x16, 0x154, &(0x7f0000000280)="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"}) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1e03087c775c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad888ca"], 0xffdd) (async) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000040)={0x3, 0x1, 0x17c, 0x1, 0xcecf, 0x4}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) 1.420120504s ago: executing program 1 (id=73): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.419903614s ago: executing program 1 (id=74): clock_getres(0x4, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x161000, 0x0) read(r0, &(0x7f0000000000)=""/116, 0x74) 1.419637964s ago: executing program 1 (id=75): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', '/dev/rnullb0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001180)={{0x0, 0x0, 0x80, {0xdddd1000, 0x8000000, 0x3}}, "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", "1beffa79cd6a1fa3c35a1ea325c380ee23f7ec79e6de7047b4b23e00065dcd94252969f23ecdb89597cc85301fe06ac1e98f7ae0363ac4ba2ce1571779299cd6ee59b734cef8e4b3c6408338407e0eb7c3b45a8a435a30fc7b89c922d7bfd5392fbd379670554c7f5ed3111eb61098a7d591070b4641fe913accb319accd2d9fb2f99858f7e9b4f4004e75796293998e2be85415d14eb08316fe9f5e12b092ef0fe79bf47f4bd481ac6ec64d0b98304362f92249cd04c3b5f9e5a8e015c8aa1bbb2e9b9ae62085cbf7aa542bb189680ee3eb35080e74c909d085c520e8cbef09f6fc9d23273f07ea29a57aace56c2b8969c372afccb133c205df30f542ce8dcc464b16159794e11ad6b6c19539515646c564f1595c2f0aa8fb0116aed8c202344f61f31e6fc44effb3924d519e9273191c8c6000853d3c27be95c065eb696655cb6fcef861ba2ad2d8b87b10874058840d1ea48f6527f30c913c2af15c799f391685c170697a154731eec6fd4a46d52e2c90c3f046ee5b355ff5461137b2a783ae29eed24c5d2a1bc70551da15d2db1ab06d8494e56073ed9308e6d85a4b514505931f940721901372b6b3fc6ec981cef641d460e09d7a31617f2be2643cce2de960532e88166ead4b2a0ec40e06da148e523e2941465f6aa184e17c2ac77825c97107bb3325b0f4ceb8ec5000a7868376816079db76be3a34ae4a624702ed15994544c328e3ad0c1a0e01fbc510c1542ae7eb08b2a967323eed005156b2f49f471cb79fa0f140bf8f8f2994885d80e789191d6ddbe4fb445035b47b8637e7056c8f84a98ab9762755cf7cd6d54a4dbdd5ac37eedbab4e91b3535efdfbf8c57374079872f985cab666b0e04fb5dd67c33002fea84fdac1c9f96fefcc5b17dbfb58968301bdff83f202e42566f2a17390122809240d111857fc1e1dcb04b1a9c97367a1528dca14392e16412757690214fa601d62ef371e0c9c3bd98bbb4403b18c2ed744b52c1cd904729de2f3fce4a4bef16c9a6f86a8a979fe43ba913ba58c0d26ab3512f63a5fb916fd440fc455a40e1d87d809e4a9c6f36d17ff009396966a1276dfc5b0f86ba8fbfb56fb78454f0ebb8f11c7eb98a6f1c3ef16c36f2b7c82c682d12838755edc9218b2dabec1d78a7d24c6146afa114554af125f786776e3263d44ade3cf25e9cbe29ae8b2c050c8de3e515bbe7c7b0786c4bea562169309ecc2cf83bcc6254774e9974f523e8ad76561f4a1042dc5b77d5fb912b812b62423206e6d9dda755b46c08d5ece30f787b996083ffa264287c24a10d058f73f00e1216bde37e3f010782fa50c5d35b6e818f6067980d6a67658089da0f7a2189abcd087dc047e4ffa623923d191732f414f1e1e3211617bce4b84d5949b7f92cdadc3b8f89aa170afcbd9588d6d5655f992ba909685e4cd67a0ef588f60095b372db28ef99af71b7da66986c882618dd73e73567d3fe159ead4dd6092caa52fb061ea17283699e3d00087fd1c9e83b9cfc1efc41888a216e3be0f437952e48a49923857ebc45ec8ca32a4b0b9e6fbdef843a018bb6b1e03d3342e2a9cd5c85a960ca2663409ca968a09818ace66b6407bf5f57479eaee041248c63f4a43f186a68f0501e6e2c4bc55e111e717939f9bd04191fc5368e22bab10c247c445d39d860b6321c1b5227c1104981f5a1d16ccec38cffc162dc997446e762b9dd2d0a9be808af08b44363d5656a8bd7a08bad31b996420619ecd77beea2e953aad8ccbc5c551dc1eb6036360f4b17676082b92bbd7d1d0c910f29e8fcc97de093636c9bd9ae5475aabbf12e4a8c747c2927503bb558fa1c517a69357573225cacb33eebbaf8328839919e6cc88b6d15c776e64201cfc599ed1e013e214bb1939c22a91e07af602ba52e75b2de1021e07cef6f2a8d16a423c958b5136e131a544507c66f06e2365c8b4d6c7fecf8a2aa2e225d616251e6a52ccb0bb59791f45fafae33806fdc61eacee49cb972bfba0fe0b1b7c03cb56196ce0f3091105f371607e0983c20d863edf228ecbf68eaaaafa85959c7cc55dbedf3d302902d6c23e8270b11fb9ae0853b8dc53100c2d06c57ddc5da80f1f752bf5b909eebab60fbb758cbedff73b07d1be3c1329bd7f788c636ba413845ccd90d744f98b26ab0481ce6d482c73dc42b008ad010217be72a43b3fed1fe2b4a15fc73152356bec46673e65ab10bf8cdc6ca54367a1f5917a04b63dfb753ddaceb639e514e831515d4b6cdb093c11e3d5f4f440418fdfbb6c48868f1824249a0b8d889e204ffc1c39927f11292e205b5f64dd33b008f8a067fa27a5dd54a563c5a0a5aa0dc19bdc2f1df44711d538003c47a0ecb081bce1763ce37eb3b2faf6c1dea64f052d89a66f74f3e296650e3c2341ddcaa9bd3bb6b6ad575c5c01c7632542aafd2562ff24b84780c2e02ba81e2c91c8a9d4bb32846091a438b12c14ae22813ea7e16659d26c50096f62043814215b0db9755fcfcb9e264e15288e2188375a3aa067bf3a80c73cd237082b1fe87e8f45f9c10b8fbfcb5f9fe43a346543d859ded14445708de90f770ce9ab9f6ca52da3fe6ea98c13a9c070f838c6a924ac3e0a73bb258b2426b5b14309c13a8fb7ec6c3d4975dce3c7d453986ec413e2b39f05e6ded05c769a767fbd59d5bf09e2653947b105f8c363fc24f515e583b0fc257b83c7085f2ac532c55b949804288c493abf90da4951ad8c9463ab32f2345adb1881ff929577fbb0fe0e0f942df0f87c318eab320e8cc57743ead53f36787f5fd7691bdf9f6d5bfafdd4c24c70ebc9eef680c423318a4f5b29a598f651c7897f5e78652e3452ca5a8b8771b82adbcccf6f8873799254726a5c24ec65cf8e2d8d3c01c38764c33cfea55898eb9ca8c7177cc96b5d4de42ac2c268d484f07ca65dcd7623c4e152fd4dd05004f4e26d96913631e25072765267ebd4b4f8ca15989ae6adec295f9ccf1e4d2ed83002b1f66a7b1e9d79a503b18a2055568e1d081f8e3166c86f20e06496429cc5e1a15592bb4d06e8f68ece1bd5b56cdd3b8a6168aa978b7d1cf13e2ba161cf05d572601ca268e224bc99da2f7c70c1d0d173d2dec62e4ea7c12ca79c1a689e9fbc15c8284e1b5910df4e02c0823f1733332e387e801b52dda74f481e45896d18f59a95dc5c9287721480076783a0da2868b0368c6f9804415fff61a743a33b7bd1f68d0e2a6b0ef92210ab8faed93f3a6baeecba731f74b5fc2002c9664df289faa1f2d00b58e5bfff3d1b70945a015a604ec2ea7215a22b6b82052cab84a2937ca31c0e6e07a232564942e3a185817d19a205eed53917983b22dfc75bd74ed8ed0dec70a6545c0cbcf4fdc31d3375bdf9b93a0c310be2ddd7f96d4083c2298176769c976587f