last executing test programs: 4m18.273113041s ago: executing program 1 (id=692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 4m18.259357051s ago: executing program 1 (id=693): ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0xeeee0000, 0x3000, 0x6, 0xff, 0xff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086a053f00000000000001090224000100001020090400000203000300c9acdb342f97a6aea3adef7409210700000122050009058103000206005c"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x5, 0x8e, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x9, 0x1, 0x4, 0x20, 0xe8}, 0x27, &(0x7f0000000300)={0x5, 0xf, 0x27, 0x2, [@generic={0x18, 0x10, 0xa, "276cbe16e1bf435d5df34cf86a9a354b2fd880184e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x9, 0x99}]}, 0x1, [{0x88, &(0x7f0000000340)=@string={0x88, 0x3, "3f59f591639e0bcbd43f2a481366141bd6763bddd73608845a64d779b4a0352294e013abe96a7544c731e4510fb7ea41b4f70af8da7199110f2a87b101cd904432784b0c524126bf1bc64bb4450a08f6a3861adfd16f57ac1ea6887650cad05a86df1b4947f77f66d3084557f374cc72776cc8abaa515bb59a3eb470edd9dad8877689f4af1d"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000580)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="0004c0000000c0007227eb4b623b5fdbac7df1743a8e5768e4b58970b0a7048e5280544313d62d7bd4c4cf2970ec69665e0d20202474700b6a53162e940f0033391c6e03b8694dbc0774a32bf485eb519cd424f440d802e3f494aa118f1895a9fdf38d92d11ecf2bd6f2c1a5d24f1c4138625ea7005b9608890e7d5243f0f1d7c927fd5d9f493872081a5945e6b64bf4887a600b9fda0adc80386fee6610b4f731fa75987748ccdb81bc00216be3a23dec29cd1638f7e181f06d7c6f1bbb931f714b9db89c8718d290408a319d1e05f9ba36c377419edce19ec353785059bd164ffbc152aa14de2bbb99089ff9a71acba0d6f1a8d525edb22b3a383b21f08ec4242b7489bd5f4721c6ce351b76b73622278283dc9fb5ab71575d4528a9f6b0e93701485af23f68351084f6d82931bc7f694294cc9e723f8e768c9b89331928db0d0766719eada3e4c4cc1828d476650bfb4bee81faa61663e466f758ed621673ce968a117b12aceb47446d7fbcd10d31644bf4a0013a515cc6a9689c1f70a067d135b0d10f06ab7884ab1f6b9208d3e35bd5eaa5fa77f9af0999ea"], &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x40, 0xe, 0x25, "daf431b4e1bc18151083f652f4dc4b9c385b59f05345d2e41370974228a8abb297e5c43418"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x8d8f, 0x81, 0x5, 0xff, 0x5, 0x81, 0x4, 0x5, 0xeb, 0x62a4, 0xd, 0x7ff}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002210"], 0x0}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000840), 0x30480, 0x0) 4m15.196957884s ago: executing program 1 (id=729): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4m15.185445224s ago: executing program 1 (id=730): syz_open_dev$char_usb(0xc, 0xb4, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4m15.117815595s ago: executing program 1 (id=731): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) getrandom(0x0, 0x0, 0x600) 4m15.117666955s ago: executing program 1 (id=732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000400)='.\x00', 0x200) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000564000/0x4000)=nil, 0x4000}) 4m0.001308408s ago: executing program 32 (id=732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000400)='.\x00', 0x200) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000564000/0x4000)=nil, 0x4000}) 3m43.629858399s ago: executing program 2 (id=1073): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7fffffff, 0xb, 0x4, 0x5}, 0x10) sendmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f9531b5fd89a1871b09a6a524debb09a3ce553509e7d647c3f89460993c86f91d57e8feba5a913e3d584afc052cafc67cd5e0e8686572fcdd843230a01262389012052b6bfb76e9c22b31ee5b124725c9796b70b010e318ff4973ca1db339f632484a01d0440a1c9a48c222ac2c59205f8139b6cb96589e37d1a81896e7a298023b3822376affc30d1a437deefae8d77ef85038e77344e31e8872afbd7262481d91d400f0c21fdacf843001cdeb6ce751fc40fa475bc273b1f4f54f7de35f572e8f588a4", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="b38d7f181670b3bdeea289d55ec5b3da98dfdedcb3995a3f922069df4e0806edd3d6ad14c5d79f7b5a3ddd15c691820fa31585bead7f87601d6142ff610509f5d6aec3f938c80ff88b2f1177da7833868636afacf6f5a8eca2cbe41590ee874f822ab75c5df3494f460f2c917bd981832e0bc10e026d125a8563cf9682a771ec7524ef17c94d5c94f84785beba22fb15081d1eef2e9a5e63a09d79f99a066ccf3973c48da3884e8f15bafc7bd10b221ae1e2d2580761c306d6cbc808", 0xbc}, {&(0x7f0000000080)="e46918deba1bfe8e5c0aa6bd2cd5e482fa13b1fefcfa2f41bfe8ae1ec9eecbabb8d8f41d3d5f32750f1dca6690bef439c9bafd88e9d5c0", 0x37}, {&(0x7f00000002c0)="0d05479b1329591b2452d415ffc9fa593c1056b48b033cc7400868d82aa9f6d32b0cbb95241ad57930f02eed874d0c4eedd2a5bd243986e06622e1051d4ee8c0fc58e1b39d0307a464a7caf88b1d2dc547c35de37e2a256e7ae69b19fc43fe03034f70ff5b39bc3be7a4ba", 0x6b}, {&(0x7f0000000340)="64e2cc98e7750c8ae11dfd2b3a17da3d24d7ce6008d8d3d92cc26a7a12075f9cabc841db88aa30", 0x27}, {&(0x7f0000000380)="880db3101c68bb6c935ff76e558c4d62f3ceb82c13eeae011d02f639234d766202e2556321173935bfcee05155bbe26cabdf39256670498c2dfa96e0793741e5903c67bc3b50441cc1145a4f880368ac37235a9491e64cc1f7e0adbe85074c940b948161e3d392135e6c30354a16638b7f8f8de1e95c2bc4d096e9c5b695b3c7964dd2f8c981ed700839412759c3e12c75ce80585d2e376d087a3da41d4e16ad9f5472070bc85c186feb7e9d0125566496349801c92df35d7d24940002f2fae5d95a19b3ed13c2", 0xc7}, {&(0x7f0000000480)="e705123adeb3ed93fd0cccb931a08dd8ae35b236d19b1ac35753", 0x1a}, {&(0x7f00000004c0)="844cabe6f07bfa5db7cb11f012b6569862b5e326995ae37c41472927918fbfb90c0a413c8db425d7188b81467c2015f3eb7d0a3a6fa2dc138312a0c5aed500907ae63392e5c073d0a1195f4048ac705d4961514ab9d3d9e9ed2ebae2a737c1f6ac5bc47d3d5266ac66d5a805b418d0488ca280cf7c4a9d0b85ca2752f5f3f487ea3bf17ab42b5441bf58983809af73e94d0fd93d3b5765f7465ed897efa5ef32f78dd9ccfdfc9affcba55068d186258b932e350e26aa53d693", 0xb9}, {&(0x7f0000000640)="af991d17e68bd269084fd5260bcadcb4a47c1ae5277f00a972d7cbe053ec800959c0d4980063c4c0a72a5c0d1f37ae6f187de76dfe4751cf72094f011ebb556c28b5c28c5dac496ed25087af028c48b1dfa1bbcaa757f2690b2901dbc3daac170e619e1694bb9697c49d6287e1e91221b3afbc8501cf6824bab8da9352fe269a42bf1e19f63bee0996a95f18fa27ccf402d539e25d13cda89f6fa190cdcc54761a86d1482ba96a291e92ff9b546741c14143e3893888e36ead3ebb2e347388b8221dd33ddceb99ef25", 0xc9}, {&(0x7f0000000580)}], 0x9, &(0x7f0000002200)=ANY=[@ANYBLOB="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"/5159], 0x1420}}, {{&(0x7f0000001c40)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001cc0)="aa8210fb888d72e3035df42555e0df59aa1254cee97eed2962302feb83d36014422220dd46bcb2009eae952cb1a6687aba7d6b67f209308134f669d645fccb4890e272563ac83aa1f4e9b3a26058900ee9d217f52afd5616e73b9104338594f626f182ee7ef1681d4355f76cb1695b0fa90c96d087d714f89ea8c56d4f61bf258ef9de0c7c5a563eb73e7d8ffa2fdb21f0890f573a0a255b0de9a6c7901888fcda5febacdc5a7a2d7559261bc76dbac266a74727a3cdb7aa4cf51f4c0eba5e357566ce1882f0fa82576764021ccf4a741cfc2f14e4cfec20dc7ab7f40573fe0a06e6eaf2cf88fa82", 0xe8}, {&(0x7f0000001dc0)="321aa1259012b155652e1231c9332609e2b5a3e598e0e6169de92248adcb3afc44a7f1394c505b66050db8ede3a480b5ad6b124546b5c4129924fa6bcab002665418d6ba2d3f2ab4896dc5a07cf1a13d6f51fd3ab03acffc3f2dd42a5776adb74b20b46ccf80f0e5768333da02f4ea8e3c840aebefb009edd1e17c0524216bafc34b91b1d3394fb6cf34b8f5c1cb69b4173adc99e17d37c571bde4ae825006", 0x9f}, {&(0x7f0000001e80)="d0682cd1db1e6867348deea55dc19b2b5228992ae5510955390b705691865c022bb6e1940f2365347c63ae2e6d5550a85e5da34b38ca41b3d94491d7a57495274bdce580928f", 0x46}, {&(0x7f0000001f00)="7c3eb8075b692943509dc927ed8ff8e54efbbd8efaa4ff849fcd694e3f38688383bcb706708c30bba5c86dd47de9b4cb9394959488276a08a8ec7550a1bf42217d1c1adf8721492fb2a2cde804f46ecbad2e7ffae4e5c5b9353409360e0192861f049984adc75311fa2bd209daeac471d80d3b52cfd25586007973fed9d38e52b399fd4e48b6b2b89d165190eb6e04f617de5fe80fe31c64", 0x98}, {&(0x7f00000005c0)="05d8", 0x2}, {&(0x7f0000001fc0)="a5685550563396aba5f4f65a2cfc8ce6b89370619566bda257545ee99eb77bed66e378baddb06e1218f80f44315830a2d581d7580021f4bc61116b41db7c06ac50f2abe795bae19721dcd316fea1569d9aa60326d907b9036d07afe1095119c7d2e3399c12c3f7e7716bdf5e9f0bd9dcd7347c3596559904644027d87e279a1e405be563558bbc8780792d54fa1b92e3b1f816dd2137f9eb7e0c6fb5fc21b66c75df8ab5e097e1c93d1d53436824af3da3d4837fe1a4f094a3cf9efcfde8c35aeb89a837efea58c4c33b1af328de89", 0xcf}], 0x6}}], 0x3, 0x20040040) r1 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r1, &(0x7f0000000800)="61aa195a149efcd1ba9a556bbba56e0950d9e51faae39ac22c63aa35add0e763f75391245a28cc8ca544dc913005fd65dbe199e9f5bab58c0ba5ca6c6695842bdfab111b5912bdf80cd1715d5baae04b936a5b2b8ae6325a4b5e650fb73d13e452e5eb3e7553c636c84922eaa40e58945f144246fdc6064066ca7d913dd1c1a7c29d8f2678e1d461a58e97ec6bc057b67269158851ba2f98f691e0656c2dca95568ec94439f7affbfbfd4d85fe4b08e3beafbdb0e2c2edbd2c7c5cdcdee80be741326df68c8cf6cd1156a818a3dcee6ef8922d895a2b90610d49c0796bc4e6830f410fe25b1024d49089d1a0bd6c9f8c1e2794310149", 0xf6, 0x4080, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x1) 3m43.557830409s ago: executing program 2 (id=1074): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='lock i'], 0xc) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0xc, 0x4) 3m43.55758666s ago: executing program 2 (id=1075): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x4, 0x6, 0x10, @loopback, @loopback, 0x80, 0x7800, 0x1, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x4, 0x6, 0x10, @loopback, @loopback, 0x80, 0x7800, 0x1, 0x4}}) 3m43.51945345s ago: executing program 2 (id=1076): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) open(&(0x7f0000000100)='./file0\x00', 0x400100, 0x184) 3m43.50506667s ago: executing program 2 (id=1077): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='+-{*%+\\((}&S/{\x00', 0xfffffffffffffff9) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "9e2a5daeb0d4ed709b5ab0cf44f53065f56cde28b4e222cdc8574d3862c640907e31009182b3731fe5244b4dca0f7b1dc419d9312791378315ece9536d11fb89", 0x39}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2}) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x4, 0x4) 3m43.349800562s ago: executing program 2 (id=1078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000400)=[@register_looper], 0x0, 0x0, 0x0}) 3m43.348605372s ago: executing program 33 (id=1078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000400)=[@register_looper], 0x0, 0x0, 0x0}) 3m21.956491704s ago: executing program 5 (id=1337): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x3, 0x4) 3m21.856468645s ago: executing program 5 (id=1340): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=""/25, &(0x7f0000000080)=0x19) 3m21.782620536s ago: executing program 5 (id=1342): r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @empty}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000000000, 0x401, 0x67b}) 3m21.713446767s ago: executing program 5 (id=1346): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, 0x0, 0x0) accept4(r0, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) 3m20.916920289s ago: executing program 5 (id=1352): setgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000000100)) (async, rerun: 32) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc0046209, 0xfffffffffffffffe) (rerun: 32) 3m20.857553279s ago: executing program 5 (id=1353): futex(&(0x7f0000000000)=0x2, 0x8, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000001bc0)=[{&(0x7f0000001740)="177170f257", 0x5}, {0x0}, {&(0x7f00000018c0)="60564d8d", 0x4}], 0x3) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020f003176c40000000000109022400010000000009040000120701030009050102001000000009057d0200"], 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="490525bd7000fd00990002"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x8c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'sit0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x40048010) ftruncate(r0, 