last executing test programs: 3.512424568s ago: executing program 1 (id=694): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r3, 0x5000aea5, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000001c0)=0x401) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3a5c3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x185901, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x68082, 0x0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x33) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x40}}, 0x30) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000100)={0x3, 0x2}) sendto$inet(r7, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) fsopen(&(0x7f0000000080)='exfat\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = dup2(r10, r9) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5f0adc0308e3ef659787d0489cf1b2965169fccccd319634be2722fd699c8", 0x49}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8ae117154b30ab1c7fae42a9d398ee41d0f486ad54dc3832847d201f9a55131f9f76f2e00cf1105b10a47921f04087cb12b3d49446bcc2ec3564a6376c10f73cc539fbb8a0dd111d0c0f6ed38796250527a6e59c960b5b1219eb41a8248a4d56a5f4e20f248aa6c383ad528e822413ceeb4a5e5c3e8268662e94b56b9fd93a4175c7d9fdce4609faa21aa9f63caf1130269b9445386e4f473a0e6feb415ccf9919147f8c9f16c8be580a2363a0f66fcfac0e4311c8db2cf1f3987e1d02dfb97b", 0xe1}, {&(0x7f00000011c0)="31e9729688285f4018ce30dc2d881a1cbeec32df88222624f7e69b5fa07a268bb7e9f55d14f43e3025bdfa4272db1829b42ea3bc327fbb265f01ac577f41c9861788f465d48c5d7b5d5a0fdcfaf45f62b3fb982419975bc83040349348d28b7acd1a2409baf372d8e38f8ae7dd5facac8fb12ce4f91a86457b919209c5e72be67b65d9e0199c1ed976fd1bcfc5be7e62cc93b702095f9f8ac8682f7b08656a743268698eb8343e38ffa82991918635925ffe248f48a5d16b668879d8849d0500c01790c9bd0cbdcd930d37ad8da2a7d18ee6eab68e99c13e06df4f0fd1d7b192f705395d09021954d688f8079b8fb0d9fe", 0xf1}], 0x3}, 0x88d4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4) 3.257752751s ago: executing program 1 (id=706): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 3.251574881s ago: executing program 1 (id=707): getrusage(0x1, &(0x7f0000000880)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2040) 3.188490162s ago: executing program 1 (id=708): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000040, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000800000000000000030e6a58b9732d3cd0d681c0607f0da4e3eb246dd7dd03571eb533d068853427b2731ae251a58f45f27c851efed17930a63729e06c7bbd9bf37f1929c3b08cb", @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000002100), 0x4000, &(0x7f0000000340)=ANY=[@ANYBLOB="000000001682eaafe0c19ada77aa64b99db49f52f97343def4d9cfd33b466ccce48d45ab3582f7d40d1d018d7f93f568271413ac0d70015fe21cee5f1515c81a933a7ff36539dc9ee92722f09ce6adfa5781fdc3bc12e8881cc7860a02f4ea4dd99101e1d8af2b49bc91151d9ac8985aa193b44b3b64c8ecc0f3a805085fff18f0d0f8a335d867a69feaace3affbb916181a023643b7c2bcc8cc63c13760924c7a31bab469ad9577a400", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,fsmagic=0x000000000000d2ce,\x00']) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TUNGETSNDBUF(r2, 0x400454dc, &(0x7f0000001700)) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x2, 0x18, {0x1}}], 0x18}) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r12, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 2.259371026s ago: executing program 0 (id=726): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5057, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x93, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xd000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xdddd1000, 0x0, 0x0, 0x0, 0x6d, 0x7}, {0x5002, 0xd000, 0x0, 0x6, 0x4, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100004, 0x0, 0xf}, {0x0, 0xffff1000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x3000, 0xeeee8000, 0x0, 0xfe, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9}, {0x100000, 0x0, 0x9, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x6000}, {0x1, 0xfffe}, 0x20040021, 0x0, 0x4000, 0x0, 0xfffffffffffffffc, 0x0, 0xeeef0000, [0x0, 0x0, 0x0, 0x3]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.257488146s ago: executing program 1 (id=728): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002ad001"], 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.731890704s ago: executing program 1 (id=742): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x200, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000001400)=0xe) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x480c1) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 1.055526494s ago: executing program 3 (id=753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='8-N:2/N'], 0x6a) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x40010, r0, 0x73cbf000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfe, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x800, 0xa}, 0x6e6bb7}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@empty, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r4, 0x0, 0x0, 0x80800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0xfffffffffffffffc, &(0x7f0000000280)={0x30, 0x30, 0x30}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/49, 0x31, 0x2, 0x17}, @fda={0x66646185, 0x0, 0x2, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 1.030526625s ago: executing program 3 (id=754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private=0x2000000, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) 1.013579294s ago: executing program 3 (id=755): r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000000a01"]) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/66, 0x42}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd31, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 951.987016ms ago: executing program 3 (id=756): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x4, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108) 908.522487ms ago: executing program 3 (id=758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = dup3(r1, r2, 0x80000) read$usbmon(r3, &(0x7f0000000600)=""/4096, 0x1000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) io_setup(0x0, &(0x7f0000000000)=0x0) r6 = eventfd(0x5) io_cancel(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f0000000040)="f96e85e41e83eacb5d", 0x9, 0x4, 0x0, 0x2, r6}, &(0x7f0000000140)) 302.537015ms ago: executing program 2 (id=766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4) r6 = epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001640)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100)={0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x9, 0x7, 0x40, 0x7}, {0x1, 0x6, 0x2, 0x1}, {0x0, 0x7, 0x1, 0x3}, {0x357b, 0x8, 0x1, 0x6}, {0x86, 0xc, 0x1, 0xffff}, {0x7, 0x80, 0xec, 0x27bb1902}]}) socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b86090a38966efbafc0c66b80000000066ef2e660ffc7300baf80c66b8d2fabe8d66efbafc0cb80000efe7000f1bd3640f6e0e00002ef30fc7740066b8009000000f23d80f21f86635c00000c00f23f80f01c8baf80c66b8e7fd818a66efbafc0cec", 0x66}], 0x1, 0x78, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000001680)={{0x0, 0x0, 0x80, {0xeeee0000, 0xdddd0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000400)="c74424005c8d0000c7442402ce5caa10c7442406000000000f011c24f30fc7720064360f01c466b827010f00d03ef0f71b0fc72f0f1bc70f82b6000000b9800000c00f3235010000000f3065660f65d1", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 282.915146ms ago: executing program 2 (id=767): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4b49, 0x2000000c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r5, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 152.755637ms ago: executing program 2 (id=768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x80000000086) r4 = epoll_create1(0x80000) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "2d185423bfe87441"}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x50}}, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="a238b5813002c4424612190773cb53dd1385d5ec33b482a9e587dadf00197ae8800dcb622995d40c614bb40f682ee5a82e55f606d7bb8e45f0aebdb5c849ec9551aba940bcda2e308781a017b5bb2e8d8510b82c620742a823bc15c1a9754b13395e128a4d1bd85d45511df674f93004bf3ae5ce5bf1789be6", 0x79}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x93}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x78, 0x0, 0xd, [0x3, 0x8a, 0x401, 0x67d, 0x6, 0xfffffffb, 0xfc6c, 0x8, 0xea4]}, @ssrr={0x89, 0xf, 0x15, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @lsrr={0x83, 0x1b, 0x9b, [@rand_addr=0x64010101, @local, @remote, @multicast1, @loopback, @private=0xa010102]}, @rr={0x7, 0x1b, 