last executing test programs: 28.933892924s ago: executing program 0 (id=52): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0xa77, 0x5, 0x6, 0x7ff}, {0xf96a, 0x9, 0x4, 0x9}, {0x7, 0x4, 0x8, 0x2}]}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close_range(r1, r1, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_misc(r4, &(0x7f00000001c0), 0x95) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000000)=0x2d265528) (async, rerun: 64) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async, rerun: 64) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) (async) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mkdir(&(0x7f0000000400)='./file0\x00', 0xc2) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x84824, &(0x7f0000000040)={[{@gid}]}) (async, rerun: 32) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0107000000000000000826000000ef855aa3e75e037815791cbff1287aa7677bec593195470a680ec24a1c393491c7a3394df67ee78015c5e6be94bd5970be165dcafcd192103f34e52dc6cd78d75c6142f9122d823343da1bffac06ada7bc3d15b95a3a8ca11502448258166accb4464cf3fbb05a59f4e1001603a2822f"], 0x14}}, 0x0) (async, rerun: 32) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 32) pidfd_getfd(r7, r10, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 28.838377816s ago: executing program 0 (id=54): openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 28.833137486s ago: executing program 0 (id=56): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40841) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x400c800) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x60048851) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4080) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) (rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4044054) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa4, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xfc, 0x7, 0x47, @empty, @remote, 0x40, 0x7, 0x1}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x5, 0x3d, {{0x10, 0x4, 0x3, 0xc, 0x40, 0x64, 0x0, 0x7f, 0x2f, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x24, 0x2e, 0x0, 0x4, [0x0, 0x4, 0x4, 0x4, 0x800, 0x94, 0x10001, 0xffff]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0xff, 0x3ff, {{0x1a, 0x4, 0x0, 0x37, 0x68, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x1c, 0x74, 0x0, 0xd, [0xff, 0x2, 0x0, 0x8, 0x1000, 0x6]}, @timestamp_prespec={0x44, 0x24, 0x78, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0xf}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}]}, @lsrr={0x83, 0x13, 0x8b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x0, 0xbf, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x64, 0x0, 0x2, 0x29, 0x0, @local, @private=0xa010100, {[@noop, @generic={0x86, 0xc, "3f0dd9cac75801c82359"}, @noop, @generic={0x44, 0xb, "f91522f09894da1744"}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000dc0)={@broadcast, @local, 0x0}, &(0x7f0000000e00)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ec0)={'gretap0\x00', &(0x7f0000000e40)={'gre0\x00', 0x0, 0x7, 0x40, 0x2, 0xc, {{0x15, 0x4, 0x3, 0x3, 0x54, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x7, 0x5, "cc721c"}, {0x2, 0x11, "bf9ab57f6df4681b1877313ee883d4"}]}, @end, @lsrr={0x83, 0x23, 0x58, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @local, @empty, @multicast2, @multicast1]}]}}}}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f40)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000001240)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x208, r9, 0x800, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4840) (async, rerun: 64) r19 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_MGMT_C_LISTDEF(r19, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1c}}, 0x44040) 28.797720126s ago: executing program 0 (id=58): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) keyctl$clear(0x7, r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000380)={0x6, 'wg1\x00', {0x101}, 0x7}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000300)=0x8) setsockopt(r6, 0x6, 0x3, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa40) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x8000, 0x240402) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000001c0)={r9, 0x7, {0x0, 0x0, 0x0, 0xcc50, 0x0, 0x0, 0x0, 0x1b, 0x10, "ed480a5f790af15282d8d6fe604d02e0ddc8d8eaff7413be4f43ff98379ff130cc76e75ce1af1a24e7e3bcb63da5c5f21c5af5daad422454ec74aa40b73a2627", "9a8ac3c4a41f3b5582bd832139ac24ab15654aba0b380c0635fb8790a5a19cdba9278d9b087eebe44e8b2622e6f49b50ff7f4d68da689631ef2abb58f08e91ce", "c860f85a0706eb55f0a6e70df3f6b107884e0a3c79b3bf60c940169d9bb1733f", [0xfffffffffffffffe, 0x5]}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x7, 0xffff, 0xc11, 0x8000, 0x4, "df240c1df0737f4b2cde7370fe53e7c2f205da", 0x3, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/182, 0xb6, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) 28.742354157s ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@huge_always}, {}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f00000000c0)={0x94, 0x0, 0x8000000}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 28.732185317s ago: executing program 0 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "d8e6c351709433f9", "3c8ced18e627320b44b62c9898fb317a", "ec8c5129", "dd9ece124d49990c"}, 0x28) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="090a0e"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) (async) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000000000080002", @ANYRES32], 0x24}, 0x4, 0x700000000000000}, 0x8850) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000007980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x75, 0x2, 0x100, 0xffffffff, 0x4000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x99b33000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x158, r6, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_FRAME={0x122, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5aa2}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0x3}}, 0x0, 0x2, 0x5d, @void, [{0xdd, 0xfe, "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"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf18}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 28.673242778s ago: executing program 32 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='uid_map\x00') r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "d8e6c351709433f9", "3c8ced18e627320b44b62c9898fb317a", "ec8c5129", "dd9ece124d49990c"}, 0x28) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="090a0e"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) (async) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000000000080002", @ANYRES32], 0x24}, 0x4, 0x700000000000000}, 0x8850) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000007980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x75, 0x2, 0x100, 0xffffffff, 0x4000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x99b33000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x158, r6, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_FRAME={0x122, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5aa2}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0x3}}, 0x0, 0x2, 0x5d, @void, [{0xdd, 0xfe, "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"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf18}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 2.381051392s ago: executing program 4 (id=336): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r4, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r4, 0x7dfff000) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r4, 0x3d7c3000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) read$FUSE(r2, &(0x7f00000014c0)={0x2020}, 0x2020) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000100)=[{0x3, 0x6, 0x0, 0xb}, {0x15a7, 0xd, 0x4, 0x1}, {0x8, 0xda, 0x3, 0x7ffe}, {0x1, 0x1, 0x0, 0x5}, {0x4, 0x8, 0xb}, {0x7ff, 0x1, 0x4d, 0x5}]}, 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x306, @local}, 0x57, {0x2, 0x4e20, @broadcast}, 'ip6tnl0\x00'}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000000)='\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20a42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 2.081263207s ago: executing program 1 (id=338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x18, 0xff81, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x30, 0xfffffffffffffce6}}, 0x1000}], 0x0, 0x0, 0x0}) 2.075552617s ago: executing program 1 (id=339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x2, 0x7, 0x0, 0x8}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000180)=r1) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x10005b3, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x18, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 2.057471737s ago: executing program 1 (id=340): socket$inet6(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) (async) socketpair(0x1e, 0x324e066980195dbb, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) write(r1, &(0x7f0000000380)="94fc743c949b48bc4cc68d893e060000000000000092bf0313d1351437656991997519d538658c0b48ed748c2e8b3494f1b13288bc0536895125558c4c23335cce73ba0b065b549b4d864194a9c58b3129866ef6353a7a7b49c1b50bb28168e00bf28967bdb34e8fb3ae8dad1d600d7cf0c6ee8d65002caf462ac0e61d35dada95790fc1d714241c0c15d996a5dde0c3826338a95c16265b193d26382312271b6e949a73882449ce756b3401c28a73eaabe10bd76b5493e84c32c21517c681d33848ba45a78eaea762a08aed37983dda190822c945cb42d5e52be743b43a9cef53465d38d26d2307c5bad8754299d1a1bcb8c6fd35678e21ba24770b270bea78fd7dab91fbda1ab5418a2400c412d5c83adc95c26c90b0f8835e076f9b8f2ff139ad9440fa8c5a8b95de93d5619e6b33e1a9809fde538b6f8427abe22db840d88260f2400e8907b860af0c2fa4b784a51114339181e151db56b9aa612eed31ae8f0f8f22221fad97b8bf5ba27c4f6487c4517282a920622dc520b015c72a42ac6e981a225d5a423c85ce6eabfdec60637666f07966e07e4427c598843f218410ab3ac667276fbda82b022203c0aff0ac8fdef52c606c35a69e8e05b0f3544a69fa048dab9f422d32d5cab8798239badee995a69f826f5fb323191bfbbc63e953f32e8bc97726b7bd02177b8e5efa8a17aeb7e429a4ad9e8f442f935423e7cb6a25a855a38cb0c04566bb039b172378b4bd1176ab2a3c59ad7f4b5fea22ed8ad434544437da0f25840ad5683fdfa2f5d473ca1d3e069c124615c99c0eb9ac0ef037d1184763b7f58941c04b43d747c269", 0x250) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x305e) preadv(r2, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000600)=""/7, 0x7}], 0x3, 0x12a, 0x4) (async) clock_gettime(0x6, &(0x7f0000000680)) (async) syz_io_uring_setup(0x3b4b, &(0x7f0000000000)={0x0, 0xc5f7, 0x20000, 0x0, 0x39}, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = open(&(0x7f0000000740)='./file1\x00', 0x0, 0x181) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = open(&(0x7f00009e1000)='./file1\x00', 0x14b641, 0xd2) fcntl$setlease(r8, 0x400, 0x0) (async) fcntl$setlease(r8, 0x400, 0x2) (async) fcntl$notify(r4, 0x402, 0x8000003d) sendfile(r3, r3, 0x0, 0x800000007) open(&(0x7f0000000200)='./file1\x00', 0x8ce7e, 0x108) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x1009, 0x0, 0xf, 0x3, 0xa, r7}) sched_setscheduler(r7, 0x1, &(0x7f0000000780)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/oops_count', 0x600000, 0x60) 1.364588718s ago: executing program 2 (id=341): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) close(r8) ppoll(&(0x7f00000001c0)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0xa99) timer_create(0x0, &(0x7f0000000280)={0x0, 0x20, 0x4}, &(0x7f00000002c0)) fsetxattr$trusted_overlay_upper(r6, 0x0, &(0x7f0000000180)={0x0, 0xfb, 0xcf, 0x2, 0x4, "a008ad4fa09aa0d4aa928bfd5a62f565", "4bae58a966cf3bef22ff9d20d59e3b811cf09d969b64703adef4a3bd848774d06e05e7637a62d06a7a1aafd742343f76bf8c8cc29b47e57ffee05b6b3f74744252428462abdf6ff99debb47377971fb5b92a67694026095a414e6ef8d797d349b2885a80fe98d0adf10a11288728a2bd70ae4120c8189f00f31ac3bcf8e6a596e5915b76fb84465a2eff187d1883e4f55317ce30e581b22bbc72b0d020b07248330b3f4b5b295e07abcc536c63df7251ac9d2e575e7b7dbb2421"}, 0xcf, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xc460, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) r11 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) mkdirat(r11, &(0x7f0000000180)='\x00', 0x20) 1.216393551s ago: executing program 1 (id=342): socket(0x1d, 0x1, 0x6) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x105000, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) ppoll(&(0x7f0000000ac0)=[{0xffffffffffffffff, 0x6101}, {r0, 0x404}, {0xffffffffffffffff, 0x4001}], 0x3, &(0x7f0000000b00), 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='^-{\x00', 0x0, r2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000d3d3f101fae31ed47183b2606a04e49c38e7144d8aef96aa38084edfe1176cdd0c0a77e90af00f81501fe84a6b028d77528119f021ee8ace4246c65393d3260c1851bcf00d884ce7abfcd3229955175c229634bfdc4e823950ed4d9ff81a2303648f54f45e66156e36cf9c71"]) 