0x5) 3m5.545509375s ago: executing program 34 (id=1353): futex(&(0x7f0000000000)=0x2, 0x8, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f0000001bc0)=[{&(0x7f0000001740)="177170f257", 0x5}, {0x0}, {&(0x7f00000018c0)="60564d8d", 0x4}], 0x3) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020f003176c40000000000109022400010000000009040000120701030009050102001000000009057d0200"], 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="490525bd7000fd00990002"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x8c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'sit0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x40048010) ftruncate(r0, 0x5) 2m45.971108551s ago: executing program 6 (id=1809): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x3, r0, 0x6}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 2m45.105180313s ago: executing program 6 (id=1817): sched_setscheduler(0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3e}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000106}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000000)={0x6, r0, 'id1\x00'}) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0xc87) 2m44.952208765s ago: executing program 6 (id=1818): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0}}], 0x1, 0x1) 2m43.709604393s ago: executing program 6 (id=1820): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x17, 0x0, 0x101}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r4, 0x20}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffa) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000002200064000000000e100000000000000"]) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x200) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m43.628755914s ago: executing program 6 (id=1821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read(r1, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x2b}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m43.486540806s ago: executing program 6 (id=1828): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x25c68000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r1, &(0x7f0000009800)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000000), &(0x7f0000000040)=""/85, &(0x7f00000000c0)=""/142, 0x80a0000}) close_range(r0, r0, 0x0) 2m43.443383347s ago: executing program 35 (id=1828): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x25c68000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r1, &(0x7f0000009800)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000000), &(0x7f0000000040)=""/85, &(0x7f00000000c0)=""/142, 0x80a0000}) close_range(r0, r0, 0x0) 2m21.239623689s ago: executing program 0 (id=2113): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0x88ff}}, 0x1c, 0x0}}], 0x1, 0x0) 2m21.18571083s ago: executing program 0 (id=2114): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0xf0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x10, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m21.17937847s ago: executing program 0 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/130, 0x82) 2m21.166820111s ago: executing program 0 (id=2116): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0x20, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x43, 0x1c9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x400, 0x18f4fae3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}, {r3, r4/1000+60000}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r2, &(0x7f0000004300)={0xfdef}, 0x50) 2m21.147243131s ago: executing program 0 (id=2117): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002180)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303830303031303030a556357f303034303030302c757365725f0f3cf60537d54bd269643d", @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) openat$incfs(r3, &(0x7f0000000000)='.log\x00', 0x107040, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000007080)={&(0x7f0000006400)={0x50, 0x0, 0xfffffffffffffff9, {0x7, 0x2b, 0x40, 0x20, 0x8000, 0x4, 0xfffffffc, 0x2ccb, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 2m20.909682884s ago: executing program 0 (id=2119): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x9d, 0x7, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000007c0)={{r0}, r1, 0x4, @unused=[0xe50e, 0x5, 0x1, 0x2], @devid=r2}) read(r0, &(0x7f0000000140)=""/104, 0x68) 2m20.875127905s ago: executing program 36 (id=2119): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x9d, 0x7, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000007c0)={{r0}, r1, 0x4, @unused=[0xe50e, 0x5, 0x1, 0x2], @devid=r2}) read(r0, &(0x7f0000000140)=""/104, 0x68) 2m18.903737493s ago: executing program 8 (id=2138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000680)={{0x2, 0x0, 0x80, {0x0, 0x2, 0x2}}, "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", "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"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 2m18.869405203s ago: executing program 8 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x87) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x5, @private0, 0x80}}, {{0xa, 0x4e24, 0x6f2525bd, @private2, 0xd}}}, 0x108) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x503, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x400d800) 2m18.869238073s ago: executing program 8 (id=2140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x104}}, 0x0) 2m18.838945503s ago: executing program 8 (id=2141): modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e488a8"], 0x66) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8) r5 = accept(r3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) sendto$inet6(r5, &(0x7f00000005c0)="99ba10772a8aa4297bf288997cd41f001331380641e2bf9e26255e7f68a8f800a8bda4b19f7937a40d1aea8a681a1f282753750fec1bf01c4e88f57c46c44af6d8e4e1ed0eb649659f4c49e78e45ada51fd4cc548f3412d93631e387d631a11087c3820531f1bbe78f903440deb89b50c2f3d115b54cca7f09f34884815b8dfcec7916728809529904aa64c3c901ce897b98616d8fa3d05318e764c6b5d8ae770ad492684341bfcc8107a97bba58000b2d8f2f603fa81371f0845b1597b7", 0xbe, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x102) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0x0) 2m18.665785576s ago: executing program 8 (id=2142): r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0x4018aee3, &(0x7f0000000180)=""/216) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x0, 0x40, 0xe757, 0x5, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x66, 0x0, 0xf8, 0x2f, 0x0, @multicast2, @remote}}}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x306, @random="659fba0671e5"}, 0x68, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4c801, 0x0) 2m18.643335727s ago: executing program 8 (id=2143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/122, 0x7a) (async) read(r2, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200a82, 0x0) 2m18.608549127s ago: executing program 37 (id=2143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/122, 0x7a) (async) read(r2, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200a82, 0x0) 3.304943654s ago: executing program 3 (id=4166): r0 = getpid() capget(&(0x7f0000002580)={0x19980330, r0}, &(0x7f00000025c0)={0x0, 0x2, 0x0, 0x4, 0x1, 0x101}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x28a000, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, r2, 0xf}) 3.303396103s ago: executing program 3 (id=4168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)=0xfffffffffffffffb}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x285, 0x0, 0x8be}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xf4, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc2, 0x2, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xb, 0xa, 0x7f}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x24, 0x0, 0x2, 0xff, 0x19}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0xd2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x804}}]}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x3) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) fcntl$setstatus(r0, 0x4, 0x4400) 2.12978711s ago: executing program 7 (id=4182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002400)=ANY=[@ANYBLOB="0100000000f2ffff73000040"]) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000180)={0x8001, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}}}, 0x108) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x9, 0x10, 0x0, 0x7f, 0x9, 0x1, 0x7, 0x7f, 0x2, 0x5, 'syz1\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r8, 0xffffd000) 2.003446572s ago: executing program 7 (id=4183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008400}, 0x20000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030001c0"]) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x121642, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0x8080000, 0x2a, &(0x7f0000000000)=""/42}, {0x4000, 0xee, &(0x7f0000000200)=""/238}, {0x3000, 0xaf, &(0x7f0000000300)=""/175}, {0xdddd1000, 0x1b, &(0x7f0000000100)=""/27}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000006c0)={{0x8080000, 0x10000, 0x10, 0x84, 0x40, 0x0, 0x81, 0x40, 0x9, 0x8, 0x6, 0x6}, {0x3000, 0x0, 0xf, 0xe, 0x3, 0x6, 0x6, 0x5, 0x6, 0x5, 0x4, 0x9}, {0x0, 0xffff0000, 0x10, 0x5, 0x7, 0x5, 0x2, 0x61, 0x4, 0x8a, 0x3, 0x2}, {0x4000, 0x3000, 0x4, 0xa, 0x20, 0x4, 0x3, 0x4, 0x93, 0x0, 0x1, 0xd}, {0x4, 0x1, 0xe, 0x60, 0x7f, 0xb, 0x7, 0x0, 0xf5, 0x8, 0x7, 0x3}, {0x8080000, 0x0, 0xf, 0x9, 0x1, 0x6, 0x8, 0x4, 0x80, 0x90, 0x7f, 0x3}, {0x4, 0x0, 0x1, 0x1, 0x3, 0x8, 0x6, 0x9, 0x3, 0x7f, 0x0, 0x29}, {0x8000000, 0x10000, 0x8, 0x8, 0xc, 0x2, 0x1, 0x7, 0x4c, 0xff, 0x2, 0xb}, {0x2000, 0xab8}, {0x8000000, 0x5}, 0x0, 0x0, 0xd000, 0x4081, 0x4, 0x8901, 0xd000, [0x9, 0x0, 0xfffffffffffffffe, 0x2]}) write(r6, 0x0, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7}]}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r12, &(0x7f0000000240)={0x0, 0x25, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="a6723b2ba00000145a4d000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000001000000030000c002000000a3bb645553fbf26c"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r8, 0xffffd000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) 1.725045446s ago: executing program 7 (id=4186): r0 = userfaultfd(0x80001) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0xfffffffffffffff5, 0x0, {{0x40, 0xff, 0x679, 0xfffffffffffffffb, 0x3, 0x8, 0x3, 0x26}}}, 0x60) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r3, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}], 0x4}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x12040, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f0000001440)="44dd161d804bbb8acb6696d5cec8acfe004975e676bd1b52233a17ebed7fbec2666b5e366c05305bbee913440277624892577cf4d3b97fb5e623b3880a9fc70e83a7173c1d87ebd62fc9dc45830749be987e7511edc65c2eed49f9d620e8d6844dc1e6e6df866e49bfb00085308a8725bfc82cba52ce54263857e3f40ada72b3611c52573c11d695699a49690362c8a70c1b0a857fdbf41db76c1d451de31efcd357a3e53affdd270234998d66be20addba8e53d0a1a8a84971fe85b8d6afd7da4a8418f199d828e9a946c4b415260bada58d0", 0xd3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000f09043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.477598759s ago: executing program 9 (id=4189): modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x0, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x400, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x6, 0x100000, 0x1000, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000000c0)={0x7, 0x1000, 