0xa4, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @rr={0x7, 0x7, 0x5b, [@broadcast]}, @timestamp={0x44, 0x20, 0x2c, 0x0, 0x7, [0x1, 0x1, 0x5, 0x1, 0x3, 0x0, 0x8]}]}}}], 0x128}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000480)={r2, 0x6, 0x3, r2}) write$cgroup_int(r11, &(0x7f00000003c0)=0x1000, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 139.176368ms ago: executing program 2 (id=769): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x8008) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) mmap(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x100000a, 0x4010, r7, 0x98698000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x8008) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async) mmap(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x100000a, 0x4010, r7, 0x98698000) (async) 88.608378ms ago: executing program 0 (id=770): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xfff7, 0x1}, 0x6) write(r1, &(0x7f0000000140)="24000000010006", 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7, 0x0, 0x3ff, {{0x5, 0x4, 0x3, 0x3e, 0x14, 0x67, 0x0, 0x9f, 0x4, 0x0, @rand_addr=0x24010101, @local}}}}) accept$inet(r2, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4642, 0x0) 88.005498ms ago: executing program 0 (id=771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) listen(r1, 0x5) (async, rerun: 64) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f0000d9f000/0x3000)=nil, 0x3000) (async) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r2, 0x1, 0xf, 0x0, &(0x7f0000000040)) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) munlockall() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_usb_connect(0x0, 0x45, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109023300020000000009049700010dd5ce0008240201002000000905000000000000000705a3f6d2fb"], 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0x483, 0x0, 0x3}, {0x40000098, 0x0, 0xfffffffffffffffc}, {0x3c2, 0x0, 0x48d}, {0xb47, 0x0, 0x401}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 87.814749ms ago: executing program 2 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000080, 0x0, 0xd00}]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x402, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 83.771779ms ago: executing program 0 (id=773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFLAGS(r1, 0x400452c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 66.477319ms ago: executing program 0 (id=774): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x81, 0xc2800) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 599.55µs ago: executing program 0 (id=775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r5}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x5) fchdir(r6) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x9, &(0x7f0000000280)=[{0x81, 0x9, 0x6, 0x9}, {0x8000, 0xd9, 0x9, 0x9}, {0xb, 0xc, 0x2, 0x1}, {0x0, 0x9, 0x1, 0x9}, {0xe, 0xf, 0x8, 0xfffffffa}, {0x3, 0xf, 0x4, 0x5}, {0x28af, 0x4, 0x1e}, {0x4, 0x9, 0x5, 0x7fffffff}, {0x8, 0x0, 0x6, 0x1}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r9, 0x4, 0x460c0) socket$inet6(0xa, 0x80002, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r11 = dup(r10) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) readv(r9, &(0x7f0000000700)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {0x0}], 0x3) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) write$vga_arbiter(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a303a319c3a31352e316300"], 0x16) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 339.59µs ago: executing program 2 (id=776): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xff, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x80000000086) r4 = epoll_create1(0x80000) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "2d185423bfe87441"}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x50}}, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="a238b5813002c4424612190773cb53dd1385d5ec33b482a9e587dadf00197ae8800dcb622995d40c614bb40f682ee5a82e55f606d7bb8e45f0aebdb5c849ec9551aba940bcda2e308781a017b5bb2e8d8510b82c620742a823bc15c1a9754b13395e128a4d1bd85d45511df674f93004bf3ae5ce5bf1789be6", 0x79}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x93}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x78, 0x0, 0xd, [0x3, 0x8a, 0x401, 0x67d, 0x6, 0xfffffffb, 0xfc6c, 0x8, 0xea4]}, @ssrr={0x89, 0xf, 0x15, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @lsrr={0x83, 0x1b, 0x9b, [@rand_addr=0x64010101, @local, @remote, @multicast1, @loopback, @private=0xa010102]}, @rr={0x7, 0x1b, 0xa4, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @rr={0x7, 0x7, 0x5b, [@broadcast]}, @timestamp={0x44, 0x20, 0x2c, 0x0, 0x7, [0x1, 0x1, 0x5, 0x1, 0x3, 0x0, 0x8]}]}}}], 0x128}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000480)={r2, 0x6, 0x3, r2}) write$cgroup_int(r11, &(0x7f00000003c0)=0x1000, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 25.978228][ T36] audit: type=1400 audit(1750460323.440:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.979686][ T281] cgroup: Unknown subsys name 'net' [ 26.000993][ T36] audit: type=1400 audit(1750460323.440:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.028309][ T36] audit: type=1400 audit(1750460323.470:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.028561][ T281] cgroup: Unknown subsys name 'devices' [ 26.228143][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.233875][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.409676][ T36] audit: type=1400 audit(1750460323.870:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.432958][ T36] audit: type=1400 audit(1750460323.870:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.443877][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.457927][ T36] audit: type=1400 audit(1750460323.870:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.489727][ T36] audit: type=1400 audit(1750460323.930:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.515254][ T36] audit: type=1400 audit(1750460323.930:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.546331][ T36] audit: type=1400 audit(1750460324.010:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.571920][ T36] audit: type=1400 audit(1750460324.010:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.571980][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.363949][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.371180][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.378305][ T288] bridge_slave_0: entered allmulticast mode [ 27.384669][ T288] bridge_slave_0: entered promiscuous mode [ 27.395960][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.403022][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.410120][ T288] bridge_slave_1: entered allmulticast mode [ 27.416433][ T288] bridge_slave_1: entered promiscuous mode [ 27.520677][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.527788][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.534883][ T291] bridge_slave_0: entered allmulticast mode [ 27.541478][ T291] bridge_slave_0: entered promiscuous mode [ 27.556744][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.563827][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.570998][ T289] bridge_slave_0: entered allmulticast mode [ 27.577424][ T289] bridge_slave_0: entered promiscuous mode [ 27.583741][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.590825][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.597926][ T291] bridge_slave_1: entered allmulticast mode [ 27.604249][ T291] bridge_slave_1: entered promiscuous mode [ 27.616541][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.623606][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.630744][ T289] bridge_slave_1: entered allmulticast mode [ 27.637045][ T289] bridge_slave_1: entered promiscuous mode [ 27.720663][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.727897][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.734976][ T290] bridge_slave_0: entered allmulticast mode [ 27.741732][ T290] bridge_slave_0: entered promiscuous mode [ 27.748202][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.755262][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.762376][ T290] bridge_slave_1: entered allmulticast mode [ 27.768710][ T290] bridge_slave_1: entered promiscuous mode [ 