371572eeb40047a7dd02a2479ae718d914b598378de92e19f177ca72f8e0ba9063409309aff9b9a9a96aff91e9f27152408afe1c08fe0c079820a612abf4b0378c483a4f37bf0b3d663b29fc9672d35fa2a6d56e878403f99edf23c119eb7c8cc57d66bb344433b9e529ca696ba58df5a90d23f463a2dde34732c913c7fc62e29df8bb1aded3ca74e6e6d05506826ab6ba08f990b5b8dbde8d3685ca768ec01cba7c489e6790c502232c0732052a77574c45f6c98156e681c4eca4b18b0e0f3d9c55cf5d26156501d98e5432c9b6ce76dd066a8139d6f29f73aa7f46fd55e5dac912a90954a2380c3b3a87c3b79aca718e3718031fb6875cc6059a1805189fa76402abc242f02eb96ad71f31dfa64dcabb753aa2b3910557f71b397bb0ae4a26fe2bed0d6e0ca669698e29240ca75b8952f93a5ffb94cca72ca9861f0891a45b29daeb3924ab0361707a01381b9f0b2cce8e4640989bd8c78b704083285b4341ef0b93c71bd2eac1cd47753a5bc364245e949149654a6124073c4fcc238233b041729ac6ec2aaefae06e7ff6f03ae15d6ea0b324dc855da460b84362e9f8480bc4aee915a8d9ba5f01c02a0db28843fdf73f60ca72b03796918cc55507ce52fe7884566d41cb5499185ff00d88749e43539c5be9d160491cbee8f725156077be08fe01237c276af6362e994afe2f5d313a9b12d5afc97160abe559a4c47d1926617218cf1c5556acf2caf1b8cf3662b25e1c330e8cfb4a57f13518e018c02060e0100968dcdbf92d29813b9869144fc3bab059e9731b8183f84a5ce03e61ed2c5522490681cecc2876c83d26d2194fc2389971bf3160cd9b78d7d3caae740e4242416d0a40e043a5da3dc7db7a31246807874321a049fcec4997ca6e2b0653c774e19e31431ef41a9f06de39bea4e4743b3f8e93c4f822371b96711bebb0626d9598ffeae3d7b2b3df9ab4d9d5bd57eaa29a1d6099acd3492e359143f92f15197b5dea951eb66a1cc06be6310a95c3fbfb9c78ba002fae9bdbe163c809eb672c4c0ea72abd9bd53ff39f4e0db7801721b6f29ec6dc57f5f83ccbf90fc9be3c07ad73297a7664dba48ca3275edf4bc4556c584b9a15f2e72b99a78c7cc6ce640f182d795913e20d23e64567d2a6e736fd775aa1433fdf6b6cc7a8c838ee4eef08e663b9be9bab27bcbe700e148af8d36b636d2568bd092b923e10e0424f61c0b3c4d45bb4af602a38729809b360fc4ec9b77ce4209b56383ac103b98889c4682293e484a12e46b3666a72cbc705769fb6c0af3189d60fc620b41525e6db53001e5f2668b34ec859a2b12cde8caaf6dd30ebdbe98886bc9f4e34201ddd35290f36f646512943847ea090936fed075d5363ae0ca75fef7fea7159102819c34e46056e966364d4bf1a9efa4bd863f2eb38c5dcff3383a01b4035f8370228060f8bdbd0a018479086a707c856c9ab981dbc33470e3dac3aae0b7d2142083f2d224a3ce9c2c58d657a8c0f7b89b504e15511b7ab64074ab95d0ecc1ced7a8d431e953ffb887e1d6aaac5a19b50e3c6583b701993f93969781d0bc3a21824d281a41f44ed7c3c31ce13b62e6d2fc9af88b2241ed007d2e8bff9b81b6d8b782273816d2ed9b0e5c10c847351bc0c9c129cc99812d2edddf7bcafdaabb0c762fa28f292e4d909a5c35892383cf8f14bf8002b2538a7c0d5aa140c53d27a94e77cf0b9391f7258e63a68ca62697c0bfb981e699106be396801734060c8485b018af35b14c8553c4dea7ed38a79883749e6bea7c28144ed2a285d06e636357b67c4146558ce6eccea175b62df2fd0ad10d7e55dea3e75ee10a1f473cfc53d59aab2dabd27278121934c52a4badbd9077302c4e11e35d9627cd5bd140667e0df51bef058815dc6529ec4e68e9d025b5aeb320d6a404c328a4f5a756093026d8460bd7494432d9ccd73afde53b18866c966f42e46098b9d29164234b53f4fc5f9ac907decc13c4c4950f6cabd1dae60c56e1f09aa8ee4897b04159067e13b0a84358a618bd27e869c9c69a2d46c991bbedbede30c6df6520e7262dc7434664dd9439b69c0defa0d0375850a3e44c66a844858793f72f09c568971809105337d2584855c768c24fb42da965826b6cb4b042217018311d56796c613ea35044e8eae1e2549beb611a7bd9068e0a6a9a753040812baf19634aa484560d3faa1034ffe8a5600e494e074d717643663145068ad46a2102e10d534288182cc3d2613ebf11136511af67ccc4cc75184c7a300a3c94344aa291e5e5cf9d64ed026c485495d72f131994620fc4ac1dfd12c686b69373008cb30d78a2bca69be4dd9c0d2da6ef894166882e34e62b67bbcc0b4bad98b0e9de58fa46ca043841a53d9792a8bdb5"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) 1.417825014s ago: executing program 3 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000), 0x4) r5 = syz_clone(0x100001000, 0x0, 0x0, &(0x7f0000001e00), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x1, 0x1, 0x28}, 0x18) ioctl$IOC_PR_RESERVE(r8, 0x401070c9, &(0x7f0000000180)={0x2, 0x6}) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x95) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0) syz_pidfd_open(r5, 0x0) prlimit64(r5, 0xb, &(0x7f0000000000)={0x0, 0x8}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 732.748401ms ago: executing program 1 (id=79): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10400, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x311f02, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x6, 0x9, 0x0, 0x0, 0xf}) read(r7, &(0x7f00000002c0)=""/200, 0x39) r10 = syz_open_dev$mouse(&(0x7f0000000040), 0x96b, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x405}, {r3, 0xc}, {r6, 0x9080}, {r10, 0x6200}, {r6, 0x4200}, {r1, 0x1140}, {r2, 0x40e8}], 0x7, &(0x7f00000003c0), &(0x7f0000000400)={[0xb13]}, 0x8) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000500)={[{0x5, 0xc003, 0x1, 0x5, 0xfd, 0x4, 0xa, 0xd, 0xb9, 0x57, 0xe, 0x5, 0xffffffffffffffda}, {0x804, 0x1, 0x4, 0x45, 0x9, 0x0, 0x2, 0xff, 0x1, 0x4, 0x3, 0x7b, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x14, 0x7, 0xffffffffffffffff}], 0x1}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000001c0)=0x2) r11 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r11, 0x4020940d, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000480)={[{0x8, 0x91, 0x8, 0x7, 0x85, 0x2, 0x1, 0x2, 0x6, 0x4, 0x7, 0xf, 0x1}, {0x9f83, 0xa, 0xe, 0x59, 0x1, 0x4, 0x7, 0x81, 0x7, 0x7, 0x6, 0x3, 0xffffffffffffffff}, {0x3, 0x5, 0x81, 0xa, 0x6, 0x46, 0x88, 0x4f, 0xc, 0x98, 0xf4, 0x1, 0x8}], 0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 731.365521ms ago: executing program 0 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x100, 0x80000}) socket$inet6(0xa, 0x2, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) fcntl$lock(r2, 0x7, 0x0) close(0x3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 643.974424ms ago: executing program 1 (id=82): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e23, @empty}, {0x1, @remote}, 0x58, {0x2, 0x4e23, @remote}, 