0x1000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x10) (async, rerun: 64) modify_ldt$write(0x1, &(0x7f0000000100)={0x4, 0x20001000, 0x0, 0x1}, 0x10) (async, rerun: 64) modify_ldt$write(0x1, &(0x7f0000000140)={0xfffffc01, 0x20001000, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000180)={0x8, 0x0, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1}, 0x10) (async) modify_ldt$write(0x1, &(0x7f00000001c0)={0x2c89, 0x20001000, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000200)=[@uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x7ff}, @cpuid={0x2, 0x18, {0xfffff10d, 0x3}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x89, {"48b880000000000000000f23d80f21f835c00000100f23f8c7442400f7000000c7442402e5c70000ff1c24440f20c03501000000440f22c066b8d9008ed80f20e035002000000f22e00f01c0440f1b8600400000660f219366baf80cb8888d2e85ef66bafc0cedb94f030000b80f000000ba000000000f30"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x4e, {"66b86a008ec0660fc77014660f38816d09b8010000000f01c166ba4000b00eeec4e3215ee8f766baa100b828120000ef3e420f01df6541862865410f30"}}, @code={0x1, 0x4e, {"360fc7aa96cc0ada66b8fc008ee067470f2002c4a17c5403c481f8528f54d90000430f180764420f00520ff3479066bad00466b833cb66efc4826516f2"}}, @code={0x1, 0x53, {"0f3266baf80cb888d4e68cef66bafc0ced66b8a7000f00d866b897008ed0c4e27101cd362e660f38824c3205c422a107ebc422f9209e0c528a32c482f923fd40d3c1"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @cpuid={0x2, 0x18, {0x8, 0xc0c}}, @code={0x1, 0x4d, {"460f01ca0fc79ce90a000000670f686b71400fe1afb2ac0000b9830200000f320f060f07470f019e39000000c4a24d8e5ef866ba420066b8e79866ef"}}, @uexit={0x0, 0x18, 0xd}, @uexit={0x0, 0x18, 0x40}, @cpuid={0x2, 0x18, {0x762, 0x400}}, @code={0x1, 0x45, {"0f01c2b9180600000f324c0fc76b3c0f01c2c4427d20487766bad004ed0f20c0400f00113e3e660f388243b03edfa4c4e5d7711b"}}, @cpuid={0x2, 0x18, {0x7}}, @uexit={0x0, 0x18, 0x20000000}, @code={0x1, 0x82, {"3e3e66400fdb9500880000f20f5903c744240000900000c7442402ba000000c7442406000000000f011424470f01ca66baf80cb8e0ff2883ef66bafc0c66b8613566ef66ba420066b8dc4066eff3430fc772b0c4632d7864afad54b9920b0000b800000000ba000000000f3036450f01df"}}, @cpuid={0x2, 0x18, {0xec, 0x6}}, @cpuid={0x2, 0x18, {0x12, 0x100}}, @cpuid={0x2, 0x18, {0x7, 0x6}}, @cpuid={0x2, 0x18, {0x0, 0x2}}, @code={0x1, 0x5b, {"b9010a00000f32d9fd0fc7f966430f5a8900a00000f0468128fc000000f30f00597f66baf80cb8f015b68bef66bafc0cb85d000000ef65260f3266f2460f015d0f66420fc7b700980000"}}, @cpuid={0x2, 0x18, {0xffff, 0xcee}}, @code={0x1, 0x49, {"c4619559cf66baf80cb832445281ef66bafc0c66ed3e410fc7280f0945f4c4e200f3ce440f01f80f01c4c4617d280c1b262665660fc7706d"}}, @cpuid={0x2, 0x18, {0x2, 0xec}}], 0x540}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000780)={0x2, [0xffffffffffffff0f, 0x4]}) (async) modify_ldt$write(0x1, &(0x7f00000007c0)={0x4, 0x20000800, 0x400, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000800)={0x1, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000840)={0xff, 0x1000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000880)={0x3, 0x20000000, 0x4000, 0x1, 0x3, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000008c0)={0x9, 0x100000, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) (async, rerun: 64) modify_ldt$write(0x1, &(0x7f0000000900)={0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) (async, rerun: 64) modify_ldt$write2(0x11, &(0x7f0000000940)={0x892, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000009c0)=0x3138) (async) modify_ldt$write(0x1, &(0x7f0000000a00)={0x10001, 0x100000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000a40)={0x9, 0x0, 0x2000, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) (rerun: 32) modify_ldt$write(0x1, &(0x7f0000000a80)={0x3ff, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000ac0)={0x33, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000b00)=0x7) (async) modify_ldt$write2(0x11, &(0x7f0000000b40)={0x4, 0xffffffffffffffff, 0x400, 0x1, 0x2, 0x1}, 0x10) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000b80)={0x0, r3, 0x5, 0xdf9d, 0x2, 0xf17}) (async, rerun: 32) syz_usb_ep_write(0xffffffffffffffff, 0xc, 0x5d, &(0x7f0000000d00)="882f9c313e96fee2abbcd2f2e0c9232fac400c446304837030120fbaf78d7078fb6c92ccccfdb2411ae57d5b4f8d3d3566600d8ab8f869fe2a0fa166a03a83e945229fa720aacc35272170c32a6f9421f505da1b552d6593a542e39d04") 1.477410709s ago: executing program 9 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090250000101000004090400001002060000052406000005240000000d240f010004000000000000011524120008a317a88b045e4f01a607c0ffcb7e392a09058202000200000009050302ff030000002517dd5432f7cb69a8230a7f397ab9eb07a7ebf8de9729807b580d924784e2c71b606fb16df929694584c309b9e4da63d10b69dc1f82ef5008ae8df05a0f874a4eec1c55b923e2c70e9902071f5debd96bb37c10d69122383e22b1d29709da8a77a78cf588907ddba6886605be4ca9ab72d7e234c7031b92be49393227b48879f7792d7e0237eb3d0e28af39d334657cf973089fcb62d8bc80156492ca42bf5840a93b6ed78561fc176e2358e0bc84d94b50e81b76c40b83fc862059bf06bef34e96858f9d66"], 0x0) 1.37589816s ago: executing program 4 (id=4192): r0 = epoll_create(0x5) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x5, 0x8}, 0x100, './file0\x00'}) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10001, 0x25ba}) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4, 0x8}) r1 = epoll_create(0xfffffff6) setxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@md5={0x1, "91b37c6e22c58a626b4dcf05ab77b63b"}, 0x11, 0x1) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x284000, 0x182) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={{r3, r4/1000+10000}, {0x0, 0xea60}}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x440000, 0x0) write$rfkill(r5, &(0x7f0000000440)={0x8000, 0x9, 0x1}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000500)={'security\x00', 0x0, [0xa, 0x3, 0x81, 0x564b42d, 0x5]}, &(0x7f0000000580)=0x54) setxattr$trusted_overlay_redirect(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)='./file0/file0\x00', 0xe, 0x0) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000680), &(0x7f00000006c0)=0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000700)={0x2, 'tunl0\x00'}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000740)={0x8, 0xb, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @pad1, @pad1, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x38, {0x3, 0xc, 0xa, 0x5b2, [0xb17, 0x5, 0x3, 0x4, 0x7, 0x8]}}, @pad1]}, 0x68) write$binfmt_script(r6, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'tunl0\x00'}, {0x20, '\xf2:!.,'}, {0x20, 'security\x00'}, {0x20, '(@/%@\\$,}\xa9-% '}, {0x20, '!,,)!:{!'}], 0xa, "de258f7351ab9a8f5ddfefb74e066209edb9b20fb99c5f7aa5a36ebfdedc9b520341160328c0521f3c477d6965e921b383eabf514e87ff77be1c926e48d5ae82c2a69c1ccdd279f175ea5cc0fb72cc32c9ce6bbe3a1fa0a2aebaaa2152fc901fe1448c68ba3cf859a27ddfcb023c0bae65c34a00db46d348fc0e8a59821388b55bad55e1e65981f3ce5808c0ead80a46ead8e9b1b21636d8f9"}, 0xd2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r7 = accept4(r6, &(0x7f00000008c0)=@can, &(0x7f0000000940)=0x80, 0x80000) lseek(0xffffffffffffffff, 0x2, 0x6) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r7) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffc1fe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4e10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb37}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20044844}, 0x4000000) open_tree(r2, &(0x7f0000000b40)='./file0\x00', 0x9800) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1f8, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7660ab60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb9585fb}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040) r9 = socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000000e40)={0x80000000}) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000e80)=@md0, 0x0, &(0x7f0000001000)) 1.281452342s ago: executing program 4 (id=4193): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x12) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x13, r2, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@arm64={0x7, 0x9, 0x10, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r4, &(0x7f00000023c0)=ANY=[@ANYBLOB="000001"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.256158942s ago: executing program 4 (id=4194): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000240)=""/130, 0x82}], 0x6, &(0x7f0000000380)=""/95, 0x5f}, 0x10000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x40000, 0x61) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000280)={0xbc, 0x0, 0x4}) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x22, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r8, 0x10e, 0x2, 0x0, &(0x7f0000000080)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000719000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/138, 0x8a, 0x0, &(0x7f00000006c0)=""/3, 0x3}, &(0x7f0000000740)=0x40) getsockopt$inet6_int(r4, 0x3a, 0x1a, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000be9000/0x1000)=nil, 0x1000, 0x15) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000180)={0x2, 0x9}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ca000000", @ANYRES16=r9, @ANYBLOB="080028bd7000fbdbdf2507000000540001801400020076657468305f6d6163767461700000000800030001000000080003000100000008000300020000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400018008000300000000000800030000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) 978.533567ms ago: executing program 9 (id=4195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d00210000000000000000000700000005000000000000000a0002"], 0x34}}, 0x0) fdatasync(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000006c0)="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", 0xfc) r4 = socket$nl_audit(0x10, 0x3, 0x9) readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000440)=""/31, 0x1f}], 0x1) sendmsg$AUDIT_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbff, {0x8, 0x1, 0x1, 0x0, 0xfff, 0xfffffff9, 0xaa, 0x1, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) pselect6(0x40, &(0x7f0000000040)={0x2f, 0x34, 0x7, 0xc8f, 0xff, 0x8, 0x8, 0x7}, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffd}, &(0x7f0000000180)={0xfffffffffffffffb, 0x38, 0x6, 0x1000, 0xfffffffffffff9c9, 0x9, 0x8, 0x442946f8}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x5c30]}, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x0, 0xfc}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) 813.626239ms ago: executing program 9 (id=4196): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x12) sendto$inet6(r1, &(0x7f0000000000)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000024"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) shutdown(r1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0xfffffff7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 422.467354ms ago: executing program 7 (id=4197): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x20, 0x1, 0x2c5, 0x31f, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @private=0xa010102}}}}) 407.219954ms ago: executing program 4 (id=4198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 349.764515ms ago: executing program 7 (id=4199): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) unshare(0x6020400) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000006300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, r0, 0xbc557000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'gre0\x00'}) r2 = userfaultfd(0x1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'pim6reg\x00', 0x517}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) lseek(r0, 0x8000000000000000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 