1.196083601s ago: executing program 1 (id=343): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffb, 0x100000001, 0x0, 0x81, 0x2, 0x10000000000, 0x2004c8, 0x8000000, 0x0, 0x0, 0x200007, 0x0, 0x2454, 0x0, 0x7, 0xffffffffffffffff], 0xdddd1000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@arm64={0x40, 0x0, 0x6, '\x00', 0x1}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x885, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x44901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$FUSE(r2, &(0x7f0000001140)={0x2020}, 0x2020) lseek(r1, 0x10001, 0x0) 1.066363132s ago: executing program 1 (id=344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "9e3fdcec"}]}}, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, &(0x7f00000002c0)={0x20, 0x5, 0x7d, {0x7d, 0xd, "da5a25af35beafdd0dbec1c5408bf1b19c0f18f6a56b0597424fab619278e88c25b1456c00766182723ebb0f2ac3db965d8dcc39c90b86083e880e69257d419fb887d5e3724395cbc68429b5827a80bfe66232eb8e383e407fb04d5071f36451f663b80935269ea01b08f22b11d412f7acfa2ae2621dd44fa18f59"}}, &(0x7f0000000500)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "48e6f2d5175c92b2547e7a506fbaea98cf20d2b2c4ed675d7a6f3fbce71a64f481d89614dec930cc74327342c4cbd7e2d24e3b34a0a866a7a60502f518ab992ae8c7e931c2eae5d1c0126a4b6938cd22d6aea55f85885239e666f1eb183066754d2fd7eb6ec47c00ea64f3669e20c514619a3e0c6532e98d4a8eaffab3e0c0fbdd1273522abe3f13b6b5fac49c667f2c24f383727b4c60c2cd2940d120901e536fb863a689eea90ef39e45560c8ab7870f394c"}}, &(0x7f00000005c0)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1d, 0x6, 0xce, 0x7c}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x3, 0x40, 0xa, "38c261da", "5073e28c"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x18, 0x3, 0x0, 0x40, 0x4}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x0, 0x30, 0x64, "3f766e9e0647448ad912cf792d86da75412f08afcfee041ee3beb91150a9d841a5e7061039c99a7bc2bfbf2907c1545467492cf6b2506e50bdc7bc45cb56ca13b3157df835245271bd5e8079baca70df20e05d5799e0a20fac18ac649bfb1362b2ad6e7c"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x24}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xae}, &(0x7f0000000a40)={0x40, 0x9, 0x1}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "9cfc"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "77ad"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x1b}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x2}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x3, 0x0, [{0xfb40319bd5ecf937, 0x70, &(0x7f00000001c0)=""/112}, {0x8000000, 0x97, &(0x7f0000000700)=""/151}, {0x8000000, 0x79, &(0x7f0000000600)=""/121}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 1.064977503s ago: executing program 2 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r2, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mmap(&(0x7f00001cd000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r3, 0x84814000) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x9) r5 = gettid() (async) r6 = eventfd2(0x3, 0x800) r7 = epoll_create1(0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88000) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f00000000c0)={r7, r8, 0x1ff}) 1.062962973s ago: executing program 2 (id=346): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) writev(r5, &(0x7f0000003500)=[{&(0x7f00000035c0)="34325a3ec953", 0x6}], 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 987.122804ms ago: executing program 2 (id=347): mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000007, 0x13, 0xffffffffffffffff, 0x2000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1052, r1, 0x0) (async) ftruncate(r1, 0x3) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) (async) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) r3 = syz_open_pts(r2, 0x8182) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002f40)={0x2020}, 0x2020) 661.866639ms ago: executing program 4 (id=350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xa, 0x40000}, 0x4000850) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xa, 0x40000}, 0x4000850) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 563.2599ms ago: executing program 4 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}], 0xdf, 0x0, &(0x7f0000000100)="de54b9235c15af0d7e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba96607f43f8d780b0f42478a7b03002fc21aff55002ce55e850264e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70fc61b732623091cbbba6f20968671bef37f329e53bf5e3aed848fe37dc543eef4820005577af7e9546d62f380ed468b86b00d62a6dd4c7667b0a71f1246480f2627e52d799a1ad6285f9"}) 458.263952ms ago: executing program 4 (id=352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) syz_clone3(&(0x7f0000000340)={0x8000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x3d}, &(0x7f0000000240)=""/72, 0x48, &(0x7f0000000440)=""/221, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000013c0)={0x1254, 0x2d, 0x100, 0x70bd28, 0x25dfdbfe, {0x2}, [@typed={0x96, 0x4e, 0x0, 0x0, @binary="eaad55832a262c131509e833391adb05cebbcc1eeac22177a6dd12ffe6c743e36fbdb02fd68c644a39e2e618bf07632ee8af6b94a1655c2ed1873c5ba0c87051d42b91d81d56a9aa76bf57b460d4758233046d95dc0f4983eabae5807023a7e420d1ccb45661580f317ad4ec77148ed8db730826aabce640365eac74e11c104652582f621d8685adc05b1c357e8901555d28"}, @generic="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", @typed={0x8, 0x9, 0x0, 0x0, @uid=0xee01}, @nested={0x7a, 0xde, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xfa, 0x0, 0x0, @u32}, @generic="10e066b7b19193fadc1b3878f6a1a0cd0bb4fe79658b1f86dcd36612613ced729fc845210ce167bc4511d69e9b0defb97eb7f16ba4332b9998174e5a29edebad19c43ccecf4ae9434a662dae54937c0ee194", @typed={0x10, 0xeb, 0x0, 0x0, @str='/dev/nullb0\x00'}, @nested={0x4, 0x1d}]}, @generic="27dd003701b958d0cb0460cbd09b560c4c5a1e4e2145bc5a9d9383ab98d28716ca4caf4acbfbae712719f0429bfcc00db6be90455bfc3413a6f3d8", @nested={0xe8, 0x13b, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0x8, 0x135, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x135, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xda}, @typed={0x10, 0xcd, 0x0, 0x0, @str='/dev/nullb0\x00'}, @nested={0x4, 0x70}, @typed={0xb6, 0x60, 0x0, 0x0, @binary="db084750124ca48a7214495c2a89fb423c95d7e2982bee89d3c363f2b1c3450564ba1646afe57a688fc2c9a3caa1e5c6b8e8e3722e7cf5c52a0bdb28da69fc490511f7b438a09fa10841b66d6b29af9e15cd451b4da05f2fb9d4063ac6594e8d2c360df78991e6bb28eaf7ec1f79b296fd3b1c09848cae10be117c0eaa917c16215d0677b1ce50ef73f8f3835a5aba192c687a76e146fd21c98f5a81d82b890eb723cb92d36de77ae11a1463656a96cae429"}]}]}, 0x1254}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) close_range(r0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='squashfs\x00', 0x1010c0, &(0x7f0000000100)='\x00') 457.650422ms ago: executing program 4 (id=353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x20}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 452.217172ms ago: executing program 4 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x54, 0xcd, 0xee, 0x40, 0x7fd, 0x4, 0xb9bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7e, 0xb3}}]}}]}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 363.446994ms ago: executing program 3 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000d) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x3, 0x5, 0x3, 0x7, 0x8}) 310.489045ms ago: executing program 3 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@huge_always}, {}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 309.697205ms ago: executing program 3 (id=358): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 309.471185ms ago: executing program 3 (id=359): r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000580)="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", 0x1000, r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) preadv2(r1, 0x0, 0x0, 0xe, 0x7ff, 0xa) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='maps\x00') clock_gettime(0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (async, rerun: 64) r4 = epoll_create1(0x0) (rerun: 64) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r5) inotify_init1(0x800) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (rerun: 64) io_setup(0x2adf, &(0x7f0000000180)) (async, rerun: 32) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async, rerun: 32) io_setup(0x1, &(0x7f00000004c0)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x1, &(0x7f0000000c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x202, r8, 0x0, 0x0, 0x8800000, 0x0, 0x0, r8}]) (async, rerun: 32) io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x6, r6, &(0x7f0000001580)="380d5a0fd72ea73c103ecaade6f5e0be89f05cad06d28c771e7db913e8c73d60b396989b228a5577f36c11838148d248a93b3cfd9f06f6feda281d1fd5b2218c51e6d2b556e369b5", 0x48, 0x5, 0x0, 0x1, r8}]) (async, rerun: 32) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000080030000000000000005000000180b000001000000000000010d00000000000000010000000000010000000000000000000000000000000000000000000000000600"/88]) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r9 = socket(0x1d, 0x6, 0xfffffffe) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000093}]}) (async) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 144.032087ms ago: executing program 2 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, 0x0) (async) setfsuid(0x0) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x20, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0x6) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x2, 0x2a}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/112, 0x70, 0x2, 0x35}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = socket(0x26, 0x2, 0x3) recvmsg(r5, &(0x7f00000007c0)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000640)=""/143, 0x8f}], 0x3, &(0x7f0000000700)=""/172, 0xac}, 0x40000060) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff5000/0x9000)=nil, 0x9000, &(0x7f0000000000)='./binderfs/binder0\x00') (async) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000180)={0xf, 0xfff}) 75.453038ms ago: executing program 2 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd2c, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc081}, 0x9080) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd2c, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc081}, 0x9080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r2, &(0x7f0000000200), r4, 0x0, 0x808, 0x0) (async) splice(r2, &(0x7f0000000200), r4, 0x0, 0x808, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="3870b02c00"]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x40}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) read$FUSE(r8, &(0x7f00000093c0)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000540)={{0x2, 0x4e23, @loopback}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0xc, {0x2, 0x4e24, @private=0xa010100}, 'pimreg\x00'}) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) r14 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(r14, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x120, 0xfffffffffffffff5, 0x0, [{{0x1, 0x3, 0x7, 0x7fffffffffffffff, 0x7, 0x3, {0x1, 0x3659, 0x6, 0x10000000800000e5, 0x5, 0x80000000000003, 0x8, 0x3, 0x81, 0x1000, 0xffffffff, r12, r7, 0x7, 0x5}}, {0x0, 0x1ffffd, 0x75, 0x2, '#:[\v\xa2@)A\x05\x81\r\x00\x95j\xb0K\xcd\x17b41\t\x8e\x8d\x0f\b`*\xec\xb0T\xd5\x7f\xda\xc0P\xab1\v<\x02\xde\x95\x05-X\xab(\x91\xca\xfd\x94KD\x96\xc3\x8dX\x17\xc6}\xe2 \v\x0e\x01\xd7\xb0\t\x05u\x93\xd5\xd0\xd4\xc5&\x13\xb6\x0f\xad\xfb\xabl\xc8p\x940\xf2\xda\xa0\x18\x0f\"/\b^\x8c+x)\r\xafw\x97\x94\v\x1b\xb0\xc8\x96\x17\xd9\xdf\x91\xedt'}}]}, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r13}, 0x2c, {[{@default_permissions}, {@allow_other}], [{@subj_type={'subj_type', 0x3d, ')\'\x1a{{'}}, {@uid_gt={'uid>', r15}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}]}}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 281.25µs ago: executing program 3 (id=362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000b40)=0xc, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x88) 0s ago: executing program 3 (id=363): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000046c0)=""/4096, 0x1000) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x4ade101f, 0x9}}, 0x28) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r2, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x3, ')=J'}, 0x0}) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') (async) getdents64(r0, &(0x7f00000046c0)=""/4096, 0x1000) (async) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x4ade101f, 0x9}}, 0x28) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) connect$802154_dgram(r2, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x3, ')=J'}, 