'nr0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200a82, 0x0) 643.356584ms ago: executing program 0 (id=83): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x1, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x8000000}}, 0x30) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000180)={'gretap0\x00', {0x2, 0x2, @broadcast}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x32) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x6, 0x74}, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 464.010178ms ago: executing program 2 (id=86): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000540)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 463.534529ms ago: executing program 0 (id=87): r0 = geteuid() setuid(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) setreuid(r1, r0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x80, 0x80, 0x7, 0x4, 0xa, 0x1, 0xfc, 0x5, 0x0, 0x2, 0x6, 0x7, 0xf, 0x0, 0x3, 0xff}}) (async) r3 = open(&(0x7f0000000380)='./file0\x00', 0x208401, 0x40) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e24, 0x7, @local, 0x2}, 0xffffffffffffffff, {[0x4f, 0xb0, 0x81, 0xbd0, 0x1d, 0x7fff, 0x1, 0x9]}}, 0x5c) (async) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000440)={0x29, @rand_addr=0x64010101, 0x4e22, 0x3, 'sed\x00', 0x4, 0x1, 0x5d}, 0x2c) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000004c0)=0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) (async) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {0x1, 0x2}, [{0x2, 0x7, r4}, {0x2, 0x2, r1}, {0x2, 0x7, r0}, {0x2, 0x6, r5}, {0x2, 0x3, r6}, {0x2, 0x5, r0}, {0x2, 0x1, r1}, {0x2, 0x3, r1}, {0x2, 0x0, r1}], {0x4, 0x3}, [{0x8, 0x2, r8}], {0x10, 0x3}, {0x20, 0x6}}, 0x74, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r10, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0xc0) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) (async) lremovexattr(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=@random={'user.', '!!\x00'}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000b40)={0x1, 0x0, @ioapic={0x432600578c9b7b46, 0x9ce, 0x7, 0x3, 0x0, [{0x7, 0x35, 0xf, '\x00', 0x2f}, {0x6d, 0xbc, 0x8, '\x00', 0x4}, {0x7, 0x1, 0x1, '\x00', 0x2}, {0x4, 0xf6, 0x9, '\x00', 0x2}, {0x3, 0x4, 0xd6, '\x00', 0xa}, {0x0, 0x5, 0x39}, {0xf, 0x6, 0x92, '\x00', 0x5}, {0x24, 0x7, 0x0, '\x00', 0x8}, {0x42, 0x2, 0x0, '\x00', 0x3}, {0x9, 0xf7, 0x1, '\x00', 0x7}, {0x7, 0x6, 0xd, '\x00', 0xfb}, {0x30, 0x4, 0x7, '\x00', 0x6}, {0x1, 0x97, 0x1, '\x00', 0x7}, {0x4, 0x0, 0x1, '\x00', 0xf3}, {0x3, 0x9, 0x8b, '\x00', 0x1}, {0x8, 0xff, 0x7, '\x00', 0x8}, {0x8, 0x28, 0x5, '\x00', 0xe}, {0x5, 0x2, 0x4, '\x00', 0x9f}, {0x4, 0xf4, 0xe, '\x00', 0x13}, {0x8, 0x2, 0x26, '\x00', 0x7}, {0x9, 0x3, 0x8, '\x00', 0x7f}, {0xff, 0x3, 0x6, '\x00', 0x9f}, {0x45, 0x40, 0x6, '\x00', 0x9}, {0x40, 0x4, 0xbe, '\x00', 0x80}]}}) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000dc0), r9) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r12, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}}, 0x400008c1) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x78, r10, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) (async) ioctl$TCFLSH(r3, 0x540b, 0x1) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f00000011c0)=0xe8) mount$fuse(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x110a041, &(0x7f0000001200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}, {@default_permissions}], [{@context={'context', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname}, {@uid_gt={'uid>', r6}}]}}) (async) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000001300)='hsr0\x00') (async) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000001340)) 406.33966ms ago: executing program 2 (id=88): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20100) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x2}}, 0x30) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "cc2f177c230f44b96e6d6d0f0ec841599376c48e37cd659cd65bc85e71267f407cce3b93a2cdca529f62fc6a16677a8274b61dd121331165f8a4a03111d686a4", 0x34}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xec) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x10b340, 0x0, 0x2}, 0x18) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x200043, 0x4) chmod(&(0x7f00000002c0)='./file0\x00', 0xc0) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='fscrypt:', r4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={0x3}) recvmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000640)=""/29, 0x1d}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/94, 0x5e}], 0x5, &(0x7f0000000880)=""/4096, 0x1000}, 0xfffffffa}, {{&(0x7f0000001880)=@tipc=@id, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001900)=""/183, 0xb7}, {&(0x7f00000019c0)=""/116, 0x74}], 0x2, &(0x7f0000001a80)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000002a80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/14, 0xe}], 0x1, &(0x7f0000002b80)=""/45, 0x2d}, 0x7}, {{&(0x7f0000002bc0)=@x25, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/134, 0x86}, {&(0x7f0000003d00)=""/63, 0x3f}], 0x3, &(0x7f0000003d80)=""/4096, 0x1000}, 0x5}], 0x4, 0x21, &(0x7f0000004e80)={0x77359400}) r5 = syz_open_dev$usbfs(&(0x7f0000004ec0), 0x6, 0x4042) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000004fc0)={0x80, 0x9, 0x7, 0xf687, 0xb6, 0x0, &(0x7f0000004f00)="1151cc1266de6a4b00db2b217a6efe1375cfd4bb5c54c6e0267345ef77aefaeda4929e9028b07b21dc34f939dd7ff8bac627c10665f4bc6f50f3aab369c1a9e0d48f8669608874246592a525f2729ca618732bdc7b59283dd2eaf94d82f169c7a4ee78a1be37f4aee0149af1f1e15d51fed3349a070a0dfa80bb6ec83593c0bcdfab160826cd1c87e2526f112f4dc139fc1095871d5dacbc56eb1a995a31d668cd238e541daeb6f0978503fc16906a39a01b4406cfa3"}) mknod$loop(&(0x7f0000005000)='./file0\x00', 