349.599605ms ago: executing program 4 (id=4200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="000001"], 0x53) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 348.176725ms ago: executing program 4 (id=4201): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20, 0x50}, 0x40001) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)={{0x107, 0x4, 0x1, 0x0, 0x1b9, 0x4, 0x299, 0xd}, "", ['\x00', '\x00']}, 0x220) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) close(0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r2, &(0x7f0000002440)={0x2020}, 0x2020) getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x402102, 0x40) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 347.883795ms ago: executing program 7 (id=4202): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r2, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201090224000100000000090400000103000000092100000001220500090581030800047f00"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000f40)={0x2c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200005000000ec04470eb7"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x40040) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYRES8=r4], &(0x7f0000000080)=0x24) lseek(r0, 0x0, 0x5) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x11, 0x300) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0x4) 199.700307ms ago: executing program 3 (id=4203): munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x149140, 0x6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) fsetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x3) 174.500597ms ago: executing program 3 (id=4204): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0xfffffff9, 0x4) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1d1641, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000600"], 0x48}}, 0x0) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f00007af000/0x2000)=nil, 0x2000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) (async) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x606, 0x3, @empty, 0x3}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000300)=[@register_looper, @increfs={0x40046304, 0x1}, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}], 0xf5, 0x0, &(0x7f0000000340)="54e42d650e78fc8731fedb8308f3bb09a2d00f8ae07df8fa983a6c87cdb0dfb7a6c12a6cef682db693fa3350e1295b56c582677288565c1a9bd3f87101edf598707f02462227baff38531b92efe04d91bd54ef49567b71471e16cb7c561b0ba17a5c2e1e77fb99f72644ed6bcac574698aff3cc23362f73f87db1ae3e15e55f4f27bb1ec2ea61017c9b4da019c2beb09aedcb3fe15161a583b3fc0734511b3101130e303e4fc2f01790c0de2bdf1837af82cce6a36db09eaf5d5352feb34f7ccf09d9f962367726b8274391da6511dd09349a4fcaffd0fd064f2de285a55ef7b8e68d58a1bf6af2cfedcdab74c29602d42a7cb688b"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00007a2000/0x2000)=nil, 0x2000, 0x16) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) r7 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) fsmount(r7, 0x1, 0x70) 109.695559ms ago: executing program 3 (id=4205): mmap(&(0x7f000092b000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x26e1, 0x0) close(r2) syz_clone3(&(0x7f0000001ac0)={0x322004100, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0xc5ddb000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0xd1383000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r3, 0x0) 109.211478ms ago: executing program 3 (id=4206): r0 = userfaultfd(0x80001) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0xfffffffffffffff5, 0x0, {{0x40, 0xff, 0x679, 0xfffffffffffffffb, 0x3, 0x8, 0x3, 0x26}}}, 0x60) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r3, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}], 0x4}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x12040, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f0000001440)="44dd161d804bbb8acb6696d5cec8acfe004975e676bd1b52233a17ebed7fbec2666b5e366c05305bbee913440277624892577cf4d3b97fb5e623b3880a9fc70e83a7173c1d87ebd62fc9dc45830749be987e7511edc65c2eed49f9d620e8d6844dc1e6e6df866e49bfb00085308a8725bfc82cba52ce54263857e3f40ada72b3611c52573c11d695699a49690362c8a70c1b0a857fdbf41db76c1d451de31efcd357a3e53affdd270234998d66be20addba8e53d0a1a8a84971fe85b8d6afd7da4a8418f199d828e9a946c4b415260bada58d0", 0xd3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000f09043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 15.09257ms ago: executing program 9 (id=4207): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) read(r0, 0x0, 0x106) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000004240)=@ethtool_channels={0x3d, 0x80000001, 0x7, 0x6, 0x3, 0xf44, 0x9, 0x1, 0x4a}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 0s ago: executing program 9 (id=4208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9610000005345204c806e7578a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000000000167eaa25"], 0x4c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) fremovexattr(r1, &(0x7f0000000080)=@known='user.incfs.metadata\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lseek(r3, 0x10001, 0x0) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ys_call+0x2c2c/0x2ee0 [ 295.601267][ T9160] do_syscall_64+0x58/0xf0 [ 295.601290][ T9160] ? clear_bhb_loop+0x35/0x90 [ 295.601318][ T9160] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 295.601344][ T9160] RIP: 0033:0x7f1d95d8e929 [ 295.601360][ T9160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.601377][ T9160] RSP: 002b:00007f1d96b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 295.601399][ T9160] RAX: ffffffffffffffda RBX: 00007f1d95fb5fa0 RCX: 00007f1d95d8e929 [ 295.601414][ T9160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 295.601426][ T9160] RBP: 00007f1d96b73090 R08: 0000200000e68000 R09: 0000000000000010 [ 295.601439][ T9160] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 295.601452][ T9160] R13: 0000000000000000 R14: 00007f1d95fb5fa0 R15: 00007ffd0f9caea8 [ 295.601467][ T9160] [ 295.736661][ T378] usb 10-1: device descriptor read/8, error -71 [ 296.005201][ T378] usb usb10-port1: unable to enumerate USB device [ 296.073317][ T36] audit: type=1400 audit(2000000132.528:1387): avc: denied { link } for pid=9172 comm="syz.3.3394" name="file1" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.822583][ T9195] rust_binder: Error while translating object. [ 296.822659][ T9195] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 296.829081][ T9195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:126 [ 297.455031][ T378] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 297.606156][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.617418][ T378] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 297.626577][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.635959][ T378] usb 4-1: config 0 descriptor?? [ 298.087901][ T9259] netlink: 'syz.7.3425': attribute type 1 has an invalid length. [ 298.229029][ T9263] kvm: user requested TSC rate below hardware speed [ 298.237298][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 298.237322][ T36] audit: type=1400 audit(2000000134.698:1393): avc: denied { read } for pid=9262 comm="syz.7.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.244686][ T9224] usb usb5: usbfs: process 9224 (syz.3.3412) did not claim interface 32 before use [ 298.277306][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 298.283340][ T378] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 298.299335][ T378] usb 4-1: USB disconnect, device number 108 [ 298.372447][ T36] audit: type=1400 audit(2000000134.828:1394): avc: denied { mount } for pid=9269 comm="syz.9.3429" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 298.635061][ T307] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 298.786343][ T307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.797655][ T307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.807809][ T307] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.820953][ T307] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.830155][ T307] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.839208][ T307] usb 10-1: config 0 descriptor?? [ 299.022624][ T9274] FAULT_INJECTION: forcing a failure. [ 299.022624][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 299.035659][ T9274] CPU: 1 UID: 0 PID: 9274 Comm: syz.3.3431 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 299.035693][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.035705][ T9274] Call Trace: [ 299.035713][ T9274] [ 299.035721][ T9274] __dump_stack+0x21/0x30 [ 299.035763][ T9274] dump_stack_lvl+0x10c/0x190 [ 299.035789][ T9274] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.035815][ T9274] dump_stack+0x19/0x20 [ 299.035832][ T9274] should_fail_ex+0x3d9/0x530 [ 299.035851][ T9274] should_failslab+0xac/0x100 [ 299.035874][ T9274] __kmalloc_noprof+0x69/0x450 [ 299.035891][ T9274] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 299.035911][ T9274] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 299.035930][ T9274] genl_family_rcv_msg_doit+0xcd/0x330 [ 299.035947][ T9274] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 299.035964][ T9274] ? selinux_capable+0x38/0x50 [ 299.035983][ T9274] ? bpf_lsm_capable+0xd/0x20 [ 299.036003][ T9274] ? security_capable+0xcf/0xf0 [ 299.036019][ T9274] ? ns_capable+0x91/0xf0 [ 299.036039][ T9274] genl_rcv_msg+0x609/0x7a0 [ 299.036055][ T9274] ? __cfi_genl_rcv_msg+0x10/0x10 [ 299.036076][ T9274] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 299.036097][ T9274] netlink_rcv_skb+0x22b/0x4a0 [ 299.036120][ T9274] ? __cfi_genl_rcv_msg+0x10/0x10 [ 299.036136][ T9274] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 299.036157][ T9274] ? rwsem_read_trylock+0x2b1/0x660 [ 299.036176][ T9274] ? down_read+0x79/0xe0 [ 299.036193][ T9274] ? __cfi_down_read+0x10/0x10 [ 299.036210][ T9274] ? is_vmalloc_addr+0x11/0x40 [ 299.036234][ T9274] genl_rcv+0x2c/0x40 [ 299.036249][ T9274] netlink_unicast+0x8c6/0xa60 [ 299.036270][ T9274] netlink_sendmsg+0x7f0/0xaf0 [ 299.036295][ T9274] ? __cfi_netlink_sendmsg+0x10/0x10 [ 299.036319][ T9274] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 299.036343][ T9274] ? security_socket_sendmsg+0x33/0xd0 [ 299.036362][ T9274] ? __cfi_netlink_sendmsg+0x10/0x10 [ 299.036385][ T9274] ____sys_sendmsg+0xa15/0xa70 [ 299.036411][ T9274] ? __sys_sendmsg_sock+0x50/0x50 [ 299.036435][ T9274] ? import_iovec+0x81/0xb0 [ 299.036466][ T9274] ___sys_sendmsg+0x220/0x2a0 [ 299.036490][ T9274] ? __sys_sendmsg+0x280/0x280 [ 299.036513][ T9274] ? proc_fail_nth_write+0x17e/0x210 [ 299.036528][ T9274] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 299.036549][ T9274] __x64_sys_sendmsg+0x1eb/0x2c0 [ 299.036562][ T9274] ? fput+0x1a5/0x240 [ 299.036585][ T9274] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 299.036599][ T9274] ? ksys_write+0x1ef/0x250 [ 299.036619][ T9274] ? __kasan_check_read+0x15/0x20 [ 299.036637][ T9274] x64_sys_call+0x2a4c/0x2ee0 [ 299.036658][ T9274] do_syscall_64+0x58/0xf0 [ 299.036679][ T9274] ? clear_bhb_loop+0x35/0x90 [ 299.036702][ T9274] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 299.036725][ T9274] RIP: 0033:0x7f1d95d8e929 [ 299.036739][ T9274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.036754][ T9274] RSP: 002b:00007f1d96b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.036772][ T9274] RAX: ffffffffffffffda RBX: 00007f1d95fb5fa0 RCX: 00007f1d95d8e929 [ 299.036785][ T9274] RDX: 0000000000008090 RSI: 0000200000001540 RDI: 0000000000000004 [ 299.036795][ T9274] RBP: 00007f1d96b73090 R08: 0000000000000000 R09: 0000000000000000 [ 