0x0}) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 21.111762][ T36] audit: type=1400 audit(1751220470.609:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.112824][ T281] cgroup: Unknown subsys name 'net' [ 21.134401][ T36] audit: type=1400 audit(1751220470.609:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.161693][ T36] audit: type=1400 audit(1751220470.629:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.161842][ T281] cgroup: Unknown subsys name 'devices' [ 21.343123][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.348736][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.440216][ T36] audit: type=1400 audit(1751220470.929:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.463387][ T36] audit: type=1400 audit(1751220470.929:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.472473][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.488231][ T36] audit: type=1400 audit(1751220470.929:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.519712][ T36] audit: type=1400 audit(1751220470.999:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.526973][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.545548][ T36] audit: type=1400 audit(1751220470.999:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.579685][ T36] audit: type=1400 audit(1751220471.019:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.605226][ T36] audit: type=1400 audit(1751220471.019:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.281572][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.288634][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.298171][ T288] bridge_slave_0: entered allmulticast mode [ 22.304403][ T288] bridge_slave_0: entered promiscuous mode [ 22.310763][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.317791][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.324873][ T288] bridge_slave_1: entered allmulticast mode [ 22.331156][ T288] bridge_slave_1: entered promiscuous mode [ 22.465173][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.472476][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.479546][ T293] bridge_slave_0: entered allmulticast mode [ 22.485936][ T293] bridge_slave_0: entered promiscuous mode [ 22.499959][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.507052][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.514195][ T293] bridge_slave_1: entered allmulticast mode [ 22.520339][ T293] bridge_slave_1: entered promiscuous mode [ 22.529658][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.536716][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.544032][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.551073][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.558994][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.566083][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.573207][ T292] bridge_slave_0: entered allmulticast mode [ 22.579343][ T292] bridge_slave_0: entered promiscuous mode [ 22.585904][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.592968][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.600057][ T292] bridge_slave_1: entered allmulticast mode [ 22.606392][ T292] bridge_slave_1: entered promiscuous mode [ 22.628555][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.635672][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.642797][ T294] bridge_slave_0: entered allmulticast mode [ 22.648941][ T294] bridge_slave_0: entered promiscuous mode [ 22.665266][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.672394][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.679458][ T294] bridge_slave_1: entered allmulticast mode [ 22.685724][ T294] bridge_slave_1: entered promiscuous mode [ 22.810454][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.817531][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.824808][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.831833][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.852567][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.859625][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.866912][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.873938][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.882805][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.889930][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.897213][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.904232][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.914883][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.922270][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.929707][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.937112][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.944658][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.951959][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.959086][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.966311][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.983489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.990531][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.998150][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.005192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.044987][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.052045][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.063584][ T288] veth0_vlan: entered promiscuous mode [ 23.070185][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.077246][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.099442][ T288] veth1_macvtap: entered promiscuous mode [ 23.112569][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.119620][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.136550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.143786][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.159079][ T293] veth0_vlan: entered promiscuous mode [ 23.181961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.188994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.196634][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.203666][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.228691][ T294] veth0_vlan: entered promiscuous mode [ 23.243316][ T293] veth1_macvtap: entered promiscuous mode [ 23.260042][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.260193][ T292] veth0_vlan: entered promiscuous mode [ 23.290272][ T294] veth1_macvtap: entered promiscuous mode [ 23.302527][ T292] veth1_macvtap: entered promiscuous mode [ 23.379171][ T316] ======================================================= [ 23.379171][ T316] WARNING: The mand mount option has been deprecated and [ 23.379171][ T316] and is ignored by this kernel. Remove the mand [ 23.379171][ T316] option from the mount to silence this warning. [ 23.379171][ T316] ======================================================= [ 23.416223][ T316] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 23.440397][ T324] rust_binder: Write failure EINVAL in pid:4 [ 23.459441][ T329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.470172][ T329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 23.510269][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.602323][ T304] tipc: Subscription rejected, illegal request [ 23.693935][ T351] capability: warning: `syz.3.15' uses 32-bit capabilities (legacy support in use) [ 23.740721][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.890698][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 23.897081][ T49] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 23.905454][ T49] usb 3-1: config 0 has no interface number 0 [ 23.911799][ T49] usb 3-1: config 0 interface 184 has no altsetting 0 [ 23.919965][ T49] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 23.929524][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.938373][ T49] usb 3-1: Product: syz [ 23.942896][ T49] usb 3-1: Manufacturer: syz [ 23.947495][ T49] usb 3-1: SerialNumber: syz [ 23.953144][ T49] usb 3-1: config 0 descriptor?? [ 23.958833][ T49] smsc75xx v1.0.0 [ 23.970685][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.120664][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 24.126824][ T64] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 24.135061][ T64] usb 4-1: config 0 has no interface number 0 [ 24.141164][ T64] usb 4-1: config 0 interface 184 has no altsetting 0 [ 24.149246][ T64] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 24.158369][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.166404][ T64] usb 4-1: Product: syz [ 24.170557][ T64] usb 4-1: Manufacturer: syz [ 24.177090][ T64] usb 4-1: SerialNumber: syz [ 24.182572][ T64] usb 4-1: config 0 descriptor?? [ 24.188223][ T64] smsc75xx v1.0.0 [ 24.469819][ T380] virtio-fs: tag not found [ 24.496430][ T388] binder: Bad value for 'stats' [ 24.557208][ T396] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 24.565044][ T396] netlink: 'syz.0.30': attribute type 7 has an invalid length. [ 24.572836][ T49] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 24.576453][ T390] kvm: pic: non byte write [ 24.584545][ T396] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.30'. [ 24.597452][ T49] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 25.198505][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 25.209423][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 25.418544][ T416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'. [ 25.427722][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 25.438708][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 25.448303][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 25.458046][ T64] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 25.467524][ T64] usb 4-1: USB disconnect, device number 2 [ 25.706476][ T418] binder: Unknown parameter 'fscontext?}' [ 25.747337][ T424] 9pnet_fd: Insufficient options for proto=fd [ 25.773824][ T426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.773849][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 25.827856][ T336] capability: warning: `syz.2.11' uses deprecated v2 capabilities in a way that may be insecure [ 25.860432][ T429] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 25.945680][ T439] /dev/loop0: Can't lookup blockdev [ 25.972616][ T442] rust_binder: Write failure EFAULT in pid:17 [ 26.026240][ T455] netlink: 'syz.0.52': attribute type 3 has an invalid length. [ 26.040029][ T455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 26.049525][ T336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.049557][ T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8 [ 26.066979][ T336] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.084559][ T463] mmap: syz.0.54 (463) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.086335][ T336] rust_binder: Read failure Err(EFAULT) in pid:8 [ 26.105041][ T465] binder: Unknown parameter '' [ 26.109796][ T49] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 26.135359][ T49] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 26.145997][ T49] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 26.155633][ T49] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 26.166482][ T49] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 26.176125][ T49] usb 3-1: USB disconnect, device number 2 [ 26.222853][ T45] bridge_slave_1: left allmulticast mode [ 26.228546][ T45] bridge_slave_1: left promiscuous mode [ 26.234407][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.242245][ T45] bridge_slave_0: left allmulticast mode [ 26.247936][ T45] bridge_slave_0: left promiscuous mode [ 26.253839][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.271378][ T306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.344513][ T45] veth1_macvtap: left promiscuous mode [ 26.350024][ T45] veth0_vlan: left promiscuous mode [ 26.384266][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 26.408838][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.415925][ T306] usb 4-1: device descriptor read/64, error -71 [ 26.416168][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.431327][ T478] bridge_slave_0: entered allmulticast mode [ 26.438224][ T478] bridge_slave_0: entered promiscuous mode [ 26.444910][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.452020][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.459082][ T478] bridge_slave_1: entered allmulticast mode [ 26.465470][ T478] bridge_slave_1: entered promiscuous mode [ 26.504406][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.511463][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.518682][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.525713][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.544813][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.552500][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.562468][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.569505][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.577135][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.579535][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.584830][ T9] usb 2-1: too many configurations: 127, using maximum allowed: 8 [ 26.591831][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.608778][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.617217][ T478] veth0_vlan: entered promiscuous mode [ 26.624848][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 26.631311][ T478] veth1_macvtap: entered promiscuous mode [ 26.640310][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.657350][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 26.657366][ T36] audit: type=1400 audit(1751220476.149:171): avc: denied { unlink } for pid=482 comm="syz.2.62" name="#1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.666404][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 26.692855][ T36] audit: type=1400 audit(1751220476.179:172): avc: denied { mount } for pid=482 comm="syz.2.62" name="/" dev="overlay" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.696770][ T306] usb 4-1: device descriptor read/64, error -71 [ 26.739835][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.742959][ T36] audit: type=1400 audit(1751220476.229:173): avc: denied { mount } for pid=487 comm="syz.2.63" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.757256][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 26.779320][ T36] audit: type=1400 audit(1751220476.269:174): avc: denied { search } for pid=487 comm="syz.2.63" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.785034][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.813118][ T36] audit: type=1400 audit(1751220476.269:175): avc: denied { write } for pid=487 comm="syz.2.63" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.813149][ T36] audit: type=1400 audit(1751220476.269:176): avc: denied { read } for pid=487 comm="syz.2.63" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.813170][ T36] audit: type=1400 audit(1751220476.269:177): avc: denied { open } for pid=487 comm="syz.2.63" path="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.813192][ T36] audit: type=1400 audit(1751220476.269:178): avc: denied { watch watch_reads } for pid=487 comm="syz.2.63" path="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.813212][ T36] audit: type=1400 audit(1751220476.269:179): avc: denied { bind } for pid=487 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.835212][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 26.901014][ T36] audit: type=1400 audit(1751220476.299:180): avc: denied { mount } for pid=491 comm="syz.4.61" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.921422][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.960387][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 26.971504][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.981969][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 26.993291][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.008122][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 27.012263][ T502] binder: Unknown parameter 'map' [ 27.018118][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 27.033466][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 27.047259][ T504] process 'syz.2.67' launched './file1' with NULL argv: empty string added [ 27.055898][ T306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.137225][ T511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 27.180697][ T306] usb 4-1: device descriptor read/64, error -71 [ 27.189462][ T518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 27.349760][ T522] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.361843][ T522] x_tables: duplicate underflow at hook 2 [ 27.420693][ T306] usb 4-1: device descriptor read/64, error -71 [ 27.531441][ T306] usb usb4-port1: attempt power cycle [ 27.611051][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.740681][ T10] usb 3-1: device descriptor read/64, error -71 [ 27.870739][ T306] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.891768][ T306] usb 4-1: device descriptor read/8, error -71 [ 27.990653][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.021714][ T306] usb 4-1: device descriptor read/8, error -71 [ 28.080674][ T523] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.210726][ T523] usb 5-1: device descriptor read/64, error -71 [ 28.230654][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.270703][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 28.291652][ T306] usb 4-1: device descriptor read/8, error -71 [ 28.360670][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.421640][ T306] usb 4-1: device descriptor read/8, error -71 [ 28.450684][ T523] usb 5-1: device descriptor read/64, error -71 [ 28.530789][ T306] usb usb4-port1: unable to enumerate USB device [ 28.600659][ T10] usb 3-1: device descriptor read/64, error -71 [ 28.690683][ T523] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.710732][ T10] usb usb3-port1: attempt power cycle [ 28.820982][ T523] usb 5-1: device descriptor read/64, error -71 [ 29.050938][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.072957][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.076312][ T523] usb 5-1: device descriptor read/64, error -71 [ 29.090311][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.097337][ T531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.107026][ T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.115664][ T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.139691][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 29.148801][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=209 [ 29.160032][ T9] usb 2-1: can't set config #1, error -71 [ 29.173257][ T9] usb 2-1: USB disconnect, device number 2 [ 29.190753][ T523] usb usb5-port1: attempt power cycle [ 29.202465][ T537] kvm: kvm [536]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 29.221961][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.279674][ T539] syzkaller0: entered promiscuous mode [ 29.285212][ T539] syzkaller0: entered allmulticast mode [ 29.359852][ T541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.359878][ T541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 29.410739][ T64] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 29.429671][ T547] binder: Bad value for 'max' [ 29.444906][ T549] rust_binder: Error while translating object. [ 29.444943][ T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.451308][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 29.460848][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.491786][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.530690][ T523] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.551778][ T523] usb 5-1: device descriptor read/8, error -71 [ 29.570658][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 29.576909][ T64] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.585079][ T64] usb 4-1: config 0 has no interface number 0 [ 29.591187][ T64] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.602078][ T64] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.611849][ T64] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 29.620992][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.629845][ T64] usb 4-1: config 0 descriptor?? [ 29.632400][ T10] usb 3-1: device descriptor read/8, error -71 [ 29.681820][ T523] usb 5-1: device descriptor read/8, error -71 [ 29.750776][ T10] usb usb3-port1: unable to enumerate USB device [ 29.920692][ T523] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 29.941746][ T523] usb 5-1: device descriptor read/8, error -71 [ 30.071679][ T523] usb 5-1: device descriptor read/8, error -71 [ 30.180778][ T523] usb usb5-port1: unable to enumerate USB device [ 30.238844][ T64] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0001/input/input4 [ 30.252500][ T64] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 30.326600][ T554] syz.1.87: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 30.342119][ T554] CPU: 1 UID: 0 PID: 554 Comm: syz.1.87 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 30.342147][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.342166][ T554] Call Trace: [ 30.342172][ T554] [ 30.342179][ T554] __dump_stack+0x21/0x30 [ 30.342208][ T554] dump_stack_lvl+0x10c/0x190 [ 30.342222][ T554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.342234][ T554] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.342246][ T554] dump_stack+0x19/0x20 [ 30.342256][ T554] warn_alloc+0x1bc/0x2a0 [ 30.342267][ T554] ? stack_depot_save_flags+0x399/0x800 [ 30.342280][ T554] ? __cfi_warn_alloc+0x10/0x10 [ 30.342290][ T554] ? kasan_save_track+0x4f/0x80 [ 30.342304][ T554] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 30.342317][ T554] ? xskq_create+0x68/0x2a0 [ 30.342328][ T554] ? xsk_init_queue+0xb6/0x120 [ 30.342338][ T554] ? xsk_setsockopt+0x43f/0x6f0 [ 30.342348][ T554] ? do_sock_setsockopt+0x26a/0x400 [ 30.342358][ T554] ? __x64_sys_setsockopt+0x1b8/0x250 [ 30.342369][ T554] ? x64_sys_call+0x2adc/0x2ee0 [ 30.342381][ T554] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.342393][ T554] __vmalloc_node_range_noprof+0x135/0x1420 [ 30.342407][ T554] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 30.342418][ T554] ? avc_has_perm+0x1f2/0x220 [ 30.342430][ T554] ? kasan_save_alloc_info+0x40/0x50 [ 30.342441][ T554] ? __kasan_kmalloc+0x96/0xb0 [ 30.342455][ T554] vmalloc_user_noprof+0x77/0x90 [ 30.342465][ T554] ? xskq_create+0xdb/0x2a0 [ 30.342476][ T554] xskq_create+0xdb/0x2a0 [ 30.342486][ T554] xsk_init_queue+0xb6/0x120 [ 30.342497][ T554] xsk_setsockopt+0x43f/0x6f0 [ 30.342507][ T554] ? __cfi_xsk_setsockopt+0x10/0x10 [ 30.342517][ T554] ? do_futex+0x309/0x500 [ 30.342531][ T554] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 30.342542][ T554] ? security_socket_setsockopt+0x33/0xd0 [ 30.342555][ T554] ? __cfi_xsk_setsockopt+0x10/0x10 [ 30.342565][ T554] do_sock_setsockopt+0x26a/0x400 [ 30.342575][ T554] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 30.342587][ T554] __x64_sys_setsockopt+0x1b8/0x250 [ 30.342598][ T554] x64_sys_call+0x2adc/0x2ee0 [ 30.342611][ T554] do_syscall_64+0x58/0xf0 [ 30.342620][ T554] ? clear_bhb_loop+0x50/0xa0 [ 30.342631][ T554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.342642][ T554] RIP: 0033:0x7f9c9758e929 [ 30.342655][ T554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.342664][ T554] RSP: 002b:00007f9c973eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 30.342677][ T554] RAX: ffffffffffffffda RBX: 00007f9c977b5fa0 RCX: 00007f9c9758e929 [ 30.342685][ T554] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 30.342692][ T554] RBP: 00007f9c97610b39 R08: 0000000000000004 R09: 0000000000000000 [ 30.342698][ T554] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 30.342705][ T554] R13: 0000000000000000 R14: 00007f9c977b5fa0 R15: 00007fff1c726b78 [ 30.342714][ T554] [ 30.342720][ T554] Mem-Info: [ 30.441300][ T523] usb 4-1: USB disconnect, device number 7 [ 30.446840][ T554] active_anon:5561 inactive_anon:0 isolated_anon:0 [ 30.446840][ T554] active_file:6112 inactive_file:5032 isolated_file:0 [ 30.446840][ T554] unevictable:0 dirty:1322 writeback:0 [ 30.446840][ T554] slab_reclaimable:4323 slab_unreclaimable:70417 [ 30.446840][ T554] mapped:24017 shmem:169 pagetables:747 [ 30.446840][ T554] sec_pagetables:0 bounce:0 [ 30.446840][ T554] kernel_misc_reclaimable:0 [ 30.446840][ T554] free:1538706 free_pcp:3354 free_cma:0 [ 30.698101][ T554] Node 0 active_anon:22248kB inactive_anon:0kB active_file:24448kB inactive_file:20128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96068kB dirty:5288kB writeback:0kB shmem:672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4448kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no [ 30.730185][ T554] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:5736kB free_cma:0kB [ 30.760183][ T554] lowmem_reserve[]: 0 3921 3921 [ 30.765528][ T554] Normal free:3202860kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22236kB inactive_anon:0kB active_file:24448kB inactive_file:20128kB unevictable:0kB writepending:5288kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:32kB free_cma:0kB [ 30.797268][ T554] lowmem_reserve[]: 0 0 0 [ 30.801702][ T554] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 30.817262][ T554] Normal: 67*4kB (UM) 80*8kB (UME) 29*16kB (UME) 52*32kB (UME) 43*64kB (UME) 53*128kB (UM) 32*256kB (UM) 19*512kB (UME) 10*1024kB (UME) 12*2048kB (UME) 766*4096kB (UM) = 3202844kB [ 30.835204][ T554] 11305 total pagecache pages [ 30.839885][ T554] 0 pages