27.800614][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.807730][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.815014][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.822067][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.899893][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.906980][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.914253][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.921315][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.932883][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.939964][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.947245][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.954362][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.979738][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.986831][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.994105][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.001161][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.010707][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.018274][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.025921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.033079][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.040617][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.048225][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.055482][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.062902][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.080117][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.087196][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.098824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.105911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.135131][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.142218][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.159437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.166527][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.176479][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.183558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.197881][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.204927][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.219730][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.226823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.236683][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.243747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.276927][ T288] veth0_vlan: entered promiscuous mode [ 28.307243][ T289] veth0_vlan: entered promiscuous mode [ 28.314025][ T288] veth1_macvtap: entered promiscuous mode [ 28.320869][ T291] veth0_vlan: entered promiscuous mode [ 28.340432][ T289] veth1_macvtap: entered promiscuous mode [ 28.352358][ T291] veth1_macvtap: entered promiscuous mode [ 28.359736][ T290] veth0_vlan: entered promiscuous mode [ 28.407344][ T290] veth1_macvtap: entered promiscuous mode [ 28.417172][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.472994][ T310] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 28.510989][ T316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 28.537090][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.627420][ T333] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 28.627565][ T333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 28.780106][ T346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 28.842653][ T352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.867659][ T356] netlink: 188 bytes leftover after parsing attributes in process `syz.0.16'. [ 28.940500][ T360] ======================================================= [ 28.940500][ T360] WARNING: The mand mount option has been deprecated and [ 28.940500][ T360] and is ignored by this kernel. Remove the mand [ 28.940500][ T360] option from the mount to silence this warning. [ 28.940500][ T360] ======================================================= [ 29.114659][ T370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.151742][ T370] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 29.151769][ T370] rust_binder: Error while translating object. [ 29.166435][ T370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.177057][ T370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 29.235659][ T372] fuse: Bad value for 'fd' [ 29.366985][ T378] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 29.383498][ T378] rust_binder: Write failure EINVAL in pid:23 [ 29.486602][ T391] fuse: Bad value for 'fd' [ 29.725636][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.765974][ T398] rust_binder: Error while translating object. [ 29.766021][ T398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.772239][ T398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 29.871682][ T401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 29.890414][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 29.908047][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.928534][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 29.937946][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.955139][ T10] usb 2-1: config 0 descriptor?? [ 30.181639][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 30.195880][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.218674][ T10] usb 2-1: USB disconnect, device number 2 [ 31.072416][ T36] kauditd_printk_skb: 291 callbacks suppressed [ 31.072434][ T36] audit: type=1400 audit(1750460328.530:365): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 31.102710][ T36] audit: type=1400 audit(1750460328.540:366): avc: denied { create } for pid=494 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 31.121979][ T36] audit: type=1400 audit(1750460328.540:367): avc: denied { read write } for pid=494 comm="syz.0.78" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 31.192552][ T36] audit: type=1400 audit(1750460328.650:368): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 31.216642][ T36] audit: type=1400 audit(1750460328.650:369): avc: denied { create } for pid=496 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 31.235842][ T36] audit: type=1400 audit(1750460328.650:370): avc: denied { create } for pid=496 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 31.255104][ T36] audit: type=1400 audit(1750460328.650:371): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 31.279312][ T36] audit: type=1400 audit(1750460328.680:372): avc: denied { read } for pid=498 comm="syz.0.80" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 31.301862][ T36] audit: type=1400 audit(1750460328.680:373): avc: denied { read write } for pid=498 comm="syz.0.80" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 31.325235][ T36] audit: type=1400 audit(1750460328.680:374): avc: denied { create } for pid=498 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 31.949874][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.756954][ T583] capability: warning: `syz.2.115' uses deprecated v2 capabilities in a way that may be insecure [ 33.995729][ T555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.001996][ T556] Bluetooth: hci0: command 0x1003 tx timeout [ 34.008646][ T627] capability: warning: `syz.1.133' uses 32-bit capabilities (legacy support in use) [ 34.239470][ T659] kernel profiling enabled (shift: 8) [ 34.913887][ T699] syz.1.162: attempt to access beyond end of device [ 34.913887][ T699] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 35.561474][ T754] 8021q: VLANs not supported on lo [ 35.616057][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.700471][ T782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65088 sclass=netlink_route_socket pid=782 comm=syz.0.198 [ 36.100754][ T36] kauditd_printk_skb: 652 callbacks suppressed [ 36.100781][ T36] audit: type=1400 audit(1750460333.560:1027): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 36.173992][ T36] audit: type=1400 audit(1750460333.630:1028): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 36.198106][ T36] audit: type=1400 audit(1750460333.640:1029): avc: denied { create } for pid=815 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 36.219343][ T36] audit: type=1400 audit(1750460333.640:1030): avc: denied { read } for pid=815 comm="syz.1.214" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 36.241538][ T36] audit: type=1400 audit(1750460333.640:1031): avc: denied { read } for pid=815 comm="syz.1.214" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 36.264250][ T36] audit: type=1400 audit(1750460333.640:1032): avc: denied { create } for pid=815 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=0 [ 36.284684][ T36] audit: type=1400 audit(1750460333.640:1033): avc: denied { name_bind } for pid=815 comm="syz.1.214" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 36.306288][ T36] audit: type=1400 audit(1750460333.650:1034): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 