0x8000, 0x0) lseek(r0, 0x80000001, 0x0) keyctl$reject(0x13, r4, 0x4996, 0x3, r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setpipe(r6, 0x407, 0xff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000005040)='logon\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000005080), 0x82, 0x0) chmod(&(0x7f00000050c0)='./file0\x00', 0x4a) add_key$fscrypt_provisioning(&(0x7f0000005100), &(0x7f0000005140)={'syz', 0x0}, &(0x7f0000005180)={0x2, 0x0, @d}, 0x18, r1) sync_file_range(r5, 0x7fffffffffffffff, 0x8, 0x2) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000051c0)={0x22, 0x3, 0xcb, 0x818, 0xe97, 0x6}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000005200)={0x1, 0x1000, "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"}) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000006240)={0xe, 0x1}) 405.86145ms ago: executing program 0 (id=89): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$loop(&(0x7f0000001ec0), 0x7, 0x101000) ioctl$LOOP_SET_FD(r1, 0x4c01, 0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x5}, 0x4) 375.867751ms ago: executing program 2 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x291, 0x0, 0x1000000000008}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000280)=0x6a) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000100), 0x800000, &(0x7f00000002c0)={[{@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0xe4b}}, {@stats}, {@max={'max', 0x3d, 0x7}}], [{@fowner_gt={'fowner>', r3}}, {@hash}, {@dont_hash}, {@subj_type}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'binder\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x31, 0x37, 0x30, 0x66, 0x34, 0x62, 0x35], 0x2d, [0x36, 0x34, 0x36, 0x63], 0x2d, [0x33, 0x31, 0x33], 0x2d, [0x32, 0x31, 0x64, 0x30], 0x2d, [0x62, 0x34, 0x65, 0x61, 0x35, 0x36, 0x5, 0x61]}}}, {@obj_type={'obj_type', 0x3d, '['}}, {@smackfsdef}, {@smackfshat={'smackfshat', 0x3d, 'binder\x00'}}]}) 280.008023ms ago: executing program 0 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) r7 = fsmount(0xffffffffffffffff, 0x1, 0xe0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'veth1\x00', 0x10}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x8b, 0x0, 0xff, 0xc, 0x9, 0x5}, &(0x7f0000000480)=0x20) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r9, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x38, 0x0, &(0x7f00000000c0)="5d0f626a4eddb8b676f1496efd9771c952945cb328f217a39bd77d677d926203f6d8d4b61199282ff51d16d75c7b2f585cd5f46ca068f1a6"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) 272.994223ms ago: executing program 2 (id=92): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0xd826d000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f446fae24b61af7f45c8acad65e5702a346bacd956e9344e950d2e9ae46ecfa8ad3faf9554c39b39f74d2c948a3b4bac940fc064768b61ef8bf76c4b6544430498dadc7dc4b7e3"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x2b, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x4, 0x2, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}, @exit_looper], 0x0, 0x0, 0x0}) 93.501688ms ago: executing program 2 (id=93): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc081) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x160e) 0s ago: executing program 2 (id=94): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x18, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 26.756663][ T36] audit: type=1400 audit(1750466805.470:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.758382][ T281] cgroup: Unknown subsys name 'net' [ 26.782559][ T36] audit: type=1400 audit(1750466805.470:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.811578][ T36] audit: type=1400 audit(1750466805.500:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.813749][ T281] cgroup: Unknown subsys name 'devices' [ 26.998082][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.004567][ T281] cgroup: Unknown subsys name 'rlimit' [ 27.159936][ T36] audit: type=1400 audit(1750466805.870:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.184343][ T36] audit: type=1400 audit(1750466805.870:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.203957][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.211350][ T36] audit: type=1400 audit(1750466805.870:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.245956][ T36] audit: type=1400 audit(1750466805.930:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.259366][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.273040][ T36] audit: type=1400 audit(1750466805.930:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.310228][ T36] audit: type=1400 audit(1750466805.970:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.338446][ T36] audit: type=1400 audit(1750466805.970:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.238369][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.246464][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.253997][ T288] bridge_slave_0: entered allmulticast mode [ 28.261034][ T288] bridge_slave_0: entered promiscuous mode [ 28.280270][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.288558][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.296356][ T288] bridge_slave_1: entered allmulticast mode [ 28.303261][ T288] bridge_slave_1: entered promiscuous mode [ 28.320575][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.328635][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.336645][ T290] bridge_slave_0: entered allmulticast mode [ 28.343512][ T290] bridge_slave_0: entered promiscuous mode [ 28.351343][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.360600][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.369988][ T290] bridge_slave_1: entered allmulticast mode [ 28.377024][ T290] bridge_slave_1: entered