in swap cache [ 30.844328][ T554] Free swap = 124996kB [ 30.848481][ T554] Total swap = 124996kB [ 30.852648][ T554] 2097051 pages RAM [ 30.856534][ T554] 0 pages HighMem/MovableOnly [ 30.861259][ T554] 351517 pages reserved [ 30.865411][ T554] 0 pages cma reserved [ 30.871654][ T554] Memory allocations: [ 30.875650][ T554] 0 B 0 init/main.c:1370 func:do_initcalls [ 30.882887][ T554] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 30.891125][ T554] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 30.898765][ T554] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 30.906734][ T554] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 30.915130][ T554] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 30.924832][ T554] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 30.933568][ T554] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 30.947489][ T554] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 30.956932][ T563] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 30.974791][ T554] 0 B 0 init/initramfs.c:101 func:find_link [ 30.998844][ T568] input: syz0 as /devices/virtual/input/input5 [ 31.290857][ T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.380676][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 31.440649][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 31.446762][ T49] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 31.455304][ T49] usb 2-1: config 0 has no interface number 0 [ 31.461410][ T49] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 31.471471][ T49] usb 2-1: config 0 interface 196 has no altsetting 0 [ 31.479632][ T49] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 31.488705][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.496728][ T49] usb 2-1: Product: syz [ 31.501090][ T49] usb 2-1: Manufacturer: syz [ 31.505682][ T49] usb 2-1: SerialNumber: syz [ 31.510933][ T49] usb 2-1: config 0 descriptor?? [ 31.516120][ T581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 31.541746][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.551943][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 31.560855][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.575145][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 31.584210][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.592213][ T10] usb 5-1: Product: syz [ 31.596368][ T10] usb 5-1: Manufacturer: syz [ 31.600971][ T10] usb 5-1: SerialNumber: syz [ 31.606185][ T10] usb 5-1: config 0 descriptor?? [ 31.612267][ T10] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 31.618711][ T10] usb 5-1: No valid video chain found. [ 31.812939][ T523] usb 5-1: USB disconnect, device number 6 [ 31.846804][ T590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.862199][ T590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 31.862618][ T592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.924547][ T49] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 31.940340][ T49] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 32.093681][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 32.093698][ T36] audit: type=1400 audit(1751220481.589:221): avc: denied { create } for pid=597 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 32.119703][ T36] audit: type=1400 audit(1751220481.589:222): avc: denied { connect } for pid=597 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 32.141960][ T36] audit: type=1400 audit(1751220481.589:223): avc: denied { name_connect } for pid=597 comm="syz.2.100" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.164372][ T36] audit: type=1326 audit(1751220481.639:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.1.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c9758e929 code=0x0 [ 32.187112][ T36] audit: type=1400 audit(1751220481.659:225): avc: denied { mount } for pid=597 comm="syz.2.100" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 32.263532][ T36] audit: type=1400 audit(1751220481.759:226): avc: denied { name_bind } for pid=602 comm="syz.2.101" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.285057][ T36] audit: type=1400 audit(1751220481.759:227): avc: denied { node_bind } for pid=602 comm="syz.2.101" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.590693][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 32.741742][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.752847][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.762609][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.775749][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.784908][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.793506][ T10] usb 5-1: config 0 descriptor?? [ 33.174875][ T36] audit: type=1326 audit(1751220482.669:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=610 comm="syz.2.104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34b4b8e929 code=0x0 [ 33.197539][ T36] audit: type=1400 audit(1751220482.669:229): avc: denied { associate } for pid=610 comm="syz.2.104" name="cpuset.effective_cpus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.220854][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.228287][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.235701][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.243118][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.250508][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.257910][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.265308][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.272715][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.280095][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.287613][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.295045][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.302459][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.309846][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.317255][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.324671][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.332316][ T10] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 33.341532][ T10] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 33.481038][ T10] usb 5-1: USB disconnect, device number 7 [ 34.020260][ T618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 34.020953][ T618] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.029985][ T618] rust_binder: Read failure Err(EFAULT) in pid:72 [ 34.039119][ T618] tmpfs: Unknown parameter 'nrwblocks' [ 34.046787][ T616] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 34.051073][ T616] rust_binder: Error while translating object. [ 34.062445][ T616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.068893][ T9] usb 2-1: USB disconnect, device number 3 [ 34.069122][ T616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 34.086981][ T36] audit: type=1400 audit(1751220483.579:230): avc: denied { ioctl } for pid=617 comm="syz.2.106" path="socket:[6486]" dev="sockfs" ino=6486 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.143153][ T625] rust_binder: Error while translating object. [ 34.143189][ T625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 34.149453][ T625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:28 [ 34.178903][ T635] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 34.198553][ T635] SELinux: failed to load policy [ 35.120654][ T473] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 35.132382][ T703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 35.271688][ T473] usb 3-1: config 1 interface 0 has no altsetting 0 [ 35.288598][ T473] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 35.297665][ T473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.305679][ T473] usb 3-1: Product: syz [ 35.309825][ T473] usb 3-1: Manufacturer: syz [ 35.314416][ T473] usb 3-1: SerialNumber: syz [ 35.450718][ T356] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 35.530538][ T673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.539092][ T673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.594154][ T473] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 35.600654][ T356] usb 2-1: Invalid ep0 maxpacket: 32 [ 35.609273][ T473] usb 3-1: USB disconnect, device number 7 [ 35.617485][ T473] usblp0: removed [ 35.740662][ T356] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 35.900669][ T356] usb 2-1: Invalid ep0 maxpacket: 32 [ 35.906064][ T356] usb usb2-port1: attempt power cycle [ 35.990697][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.110277][ T731] input: syz0 as /devices/virtual/input/input6 [ 36.141724][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.152927][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.164014][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.177206][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.186587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.195602][ T9] usb 4-1: config 0 descriptor?? [ 36.270676][ T356] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 36.301011][ T356] usb 2-1: Invalid ep0 maxpacket: 32 [ 36.397331][ T738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.397364][ T738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105 [ 36.433859][ T356] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 36.472381][ T356] usb 2-1: Invalid ep0 maxpacket: 32 [ 36.477845][ T356] usb usb2-port1: unable to enumerate USB device [ 36.609126][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.626605][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.634439][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.641918][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.649469][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.659715][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.667207][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.674777][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.682263][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.693664][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.701333][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.710688][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.718218][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.725925][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.733473][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 36.741135][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 36.755304][ T9] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 36.780662][ T473] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.859485][ T764] binder: Bad value for 'defcontext' [ 36.881561][ T9] usb 4-1: USB disconnect, device number 8 [ 36.929290][ T767] rust_binder: Write failure EINVAL in pid:60 [ 36.961743][ T473] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.981192][ T473] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 36.990311][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.999590][ T473] usb 3-1: config 0 descriptor?? [ 37.649386][ T780] tipc: Started in network mode [ 37.654567][ T780] tipc: Node identity 3ae15e683f67, cluster identity 4711 [ 37.661939][ T780] tipc: Enabled bearer , priority 0 [ 37.671120][ T780] tipc: Resetting bearer [ 37.690237][ T780] tipc: Disabling bearer [ 37.710408][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 37.710426][ T36] audit: type=1326 audit(1751220487.199:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.745439][ T36] audit: type=1326 audit(1751220487.199:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.770759][ T36] audit: type=1326 audit(1751220487.199:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.795232][ T36] audit: type=1326 audit(1751220487.199:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.821555][ T36] audit: type=1326 audit(1751220487.199:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.844905][ T782] binder: Unknown parameter '00000000000000000000' [ 37.845058][ T36] audit: type=1326 audit(1751220487.199:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.875038][ T36] audit: type=1326 audit(1751220487.199:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.900065][ T784] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.900209][ T36] audit: type=1326 audit(1751220487.199:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.936402][ T36] audit: type=1326 audit(1751220487.199:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 37.959719][ T36] audit: type=1326 audit(1751220487.199:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc6d8e929 code=0x7fc00000 [ 38.113610][ T796] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 38.122440][ T796] futex_wake_op: syz.3.163 tries to shift op by 144; fix this program [ 38.158898][ T800] rust_binder: Error in use_page_slow: ESRCH [ 38.158913][ T800] rust_binder: use_range