36.330568][ T36] audit: type=1400 audit(1750460333.660:1035): avc: denied { create } for pid=817 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 36.350939][ T36] audit: type=1400 audit(1750460333.660:1036): avc: denied { create } for pid=817 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 36.988409][ T869] FAULT_INJECTION: forcing a failure. [ 36.988409][ T869] name failslab, interval 1, probability 0, space 0, times 1 [ 37.001085][ T869] CPU: 1 UID: 0 PID: 869 Comm: syz.2.235 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 37.001109][ T869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.001121][ T869] Call Trace: [ 37.001127][ T869] [ 37.001134][ T869] __dump_stack+0x21/0x30 [ 37.001162][ T869] dump_stack_lvl+0x10c/0x190 [ 37.001180][ T869] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.001198][ T869] ? __kasan_check_write+0x18/0x20 [ 37.001216][ T869] ? mutex_unlock+0x8b/0x240 [ 37.001230][ T869] ? __cfi_mutex_unlock+0x10/0x10 [ 37.001243][ T869] dump_stack+0x19/0x20 [ 37.001265][ T869] should_fail_ex+0x3d9/0x530 [ 37.001289][ T869] should_failslab+0xac/0x100 [ 37.001318][ T869] kmem_cache_alloc_noprof+0x42/0x3a0 [ 37.001336][ T869] ? getname_flags+0xc6/0x710 [ 37.001354][ T869] ? __cfi_ksys_write+0x10/0x10 [ 37.001372][ T869] getname_flags+0xc6/0x710 [ 37.001391][ T869] __x64_sys_unlinkat+0xb2/0xf0 [ 37.001405][ T869] x64_sys_call+0x2974/0x2ee0 [ 37.001424][ T869] do_syscall_64+0x58/0xf0 [ 37.001443][ T869] ? clear_bhb_loop+0x35/0x90 [ 37.001466][ T869] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.001494][ T869] RIP: 0033:0x7fc15f78e929 [ 37.001518][ T869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.001536][ T869] RSP: 002b:00007fc16056c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 37.001562][ T869] RAX: ffffffffffffffda RBX: 00007fc15f9b5fa0 RCX: 00007fc15f78e929 [ 37.001573][ T869] RDX: 0000000000000200 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 37.001584][ T869] RBP: 00007fc16056c090 R08: 0000000000000000 R09: 0000000000000000 [ 37.001594][ T869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.001602][ T869] R13: 0000000000000000 R14: 00007fc15f9b5fa0 R15: 00007ffe5525a258 [ 37.001615][ T869] [ 38.814466][ T973] tap0: tun_chr_ioctl cmd 1074025677 [ 38.819865][ T973] tap0: linktype set to 774 [ 39.918937][ T1076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1076 comm=syz.2.331 [ 41.133615][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 41.133632][ T36] audit: type=1400 audit(1750460338.590:1566): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.163920][ T36] audit: type=1400 audit(1750460338.600:1567): avc: denied { read } for pid=1148 comm="syz.0.363" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 41.186661][ T36] audit: type=1400 audit(1750460338.600:1568): avc: denied { create } for pid=1148 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 41.206352][ T36] audit: type=1400 audit(1750460338.610:1569): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.230413][ T36] audit: type=1400 audit(1750460338.620:1570): avc: denied { read write } for pid=1150 comm="syz.0.364" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 41.253694][ T36] audit: type=1400 audit(1750460338.620:1571): avc: denied { mounton } for pid=1150 comm="syz.0.364" path="/73/file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 41.279159][ T36] audit: type=1400 audit(1750460338.630:1572): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.303446][ T36] audit: type=1400 audit(1750460338.640:1573): avc: denied { read } for pid=1152 comm="syz.0.365" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 41.326274][ T36] audit: type=1400 audit(1750460338.640:1574): avc: denied { name_bind } for pid=1152 comm="syz.0.365" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 41.348023][ T36] audit: type=1400 audit(1750460338.640:1575): avc: denied { audit_write } for pid=1152 comm="syz.0.365" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 44.143426][ T1329] tun0: tun_chr_ioctl cmd 1074025675 [ 44.148841][ T1329] tun0: persist enabled [ 44.153331][ T1329] tun0: tun_chr_ioctl cmd 1074025675 [ 44.158667][ T1329] tun0: persist enabled [ 44.865426][ T1391] syzkaller0: entered promiscuous mode [ 44.870983][ T1391] syzkaller0: entered allmulticast mode [ 45.214882][ T1415] binfmt_misc: register: failed to install interpreter file ./file0 [ 46.180056][ T36] kauditd_printk_skb: 572 callbacks suppressed [ 46.180073][ T36] audit: type=1400 audit(1750460343.636:2146): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.210379][ T36] audit: type=1400 audit(1750460343.646:2147): avc: denied { read } for pid=1505 comm="syz.2.525" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 46.232982][ T36] audit: type=1400 audit(1750460343.646:2148): avc: denied { create } for pid=1505 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 46.253431][ T36] audit: type=1400 audit(1750460343.646:2149): avc: denied { create } for pid=1505 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 46.273871][ T36] audit: type=1400 audit(1750460343.646:2150): avc: denied { read write } for pid=1505 comm="syz.2.525" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 46.296969][ T36] audit: type=1400 audit(1750460343.656:2151): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.321026][ T36] audit: type=1400 audit(1750460343.656:2152): avc: denied { write } for pid=1507 comm="syz.2.526" name="ipv6_route" dev="proc" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 46.344132][ T36] audit: type=1400 audit(1750460343.666:2153): avc: denied { create } for pid=1507 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 46.363592][ T36] audit: type=1400 audit(1750460343.666:2154): avc: denied { execmem } for pid=1507 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 46.382949][ T36] audit: type=1400 audit(1750460343.666:2155): avc: denied { create } for pid=1507 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 48.517521][ T1616] syzkaller0: entered allmulticast mode [ 49.664919][ T1692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'. [ 49.694340][ T1696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 50.615367][ T1755] FAULT_INJECTION: forcing a failure. [ 50.615367][ T1755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.628736][ T1755] CPU: 0 UID: 0 PID: 1755 Comm: syz.3.634 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 50.628773][ T1755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.628783][ T1755] Call Trace: [ 50.628789][ T1755] [ 50.628795][ T1755] __dump_stack+0x21/0x30 [ 50.628815][ T1755] dump_stack_lvl+0x10c/0x190 [ 50.628832][ T1755] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.628849][ T1755] ? vsnprintf+0x7b4/0x1aa0 [ 50.628874][ T1755] ? __asan_memcpy+0x5a/0x80 [ 50.628891][ T1755] dump_stack+0x19/0x20 [ 50.628907][ T1755] should_fail_ex+0x3d9/0x530 [ 50.628923][ T1755] should_fail+0xf/0x20 [ 50.628937][ T1755] should_fail_usercopy+0x1e/0x30 [ 50.628954][ T1755] _copy_from_user+0x22/0xb0 [ 50.628973][ T1755] kstrtouint_from_user+0xc2/0x150 [ 50.628989][ T1755] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 50.629004][ T1755] ? selinux_file_permission+0x309/0xb30 [ 50.629026][ T1755] ? __cfi_selinux_file_permission+0x10/0x10 [ 50.629047][ T1755] proc_fail_nth_write+0x89/0x210 [ 50.629061][ T1755] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.629075][ T1755] ? bpf_lsm_file_permission+0xd/0x20 [ 50.629091][ T1755] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.629104][ T1755] vfs_write+0x3c0/0xe80 [ 50.629124][ T1755] ? __cfi_vfs_write+0x10/0x10 [ 50.629142][ T1755] ? __kasan_check_write+0x18/0x20 [ 50.629157][ T1755] ? mutex_lock+0x92/0x1c0 [ 50.629170][ T1755] ? __cfi_mutex_lock+0x10/0x10 [ 50.629183][ T1755] ? __fget_files+0x2c5/0x340 [ 50.629204][ T1755] ksys_write+0x141/0x250 [ 50.629220][ T1755] ? __cfi_ksys_write+0x10/0x10 [ 50.629238][ T1755] ? __kasan_check_read+0x15/0x20 [ 50.629253][ T1755] __x64_sys_write+0x7f/0x90 [ 50.629270][ T1755] x64_sys_call+0x271c/0x2ee0 [ 50.629289][ T1755] do_syscall_64+0x58/0xf0 [ 50.629307][ T1755] ? clear_bhb_loop+0x35/0x90 [ 50.629329][ T1755] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.629350][ T1755] RIP: 0033:0x7fe37598d3df [ 50.629363][ T1755] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 50.629375][ T1755] RSP: 002b:00007fe376851030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 50.629391][ T1755] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe37598d3df [ 50.629401][ T1755] RDX: 0000000000000001 RSI: 00007fe3768510a0 RDI: 0000000000000003 [ 50.629410][ T1755] RBP: 00007fe376851090 R08: 0000000000000000 R09: 0000000000000000 [ 50.629419][ T1755] R10: 0000000000040001 R11: 0000000000000293 R12: 0000000000000001 [ 50.629428][ T1755] R13: 0000000000000000 R14: 00007fe375bb5fa0 R15: 00007ffe99e37a68 [ 50.629440][ T1755] [ 50.679249][ T1765] FAULT_INJECTION: forcing a failure. [ 50.679249][ T1765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.919134][ T1765] CPU: 1 UID: 0 PID: 1765 Comm: syz.3.637 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 50.919169][ T1765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.919180][ T1765] Call Trace: [ 50.919187][ T1765] [ 50.919195][ T1765] __dump_stack+0x21/0x30 [ 50.919222][ T1765] dump_stack_lvl+0x10c/0x190 [ 50.919245][ T1765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.919267][ T1765] ? vsnprintf+0x7b4/0x1aa0 [ 50.919289][ T1765] ? __asan_memcpy+0x5a/0x80 [ 50.919311][ T1765] dump_stack+0x19/0x20 [ 50.919331][ T1765] should_fail_ex+0x3d9/0x530 [ 50.919351][ T1765] should_fail+0xf/0x20 [ 50.919370][ T1765] should_fail_usercopy+0x1e/0x30 [ 50.919392][ T1765] _copy_from_user+0x22/0xb0 [ 50.919419][ T1765] kstrtouint_from_user+0xc2/0x150 [ 50.919441][ T1765] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 50.919462][ T1765] ? selinux_file_permission+0x309/0xb30 [ 50.919492][ T1765] ? __cfi_selinux_file_permission+0x10/0x10 [ 50.919520][ T1765] proc_fail_nth_write+0x89/0x210 [ 50.919538][ T1765] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.919556][ T1765] ? bpf_lsm_file_permission+0xd/0x20 [ 50.919577][ T1765] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.919595][ T1765] vfs_write+0x3c0/0xe80 [ 50.919618][ T1765] ? __cfi_vfs_write+0x10/0x10 [ 50.919640][ T1765] ? __kasan_check_write+0x18/0x20 [ 50.919661][ T1765] ? mutex_lock+0x92/0x1c0 [ 50.919679][ T1765] ? __cfi_mutex_lock+0x10/0x10 [ 50.919697][ T1765] ? __fget_files+0x2c5/0x340 [ 50.919726][ T1765] ksys_write+0x141/0x250 [ 50.919749][ T1765] ? __cfi_ksys_write+0x10/0x10 [ 50.919773][ T1765] ? __kasan_check_read+0x15/0x20 [ 50.919794][ T1765] __x64_sys_write+0x7f/0x90 [ 50.919818][ T1765] x64_sys_call+0x271c/0x2ee0 [ 50.919846][ T1765] do_syscall_64+0x58/0xf0 [ 50.919871][ T1765] ? clear_bhb_loop+0x35/0x90 [ 50.919902][ T1765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.919929][ T1765] RIP: 0033:0x7fe37598d3df [ 50.919945][ T1765] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 50.919961][ T1765] RSP: 002b:00007fe376851030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 50.919982][ T1765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe37598d3df [ 50.919997][ T1765] RDX: 0000000000000001 RSI: 00007fe3768510a0 RDI: 0000000000000003 [ 50.920010][ T1765] RBP: 00007fe376851090 R08: 0000000000000000 R09: 0000000000000000 [ 50.920022][ T1765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 50.920034][ T1765] R13: 0000000000000000 R14: 00007fe375bb5fa0 R15: 00007ffe99e37a68 [ 50.920061][ T1765] [ 51.190928][ T36] kauditd_printk_skb: 572 callbacks suppressed [ 51.190945][ T36] audit: type=1400 audit(1750460348.646:2728): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.236947][ T36] audit: type=1400 audit(1750460348.646:2729): avc: denied { create } for pid=1783 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 51.278440][ T36] audit: type=1400 audit(1750460348.666:2730): avc: denied { create } for pid=1783 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 51.330602][ T36] audit: type=1400 audit(1750460348.786:2731): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.419255][ T36] audit: type=1400 audit(1750460348.866:2732): avc: denied { read } for pid=1783 comm="syz.3.645" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 51.478781][ T36] audit: type=1400 audit(1750460348.916:2733): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.516953][ T36] audit: type=1400 audit(1750460348.926:2734): avc: denied { read } for pid=1788 comm="syz.3.647" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 51.540396][ T36] audit: type=1400 audit(1750460348.926:2735): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.564908][ T36] audit: type=1400 audit(1750460348.966:2736): avc: denied { create } for pid=1790 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 51.584836][ T36] audit: type=1400 audit(1750460348.966:2737): avc: denied { read write } for pid=1790 comm="syz.0.648" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 52.019528][ T1819] FAULT_INJECTION: forcing a failure. [ 52.019528][ T1819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.032670][ T1819] CPU: 0 UID: 0 PID: 1819 Comm: syz.0.660 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 52.032703][ T1819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.032715][ T1819] Call Trace: [ 52.032723][ T1819] [ 52.032732][ T1819] __dump_stack+0x21/0x30 [ 52.032766][ T1819] dump_stack_lvl+0x10c/0x190 [ 52.032784][ T1819] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.032803][ T1819] dump_stack+0x19/0x20 [ 52.032820][ T1819] should_fail_ex+0x3d9/0x530 [ 52.032837][ T1819] should_fail+0xf/0x20 [ 52.032852][ T1819] should_fail_usercopy+0x1e/0x30 [ 52.032869][ T1819] _copy_to_user+0x24/0xa0 [ 52.032889][ T1819] do_ipv6_getsockopt+0xf4b/0x1ea0 [ 52.032911][ T1819] ? __cfi_do_ipv6_getsockopt+0x10/0x10 [ 52.032930][ T1819] ? _parse_integer_limit+0x195/0x1e0 [ 52.032946][ T1819] ? _parse_integer+0x2e/0x40 [ 52.032960][ T1819] ? avc_has_perm_noaudit+0x268/0x360 [ 52.032976][ T1819] ? __asan_memcpy+0x5a/0x80 [ 52.032993][ T1819] ? avc_has_perm_noaudit+0x286/0x360 [ 52.033009][ T1819] ? avc_has_perm+0x144/0x220 [ 52.033023][ T1819] ? __cfi_avc_has_perm+0x10/0x10 [ 52.033040][ T1819] ipv6_getsockopt+0xbe/0x280 [ 52.033059][ T1819] ? __cfi_ipv6_getsockopt+0x10/0x10 [ 52.033077][ T1819] ? vfs_write+0x8ba/0xe80 [ 52.033096][ T1819] udpv6_getsockopt+0x7e/0x90 [ 52.033110][ T1819] sock_common_getsockopt+0xaf/0xd0 [ 52.033128][ T1819] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 52.033145][ T1819] do_sock_getsockopt+0x3a3/0x6d0 [ 52.033168][ T1819] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 52.033195][ T1819] ? __fget_files+0x2c5/0x340 [ 52.033217][ T1819] __x64_sys_getsockopt+0x1d5/0x280 [ 52.033240][ T1819] x64_sys_call+0x10db/0x2ee0 [ 52.033260][ T1819] do_syscall_64+0x58/0xf0 [ 52.033279][ T1819] ? clear_bhb_loop+0x35/0x90 [ 52.033302][ T1819] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.033323][ T1819] RIP: 0033:0x7f4f4a38e929 [ 52.033336][ T1819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.033348][ T1819] RSP: 002b:00007f4f489f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 52.033364][ T1819] RAX: ffffffffffffffda RBX: 00007f4f4a5b5fa0 RCX: 00007f4f4a38e929 [ 52.033375][ T1819] RDX: 000000000000001f RSI: 0000000000000029 RDI: 0000000000000003 [ 52.033384][ T1819] RBP: 00007f4f489f7090 R08: 0000200000000140 R09: 0000000000000000 [ 52.033394][ T1819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.033403][ T1819] R13: 0000000000000000 R14: 00007f4f4a5b5fa0 R15: 00007ffcdf840c38 [ 52.033416][ T1819] [ 53.240451][ T1887] FAULT_INJECTION: forcing a failure. [ 53.240451][ T1887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.255050][ T1887] CPU: 0 UID: 0 PID: 1887 Comm: syz.0.690 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 53.255086][ T1887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.255099][ T1887] Call Trace: [ 53.255106][ T1887] [ 53.255114][ T1887] __dump_stack+0x21/0x30 [ 53.255142][ T1887] dump_stack_lvl+0x10c/0x190 [ 53.255166][ T1887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.255192][ T1887] dump_stack+0x19/0x20 [ 53.255213][ T1887] should_fail_ex+0x3d9/0x530 [ 53.255237][ T1887] should_fail+0xf/0x20 [ 53.255256][ T1887] should_fail_usercopy+0x1e/0x30 [ 53.255280][ T1887] _copy_from_user+0x22/0xb0 [ 53.255308][ T1887] memdup_user+0x81/0x180 [ 53.255330][ T1887] ? strndup_user+0x40/0xd0 [ 53.255353][ T1887] strndup_user+0x6c/0xd0 [ 53.255374][ T1887] __se_sys_mount+0x9f/0x480 [ 53.255399][ T1887] ? ksys_write+0x1ef/0x250 [ 53.255423][ T1887] ? __x64_sys_mount+0xf0/0xf0 [ 53.255449][ T1887] __x64_sys_mount+0xc3/0xf0 [ 53.255474][ T1887] x64_sys_call+0x2021/0x2ee0 [ 53.255501][ T1887] do_syscall_64+0x58/0xf0 [ 53.255527][ T1887] ? clear_bhb_loop+0x35/0x90 [ 53.255560][ T1887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.255589][ T1887] RIP: 0033:0x7f4f4a38e929 [ 53.255612][ T1887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.255629][ T1887] RSP: 002b:00007f4f489f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.255650][ T1887] RAX: ffffffffffffffda RBX: 00007f4f4a5b5fa0 RCX: 