299.036806][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.036816][ T9274] R13: 0000000000000000 R14: 00007f1d95fb5fa0 R15: 00007ffd0f9caea8 [ 299.036837][ T9274] [ 299.397677][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.405953][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.413421][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.421022][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.428518][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.434756][ T9277] rust_binder: Write failure EINVAL in pid:75 [ 299.436094][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.449868][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.457453][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.465220][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.472685][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.480261][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.488021][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.495932][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.503441][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.511489][ T307] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 299.519774][ T307] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 299.529914][ T307] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 299.535807][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.558236][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.576890][ T36] audit: type=1400 audit(2000000136.038:1395): avc: denied { ioctl } for pid=9284 comm="syz.3.3436" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.651572][ T9298] FAULT_INJECTION: forcing a failure. [ 299.651572][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.665243][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.7.3441 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 299.665273][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.665285][ T9298] Call Trace: [ 299.665291][ T9298] [ 299.665299][ T9298] __dump_stack+0x21/0x30 [ 299.665333][ T9298] dump_stack_lvl+0x10c/0x190 [ 299.665351][ T9298] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.665371][ T9298] dump_stack+0x19/0x20 [ 299.665387][ T9298] should_fail_ex+0x3d9/0x530 [ 299.665406][ T9298] should_fail+0xf/0x20 [ 299.665422][ T9298] should_fail_usercopy+0x1e/0x30 [ 299.665441][ T9298] _copy_to_user+0x24/0xa0 [ 299.665462][ T9298] simple_read_from_buffer+0xed/0x160 [ 299.665488][ T9298] proc_fail_nth_read+0x19e/0x210 [ 299.665504][ T9298] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 299.665519][ T9298] ? bpf_lsm_file_permission+0xd/0x20 [ 299.665536][ T9298] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 299.665551][ T9298] vfs_read+0x278/0xb60 [ 299.665570][ T9298] ? __cfi_vfs_read+0x10/0x10 [ 299.665587][ T9298] ? __kasan_check_write+0x18/0x20 [ 299.665605][ T9298] ? mutex_lock+0x92/0x1c0 [ 299.665620][ T9298] ? __cfi_mutex_lock+0x10/0x10 [ 299.665634][ T9298] ? __fget_files+0x2c5/0x340 [ 299.665656][ T9298] ksys_read+0x141/0x250 [ 299.665674][ T9298] ? __cfi_ksys_read+0x10/0x10 [ 299.665691][ T9298] ? __kasan_check_write+0x18/0x20 [ 299.665708][ T9298] ? __kasan_check_read+0x15/0x20 [ 299.665726][ T9298] __x64_sys_read+0x7f/0x90 [ 299.665743][ T9298] x64_sys_call+0x2638/0x2ee0 [ 299.665764][ T9298] do_syscall_64+0x58/0xf0 [ 299.665785][ T9298] ? clear_bhb_loop+0x35/0x90 [ 299.665809][ T9298] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 299.665831][ T9298] RIP: 0033:0x7f6bbdf8d33c [ 299.665845][ T9298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.665859][ T9298] RSP: 002b:00007f6bbeea8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.665876][ T9298] RAX: ffffffffffffffda RBX: 00007f6bbe1b5fa0 RCX: 00007f6bbdf8d33c [ 299.665888][ T9298] RDX: 000000000000000f RSI: 00007f6bbeea80a0 RDI: 0000000000000004 [ 299.665898][ T9298] RBP: 00007f6bbeea8090 R08: 0000000000000000 R09: 0000000000000000 [ 299.665908][ T9298] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 299.665919][ T9298] R13: 0000000000000000 R14: 00007f6bbe1b5fa0 R15: 00007ffc2e46d168 [ 299.665932][ T9298] [ 299.941321][ T10] usb 10-1: USB disconnect, device number 31 [ 299.954603][ T9301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 299.954868][ T9299] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 299.960128][ T9305] fuse: Bad value for 'fd' [ 299.965257][ T9299] rust_binder: Error in use_page_slow: EBUSY [ 299.981992][ T9299] rust_binder: use_range failure EBUSY [ 299.988491][ T9299] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 299.996410][ T9299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 300.006254][ T9299] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 300.019427][ T9308] overlayfs: failed to resolve './file0': -2 [ 300.039309][ T9308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 300.056701][ T9299] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:86 [ 300.226317][ T36] audit: type=1400 audit(2000000136.688:1396): avc: denied { read } for pid=9325 comm="syz.3.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.438845][ T9338] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ĂůŇntext' [ 300.487192][ T36] audit: type=1400 audit(2000000136.948:1397): avc: denied { unmount } for pid=8942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 300.551008][ T9341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65446 sclass=netlink_route_socket pid=9341 comm=syz.9.3458 [ 300.591140][ T36] audit: type=1400 audit(2000000137.048:1398): avc: denied { read } for pid=9340 comm="syz.9.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 301.383861][ T9344] input: syz0 as /devices/virtual/input/input57 [ 301.437186][ T9352] TCP: TCP_TX_DELAY enabled [ 301.464735][ T9348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.464780][ T9348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 301.493578][ T36] audit: type=1400 audit(2000000137.948:1399): avc: denied { map } for pid=9363 comm="syz.7.3468" path="socket:[93482]" dev="sockfs" ino=93482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 301.558729][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3470'. [ 301.651096][ T9386] netlink: 'syz.7.3477': attribute type 3 has an invalid length. [ 301.675018][ T9386] FAULT_INJECTION: forcing a failure. [ 301.675018][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 301.697900][ T9386] CPU: 0 UID: 0 PID: 9386 Comm: syz.7.3477 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 301.697945][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.697958][ T9386] Call Trace: [ 301.697965][ T9386] [ 301.697974][ T9386] __dump_stack+0x21/0x30 [ 301.698005][ T9386] dump_stack_lvl+0x10c/0x190 [ 301.698028][ T9386] ? __cfi_dump_stack_lvl+0x10/0x10 [ 301.698053][ T9386] dump_stack+0x19/0x20 [ 301.698075][ T9386] should_fail_ex+0x3d9/0x530 [ 301.698099][ T9386] should_failslab+0xac/0x100 [ 301.698127][ T9386] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 301.698154][ T9386] ? __alloc_skb+0x10c/0x370 [ 301.698182][ T9386] __alloc_skb+0x10c/0x370 [ 301.698203][ T9386] ? __kasan_check_read+0x15/0x20 [ 301.698226][ T9386] netlink_ack+0x155/0xa50 [ 301.698255][ T9386] ? avc_has_perm_noaudit+0x286/0x360 [ 301.698279][ T9386] ? cred_has_capability+0x281/0x380 [ 301.698313][ T9386] netlink_rcv_skb+0x2b2/0x4a0 [ 301.698341][ T9386] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 301.698369][ T9386] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 301.698401][ T9386] ? security_capable+0xcf/0xf0 [ 301.698424][ T9386] ? ns_capable+0x91/0xf0 [ 301.698448][ T9386] ? netlink_net_capable+0x129/0x160 [ 301.698473][ T9386] nfnetlink_rcv+0x278/0x26f0 [ 301.698496][ T9386] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 301.698525][ T9386] ? stack_trace_save+0x9d/0xe0 [ 301.698549][ T9386] ? stack_depot_save_flags+0x38/0x800 [ 301.698576][ T9386] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 301.698600][ T9386] ? kasan_save_alloc_info+0x40/0x50 [ 301.698620][ T9386] ? __kasan_slab_alloc+0x73/0x90 [ 301.698649][ T9386] ? kmem_cache_alloc_node_noprof+0x139/0x3b0 [ 301.698674][ T9386] ? kmalloc_reserve+0xcf/0x500 [ 301.698699][ T9386] ? __alloc_skb+0x144/0x370 [ 301.698724][ T9386] ? netlink_alloc_large_skb+0xf7/0x1b0 [ 301.698750][ T9386] ? netlink_sendmsg+0x586/0xaf0 [ 301.698781][ T9386] ? ____sys_sendmsg+0xa15/0xa70 [ 301.698812][ T9386] ? ___sys_sendmsg+0x220/0x2a0 [ 301.698844][ T9386] ? __x64_sys_sendmsg+0x1eb/0x2c0 [ 301.698863][ T9386] ? x64_sys_call+0x2a4c/0x2ee0 [ 301.698891][ T9386] ? do_syscall_64+0x58/0xf0 [ 301.698931][ T9386] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 301.698969][ T9386] ? selinux_nlmsg_lookup+0x104/0x970 [ 301.698995][ T9386] ? selinux_netlink_send+0x750/0x810 [ 301.699020][ T9386] ? __asan_memset+0x39/0x50 [ 301.699044][ T9386] ? __netlink_lookup+0x432/0x490 [ 301.699074][ T9386] ? netlink_autobind+0x1c0/0x1c0 [ 301.699105][ T9386] ? is_vmalloc_addr+0x11/0x40 [ 301.699134][ T9386] netlink_unicast+0x8c6/0xa60 [ 301.699165][ T9386] netlink_sendmsg+0x7f0/0xaf0 [ 301.699192][ T9386] ? __cfi_netlink_sendmsg+0x10/0x10 [ 301.699225][ T9386] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 301.699258][ T9386] ? security_socket_sendmsg+0x33/0xd0 [ 301.699283][ T9386] ? __cfi_netlink_sendmsg+0x10/0x10 [ 301.699313][ T9386] ____sys_sendmsg+0xa15/0xa70 [ 301.699347][ T9386] ? __sys_sendmsg_sock+0x50/0x50 [ 301.699380][ T9386] ? import_iovec+0x81/0xb0 [ 301.699410][ T9386] ___sys_sendmsg+0x220/0x2a0 [ 301.699441][ T9386] ? __sys_sendmsg+0x280/0x280 [ 301.699474][ T9386] ? proc_fail_nth_write+0x17e/0x210 [ 301.699496][ T9386] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 301.699524][ T9386] __x64_sys_sendmsg+0x1eb/0x2c0 [ 301.699544][ T9386] ? fput+0x1a5/0x240 [ 301.699575][ T9386] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 301.699594][ T9386] ? ksys_write+0x1ef/0x250 [ 301.699621][ T9386] ? __kasan_check_read+0x15/0x20 [ 301.699646][ T9386] x64_sys_call+0x2a4c/0x2ee0 [ 301.699674][ T9386] do_syscall_64+0x58/0xf0 [ 301.699699][ T9386] ? clear_bhb_loop+0x35/0x90 [ 301.699730][ T9386] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 301.699761][ T9386] RIP: 0033:0x7f6bbdf8e929 [ 301.699780][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.699804][ T9386] RSP: 002b:00007f6bbeea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.699827][ T9386] RAX: ffffffffffffffda RBX: 00007f6bbe1b5fa0 RCX: 00007f6bbdf8e929 [ 301.699844][ T9386] RDX: 0000000020000800 RSI: 00002000000019c0 RDI: 0000000000000003 [ 301.699858][ T9386] RBP: 00007f6bbeea8090 R08: 0000000000000000 R09: 0000000000000000 [ 301.699872][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.699886][ T9386] R13: 0000000000000000 R14: 00007f6bbe1b5fa0 R15: 00007ffc2e46d168 [ 301.699903][ T9386] [ 302.221935][ T9408] loop8: detected capacity change from 0 to 7 [ 302.303505][ T36] audit: type=1400 audit(2000000138.758:1400): avc: denied { map } for pid=9417 comm="syz.3.3489" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 302.345666][ T36] audit: type=1400 audit(2000000138.788:1401): avc: denied { append } for pid=9419 comm="syz.9.3490" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.551488][ T36] audit: type=1400 audit(2000000139.008:1402): avc: denied { execute } for pid=9434 comm="syz.7.3496" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 302.621619][ T9441] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 302.621650][ T9441] rust_binder: Read failure Err(EFAULT) in pid:98 [ 302.673566][ T9453] FAULT_INJECTION: forcing a failure. [ 302.673566][ T9453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.694145][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.9.3505 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 302.694188][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.694204][ T9453] Call Trace: [ 302.694213][ T9453] [ 302.694222][ T9453] __dump_stack+0x21/0x30 [ 302.694255][ T9453] dump_stack_lvl+0x10c/0x190 [ 302.694283][ T9453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 302.694312][ T9453] dump_stack+0x19/0x20 [ 302.694336][ T9453] should_fail_ex+0x3d9/0x530 [ 302.694362][ T9453] should_fail+0xf/0x20 [ 302.694385][ T9453] should_fail_usercopy+0x1e/0x30 [ 302.694411][ T9453] _copy_from_user+0x22/0xb0 [ 302.694440][ T9453] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x11bd/0x9d20 [ 302.694496][ T9453] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 302.694579][ T9453] ? is_bpf_text_address+0x17b/0x1a0 [ 302.694609][ T9453] ? kernel_text_address+0xa9/0xe0 [ 302.694636][ T9453] ? is_bpf_text_address+0x17b/0x1a0 [ 302.694671][ T9453] ? kernel_text_address+0xa9/0xe0 [ 302.694695][ T9453] ? __kernel_text_address+0x11/0x40 [ 302.694716][ T9453] ? unwind_get_return_address+0x51/0x90 [ 302.694737][ T9453] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 302.694763][ T9453] ? arch_stack_walk+0x10b/0x170 [ 302.694799][ T9453] ? is_bpf_text_address+0x17b/0x1a0 [ 302.694829][ T9453] ? kernel_text_address+0xa9/0xe0 [ 302.694850][ T9453] ? __kernel_text_address+0x11/0x40 [ 302.694872][ T9453] ? unwind_get_return_address+0x51/0x90 [ 302.694894][ T9453] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 302.694921][ T9453] ? arch_stack_walk+0x10b/0x170 [ 302.694956][ T9453] ? __kasan_check_write+0x18/0x20 [ 302.694980][ T9453] ? _raw_spin_lock+0x8c/0x120 [ 302.695010][ T9453] ? __cfi__raw_spin_lock+0x10/0x10 [ 302.695039][ T9453] ? stack_depot_save_flags+0x38/0x800 [ 302.695076][ T9453] ? _raw_spin_unlock+0x45/0x60 [ 302.695105][ T9453] ? rust_helper_spin_unlock+0x19/0x30 [ 302.695131][ T9453] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 302.695162][ T9453] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 302.695190][ T9453] ? security_inode_alloc+0x51/0x200 [ 302.695214][ T9453] ? inode_init_always_gfp+0x756/0x9e0 [ 302.695247][ T9453] ? do_filp_open+0x1c6/0x3e0 [ 302.695279][ T9453] ? do_sys_openat2+0x12c/0x1c0 [ 302.695300][ T9453] ? __x64_sys_openat+0x13a/0x170 [ 302.695320][ T9453] ? x64_sys_call+0xe69/0x2ee0 [ 302.695349][ T9453] ? do_syscall_64+0x58/0xf0 [ 302.695376][ T9453] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 302.695408][ T9453] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 302.695439][ T9453] ? avc_has_perm_noaudit+0x268/0x360 [ 302.695465][ T9453] ? __asan_memcpy+0x5a/0x80 [ 302.695489][ T9453] ? avc_has_perm_noaudit+0x286/0x360 [ 302.695512][ T9453] ? avc_has_perm+0x144/0x220 [ 302.695533][ T9453] ? __cfi_avc_has_perm+0x10/0x10 [ 302.695557][ T9453] ? selinux_file_open+0x457/0x610 [ 302.695593][ T9453] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 302.695628][ T9453] ? avc_has_extended_perms+0x7c7/0xdd0 [ 302.695651][ T9453] ? __asan_memcpy+0x5a/0x80 [ 302.695676][ T9453] ? avc_has_extended_perms+0x921/0xdd0 [ 302.695702][ T9453] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 302.695731][ T9453] ? do_vfs_ioctl+0xeda/0x1e30 [ 302.695760][ T9453] ? arch_stack_walk+0x10b/0x170 [ 302.695789][ T9453] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 302.695823][ T9453] ? _parse_integer+0x2e/0x40 [ 302.695850][ T9453] ? ioctl_has_perm+0x384/0x4d0 [ 302.695885][ T9453] ? has_cap_mac_admin+0xd0/0xd0 [ 302.695921][ T9453] ? proc_fail_nth_write+0x17e/0x210 [ 302.695943][ T9453] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 302.695965][ T9453] ? selinux_file_ioctl+0x6e0/0x1360 [ 302.695998][ T9453] ? vfs_write+0x8ba/0xe80 [ 302.696023][ T9453] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 302.696066][ T9453] ? __cfi_vfs_write+0x10/0x10 [ 302.696093][ T9453] ? __kasan_check_write+0x18/0x20 [ 302.696116][ T9453] ? mutex_unlock+0x8b/0x240 [ 302.696138][ T9453] ? __cfi_mutex_unlock+0x10/0x10 [ 302.696157][ T9453] ? __fget_files+0x2c5/0x340 [ 302.696189][ T9453] ? __fget_files+0x2c5/0x340 [ 302.696218][ T9453] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 302.696254][ T9453] ? __se_sys_ioctl+0x114/0x1b0 [ 302.696284][ T9453] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 302.696317][ T9453] __se_sys_ioctl+0x132/0x1b0 [ 302.696345][ T9453] __x64_sys_ioctl+0x7f/0xa0 [ 302.696377][ T9453] x64_sys_call+0x1878/0x2ee0 [ 302.696408][ T9453] do_syscall_64+0x58/0xf0 [ 302.696437][ T9453] ? clear_bhb_loop+0x35/0x90 [ 302.696473][ T9453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 302.696507][ T9453] RIP: 0033:0x7ffb58b8e929 [ 302.696528][ T9453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.696550][ T9453] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.696577][ T9453] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 302.696596][ T9453] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 302.696612][ T9453] RBP: 00007ffb599d1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.696628][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.696642][ T9453] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 302.696662][ T9453] [ 303.246336][ T9455] x_tables: duplicate underflow at hook 1 [ 303.255238][ T9453] rust_binder: Write failure EFAULT in pid:100 [ 303.444333][ T9479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 303.450857][ T9479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:110 [ 303.489004][ T36] audit: type=1400 audit(2000000139.948:1403): avc: denied { map } for pid=9480 comm="syz.9.3516" path="socket:[93956]" dev="sockfs" ino=93956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.534558][ T36] audit: type=1400 audit(2000000139.988:1404): avc: denied { read } for pid=9480 comm="syz.9.3516" path="socket:[93956]" dev="sockfs" ino=93956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.562161][ T36] audit: type=1400 audit(2000000140.018:1405): avc: denied { ioctl } for pid=9480 comm="syz.9.3516" path="socket:[93956]" dev="sockfs" ino=93956 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 303.621215][ T9487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114 [ 303.634066][ T9489] FAULT_INJECTION: forcing a failure. [ 303.634066][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 303.656551][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.9.3520 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 303.656580][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.656592][ T9489] Call Trace: [ 303.656600][ T9489] [ 303.656607][ T9489] __dump_stack+0x21/0x30 [ 303.656631][ T9489] dump_stack_lvl+0x10c/0x190 [ 303.656649][ T9489] ? __cfi_dump_stack_lvl+0x10/0x10 [ 303.656668][ T9489] ? kernel_text_address+0xa9/0xe0 [ 303.656687][ T9489] dump_stack+0x19/0x20 [ 303.656703][ T9489] should_fail_ex+0x3d9/0x530 [ 303.656730][ T9489] should_failslab+0xac/0x100 [ 303.656752][ T9489] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 303.656772][ T9489] ? kstrdup_const+0x45/0x60 [ 303.656790][ T9489] kstrdup+0x4d/0x140 [ 303.656805][ T9489] ? kstrdup_const+0x3a/0x60 [ 303.656821][ T9489] kstrdup_const+0x45/0x60 [ 303.656837][ T9489] kvasprintf_const+0xdb/0x250 [ 303.656852][ T9489] kobject_set_name_vargs+0x65/0x120 [ 303.656874][ T9489] dev_set_name+0xd5/0x120 [ 303.656890][ T9489] ? __hrtimer_init+0x181/0x270 [ 303.656914][ T9489] ? __cfi_dev_set_name+0x10/0x10 [ 303.656930][ T9489] ? pm_runtime_init+0x281/0x370 [ 303.656947][ T9489] ? swiotlb_dev_init+0x1f/0x100 [ 303.656969][ T9489] ? device_initialize+0x2e7/0x380 [ 303.656989][ T9489] netdev_register_kobject+0xba/0x320 [ 303.657006][ T9489] register_netdevice+0xf73/0x19d0 [ 303.657027][ T9489] ? __cfi_register_netdevice+0x10/0x10 [ 303.657044][ T9489] ? __asan_memcpy+0x5a/0x80 [ 303.657061][ T9489] ip6gre_tunnel_locate+0x317/0x660 [ 303.657085][ T9489] ? ip6gre_tnl_link_config+0x240/0x240 [ 303.657107][ T9489] ? selinux_capable+0x38/0x50 [ 303.657125][ T9489] ? ip6gre_changelink_common+0x490/0x490 [ 303.657149][ T9489] ? ip6gre_tnl_parm_from_user+0x21d/0x420 [ 303.657172][ T9489] ip6gre_tunnel_siocdevprivate+0x57b/0x880 [ 303.657196][ T9489] ? __cfi_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 303.657222][ T9489] ? full_name_hash+0xa1/0xf0 [ 303.657244][ T9489] dev_ifsioc+0xb02/0xe60 [ 303.657266][ T9489] ? dev_ioctl+0x1030/0x1030 [ 303.657286][ T9489] ? dev_get_by_name_rcu+0xe9/0x140 [ 303.657309][ T9489] dev_ioctl+0xa9b/0x1030 [ 303.657330][ T9489] sock_ioctl+0x737/0x7b0 [ 303.657346][ T9489] ? __cfi_sock_ioctl+0x10/0x10 [ 303.657364][ T9489] ? bpf_lsm_file_ioctl+0xd/0x20 [ 303.657381][ T9489] ? security_file_ioctl+0x34/0xd0 [ 303.657402][ T9489] ? __cfi_sock_ioctl+0x10/0x10 [ 303.657418][ T9489] __se_sys_ioctl+0x132/0x1b0 [ 303.657439][ T9489] __x64_sys_ioctl+0x7f/0xa0 [ 303.657460][ T9489] x64_sys_call+0x1878/0x2ee0 [ 303.657481][ T9489] do_syscall_64+0x58/0xf0 [ 303.657501][ T9489] ? clear_bhb_loop+0x35/0x90 [ 303.657526][ T9489] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 303.657548][ T9489] RIP: 0033:0x7ffb58b8e929 [ 303.657563][ T9489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.657577][ T9489] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.657595][ T9489] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 303.657608][ T9489] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 303.657618][ T9489] RBP: 00007ffb599d1090 R08: 0000000000000000 R09: 0000000000000000 [ 303.657629][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.657639][ T9489] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 303.657652][ T9489] [ 304.075459][ T36] audit: type=1400 audit(2000000140.538:1406): avc: denied { write } for pid=9503 comm="syz.7.3527" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 304.108436][ T36] audit: type=1400 audit(2000000140.568:1407): avc: denied { map } for pid=9503 comm="syz.7.3527" path="/dev/bsg" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 304.133736][ T36] audit: type=1400 audit(2000000140.568:1408): avc: denied { execute } for pid=9503 comm="syz.7.3527" path="/dev/bsg" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 304.160603][ T36] audit: type=1326 audit(2000000140.568:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.3528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d95d8e929 code=0x0 [ 304.732461][ T36] audit: type=1326 audit(2000000141.188:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.7.3534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bbdf8e929 code=0x0 [ 305.797648][ T36] audit: type=1326 audit(2000000142.258:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.7.3540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bbdf8e929 code=0x0 [ 306.180588][ T9554] binder: Unknown parameter 'context' [ 306.272980][ T9560] fuse: Unknown parameter '0x0000000000000007' [ 306.355098][ T378] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 306.506177][ T378] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.518419][ T378] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.528492][ T378] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 306.538332][ T378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.553141][ T378] usb 10-1: config 0 descriptor?? [ 306.621494][ T9581] input: syz0 as /devices/virtual/input/input58 [ 306.637612][ T9581] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3557'. [ 306.654064][ T36] audit: type=1400 audit(2000000143.108:1412): avc: denied { write } for pid=9582 comm="syz.4.