promiscuous mode [ 28.391818][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.401658][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.410647][ T289] bridge_slave_0: entered allmulticast mode [ 28.418226][ T289] bridge_slave_0: entered promiscuous mode [ 28.432987][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.441056][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.450670][ T291] bridge_slave_0: entered allmulticast mode [ 28.458840][ T291] bridge_slave_0: entered promiscuous mode [ 28.465234][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.474123][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.483863][ T289] bridge_slave_1: entered allmulticast mode [ 28.490584][ T289] bridge_slave_1: entered promiscuous mode [ 28.505482][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.514146][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.522927][ T291] bridge_slave_1: entered allmulticast mode [ 28.529937][ T291] bridge_slave_1: entered promiscuous mode [ 28.732251][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.740198][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.747907][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.755676][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.765075][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.772345][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.780111][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.789136][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.798475][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.805594][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.813894][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.821722][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.836421][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.843774][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.852825][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.861366][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.926857][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.934708][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.943949][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.953858][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.963142][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.972689][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.980591][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.989773][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.013268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.020762][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.029646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.038183][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.079506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.087312][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.095758][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.103539][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.113957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.122241][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.131545][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.140002][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.148398][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.156076][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.165920][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.173595][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.226551][ T290] veth0_vlan: entered promiscuous mode [ 29.238229][ T288] veth0_vlan: entered promiscuous mode [ 29.249009][ T291] veth0_vlan: entered promiscuous mode [ 29.257297][ T289] veth0_vlan: entered promiscuous mode [ 29.268487][ T290] veth1_macvtap: entered promiscuous mode [ 29.297387][ T291] veth1_macvtap: entered promiscuous mode [ 29.308531][ T288] veth1_macvtap: entered promiscuous mode [ 29.342853][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.343225][ T289] veth1_macvtap: entered promiscuous mode [ 29.432857][ T311] random: crng reseeded on system resumption [ 29.483692][ T314] rust_binder: Write failure EFAULT in pid:2 [ 29.506339][ T311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 29.525690][ T325] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.584098][ T332] random: crng reseeded on system resumption [ 29.818108][ T335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.856618][ T335] binder: Bad value for 'defcontext' [ 29.941794][ T346] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 29.941841][ T346] rust_binder: Error in use_page_slow: EBUSY [ 29.955809][ T346] rust_binder: use_range failure EBUSY [ 29.974031][ T346] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 29.983321][ T346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 29.992090][ T346] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 30.002260][ T346] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:10 [ 30.026395][ T359] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16'. [ 30.161079][ T363] binder: Bad value for 'max' [ 30.187859][ T367] capability: warning: `syz.0.19' uses deprecated v2 capabilities in a way that may be insecure [ 30.210510][ T369] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 30.292633][ T382] x_tables: duplicate underflow at hook 1 [ 30.317434][ T384] random: crng reseeded on system resumption [ 30.376545][ T389] rust_binder: Write failure EFAULT in pid:31 [ 30.466270][ T393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 30.520154][ T393] rust_binder: Error while translating object. [ 30.520201][ T393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.527817][ T393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 30.558872][ T400] binder: Bad value for 