00007f4f4a38e929 [ 53.255665][ T1887] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 53.255679][ T1887] RBP: 00007f4f489f7090 R08: 0000200000000340 R09: 0000000000000000 [ 53.255692][ T1887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.255704][ T1887] R13: 0000000000000000 R14: 00007f4f4a5b5fa0 R15: 00007ffcdf840c38 [ 53.255720][ T1887] [ 53.275207][ T1899] netlink: 64 bytes leftover after parsing attributes in process `syz.1.694'. [ 53.358518][ T1906] syz.1.694 uses obsolete (PF_INET,SOCK_PACKET) [ 53.477895][ T1923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.567715][ T1934] fuse: Unknown parameter 'ÿ0x0000000000000006' [ 53.586154][ T1938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.608772][ T1940] FAULT_INJECTION: forcing a failure. [ 53.608772][ T1940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.628321][ T1940] CPU: 1 UID: 0 PID: 1940 Comm: syz.0.711 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 53.628356][ T1940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.628370][ T1940] Call Trace: [ 53.628375][ T1940] [ 53.628382][ T1940] __dump_stack+0x21/0x30 [ 53.628404][ T1940] dump_stack_lvl+0x10c/0x190 [ 53.628422][ T1940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.628439][ T1940] ? selinux_file_open+0x457/0x610 [ 53.628462][ T1940] ? __cfi_selinux_file_open+0x10/0x10 [ 53.628484][ T1940] dump_stack+0x19/0x20 [ 53.628500][ T1940] should_fail_ex+0x3d9/0x530 [ 53.628516][ T1940] should_fail+0xf/0x20 [ 53.628531][ T1940] should_fail_usercopy+0x1e/0x30 [ 53.628548][ T1940] _copy_from_iter+0x1a3/0x14b0 [ 53.628567][ T1940] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 53.628587][ T1940] ? __cfi__copy_from_iter+0x10/0x10 [ 53.628607][ T1940] ? unwind_get_return_address+0x51/0x90 [ 53.628622][ T1940] packet_sendmsg+0x3686/0x56e0 [ 53.628642][ T1940] ? avc_has_perm_noaudit+0x268/0x360 [ 53.628659][ T1940] ? avc_denied+0x166/0x180 [ 53.628673][ T1940] ? kstrtouint_from_user+0xfb/0x150 [ 53.628689][ T1940] ? __x64_sys_openat+0x13a/0x170 [ 53.628702][ T1940] ? x64_sys_call+0xe69/0x2ee0 [ 53.628722][ T1940] ? selinux_socket_sendmsg+0x284/0x380 [ 53.628739][ T1940] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 53.628756][ T1940] ? __kasan_check_write+0x18/0x20 [ 53.628772][ T1940] ? proc_fail_nth_write+0x17e/0x210 [ 53.628785][ T1940] ? __cfi_packet_sendmsg+0x10/0x10 [ 53.628804][ T1940] ? notify_change+0x650/0xee0 [ 53.628820][ T1940] ? check_stack_object+0x107/0x140 [ 53.628837][ T1940] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 53.628866][ T1940] ? security_socket_sendmsg+0x33/0xd0 [ 53.628884][ T1940] __sys_sendto+0x66a/0x6f0 [ 53.628906][ T1940] ? __cfi___sys_sendto+0x10/0x10 [ 53.628928][ T1940] ? __kasan_check_write+0x18/0x20 [ 53.628945][ T1940] ? __cfi_ksys_write+0x10/0x10 [ 53.628963][ T1940] __x64_sys_sendto+0xe9/0x100 [ 53.628984][ T1940] x64_sys_call+0x2c2c/0x2ee0 [ 53.629004][ T1940] do_syscall_64+0x58/0xf0 [ 53.629023][ T1940] ? clear_bhb_loop+0x35/0x90 [ 53.629046][ T1940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.629067][ T1940] RIP: 0033:0x7f4f4a38e929 [ 53.629080][ T1940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.629092][ T1940] RSP: 002b:00007f4f489f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 53.629108][ T1940] RAX: ffffffffffffffda RBX: 00007f4f4a5b5fa0 RCX: 00007f4f4a38e929 [ 53.629120][ T1940] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 53.629129][ T1940] RBP: 00007f4f489f7090 R08: 0000200000000140 R09: 0000000000000014 [ 53.629139][ T1940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.629148][ T1940] R13: 0000000000000000 R14: 00007f4f4a5b5fa0 R15: 00007ffcdf840c38 [ 53.629161][ T1940] [ 53.929753][ T1943] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 53.937165][ T1943] rust_binder: Write failure EINVAL in pid:356 [ 53.943303][ T1945] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 53.966216][ T1945] rust_binder: Write failure EINVAL in pid:349 [ 53.972822][ T1949] FAULT_INJECTION: forcing a failure. [ 53.972822][ T1949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.992116][ T1949] CPU: 1 UID: 0 PID: 1949 Comm: syz.0.714 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 53.992150][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.992163][ T1949] Call Trace: [ 53.992171][ T1949] [ 53.992179][ T1949] __dump_stack+0x21/0x30 [ 53.992209][ T1949] dump_stack_lvl+0x10c/0x190 [ 53.992233][ T1949] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.992259][ T1949] dump_stack+0x19/0x20 [ 53.992280][ T1949] should_fail_ex+0x3d9/0x530 [ 53.992303][ T1949] should_fail+0xf/0x20 [ 53.992323][ T1949] should_fail_usercopy+0x1e/0x30 [ 53.992347][ T1949] _copy_from_user+0x22/0xb0 [ 53.992373][ T1949] memdup_user+0x81/0x180 [ 53.992395][ T1949] ? strndup_user+0x40/0xd0 [ 53.992417][ T1949] strndup_user+0x6c/0xd0 [ 53.992439][ T1949] __se_sys_mount+0x9f/0x480 [ 53.992463][ T1949] ? ksys_write+0x1ef/0x250 [ 53.992488][ T1949] ? __x64_sys_mount+0xf0/0xf0 [ 53.992513][ T1949] __x64_sys_mount+0xc3/0xf0 [ 53.992537][ T1949] x64_sys_call+0x2021/0x2ee0 [ 53.992563][ T1949] do_syscall_64+0x58/0xf0 [ 53.992589][ T1949] ? clear_bhb_loop+0x35/0x90 [ 53.992628][ T1949] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.992654][ T1949] RIP: 0033:0x7f4f4a38e929 [ 53.992670][ T1949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.992686][ T1949] RSP: 002b:00007f4f489f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.992706][ T1949] RAX: ffffffffffffffda RBX: 00007f4f4a5b5fa0 RCX: 00007f4f4a38e929 [ 53.992721][ T1949] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 53.992734][ T1949] RBP: 00007f4f489f7090 R08: 0000200000000340 R09: 0000000000000000 [ 53.992746][ T1949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.992757][ T1949] R13: 0000000000000000 R14: 00007f4f4a5b5fa0 R15: 00007ffcdf840c38 [ 53.992772][ T1949] [ 54.214954][ T1953] FAULT_INJECTION: forcing a failure. [ 54.214954][ T1953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.228121][ T1953] CPU: 1 UID: 0 PID: 1953 Comm: syz.0.716 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 54.228152][ T1953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.228165][ T1953] Call Trace: [ 54.228172][ T1953] [ 54.228180][ T1953] __dump_stack+0x21/0x30 [ 54.228209][ T1953] dump_stack_lvl+0x10c/0x190 [ 54.228232][ T1953] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.228259][ T1953] dump_stack+0x19/0x20 [ 54.228279][ T1953] should_fail_ex+0x3d9/0x530 [ 54.228296][ T1953] should_fail+0xf/0x20 [ 54.228310][ T1953] should_fail_usercopy+0x1e/0x30 [ 54.228327][ T1953] strncpy_from_user+0x28/0x270 [ 54.228343][ T1953] ? getname_flags+0xc6/0x710 [ 54.228363][ T1953] getname_flags+0x102/0x710 [ 54.228382][ T1953] user_path_at+0x2b/0x60 [ 54.228402][ T1953] __se_sys_mount+0x288/0x480 [ 54.228420][ T1953] ? ksys_write+0x1ef/0x250 [ 54.228438][ T1953] ? __x64_sys_mount+0xf0/0xf0 [ 54.228457][ T1953] __x64_sys_mount+0xc3/0xf0 [ 54.228474][ T1953] x64_sys_call+0x2021/0x2ee0 [ 54.228494][ T1953] do_syscall_64+0x58/0xf0 [ 54.228513][ T1953] ? clear_bhb_loop+0x35/0x90 [ 54.228536][ T1953] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.228557][ T1953] RIP: 0033:0x7f4f4a38e929 [ 54.228569][ T1953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.228582][ T1953] RSP: 002b:00007f4f489f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.228605][ T1953] RAX: ffffffffffffffda RBX: 00007f4f4a5b5fa0 RCX: 00007f4f4a38e929 [ 54.228616][ T1953] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 54.228627][ T1953] RBP: 00007f4f489f7090 R08: 00002000000004c0 R09: 0000000000000000 [ 54.228637][ T1953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.228646][ T1953] R13: 0000000000000000 R14: 00007f4f4a5b5fa0 R15: 00007ffcdf840c38 [ 54.228658][ T1953] [ 54.272047][ T1960] rust_binder: Write failure EINVAL in pid:371 [ 54.380194][ T1962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.445403][ T1967] overlayfs: missing 'lowerdir' [ 54.539367][ T1984] FAULT_INJECTION: forcing a failure. [ 54.539367][ T1984] name failslab, interval 1, probability 0, space 0, times 0 [ 54.552293][ T1984] CPU: 0 UID: 0 PID: 1984 Comm: syz.3.727 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 54.552323][ T1984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.552335][ T1984] Call Trace: [ 54.552341][ T1984] [ 54.552348][ T1984] __dump_stack+0x21/0x30 [ 54.552373][ T1984] dump_stack_lvl+0x10c/0x190 [ 54.552394][ T1984] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.552415][ T1984] ? is_bpf_text_address+0x17b/0x1a0 [ 54.552440][ T1984] ? kernel_text_address+0xa9/0xe0 [ 54.552460][ T1984] dump_stack+0x19/0x20 [ 54.552479][ T1984] should_fail_ex+0x3d9/0x530 [ 54.552509][ T1984] should_failslab+0xac/0x100 [ 54.552535][ T1984] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 54.552557][ T1984] ? __alloc_skb+0x10c/0x370 [ 54.552580][ T1984] __alloc_skb+0x10c/0x370 [ 54.552601][ T1984] ? stack_depot_save_flags+0x38/0x800 [ 54.552623][ T1984] alloc_skb_with_frags+0xce/0x8b0 [ 54.552645][ T1984] ? kasan_save_track+0x4f/0x80 [ 54.552668][ T1984] ? kasan_save_track+0x3e/0x80 [ 54.552689][ T1984] ? kasan_save_alloc_info+0x40/0x50 [ 54.552706][ T1984] ? __kasan_slab_alloc+0x73/0x90 [ 54.552729][ T1984] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 54.552749][ T1984] ? security_inode_alloc+0x51/0x200 [ 54.552771][ T1984] ? alloc_inode+0xc5/0x270 [ 54.552796][ T1984] ? new_inode+0x25/0x1e0 [ 54.552819][ T1984] ? proc_pid_make_inode+0x25/0x140 [ 54.552842][ T1984] sock_alloc_send_pskb+0x858/0x990 [ 54.552869][ T1984] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.552898][ T1984] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 54.552926][ T1984] ? __kasan_check_write+0x18/0x20 [ 54.552947][ T1984] ? _raw_spin_lock+0x8c/0x120 [ 54.552970][ T1984] ? __cfi__raw_spin_lock+0x10/0x10 [ 54.552993][ T1984] unix_dgram_sendmsg+0x59a/0x1b70 [ 54.553018][ T1984] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 54.553042][ T1984] unix_seqpacket_sendmsg+0x11c/0x1e0 [ 54.553064][ T1984] ? __cfi_unix_seqpacket_sendmsg+0x10/0x10 [ 54.553086][ T1984] ____sys_sendmsg+0xa15/0xa70 [ 54.553114][ T1984] ? __sys_sendmsg_sock+0x50/0x50 [ 54.553142][ T1984] ? import_iovec+0x81/0xb0 [ 54.553168][ T1984] ___sys_sendmsg+0x220/0x2a0 [ 54.553195][ T1984] ? __sys_sendmsg+0x280/0x280 [ 54.553222][ T1984] ? kstrtouint+0x78/0xf0 [ 54.553245][ T1984] __sys_sendmmsg+0x271/0x470 [ 54.553262][ T1984] ? __cfi___sys_sendmmsg+0x10/0x10 [ 54.553282][ T1984] ? __cfi_ksys_write+0x10/0x10 [ 54.553304][ T1984] __x64_sys_sendmmsg+0xa4/0xc0 [ 54.553321][ T1984] x64_sys_call+0xfec/0x2ee0 [ 54.553344][ T1984] do_syscall_64+0x58/0xf0 [ 54.553366][ T1984] ? clear_bhb_loop+0x35/0x90 [ 54.553393][ T1984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.553418][ T1984] RIP: 0033:0x7fe37598e929 [ 54.553432][ T1984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.553447][ T1984] RSP: 002b:00007fe376851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.553466][ T1984] RAX: ffffffffffffffda RBX: 00007fe375bb5fa0 RCX: 00007fe37598e929 [ 54.553480][ T1984] RDX: 000000000000003f RSI: 00002000000000c0 RDI: 0000000000000003 [ 54.553491][ T1984] RBP: 00007fe376851090 R08: 0000000000000000 R09: 0000000000000000 [ 54.553518][ T1984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.553528][ T1984] R13: 0000000000000000 R14: 00007fe375bb5fa0 R15: 00007ffe99e37a68 [ 54.553543][ T1984] [ 54.971498][ T12] tipc: Subscription rejected, illegal request [ 54.998437][ T2016] fuse: Unknown parameter 'user_i00000000000000000000' [ 55.015608][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.024920][ T2018] input: syz0 as /devices/virtual/input/input5 [ 55.144615][ T2029] FAULT_INJECTION: forcing a failure. [ 55.144615][ T2029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.157754][ T2029] CPU: 1 UID: 0 PID: 2029 Comm: syz.2.745 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 55.157786][ T2029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.157798][ T2029] Call Trace: [ 55.157805][ T2029] [ 55.157812][ T2029] __dump_stack+0x21/0x30 [ 55.157841][ T2029] dump_stack_lvl+0x10c/0x190 [ 55.157864][ T2029] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.157890][ T2029] dump_stack+0x19/0x20 [ 55.157912][ T2029] should_fail_ex+0x3d9/0x530 [ 55.157936][ T2029] should_fail+0xf/0x20 [ 55.157956][ T2029] should_fail_usercopy+0x1e/0x30 [ 55.157978][ T2029] _copy_from_iter+0x1a3/0x14b0 [ 55.158006][ T2029] ? __kasan_check_write+0x18/0x20 [ 55.158029][ T2029] ? __build_skb_around+0x2a4/0x5a0 [ 55.158055][ T2029] ? __cfi__copy_from_iter+0x10/0x10 [ 55.158074][ T2029] ? check_stack_object+0x82/0x140 [ 55.158092][ T2029] ? __virt_addr_valid+0x2a6/0x380 [ 55.158115][ T2029] ? __check_object_size+0x455/0x620 [ 55.158133][ T2029] netlink_sendmsg+0x680/0xaf0 [ 55.158156][ T2029] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.158179][ T2029] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 55.158202][ T2029] ? security_socket_sendmsg+0x33/0xd0 [ 55.158220][ T2029] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.158242][ T2029] ____sys_sendmsg+0xa15/0xa70 [ 55.158266][ T2029] ? __sys_sendmsg_sock+0x50/0x50 [ 55.158290][ T2029] ? import_iovec+0x81/0xb0 [ 55.158311][ T2029] ___sys_sendmsg+0x220/0x2a0 [ 55.158334][ T2029] ? __sys_sendmsg+0x280/0x280 [ 55.158356][ T2029] ? proc_fail_nth_write+0x17e/0x210 [ 55.158371][ T2029] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 55.158390][ T2029] __x64_sys_sendmsg+0x1eb/0x2c0 [ 55.158403][ T2029] ? fput+0x1a5/0x240 [ 55.158425][ T2029] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.158438][ T2029] ? ksys_write+0x1ef/0x250 [ 55.158457][ T2029] ? __kasan_check_read+0x15/0x20 [ 55.158474][ T2029] x64_sys_call+0x2a4c/0x2ee0 [ 55.158494][ T2029] do_syscall_64+0x58/0xf0 [ 55.158513][ T2029] ? clear_bhb_loop+0x35/0x90 [ 55.158544][ T2029] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.158566][ T2029] RIP: 0033:0x7fc15f78e929 [ 55.158578][ T2029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.158590][ T2029] RSP: 002b:00007fc16056c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.158607][ T2029] RAX: ffffffffffffffda RBX: 00007fc15f9b5fa0 RCX: 00007fc15f78e929 [ 55.158618][ T2029] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 55.158628][ T2029] RBP: 00007fc16056c090 R08: 0000000000000000 R09: 0000000000000000 [ 55.158637][ T2029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.158646][ T2029] R13: 0000000000000000 R14: 00007fc15f9b5fa0 R15: 00007ffe5525a258 [ 55.158658][ T2029] [ 55.176849][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 55.305631][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 55.310461][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.00 [ 55.475306][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.485873][ T9] usb 1-1: config 0 descriptor?? [ 55.488681][ T31] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 55.501764][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.509911][ T31] usb 2-1: Product: syz [ 55.514218][ T31] usb 2-1: Manufacturer: syz [ 55.519173][ T31] usb 2-1: SerialNumber: syz [ 55.524487][ T31] usb 2-1: config 0 descriptor?? [ 55.724303][ T2046] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.727074][ T2046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.733668][ T2046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 55.844004][ T2057] netlink: 104 bytes leftover after parsing attributes in process `syz.2.757'. [ 55.911917][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.926523][ T2062] kvm: user requested TSC rate below hardware speed [ 55.933851][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.945815][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.953575][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.961193][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.968891][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.976393][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.983883][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 55.991437][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 56.001253][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 56.008991][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 56.016582][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 56.024147][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 56.031669][ T9] hid-generic 0003:18D1:5057.0001: unknown main item tag 0x0 [ 56.039184][ T9] hid-generic 0003:18D1:5057.0001: item fetching failed at offset 18/41 [ 56.047851][ T9] hid-generic 0003:18D1:5057.0001: probe with driver hid-generic failed with error -22 [ 56.137825][ T9] usb 1-1: USB disconnect, device number 2 [ 56.205580][ T36] kauditd_printk_skb: 277 callbacks suppressed [ 56.205599][ T36] audit: type=1400 audit(1750460353.656:3015): avc: denied { connect } for pid=2069 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.231336][ T36] audit: type=1400 audit(1750460353.666:3016): avc: denied { execute } for pid=2069 comm="syz.2.763" path="/239/cgroup.controllers" dev="tmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.251278][ T2070] vlan0: entered promiscuous mode [ 56.260283][ T2070] vlan0: entered allmulticast mode [ 56.265454][ T2070] veth0_vlan: entered allmulticast mode [ 56.299530][ T36] audit: type=1400 audit(1750460353.756:3017): avc: denied { read } for pid=2072 comm="syz.2.764" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.322526][ T36] audit: type=1400 audit(1750460353.756:3018): avc: denied { open } for pid=2072 comm="syz.2.764" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.346157][ T36] audit: type=1400 audit(1750460353.756:3019): avc: denied { ioctl } for pid=2072 comm="syz.2.764" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.438897][ T36] audit: type=1400 audit(1750460353.896:3020): avc: denied { create } for pid=2074 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.458424][ T36] audit: type=1400 audit(1750460353.896:3021): avc: denied { bind } for pid=2074 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.477820][ T36] audit: type=1400 audit(1750460353.926:3022): avc: denied { bind } for pid=2077 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.498102][ T36] audit: type=1400 audit(1750460353.926:3023): avc: denied { write } for pid=2077 comm="syz.2.766" path="socket:[10097]" dev="sockfs" ino=10097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.522256][ T36] audit: type=1400 audit(1750460353.926:3024): avc: denied { ioctl } for pid=2077 comm="syz.2.766" path="socket:[10099]" dev="sockfs" ino=10099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.552261][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 56.562724][ T31] asix 2-1:0.0: probe with driver asix failed with error -71 [ 56.571082][ T31] usb 2-1: USB disconnect, device number 3 [ 56.753052][ T2103] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 56.753052][ T2103] null pointer dereference occurred [ 56.768940][ T2103] ------------[ cut here ]------------ [ 56.774448][ T2103] kernel BUG at rust/helpers/bug.c:7! [ 56.784670][ T2103] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 56.791668][ T2103] CPU: 0 UID: 0 PID: 2103 Comm: syz.0.775 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 56.805064][ T2103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.815296][ T2103] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 56.820601][ T2103] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 85 5f c2 5f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 cf 9b 8b d3 90 90 90 90 90 90 90 90 90 [ 56.840290][ T2103] RSP: 0018:ffffc9000c13f1d0 EFLAGS: 00010246 [ 56.846382][ T2103] RAX: 000000000000005a RBX: 1ffff92001827e3c RCX: d586bdecfc83ce00 [ 56.854379][ T2103] RDX: ffffc90001631000 RSI: 0000000000002e40 RDI: 0000000000002e41 [ 56.862350][ T2103] RBP: ffffc9000c13f1d0 R08: ffffc9000c13eec7 R09: 1ffff92001827dd8 [ 56.870321][ T2103] R10: dffffc0000000000 R11: fffff52001827dd9 R12: 0000000000000000 [ 56.878295][ T2103] R13: dffffc0000000000 R14: ffffc9000c13f200 R15: ffffc9000c13f230 [ 56.886269][ T2103] FS: 00007f4f489f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.895199][ T2103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.901778][ T2103] CR2: 00007fc15f771d60 CR3: 000000011df38000 CR4: 00000000003526b0 [ 56.909749][ T2103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.917714][ T2103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.925680][ T2103] Call Trace: [ 56.928956][ T2103] [ 56.931882][ T2103] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 56.939347][ T2103] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 56.947324][ T2103] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 56.960958][ T2103] ? p9pdu_vwritef+0x2720/0x2720 [ 56.965898][ T2103] ? radix_tree_node_alloc+0x1af/0x400 [ 56.971385][ T2103] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 56.976495][ T2103] ? p9pdu_vwritef+0x1c5e/0x2720 [ 56.981441][ T2103] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 56.989512][ T2103] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 56.998289][ T2103] ? p9pdu_writef+0xdb/0x130 [ 57.002882][ T2103] ? p9pdu_vwritef+0x2720/0x2720 [ 57.007821][ T2103] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 57.016940][ T2103] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 57.025789][ T2103] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 57.033599][ T2103] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 57.041242][ T2103] ? p9_client_prepare_req+0x732/0xa10 [ 57.046703][ T2103] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 57.055033][ T2103] ? __kasan_check_write+0x18/0x20 [ 57.060168][ T2103] ? _raw_spin_lock+0x8c/0x120 [ 57.065021][ T2103] ? tun_chr_poll+0x127/0x770 [ 57.069730][ T2103] ? _raw_spin_lock+0x8c/0x120 [ 57.074496][ T2103] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 57.082738][ T2103] p9_fd_request+0x446/0x520 [ 57.087337][ T2103] p9_client_rpc+0x2f9/0xb40 [ 57.091923][ T2103] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 57.100167][ T2103] ? p9_fid_create+0x3d0/0x3d0 [ 57.104935][ T2103] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 57.113177][ T2103] ? p9_conn_create+0x4c9/0x570 [ 57.118028][ T2103] ? p9_fd_create+0x2f3/0x4c0 [ 57.122711][ T2103] p9_client_create+0x96a/0x1190 [ 57.127659][ T2103] ? __cfi_p9_client_create+0x10/0x10 [ 57.133057][ T2103] ? kasan_save_alloc_info+0x40/0x50 [ 57.138345][ T2103] ? __kasan_kmalloc+0x96/0xb0 [ 57.143115][ T2103] ? kstrdup+0x7b/0x140 [ 57.147281][ T2103] ? __kasan_check_write+0x18/0x20 [ 57.152409][ T2103] v9fs_session_init+0x1e1/0x1820 [ 57.157439][ T2103] ? __cfi_v9fs_session_init+0x10/0x10 [ 57.162901][ T2103] ? kasan_save_alloc_info+0x40/0x50 [ 57.168190][ T2103] ? __kasan_kmalloc+0x96/0xb0 [ 57.172957][ T2103] ? v9fs_mount+0xbd/0xa00 [ 57.177377][ T2103] v9fs_mount+0xd7/0xa00 [ 57.181620][ T2103] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 57.187255][ T2103] ? __cfi_v9fs_mount+0x10/0x10 [ 57.192110][ T2103] ? selinux_capable+0x38/0x50 [ 57.196908][ T2103] legacy_get_tree+0x103/0x1b0 [ 57.201676][ T2103] ? __cfi_v9fs_mount+0x10/0x10 [ 57.206529][ T2103] vfs_get_tree+0x9e/0x290 [ 57.210944][ T2103] do_new_mount+0x251/0xb40 [ 57.215462][ T2103] path_mount+0x688/0x1050 [ 57.220021][ T2103] ? putname+0x113/0x150 [ 57.224268][ T2103] __se_sys_mount+0x2bd/0x480 [ 57.228955][ T2103] ? __x64_sys_mount+0xf0/0xf0 [ 57.233718][ T2103] ? __kasan_check_write+0x18/0x20 [ 57.238836][ T2103] ? fpregs_restore_userregs+0x11d/0x260 [ 57.244478][ T2103] __x64_sys_mount+0xc3/0xf0 [ 57.249090][ T2103] x64_sys_call+0x2021/0x2ee0 [ 57.253768][ T2103] do_syscall_64+0x58/0xf0 [ 57.258187][ T2103] ? clear_bhb_loop+0x35/0x90 [ 57.262871][ T2103] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.268767][ T2103] RIP: 0033:0x7f4f4a38e929 [ 57.273185][ T2103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.292787][ T2103] RSP: 002b:00007f4f489f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.301198][ T2103] RAX: ffffffffffffffda RBX: 00007f4f4a5b5fa0 RCX: 00007f4f4a38e929 [ 57.309166][ T2103] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 57.317131][ T2103] RBP: 00007f4f4a410b39 R08: 0000200000000240 R09: 0000000000000000 [ 57.325096][ T2103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.333063][ T2103] R13: 0000000000000000 R14: 00007f4f4a5b5fa0 R15: 00007ffcdf840c38 [ 57.341031][ T2103] [ 57.344044][ T2103] Modules linked in: [ 57.348986][ T2103] ---[ end trace 0000000000000000 ]--- [ 57.356490][ T2103] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 57.362083][ T2103] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 85 5f c2 5f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 cf 9b 8b d3 90 90 90 90 90 90 90 90 90 [ 57.381918][ T2103] RSP: 0018:ffffc9000c13f1d0 EFLAGS: 00010246 [ 57.388192][ T2103] RAX: 000000000000005a RBX: 1ffff92001827e3c RCX: d586bdecfc83ce00 [ 57.396370][ T2103] RDX: ffffc90001631000 RSI: 0000000000002e40 RDI: 0000000000002e41 [ 57.404448][ T2103] RBP: ffffc9000c13f1d0 R08: ffffc9000c13eec7 R09: 1ffff92001827dd8 [ 57.412725][ T2103] R10: dffffc0000000000 R11: fffff52001827dd9 R12: 0000000000000000 [ 57.420825][ T2103] R13: dffffc0000000000 R14: ffffc9000c13f200 R15: ffffc9000c13f230 [ 57.428915][ T2103] FS: 00007f4f489f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.437966][ T2103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.444654][ T2103] CR2: 00007fc15f771d60 CR3: 000000011df38000 CR4: 00000000003526b0 [ 57.452723][ T2103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.460752][ T2103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.468827][ T2103] Kernel panic - not syncing: Fatal exception [ 57.475192][ T2103] Kernel Offset: disabled [ 57.479520][ T2103] Rebooting in 86400 seconds..