failure ESRCH [ 38.170732][ T800] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 38.172003][ T800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.179907][ T800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91 [ 38.217363][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.217388][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.243957][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.243985][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.261347][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.261362][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.277914][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.284703][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.295316][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.302122][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.310328][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.323184][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.331898][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.339219][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.350875][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.357486][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.365892][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.372615][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.381248][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.387920][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.405281][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.412026][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.420069][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.426914][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.435862][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.442554][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.451515][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.464177][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.475117][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.480655][ T31] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 38.482173][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.497167][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.503795][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.512255][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.521852][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.530526][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.537614][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.546200][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.553015][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.561275][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.567762][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.576825][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.583517][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.593376][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.599886][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.608227][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.614956][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.623227][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.629770][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.638395][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.645216][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.650692][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 38.660257][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.665393][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.673832][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.680345][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.694216][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.701363][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.709603][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.716201][ T817] fuse: Unknown parameter 'dd0x0000000000000003' [ 38.731464][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.731537][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.738166][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.746626][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.753308][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.761923][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.771740][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.779941][ T800] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.786673][ T819] overlayfs: unescaped trailing colons in lowerdir mount option. [ 38.786945][ T800] rust_binder: Read failure Err(EFAULT) in pid:91 [ 38.810656][ T31] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 38.903171][ T823] binder: Unknown parameter 'defcontext01777777777777777777777' [ 38.980675][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 38.988304][ T31] usb usb5-port1: attempt power cycle [ 39.182331][ T835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 39.205797][ T835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 39.330696][ T31] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 39.380987][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 39.520697][ T31] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 39.523005][ T473] usbhid 3-1:0.0: can't add hid device: -71 [ 39.535445][ T473] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.546891][ T473] usb 3-1: USB disconnect, device number 8 [ 39.553139][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 39.559278][ T31] usb usb5-port1: unable to enumerate USB device [ 39.752640][ T847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 39.762478][ T847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.762509][ T847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 39.825458][ T861] fuse: Bad value for 'rootmode' [ 40.010733][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.160763][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 40.167036][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.177963][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.187840][ T31] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 40.196997][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.213194][ T31] usb 2-1: config 0 descriptor?? [ 40.220652][ T356] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 40.371653][ T356] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.382686][ T356] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 40.393338][ T356] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.399958][ T356] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 40.409014][ T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.417632][ T356] usb 3-1: config 0 descriptor?? [ 40.422937][ T867] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.631527][ T31] holtek 0003:1241:5015.0004: unknown main item tag 0x3 [ 40.640693][ T356] usbhid 3-1:0.0: can't add hid device: -71 [ 40.647268][ T356] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 40.655252][ T31] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 40.668119][ T356] usb 3-1: USB disconnect, device number 9 [ 40.673985][ T31] holtek 0003:1241:5015.0004: no inputs found [ 40.686862][ T882] rust_binder: Error while translating object. [ 40.686896][ T882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.693766][ T882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 40.832578][ T31] usb 2-1: USB disconnect, device number 8 [ 40.849076][ T888] /dev/rnullb0: Can't open blockdev [ 40.866749][ T891] rust_binder: Write failure EINVAL in pid:163 [ 40.866992][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 40.966378][ T899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'. [ 40.986169][ T899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 41.253849][ T944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 41.260655][ T523] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.420651][ T523] usb 4-1: Using ep0 maxpacket: 16 [ 41.431588][ T523] usb 4-1: config 0 has no interfaces? [ 41.438701][ T523] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.451171][ T523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.459273][ T523] usb 4-1: Product: syz [ 41.463737][ T523] usb 4-1: Manufacturer: syz [ 41.468343][ T523] usb 4-1: SerialNumber: syz [ 41.475794][ T523] usb 4-1: config 0 descriptor?? [ 41.620641][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 41.661875][ T1000] loop6: detected capacity change from 0 to 7 [ 41.668329][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.677514][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.685502][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.689503][ T905] Zero length message leads to an empty skb [ 41.694668][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.703135][ T523] usb 4-1: USB disconnect, device number 9 [ 41.708549][ T1000] loop6: unable to read partition table [ 41.720100][ T1000] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 41.729348][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.738602][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.746862][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.756053][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.764145][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.773326][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.781479][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.790648][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.798696][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.800803][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 41.807864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.814531][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 41.828959][ T31] usb 5-1: config 0 has no interface number 0 [ 41.835129][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 41.845063][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 41.854998][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 41.863088][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 41.872224][ T356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.880099][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.888301][ T31] usb 5-1: Product: syz [ 41.892567][ T31] usb 5-1: Manufacturer: syz [ 41.897235][ T31] usb 5-1: SerialNumber: syz [ 41.902720][ T31] usb 5-1: config 0 descriptor?? [ 41.907977][ T944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 41.915251][ T944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.030671][ T356] usb 2-1: device descriptor read/64, error -71 [ 42.123314][ T944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.130484][ T944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.248328][ T1015] input: syz0 as /devices/virtual/input/input7 [ 42.273566][ T356] usb 2-1: device descriptor read/64, error -71 [ 42.288998][ T1017] binder: Binderfs stats mode cannot be changed during a remount [ 42.372229][ T1025] rust_binder: Write failure EFAULT in pid:136 [ 42.386573][ T1027] binder: Unknown parameter 'defcontext01777777777777777777777' [ 42.520721][ T356] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.530126][ T1032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 42.539461][ T31] Error reading MAC address [ 42.544966][ T944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.552379][ T944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.564160][ T1041] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 42.650640][ T356] usb 2-1: device descriptor read/64, error -71 [ 42.760898][ T49] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.761308][ T944] rust_binder: Error while translating object. [ 42.768635][ T944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.774898][ T944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 42.787669][ T31] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 42.807618][ T31] usb 5-1: USB disconnect, device number 12 [ 42.890784][ T356] usb 2-1: device descriptor read/64, error -71 [ 42.910663][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 42.916854][ T49] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 42.925203][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.935372][ T49] usb 4-1: config 0 has no interface number 0 [ 42.942835][ T49] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 42.951903][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.959863][ T49] usb 4-1: Product: syz [ 42.964032][ T49] usb 4-1: Manufacturer: syz [ 42.968615][ T49] usb 4-1: SerialNumber: syz [ 42.973931][ T49] usb 4-1: config 0 descriptor?? [ 42.979702][ T49] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 42.986085][ T49] usb 4-1: No valid video chain found. [ 43.000760][ T356] usb usb2-port1: attempt power cycle [ 43.181892][ T49] usb 4-1: USB disconnect, device number 10 [ 43.212070][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 43.212085][ T36] audit: type=1400 audit(1751220492.708:322): avc: denied { mount } for pid=1050 comm="syz.2.239" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.240842][ T36] audit: type=1400 audit(1751220492.722:323): avc: denied { write } for pid=1050 comm="syz.2.239" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.304785][ T1055] usb usb8: usbfs: process 1055 (syz.4.240) did not claim interface 0 before use [ 43.335128][ T1059] overlayfs: workdir and upperdir must be separate subtrees [ 43.340701][ T356] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.361912][ T356] usb 2-1: device descriptor read/8, error -71 [ 43.437957][ T36] audit: type=1400 audit(1751220492.932:324): avc: denied { read } for pid=1062 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.491562][ T356] usb 2-1: device descriptor read/8, error -71 [ 43.703678][ T36] audit: type=1400 audit(1751220493.202:325): avc: denied { setopt } for pid=1067 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.730832][ T356] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 43.755006][ T1076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.755039][ T1076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:153 [ 43.765510][ T356] usb 2-1: device descriptor read/8, error -71 [ 43.795014][ T36] audit: type=1400 audit(1751220493.292:326): avc: denied { bind } for pid=1082 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.836263][ T36] audit: type=1326 audit(1751220493.332:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1089 comm="syz.2.