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.706323][ T9588] input: syz1 as /devices/virtual/input/input59 [ 306.766476][ T9602] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 306.961331][ T378] lenovo 0003:17EF:6047.001F: item fetching failed at offset 3/5 [ 306.977834][ T378] lenovo 0003:17EF:6047.001F: hid_parse failed [ 306.985950][ T378] lenovo 0003:17EF:6047.001F: probe with driver lenovo failed with error -22 [ 307.162415][ T378] usb 10-1: USB disconnect, device number 32 [ 307.206606][ T9646] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 307.206644][ T9646] rust_binder: Error while translating object. [ 307.220333][ T9646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 307.227058][ T9646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 307.255595][ T9650] incfs: Error accessing: ./file0/file0. [ 307.270717][ T9650] incfs: mount failed -2 [ 307.400297][ T9656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 307.400336][ T9656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:124 [ 307.708643][ T9674] fuse: Bad value for 'fd' [ 308.053409][ T9694] fuse: Bad value for 'fd' [ 308.085101][ T378] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 308.160925][ T9703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.161976][ T9703] rust_binder: Error in use_page_slow: ESRCH [ 308.171783][ T9703] rust_binder: use_range failure ESRCH [ 308.178085][ T9703] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 308.184059][ T9703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 308.192726][ T9703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:214 [ 308.246354][ T9708] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 308.248159][ T378] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 308.255809][ T9710] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 308.266685][ T378] usb 8-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 308.281085][ T9708] rust_binder: Error while translating object. [ 308.288676][ T378] usb 8-1: Product: syz [ 308.295253][ T9708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 308.302811][ T378] usb 8-1: Manufacturer: syz [ 308.305148][ T9710] rust_binder: Error while translating object. [ 308.315728][ T378] usb 8-1: SerialNumber: syz [ 308.319554][ T9708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 308.330628][ T9710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 308.337628][ T378] r8152-cfgselector 8-1: Unknown version 0x0000 [ 308.339901][ T9710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 308.349910][ T378] r8152-cfgselector 8-1: config 0 descriptor?? [ 308.515046][ T1815] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 308.645580][ T9734] cgroup2: Unknown parameter 'obj_user' [ 308.675909][ T1815] usb 10-1: Using ep0 maxpacket: 8 [ 308.682532][ T1815] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.699940][ T1815] usb 10-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 308.718004][ T1815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.727616][ T1815] usb 10-1: config 0 descriptor?? [ 308.767707][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 308.767746][ T36] audit: type=1400 audit(2000000145.228:1422): avc: denied { nlmsg_read } for pid=9737 comm="syz.4.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 308.783006][ T378] r8152-cfgselector 8-1: USB disconnect, device number 44 [ 308.803487][ T9738] rust_binder: Write failure EFAULT in pid:176 [ 308.819930][ T36] audit: type=1400 audit(2000000145.278:1423): avc: denied { append } for pid=9739 comm="syz.4.3614" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 308.909878][ T36] audit: type=1400 audit(2000000145.368:1424): avc: denied { getopt } for pid=9744 comm="syz.4.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.972305][ T9749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.972381][ T9749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.995625][ T9754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9754 comm=syz.4.3619 [ 309.138422][ T1815] wacom 0003:056A:003F.0020: unknown main item tag 0x0 [ 309.151026][ T1815] wacom 0003:056A:003F.0020: unknown main item tag 0x0 [ 309.158610][ T1815] wacom 0003:056A:003F.0020: unknown main item tag 0x0 [ 309.167459][ T1815] wacom 0003:056A:003F.0020: unknown main item tag 0x0 [ 309.175990][ T1815] wacom 0003:056A:003F.0020: unknown main item tag 0x0 [ 309.188305][ T1815] wacom 0003:056A:003F.0020: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.9-1/input0 [ 309.279749][ T9769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.282156][ T9771] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 309.289356][ T9771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 309.299501][ T9771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:225 [ 309.339012][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.357980][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.725127][ T378] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 309.875070][ T378] usb 4-1: Using ep0 maxpacket: 32 [ 309.881782][ T378] usb 4-1: config 0 has an invalid interface number: 233 but max is 0 [ 309.890148][ T378] usb 4-1: config 0 has no interface number 0 [ 309.896502][ T378] usb 4-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 309.909502][ T378] usb 4-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=af.2e [ 309.919249][ T378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.928218][ T378] usb 4-1: Product: syz [ 309.933441][ T36] audit: type=1400 audit(2000000146.388:1425): avc: denied { remount } for pid=9788 comm="syz.9.3632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 309.957025][ T378] usb 4-1: Manufacturer: syz [ 309.962092][ T378] usb 4-1: SerialNumber: syz [ 309.968217][ T378] usb 4-1: config 0 descriptor?? [ 309.998147][ T9791] rust_binder: Error while translating object. [ 309.998183][ T9791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.004480][ T9791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 310.179688][ T378] usb 4-1: USB disconnect, device number 109 [ 310.297875][ T9804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.345283][ T9808] input: syz1 as /devices/virtual/input/input64 [ 310.363884][ T36] audit: type=1400 audit(2000000146.828:1426): avc: denied { accept } for pid=9807 comm="syz.4.3640" path=0000234E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797A31000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 310.685001][ T36] audit: type=1400 audit(2000000147.138:1427): avc: denied { getopt } for pid=9812 comm="syz.3.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.715929][ T9841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:290 [ 310.716395][ T9831] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 310.726346][ T9831] rust_binder: Error in use_page_slow: EBUSY [ 310.737704][ T9831] rust_binder: use_range failure EBUSY [ 310.743933][ T9831] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 310.750078][ T9831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 310.759423][ T9831] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 310.766648][ T9845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.769275][ T9831] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:290 [ 310.873118][ T9849] SELinux: policydb version -845211227 does not match my version range 15-33 [ 310.882391][ T9853] syzkaller0: entered allmulticast mode [ 310.891613][ T36] audit: type=1400 audit(2000000147.328:1428): avc: denied { load_policy } for pid=9848 comm="syz.4.3658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 310.920546][ T9849] SELinux: failed to load policy [ 311.081539][ T9877] x_tables: duplicate underflow at hook 1 [ 311.175084][ T9891] binder: Binderfs stats mode cannot be changed during a remount [ 311.175553][ T36] audit: type=1400 audit(2000000147.638:1429): avc: denied { lock } for pid=9887 comm="syz.7.3673" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 311.545908][ T304] bridge_slave_1: left allmulticast mode [ 311.552381][ T304] bridge_slave_1: left promiscuous mode [ 311.558556][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.566588][ T304] bridge_slave_0: left allmulticast mode [ 311.572513][ T304] bridge_slave_0: left promiscuous mode [ 311.580780][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.639370][ T9913] x_tables: duplicate underflow at hook 1 [ 311.789596][ T304] veth1_macvtap: left promiscuous mode [ 311.795878][ T304] veth0_vlan: left promiscuous mode [ 311.986920][ T9938] FAULT_INJECTION: forcing a failure. [ 311.986920][ T9938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.001450][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: syz.3.3692 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 312.001491][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.001508][ T9938] Call Trace: [ 312.001516][ T9938] [ 312.001526][ T9938] __dump_stack+0x21/0x30 [ 312.001559][ T9938] dump_stack_lvl+0x10c/0x190 [ 312.001585][ T9938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 312.001613][ T9938] dump_stack+0x19/0x20 [ 312.001637][ T9938] should_fail_ex+0x3d9/0x530 [ 312.001663][ T9938] should_fail+0xf/0x20 [ 312.001685][ T9938] should_fail_usercopy+0x1e/0x30 [ 312.001711][ T9938] _copy_from_user+0x22/0xb0 [ 312.001741][ T9938] __se_sys_mount+0x182/0x480 [ 312.001769][ T9938] ? ksys_write+0x1ef/0x250 [ 312.001796][ T9938] ? __x64_sys_mount+0xf0/0xf0 [ 312.001823][ T9938] __x64_sys_mount+0xc3/0xf0 [ 312.001848][ T9938] x64_sys_call+0x2021/0x2ee0 [ 312.001876][ T9938] do_syscall_64+0x58/0xf0 [ 312.001905][ T9938] ? clear_bhb_loop+0x35/0x90 [ 312.001939][ T9938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 312.001974][ T9938] RIP: 0033:0x7f1d95d8e929 [ 312.001994][ T9938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.002027][ T9938] RSP: 002b:00007f1d96b73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.002053][ T9938] RAX: ffffffffffffffda RBX: 00007f1d95fb5fa0 RCX: 00007f1d95d8e929 [ 312.002198][ T9938] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 312.002216][ T9938] RBP: 00007f1d96b73090 R08: 0000200000000140 R09: 0000000000000000 [ 312.002232][ T9938] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 312.002247][ T9938] R13: 0000000000000000 R14: 00007f1d95fb5fa0 R15: 00007ffd0f9caea8 [ 312.002269][ T9938] [ 312.003217][ T36] audit: type=1400 audit(2000000148.458:1430): avc: denied { mounton } for pid=9937 comm="syz.3.3692" path="/100/file3" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 312.189099][ T9950] x_tables: duplicate underflow at hook 1 [ 312.315520][ T9960] binder: Unknown parameter 'fscontext?