'defcontext' [ 30.756107][ T409] ======================================================= [ 30.756107][ T409] WARNING: The mand mount option has been deprecated and [ 30.756107][ T409] and is ignored by this kernel. Remove the mand [ 30.756107][ T409] option from the mount to silence this warning. [ 30.756107][ T409] ======================================================= [ 31.118156][ T430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 31.216567][ T435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.275290][ T305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.425283][ T305] usb 3-1: Using ep0 maxpacket: 16 [ 31.432357][ T305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.444831][ T305] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 31.460074][ T305] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 31.470472][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.481933][ T305] usb 3-1: config 0 descriptor?? [ 31.489191][ T305] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 31.691687][ T424] rust_binder: Error while translating object. [ 31.691713][ T424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.698856][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 31.709693][ T424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.731984][ T424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.743142][ T305] usb 3-1: USB disconnect, device number 2 [ 32.063156][ T444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 32.084893][ T448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.087389][ T448] rust_binder: Write failure EINVAL in pid:71 [ 32.107525][ T36] kauditd_printk_skb: 119 callbacks suppressed [ 32.107544][ T36] audit: type=1400 audit(1750466810.820:193): avc: denied { setopt } for pid=451 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.156138][ T36] audit: type=1400 audit(1750466810.860:194): avc: denied { getopt } for pid=451 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.190639][ T36] audit: type=1400 audit(1750466810.860:195): avc: denied { read } for pid=451 comm="syz.0.46" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.216222][ T465] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 32.227981][ T36] audit: type=1400 audit(1750466810.860:196): avc: denied { open } for pid=451 comm="syz.0.46" path="net:[4026532300]" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.232859][ T466] binder: Bad value for 'stats' [ 32.255601][ T36] audit: type=1400 audit(1750466810.890:197): avc: denied { accept } for pid=457 comm="syz.1.47" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.300027][ T36] audit: type=1400 audit(1750466810.940:198): avc: denied { write } for pid=462 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.324565][ T470] rust_binder: Write failure EINVAL in pid:26 [ 32.344908][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.368554][ T36] audit: type=1400 audit(1750466810.940:199): avc: denied { read } for pid=462 comm="syz.0.48" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.393458][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.402123][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.411597][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.485608][ T36] audit: type=1400 audit(1750466811.190:200): avc: denied { create } for pid=467 comm="syz.1.50" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.518405][ T36] audit: type=1400 audit(1750466811.190:201): avc: denied { ioctl } for pid=467 comm="syz.1.50" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5346 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.571372][ T468] binder: Unknown parameter 'ó' [ 32.582047][ T484] fuse: Bad value for 'user_id' [ 32.587324][ T484] fuse: Bad value for 'user_id' [ 32.611718][ T36] audit: type=1400 audit(1750466811.320:202): avc: denied { getopt } for pid=483 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.653872][ T490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.654492][ T490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.655471][ T491] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.691158][ T494] rust_binder: Error while translating object. [ 32.691200][ T494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.709936][ T494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 32.771861][ T503] overlayfs: missing 'lowerdir' [ 32.808712][ T506] x_tables: duplicate underflow at hook 1 [ 32.842102][ T509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.842544][ T510] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.883870][ T510] rust_binder: Read failure Err(EFAULT) in pid:93 [ 32.935915][ T516] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 32.955191][ T516] rust_binder: Error while translating object. [ 32.975185][ T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.981690][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 33.049390][ T523] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 33.057600][ T521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.061157][ T523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 33.083940][ T523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:39 [ 33.094709][ T512] binder: Unknown parameter 'ó' [ 33.241980][ T536] binder: Bad value for 'stats' [ 33.445162][ T61] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.606336][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.640717][ T61] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.664192][ T61] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.694076][ T61] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.695860][ T551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 33.716667][ T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.740466][ T61] usb 