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34b4b8e929 code=0x0 [ 43.839273][ T1087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.859251][ T1087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:164 [ 43.868728][ T1087] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.877887][ T1087] rust_binder: Read failure Err(EFAULT) in pid:164 [ 43.911705][ T356] usb 2-1: device descriptor read/8, error -71 [ 43.962429][ T1093] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 43.970545][ T1093] rust_binder: Error while translating object. [ 43.970569][ T1093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.976973][ T1093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 44.030763][ T356] usb usb2-port1: unable to enumerate USB device [ 44.677473][ T1103] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 44.902402][ T1116] binder: Bad value for 'max' [ 44.916917][ T36] audit: type=1400 audit(1751220494.412:328): avc: denied { bind } for pid=1117 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.936247][ T36] audit: type=1400 audit(1751220494.412:329): avc: denied { name_bind } for pid=1117 comm="syz.2.263" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 44.957368][ T36] audit: type=1400 audit(1751220494.412:330): avc: denied { node_bind } for pid=1117 comm="syz.2.263" saddr=::ffff:127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.020683][ T473] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 45.171764][ T473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.182883][ T473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.192747][ T473] usb 2-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 45.201894][ T473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.210428][ T473] usb 2-1: config 0 descriptor?? [ 45.618908][ T473] wacom 0003:056A:00B9.0005: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 45.629039][ T473] wacom 0003:056A:00B9.0005: hidraw0: USB HID va8.25 Device [HID 056a:00b9] on usb-dummy_hcd.1-1/input0 [ 45.642169][ T473] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B9.0005/input/input8 [ 45.822620][ T36] audit: type=1400 audit(1751220495.322:331): avc: denied { mounton } for pid=1106 comm="syz.1.259" path="/60/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 45.847520][ T49] usb 2-1: USB disconnect, device number 13 [ 45.990714][ T356] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 46.141893][ T356] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.152926][ T356] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 46.163670][ T356] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.170306][ T356] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 46.179350][ T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.187911][ T356] usb 3-1: config 0 descriptor?? [ 46.193189][ T1122] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 46.361873][ T1129] tipc: Started in network mode [ 46.366862][ T1129] tipc: Node identity 060d6ad3940a, cluster identity 4711 [ 46.374286][ T1129] tipc: Enabled bearer , priority 0 [ 46.405386][ T1130] tipc: Disabling bearer [ 46.602727][ T356] logitech 0003:046D:C286.0006: unknown main item tag 0x6 [ 46.610563][ T356] logitech 0003:046D:C286.0006: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 46.622159][ T356] logitech 0003:046D:C286.0006: no inputs found [ 46.628669][ T473] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.760812][ T473] usb 2-1: device descriptor read/64, error -71 [ 46.804165][ T49] usb 3-1: USB disconnect, device number 10 [ 47.000731][ T473] usb 2-1: device descriptor read/64, error -71 [ 47.240678][ T473] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.315693][ T1147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:301 [ 47.325626][ T1153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.334871][ T1153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 47.370654][ T473] usb 2-1: device descriptor read/64, error -71 [ 47.524763][ T1177] rust_binder: validate_parent_fixup: new_min_offset=81, sg_entry.length=0 [ 47.524787][ T1177] rust_binder: Error while translating object. [ 47.524800][ T1178] rust_binder: Failed to allocate buffer. len:5240, is_oneway:false [ 47.534042][ T1177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.549084][ T1177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 47.558771][ T1178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 47.568234][ T1178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 47.582782][ T1180] rust_binder: Error while translating object. [ 47.596789][ T1180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.603787][ T1180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 47.614283][ T473] usb 2-1: device descriptor read/64, error -71 [ 47.644811][ T1188] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 47.730769][ T473] usb usb2-port1: attempt power cycle [ 48.100670][ T473] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.130053][ T473] usb 2-1: device descriptor read/8, error -71 [ 48.261751][ T473] usb 2-1: device descriptor read/8, error -71 [ 48.270886][ T523] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.430649][ T523] usb 4-1: Using ep0 maxpacket: 32 [ 48.437775][ T523] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 48.446849][ T523] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.457685][ T523] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.468396][ T523] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.480825][ T523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.499283][ T523] usb 4-1: Product: І [ 48.505808][ T523] usb 4-1: Manufacturer: 䈔롘༁﹘嘩䩈鳮菇៬ẜ✼ﳶฺ彎汥ܦ婚늲䘁䥗믛淟㽀拖贑呎鴆ᱰ튔ᇯ뤌뾱췻孙틦Е⨋驺콐ᤈᗀ썉諼吏閉䥪Ꭷ쿜䳠ﰐ [ 48.525638][ T473] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 48.533692][ T523] usb 4-1: SerialNumber: 慯뇢㱈퉷되掂棑늰욉䭓賃䮛⹅瑘㸴묦ഝ櫊ꜻ墧慅뙲圵逞換ㅬ펠愁⼝떲 [ 48.561759][ T473] usb 2-1: device descriptor read/8, error -71 [ 48.713172][ T473] usb 2-1: device descriptor read/8, error -71 [ 48.756166][ T523] usb 4-1: 0:2 : does not exist [ 48.768893][ T523] usb 4-1: USB disconnect, device number 11 [ 48.777385][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.821418][ T473] usb usb2-port1: unable to enumerate USB device [ 49.190691][ T64] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.340668][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 49.347785][ T64] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 49.359022][ T64] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 49.368988][ T64] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 49.380269][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.389411][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.397806][ T64] usb 4-1: Product: syz [ 49.402222][ T64] usb 4-1: Manufacturer: 绂ᛝᑋ祪絟ﺻ▍ཱུᑃ䉃 [ 49.409710][ T64] usb 4-1: SerialNumber: syz [ 49.745228][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 49.745245][ T36] audit: type=1400 audit(2000000000.289:338): avc: denied { wake_alarm } for pid=1224 comm="syz.2.296" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.797220][ T1227] binder: Unknown parameter 'y' [ 49.817592][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.826155][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.835131][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.843791][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.853019][ T64] cdc_ncm 4-1:1.0: bind() failure [ 49.858787][ T64] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 49.865818][ T64] cdc_ncm 4-1:1.1: bind() failure [ 49.872012][ T64] usb 4-1: USB disconnect, device number 12 [ 49.936719][ T1231] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.298' sets config #236 [ 49.946622][ T1231] input: syz0 as /devices/virtual/input/input11 [ 49.952999][ T1231] input: failed to attach handler leds to device input11, error: -6 [ 50.369344][ T36] audit: type=1400 audit(2000000000.909:339): avc: denied { ioctl } for pid=1251 comm="syz.3.306" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.450683][ T64] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 50.509526][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 50.581885][ T36] audit: type=1400 audit(2000000001.129:340): avc: denied { unmount } for pid=1271 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.611740][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.623101][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.624632][ T1276] overlay: ./file0 is not a directory [ 50.633193][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.651450][ T64] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.661074][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.670041][ T64] usb 3-1: config 0 descriptor?? [ 50.748863][ T1289] overlayfs: failed to clone upperpath [ 50.754869][ T1289] overlayfs: failed to clone upperpath [ 50.760885][ T1289] overlayfs: failed to clone upperpath [ 50.766675][ T1289] overlayfs: failed to clone upperpath [ 50.772633][ T1289] overlayfs: failed to clone upperpath [ 50.778474][ T1289] overlayfs: failed to clone upperpath [ 50.784473][ T1289] overlayfs: failed to clone upperpath [ 50.790232][ T1289] overlayfs: failed to clone upperpath [ 50.796622][ T1289] overlayfs: failed to clone upperpath [ 50.802447][ T1289] overlayfs: failed to clone upperpath [ 50.808201][ T1289] overlayfs: failed to clone upperpath [ 50.814105][ T1289] overlayfs: failed to clone upperpath [ 50.819932][ T1289] overlayfs: failed to clone upperpath [ 50.826185][ T1289] overlayfs: failed to clone upperpath [ 50.832011][ T1289] overlayfs: failed to clone upperpath [ 50.837824][ T1289] overlayfs: failed to clone upperpath [ 50.843626][ T1289] overlayfs: failed to clone upperpath [ 50.849525][ T1289] overlayfs: failed to clone upperpath [ 50.855378][ T1289] overlayfs: failed to clone upperpath [ 50.861247][ T1289] overlayfs: failed to clone upperpath [ 50.867070][ T1289] overlayfs: failed to clone upperpath [ 50.873029][ T1289] overlayfs: failed to clone upperpath [ 50.878888][ T1289] overlayfs: failed to clone upperpath [ 50.880620][ T64] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 50.892217][ T1289] overlayfs: failed to clone upperpath [ 50.893208][ T64] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 50.906175][ T1289] overlayfs: failed to clone upperpath [ 50.906941][ T64] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.924442][ T1289] overlayfs: failed to clone upperpath [ 50.931837][ T1289] overlayfs: failed to clone upperpath [ 50.938449][ T1289] overlayfs: failed to clone upperpath [ 50.945437][ T64] usb 3-1: USB disconnect, device number 11 [ 50.951768][ T1289] overlayfs: failed to clone upperpath [ 50.958152][ T1289] overlayfs: failed to clone upperpath [ 50.965628][ T1289] overlayfs: failed to clone upperpath [ 51.061856][ T36] audit: type=1400 audit(2000000001.609:341): avc: denied { search } for pid=1312 comm="syz.2.325" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.067179][ T1314] tipc: Failed to remove unknown binding: 66,1,1/0:1473587891/1473587893 [ 51.084037][ T36] audit: type=1400 audit(2000000001.609:342): avc: denied { read } for pid=1312 comm="syz.2.325" name="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.114004][ T36] audit: type=1400 audit(2000000001.609:343): avc: denied { open } for pid=1312 comm="syz.2.325" path="/" dev="configfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.150053][ T36] audit: type=1400 audit(2000000001.689:344): avc: denied { remount } for pid=1315 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.155432][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.169839][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.176350][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.182893][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.189340][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.195841][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.202323][ T1318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.680729][ T473] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 51.841702][ T473] usb 2-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.854739][ T473] usb 2-1: config 1 interface 0 has no altsetting 0 [ 51.862743][ T473] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.40 [ 51.871907][ T473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.879884][ T473] usb 2-1: Product: ҷᶅ腖덯촯젠웷₅㪫⴯垂淇︷ᑏⷼ祄戏䁕辣褻囒ꨴ盚➝壟⍌켈ꋖ铸ꆤ㐦ᡯꇂඞ꠿넳螳Ħලḗ脐潲♘옖苴䱗䳶ᬓ촐즜ﰔꌋ๣䢱粜黦抙ങ㠽✅ឧ־禾ꁃ⪼荭﹍ꈒ읚ᬒ叒좗廖ꔄ뉼圢ꓺ껎졯㟣볉㎜嶒됒零둎㿼甴ㄶ▾ [ 51.909052][ T473] usb 2-1: Manufacturer: ѕ [ 51.913586][ T473] usb 2-1: SerialNumber: 휯뮦㏡졙﹅멭쟎璑蚈㶝ﵟ噲્ [ 52.326838][ T473] usbhid 2-1:1.0: can't add hid device: -71 [ 52.333078][ T473] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 52.342057][ T473] usb 2-1: USB disconnect, device number 18 [ 52.446230][ T36] audit: type=1400 audit(2000000002.989:345): avc: denied { mount } for pid=1340 comm="syz.2.334" name="/" dev="pstore" ino=2663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 52.848371][ T1356] usb usb8: usbfs: process 1356 (syz.1.338) did not claim interface 0 before use [ 52.857826][ T1356] rust_binder: Failed to allocate buffer. len:4294970552, is_oneway:true [ 52.857846][ T1356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 52.866366][ T1356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:196 [ 52.884693][ T1358] rust_binder: Write failure EINVAL in pid:198 [ 53.385445][ T36] audit: type=1400 audit(2000000003.929:346): avc: denied { read } for pid=1363 comm="syz.2.341" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.421830][ T36] audit: type=1400 audit(2000000003.929:347): avc: denied { open } for pid=1363 comm="syz.2.341" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.745744][ T1371] can: request_module (can-proto-6) failed. [ 53.917609][ T1383] kvm: pic: non byte write [ 54.080694][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 54.230690][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 54.236916][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.247844][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.257697][ T31] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 54.266765][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.275301][ T31] usb 2-1: config 0 descriptor?? [ 54.301297][ T1398] tipc: Enabled bearer , priority 0 [ 54.309348][ T1398] tipc: Disabling bearer [ 54.407576][ T1403] rust_binder: Write failure EFAULT in pid:117 [ 54.475949][ T1412] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 54.683917][ T31] gt683r_led 0003:1770:FF00.0008: item fetching failed at offset 1/5 [ 54.700888][ T31] gt683r_led 0003:1770:FF00.0008: hid parsing failed [ 54.709824][ T31] gt683r_led 0003:1770:FF00.0008: probe with driver gt683r_led failed with error -22 [ 54.817423][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 54.817439][ T36] audit: type=1400 audit(2000000005.359:353): avc: denied { write } for pid=1430 comm="syz.2.360" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.817520][ T1432] random: crng reseeded on system resumption [ 54.823623][ T36] audit: type=1400 audit(2000000005.359:354): avc: denied { open } for pid=1430 comm="syz.2.360" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.892055][ T1436] tmpfs: Invalid uid '0x00000000ffffffff' [ 54.896469][ T36] audit: type=1400 audit(2000000005.439:355): avc: denied { create } for pid=1435 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.921953][ T36] audit: type=1400 audit(2000000005.439:356): avc: denied { getopt } for pid=1435 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.927050][ T1437] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 54.927050][ T1437] null pointer dereference occurred [ 54.943843][ T36] audit: type=1400 audit(2000000005.499:357): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.955310][ T1437] ------------[ cut here ]------------ [ 54.982282][ T1437] kernel BUG at rust/helpers/bug.c:7! [ 54.988029][ T36] audit: type=1400 audit(2000000005.499:358): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.988190][ T1436] syz.2.361 (1436): /proc/1435/oom_adj is deprecated, please use /proc/1435/oom_score_adj instead. [ 55.009442][ T36] audit: type=1400 audit(2000000005.499:359): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.020663][ T1437] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 55.041516][ T36] audit: type=1400 audit(2000000005.499:360): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.048215][ T1437] CPU: 0 UID: 0 PID: 1437 Comm: syz.2.361 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 55.068878][ T36] audit: type=1400 audit(2000000005.499:361): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.082104][ T1437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.082118][ T1437] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 55.082143][ T1437] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c6 ba d7 f9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 8c 7e 9e 75 90 90 90 90 90 90 90 90 90 [ 55.082159][ T1437] RSP: 0018:ffffc900062771b0 EFLAGS: 00010246 [ 55.102914][ T36] audit: type=1400 audit(2000000005.499:362): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.112825][ T1437] [ 55.112833][ T1437] RAX: 000000000000005a RBX: 1ffff92000c4ee38 RCX: 949943b26e98e900 [ 55.112848][ T1437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 55.119610][ T1436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.137695][ T1437] RBP: ffffc900062771b0 R08: 0000000000000003 R09: 0000000000000004 [ 55.137716][ T1437] R10: dffffc0000000000 R11: fffff52000c4ed9c R12: 0000000000000000 [ 55.137728][ T1437] R13: dffffc0000000000 R14: ffffc900062771e0 R15: ffffc90006277210 [ 55.137740][ T1437] FS: 00007f34b49ca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.137757][ T1437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.137769][ T1437] CR2: 0000200000006000 CR3: 000000010f778000 CR4: 00000000003526b0 [ 55.137785][ T1437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.143924][ T1436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:421 [ 55.166618][ T1437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.166636][ T1437] Call Trace: [ 55.166642][ T1437] [ 55.166650][ T1437] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 55.169358][ T1436] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.177017][ T1437] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 55.177049][ T1437] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 55.185734][ T1436] rust_binder: Read failure Err(EFAULT) in pid:421 [ 55.194430][ T1437] ? p9pdu_vwritef+0x2720/0x2720 [ 55.194462][ T1437] ? radix_tree_node_alloc+0x1af/0x400 [ 55.194480][ T1437] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 55.203145][ T1438] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.210652][ T1437] ? __asan_memcpy+0x5a/0x80 [ 55.210681][ T1437] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 55.218910][ T1438] rust_binder: Read failure Err(EFAULT) in pid:421 [ 55.227546][ T1437] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 55.371438][ T1437] ? p9pdu_writef+0xdb/0x130 [ 55.376026][ T1437] ? p9pdu_vwritef+0x2720/0x2720 [ 55.380970][ T1437] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 55.390102][ T1437] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 55.399384][ T1437] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 55.407187][ T1437] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 55.414912][ T1437] ? p9_client_prepare_req+0x732/0xa10 [ 55.420388][ T1437] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 55.428715][ T1437] ? __kasan_check_write+0x18/0x20 [ 55.434076][ T1437] ? _raw_spin_lock+0x8c/0x120 [ 55.438831][ T1437] ? __cfi_input_proc_devices_poll+0x10/0x10 [ 55.444795][ T1437] ? __kasan_check_write+0x18/0x20 [ 55.449904][ T1437] ? proc_reg_poll+0x22d/0x2c0 [ 55.454769][ T1437] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 55.463022][ T1437] p9_fd_request+0x440/0x500 [ 55.467641][ T1437] p9_client_rpc+0x2f9/0xb40 [ 55.472226][ T1437] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 55.480572][ T1437] ? __cfi_p9_pollwait+0x10/0x10 [ 55.485509][ T1437] ? p9_fid_create+0x3d0/0x3d0 [ 55.490298][ T1437] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 55.498556][ T1437] ? __kasan_check_write+0x18/0x20 [ 55.503684][ T1437] ? p9_conn_create+0x4c9/0x570 [ 55.508556][ T1437] ? p9_fd_create+0x2f3/0x4c0 [ 55.513394][ T1437] p9_client_create+0x96a/0x1190 [ 55.518336][ T1437] ? __cfi_p9_client_create+0x10/0x10 [ 55.523705][ T1437] ? kasan_save_alloc_info+0x40/0x50 [ 55.529084][ T1437] ? __kasan_kmalloc+0x96/0xb0 [ 55.533944][ T1437] ? kstrdup+0x7b/0x140 [ 55.538142][ T1437] ? __kasan_check_write+0x18/0x20 [ 55.543314][ T1437] v9fs_session_init+0x1e1/0x1820 [ 55.548377][ T1437] ? __cfi_v9fs_session_init+0x10/0x10 [ 55.553940][ T1437] ? kasan_save_alloc_info+0x40/0x50 [ 55.559231][ T1437] ? __kasan_kmalloc+0x96/0xb0 [ 55.563989][ T1437] ? v9fs_mount+0xbd/0xa00 [ 55.568395][ T1437] v9fs_mount+0xd7/0xa00 [ 55.572629][ T1437] ? __cfi_v9fs_mount+0x10/0x10 [ 55.577468][ T1437] ? selinux_capable+0x38/0x50 [ 55.582383][ T1437] legacy_get_tree+0x106/0x1b0 [ 55.587140][ T1437] ? __cfi_v9fs_mount+0x10/0x10 [ 55.591991][ T1437] vfs_get_tree+0x9e/0x290 [ 55.596406][ T1437] do_new_mount+0x251/0xb40 [ 55.600946][ T1437] ? security_capable+0xcf/0xf0 [ 55.605904][ T1437] path_mount+0x688/0x1050 [ 55.610420][ T1437] ? putname+0x113/0x150 [ 55.614754][ T1437] __se_sys_mount+0x2bd/0x480 [ 55.619439][ T1437] ? __x64_sys_mount+0xf0/0xf0 [ 55.624280][ T1437] ? __kasan_check_write+0x18/0x20 [ 55.629473][ T1437] ? fpregs_restore_userregs+0x11d/0x260 [ 55.635110][ T1437] __x64_sys_mount+0xc3/0xf0 [ 55.639691][ T1437] x64_sys_call+0x2021/0x2ee0 [ 55.644367][ T1437] do_syscall_64+0x58/0xf0 [ 55.648772][ T1437] ? clear_bhb_loop+0x50/0xa0 [ 55.653438][ T1437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.659319][ T1437] RIP: 0033:0x7f34b4b8e929 [ 55.663723][ T1437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.683510][ T1437] RSP: 002b:00007f34b49ca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.692187][ T1437] RAX: ffffffffffffffda RBX: 00007f34b4db6080 RCX: 00007f34b4b8e929 [ 55.700246][ T1437] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 55.708213][ T1437] RBP: 00007f34b4c10b39 R08: 0000200000000540 R09: 0000000000000000 [ 55.716356][ T1437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.724323][ T1437] R13: 0000000000000000 R14: 00007f34b4db6080 R15: 00007ffca0521808 [ 55.732378][ T1437] [ 55.735387][ T1437] Modules linked in: [ 55.740163][ T1437] ---[ end trace 0000000000000000 ]--- [ 55.746522][ T1437] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 55.751869][ T1437] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c6 ba d7 f9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 8c 7e 9e 75 90 90 90 90 90 90 90 90 90 [ 55.771545][ T1437] RSP: 0018:ffffc900062771b0 EFLAGS: 00010246 [ 55.777740][ T1437] RAX: 000000000000005a RBX: 1ffff92000c4ee38 RCX: 949943b26e98e900 [ 55.785875][ T1437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 55.795816][ T1437] RBP: ffffc900062771b0 R08: 0000000000000003 R09: 0000000000000004 [ 55.803916][ T1437] R10: dffffc0000000000 R11: fffff52000c4ed9c R12: 0000000000000000 [ 55.812001][ T1437] R13: dffffc0000000000 R14: ffffc900062771e0 R15: ffffc90006277210 [ 55.820181][ T1437] FS: 00007f34b49ca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.829171][ T1437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.835825][ T1437] CR2: 00002000000031c0 CR3: 000000010f778000 CR4: 00000000003526b0 [ 55.843848][ T1437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.852448][ T1437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.860571][ T1437] Kernel panic - not syncing: Fatal exception [ 55.866976][ T1437] Kernel Offset: disabled [ 55.871294][ T1437] Rebooting in 86400 seconds..