1-1: config 0 descriptor?? [ 33.965563][ T61] usbhid 1-1:0.0: can't add hid device: -71 [ 33.992169][ T61] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.020367][ T61] usb 1-1: USB disconnect, device number 2 [ 34.051816][ T566] overlay: Unknown parameter 'mounts' [ 34.072740][ T565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.096799][ T569] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 34.133374][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 34.133496][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 34.153813][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.259094][ T582] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 34.361247][ T592] binder: Bad value for 'max' [ 34.373176][ T592] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 34.429537][ T596] geneve1: tun_chr_ioctl cmd 1074025672 [ 34.459055][ T596] geneve1: ignored: set checksum enabled [ 34.480807][ T596] rust_binder: Write failure EINVAL in pid:122 [ 34.481354][ T596] rust_binder: Read failure Err(EAGAIN) in pid:122 [ 34.518186][ T596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 34.526162][ T599] rust_binder: Error while translating object. [ 34.526197][ T599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.526220][ T599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 34.554448][ T598] incfs_lookup_dentry err:-111 [ 34.574333][ T545] rust_binder: inc_ref_done called when no active inc_refs [ 34.579893][ T598] incfs: Can't find or create .index dir in ./file0 [ 34.606046][ T598] incfs: mount failed -111 [ 34.698699][ T603] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 34.698699][ T603] attempt to subtract with overflow [ 34.725363][ T603] ------------[ cut here ]------------ [ 34.732773][ T603] kernel BUG at rust/helpers/bug.c:7! [ 34.764686][ T603] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 34.772885][ T603] CPU: 0 UID: 0 PID: 603 Comm: syz.2.94 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 34.786723][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.797437][ T603] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 34.803361][ T603] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 9b 59 23 2b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d1 9d 6a a7 90 90 90 90 90 90 90 90 90 [ 34.824312][ T603] RSP: 0018:ffffc9000c8f5a90 EFLAGS: 00010246 [ 34.830802][ T603] RAX: 0000000000000061 RBX: 1ffff9200191eb54 RCX: eb222be7fc027c00 [ 34.839361][ T603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 34.848041][ T603] RBP: ffffc9000c8f5a90 R08: ffffc9000c8f5787 R09: 1ffff9200191eaf0 [ 34.856928][ T603] R10: dffffc0000000000 R11: fffff5200191eaf1 R12: 0000000000000000 [ 34.865705][ T603] R13: dffffc0000000000 R14: ffffc9000c8f5ac0 R15: ffffc9000c8f5af0 [ 34.874859][ T603] FS: 00007f3b0b9a26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.887086][ T603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.894229][ T603] CR2: 00007f3b0b981d58 CR3: 000000011db14000 CR4: 00000000003526b0 [ 34.903376][ T603] Call Trace: [ 34.906790][ T603] [ 34.910035][ T603] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 34.918267][ T603] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 34.926568][ T603] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 34.941068][ T603] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.948013][ T603] ? stack_trace_save+0x9d/0xe0 [ 34.953436][ T603] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 34.961131][ T603] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 34.969362][ T603] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 34.980094][ T603] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 34.991557][ T603] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 35.001423][ T603] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.008171][ T603] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 35.018713][ T603] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.024855][ T603] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 35.035959][ T603] ? _RNvMs6_NtCs43vyB533jt3_6kernel4listINtB5_4ListINtCshgDM7dBCdno_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x3c7/0x4d0 [ 35.054450][ T603] ? _raw_spin_unlock+0x45/0x60 [ 35.059633][ T603] ? rust_helper_spin_unlock+0x19/0x30 [ 35.065711][ T603] ? _RNvMs_NtCshgDM7dBCdno_11rust_binder7processNtB4_12ProcessInner9push_work+0x93c/0xb30 [ 35.076488][ T603] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.082799][ T603] ? __cfi__RNvMs_NtCshgDM7dBCdno_11rust_binder7processNtB4_12ProcessInner9push_work+0x10/0x10 [ 35.094607][ T603] ? krealloc_noprof+0xfa/0x130 [ 35.100472][ T603] ? _raw_spin_unlock+0x45/0x60 [ 35.105650][ T603] ? __kasan_check_write+0x18/0x20 [ 35.111256][ T603] ? _raw_spin_lock+0x8c/0x120 [ 35.116161][ T603] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.121844][ T603] ? mutex_unlock+0x8b/0x240 [ 35.126983][ T603] ? __kasan_check_write+0x18/0x20 [ 35.133533][ T603] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 35.144100][ T603] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 35.154630][ T603] ? is_bpf_text_address+0x17b/0x1a0 [ 35.160732][ T603] ? kernel_text_address+0xa9/0xe0 [ 35.166334][ T603] ? unwind_get_return_address+0x51/0x90 [ 35.172771][ T603] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 35.179341][ T603] ? arch_stack_walk+0x10b/0x170 [ 35.184596][ T603] ? stack_depot_save_flags+0x38/0x800 [ 35.190291][ T603] ? kasan_save_alloc_info+0x40/0x50 [ 35.196507][ T603] ? kasan_save_track+0x4f/0x80 [ 35.201869][ T603] ? kasan_save_track+0x3e/0x80 [ 35.207449][ T603] ? kasan_save_alloc_info+0x40/0x50 [ 35.213118][ T603] ? __kasan_kmalloc+0x96/0xb0 [ 35.218788][ T603] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 35.225612][ T603] ? krealloc_noprof+0x8d/0x130 [ 35.230932][ T603] ? rust_helper_krealloc+0x33/0xd0 [ 35.236334][ T603] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 35.246616][ T603] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 35.257410][ T603] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 35.267408][ T603] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 35.277677][ T603] ? __se_sys_ioctl+0x132/0x1b0 [ 35.283184][ T603] ? __x64_sys_ioctl+0x7f/0xa0 [ 35.288241][ T603] ? do_syscall_64+0x58/0xf0 [ 35.293141][ T603] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.299854][ T603] ? cgroup_rstat_updated+0x132/0x7f0 [ 35.306682][ T603] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 35.313165][ T603] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 35.320069][ T603] ? update_curr_dl_se+0x10c/0xb20 [ 35.325406][ T603] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 35.331782][ T603] ? update_curr+0x60d/0xc60 [ 35.336973][ T603] ? __kasan_check_write+0x18/0x20 [ 35.342887][ T603] ? _raw_spin_lock+0x8c/0x120 [ 35.348732][ T603] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.355089][ T603] ? cgroup_rstat_updated+0x132/0x7f0 [ 35.360833][ T603] ? _raw_spin_unlock+0x45/0x60 [ 35.366147][ T603] ? rust_helper_spin_unlock+0x19/0x30 [ 35.372276][ T603] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 35.383989][ T603] ? kvm_sched_clock_read+0x15/0x30 [ 35.390013][ T603] ? sched_clock_noinstr+0xd/0x30 [ 35.396030][ T603] ? sched_clock+0x44/0x60 [ 35.401382][ T603] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 35.415210][ T603] ? xfd_validate_state+0x68/0x150 [ 35.420815][ T603] ? save_fpregs_to_fpstate+0x196/0x230 [ 35.427711][ T603] ? __kasan_check_write+0x18/0x20 [ 35.433214][ T603] ? __switch_to+0xc7b/0x1310 [ 35.438466][ T603] ? pick_next_task_fair+0x870/0x900 [ 35.444269][ T603] ? _raw_spin_unlock+0x45/0x60 [ 35.449614][ T603] ? finish_task_switch+0x13a/0x780 [ 35.455356][ T603] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 35.465655][ T603] ? __schedule+0x1463/0x1f10 [ 35.470646][ T603] ? avc_has_extended_perms+0x7c7/0xdd0 [ 35.477360][ T603] ? __asan_memcpy+0x5a/0x80 [ 35.482556][ T603] ? avc_has_extended_perms+0x921/0xdd0 [ 35.489085][ T603] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 35.500180][ T603] ? do_vfs_ioctl+0xeda/0x1e30 [ 35.506069][ T603] ? preempt_schedule_common+0x2d/0x60 [ 35.512485][ T603] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 35.518998][ T603] ? __cfi_preempt_schedule+0x10/0x10 [ 35.524926][ T603] ? preempt_schedule_thunk+0x1a/0x40 [ 35.532518][ T603] ? try_to_wake_up+0xe17/0x1aa0 [ 35.538352][ T603] ? ioctl_has_perm+0x384/0x4d0 [ 35.545027][ T603] ? has_cap_mac_admin+0xd0/0xd0 [ 35.551163][ T603] ? futex_wake+0x63a/0x900 [ 35.557056][ T603] ? __cfi_futex_wake+0x10/0x10 [ 35.563419][ T603] ? kasan_save_alloc_info+0x40/0x50 [ 35.569770][ T603] ? __kasan_slab_alloc+0x73/0x90 [ 35.575130][ T603] ? selinux_file_ioctl+0x6e0/0x1360 [ 35.581636][ T603] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 35.587884][ T603] ? file_init_path+0x3b/0x5a0 [ 35.593198][ T603] ? do_futex+0x356/0x500 [ 35.598209][ T603] ? __cfi_do_futex+0x10/0x10 [ 35.603425][ T603] ? alloc_file_pseudo+0x18b/0x1e0 [ 35.609036][ T603] ? __fget_files+0x2c5/0x340 [ 35.614768][ T603] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 35.625761][ T603] ? __se_sys_ioctl+0x114/0x1b0 [ 35.630922][ T603] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 35.642558][ T603] __se_sys_ioctl+0x132/0x1b0 [ 35.647899][ T603] __x64_sys_ioctl+0x7f/0xa0 [ 35.653159][ T603] x64_sys_call+0x1878/0x2ee0 [ 35.658804][ T603] do_syscall_64+0x58/0xf0 [ 35.665730][ T603] ? clear_bhb_loop+0x35/0x90 [ 35.670979][ T603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.678487][ T603] RIP: 0033:0x7f3b0ab8e929 [ 35.683304][ T603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.708320][ T603] RSP: 002b:00007f3b0b9a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.717360][ T603] RAX: ffffffffffffffda RBX: 00007f3b0adb5fa0 RCX: 00007f3b0ab8e929 [ 35.727791][ T603] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000004 [ 35.736917][ T603] RBP: 00007f3b0ac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 35.747279][ T603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.756613][ T603] R13: 0000000000000000 R14: 00007f3b0adb5fa0 R15: 00007ffe0bce9a48 [ 35.766111][ T603] [ 35.769396][ T603] Modules linked in: [ 35.776088][ T603] ---[ end trace 0000000000000000 ]--- [ 35.784605][ T603] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 35.792044][ T603] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 9b 59 23 2b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d1 9d 6a a7 90 90 90 90 90 90 90 90 90 [ 35.813402][ T603] RSP: 0018:ffffc9000c8f5a90 EFLAGS: 00010246 [ 35.821376][ T603] RAX: 0000000000000061 RBX: 1ffff9200191eb54 RCX: eb222be7fc027c00 [ 35.830579][ T603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 35.838921][ T603] RBP: ffffc9000c8f5a90 R08: ffffc9000c8f5787 R09: 1ffff9200191eaf0 [ 35.847816][ T603] R10: dffffc0000000000 R11: fffff5200191eaf1 R12: 0000000000000000 [ 35.856464][ T603] R13: dffffc0000000000 R14: ffffc9000c8f5ac0 R15: ffffc9000c8f5af0 [ 35.865848][ T603] FS: 00007f3b0b9a26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.876232][ T603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.883968][ T603] CR2: 00007fb0f8780ab8 CR3: 000000011db14000 CR4: 00000000003526b0 [ 35.893155][ T603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.902146][ T603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.912560][ T603] Kernel panic - not syncing: Fatal exception [ 35.920774][ T603] Kernel Offset: disabled [ 35.925840][ T603] Rebooting in 86400 seconds..