}0x0000000000000003' [ 312.355049][ T36] audit: type=1400 audit(2000000148.808:1431): avc: denied { name_bind } for pid=9963 comm="syz.3.3701" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 312.468107][ T9971] rust_binder: Error while translating object. [ 312.468144][ T9971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.474465][ T9971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 312.505015][ T45] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 312.523038][ T9975] FAULT_INJECTION: forcing a failure. [ 312.523038][ T9975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.536659][ T9975] CPU: 1 UID: 0 PID: 9975 Comm: syz.4.3705 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 312.536695][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.536709][ T9975] Call Trace: [ 312.536718][ T9975] [ 312.536727][ T9975] __dump_stack+0x21/0x30 [ 312.536759][ T9975] dump_stack_lvl+0x10c/0x190 [ 312.536783][ T9975] ? __cfi_dump_stack_lvl+0x10/0x10 [ 312.536810][ T9975] dump_stack+0x19/0x20 [ 312.536834][ T9975] should_fail_ex+0x3d9/0x530 [ 312.536858][ T9975] should_fail+0xf/0x20 [ 312.536879][ T9975] should_fail_usercopy+0x1e/0x30 [ 312.536904][ T9975] _copy_from_user+0x22/0xb0 [ 312.536934][ T9975] __se_sys_io_uring_setup+0x139/0x260 [ 312.537003][ T9975] ? __x64_sys_io_uring_setup+0x80/0x80 [ 312.537036][ T9975] ? __kasan_check_read+0x15/0x20 [ 312.537061][ T9975] __x64_sys_io_uring_setup+0x5f/0x80 [ 312.537090][ T9975] x64_sys_call+0x22c0/0x2ee0 [ 312.537117][ T9975] do_syscall_64+0x58/0xf0 [ 312.537145][ T9975] ? clear_bhb_loop+0x35/0x90 [ 312.537178][ T9975] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 312.537209][ T9975] RIP: 0033:0x7f1316b8e929 [ 312.537227][ T9975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.537246][ T9975] RSP: 002b:00007f1317ab2fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 312.537270][ T9975] RAX: ffffffffffffffda RBX: 00007f1316db5fa0 RCX: 00007f1316b8e929 [ 312.537287][ T9975] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000500 [ 312.537301][ T9975] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 312.537314][ T9975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 312.537327][ T9975] R13: 0000000000000000 R14: 0000000000000500 R15: 0000000000000000 [ 312.537343][ T9975] [ 312.621811][ T9980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 312.681443][ T9982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 312.695923][ T9983] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3708'. [ 312.727947][ T45] usb 8-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 312.774109][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.782449][ T45] usb 8-1: Product: syz [ 312.786731][ T45] usb 8-1: Manufacturer: syz [ 312.791379][ T45] usb 8-1: SerialNumber: syz [ 313.007546][ T9993] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1024 [ 313.015446][ T9993] rust_binder: Write failure EINVAL in pid:260 [ 313.445045][ T63] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 313.584220][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.593267][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.616323][ T63] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 313.625828][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.634920][ T63] usb 4-1: config 0 descriptor?? [ 313.808005][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 313.808027][ T36] audit: type=1400 audit(2000000150.268:1433): avc: denied { read } for pid=10018 comm="syz.4.3723" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 313.838977][ T36] audit: type=1400 audit(2000000150.268:1434): avc: denied { open } for pid=10018 comm="syz.4.3723" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 314.161206][T10039] FAULT_INJECTION: forcing a failure. [ 314.161206][T10039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.175023][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.4.3732 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 314.175062][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.175075][T10039] Call Trace: [ 314.175083][T10039] [ 314.175091][T10039] __dump_stack+0x21/0x30 [ 314.175118][T10039] dump_stack_lvl+0x10c/0x190 [ 314.175141][T10039] ? __cfi_dump_stack_lvl+0x10/0x10 [ 314.175170][T10039] ? __kasan_check_read+0x15/0x20 [ 314.175196][T10039] dump_stack+0x19/0x20 [ 314.175216][T10039] should_fail_ex+0x3d9/0x530 [ 314.175235][T10039] should_fail_alloc_page+0xeb/0x110 [ 314.175258][T10039] __alloc_pages_noprof+0x19d/0x6c0 [ 314.175275][T10039] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 314.175293][T10039] ? __count_memcg_events+0xdf/0x3b0 [ 314.175330][T10039] ? __cfi_memcg1_commit_charge+0x10/0x10 [ 314.175356][T10039] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 314.175373][T10039] ? _raw_spin_lock+0x8c/0x120 [ 314.175396][T10039] pte_alloc_one+0x97/0x520 [ 314.175427][T10039] ? __mem_cgroup_charge+0x1cb/0x410 [ 314.175452][T10039] ? __cfi_pte_alloc_one+0x10/0x10 [ 314.175484][T10039] do_huge_pmd_anonymous_page+0x4a1/0x1520 [ 314.175508][T10039] ? __pmd_alloc+0x5b9/0x9b0 [ 314.175535][T10039] ? __cfi_do_huge_pmd_anonymous_page+0x10/0x10 [ 314.175559][T10039] ? __kasan_check_read+0x15/0x20 [ 314.175577][T10039] ? __thp_vma_allowable_orders+0x69d/0x760 [ 314.175599][T10039] ? kasan_save_track+0x3e/0x80 [ 314.175628][T10039] ? kasan_save_alloc_info+0x40/0x50 [ 314.175650][T10039] ? __kasan_slab_alloc+0x73/0x90 [ 314.175675][T10039] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 314.175694][T10039] ? security_inode_alloc+0x51/0x200 [ 314.175728][T10039] ? inode_init_always_gfp+0x756/0x9e0 [ 314.175764][T10039] handle_mm_fault+0x17b6/0x1b90 [ 314.175850][T10039] ? __cfi_handle_mm_fault+0x10/0x10 [ 314.175897][T10039] ? avc_has_perm+0x144/0x220 [ 314.175926][T10039] ? __cfi_find_vma+0x10/0x10 [ 314.175953][T10039] ? vma_is_secretmem+0x11/0x50 [ 314.175977][T10039] __get_user_pages+0x1169/0x22d0 [ 314.176014][T10039] ? avc_has_perm_noaudit+0x286/0x360 [ 314.176032][T10039] ? populate_vma_page_range+0x230/0x230 [ 314.176060][T10039] __gup_longterm_locked+0xcb1/0x1580 [ 314.176085][T10039] ? rwsem_read_trylock+0x2b1/0x660 [ 314.176111][T10039] ? _parse_integer_limit+0x195/0x1e0 [ 314.176136][T10039] pin_user_pages_remote+0x171/0x220 [ 314.176156][T10039] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 314.176172][T10039] ? up_read+0x26/0x1d0 [ 314.176188][T10039] ? mm_access+0x18d/0x210 [ 314.176217][T10039] process_vm_rw+0x5d4/0xbb0 [ 314.176251][T10039] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 314.176283][T10039] ? proc_fail_nth_write+0x17e/0x210 [ 314.176304][T10039] ? vfs_write+0x8ba/0xe80 [ 314.176325][T10039] ? __kasan_check_write+0x18/0x20 [ 314.176345][T10039] ? __kasan_check_write+0x18/0x20 [ 314.176372][T10039] ? fput+0x1a5/0x240 [ 314.176406][T10039] ? __cfi_ksys_write+0x10/0x10 [ 314.176436][T10039] __x64_sys_process_vm_writev+0xeb/0x100 [ 314.176461][T10039] x64_sys_call+0x1ab/0x2ee0 [ 314.176486][T10039] do_syscall_64+0x58/0xf0 [ 314.176515][T10039] ? clear_bhb_loop+0x35/0x90 [ 314.176553][T10039] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 314.176586][T10039] RIP: 0033:0x7f1316b8e929 [ 314.176606][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.176700][T10039] RSP: 002b:00007f1317ab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 314.176727][T10039] RAX: ffffffffffffffda RBX: 00007f1316db5fa0 RCX: 00007f1316b8e929 [ 314.176740][T10039] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 000000000000011d [ 314.176753][T10039] RBP: 00007f1317ab3090 R08: 0000000000000001 R09: 0000000000000000 [ 314.176764][T10039] R10: 00002000000015c0 R11: 0000000000000246 R12: 0000000000000001 [ 314.176776][T10039] R13: 0000000000000000 R14: 00007f1316db5fa0 R15: 00007ffd695eb128 [ 314.176795][T10039] [ 314.598170][T10044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.599398][T10044] rust_binder: Error while translating object. [ 314.607864][T10044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 314.614610][T10044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 314.858297][T10062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 314.948087][T10073] fuseblk: Bad value for 'user_id' [ 314.966787][T10073] fuseblk: Bad value for 'user_id' [ 314.986970][T10075] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3747'. [ 315.000951][T10077] fuse: Unknown parameter 'f$' [ 315.048013][ T36] audit: type=1400 audit(2000000151.508:1435): avc: denied { create } for pid=10080 comm="syz.4.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 315.075011][ T36] audit: type=1400 audit(2000000151.528:1436): avc: denied { sys_admin } for pid=10080 comm="syz.4.3750" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 315.231823][ T45] usb 8-1: USB disconnect, device number 45 [ 315.329123][ T36] audit: type=1400 audit(2000000151.788:1437): avc: denied { create } for pid=10106 comm="syz.9.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.352575][ T36] audit: type=1400 audit(2000000151.808:1438): avc: denied { getopt } for pid=10106 comm="syz.9.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.775252][ T45] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 315.831858][ T63] usb 4-1: Cannot set autoneg [ 315.839029][ T63] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 315.851823][ T63] usb 4-1: USB disconnect, device number 110 [ 315.926469][ T45] usb 8-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 315.938359][ T45] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 315.947621][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.957576][ T45] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 316.159541][ T620] usb 8-1: USB disconnect, device number 46 [ 316.288285][T10122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 316.288697][T10122] rust_binder: Error while translating object. [ 316.298418][T10122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 316.304814][T10122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 316.315287][T10123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.337634][T10127] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3769'. [ 316.679904][T10141] binder: Unknown parameter '' [ 316.695219][ T63] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 316.767980][ T36] audit: type=1400 audit(2000000153.228:1439): avc: denied { getopt } for pid=10151 comm="syz.7.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.815873][ T36] audit: type=1400 audit(2000000153.278:1440): avc: denied { create } for pid=10157 comm="syz.4.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 316.843540][T10160] tun0: tun_chr_ioctl cmd 1074025676 [ 316.849175][T10160] tun0: owner set to 0 [ 316.859357][ T36] audit: type=1326 audit(2000000153.318:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.4.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1316b8e929 code=0x7ffc0000 [ 316.884496][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 316.889761][ T36] audit: type=1326 audit(2000000153.318:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10163 comm="syz.4.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1316b8e929 code=0x7ffc0000 [ 316.890892][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.930673][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.944570][ T63] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 316.954726][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.964701][ T63] usb 4-1: config 0 descriptor?? [ 316.972402][ T63] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 317.085024][ T620] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 317.196506][T10139] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3775'. [ 317.207652][ T63] usb 4-1: USB disconnect, device number 111 [ 317.236447][ T620] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.247235][ T620] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.258125][ T620] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.267772][ T620] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.276193][ T620] usb 8-1: Product: syz [ 317.280429][ T620] usb 8-1: Manufacturer: syz [ 317.285101][ T620] usb 8-1: SerialNumber: syz [ 317.491925][T10160] rust_binder: inc_ref_done called when no active inc_refs [ 317.500780][ T620] usb 8-1: 0:2 : does not exist [ 317.528085][ T620] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 317.553598][ T620] usb 8-1: USB disconnect, device number 47 [ 317.729298][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 318.047015][T10232] fuse: Unknown parameter '0x000000000000000900000000000000000000011' [ 318.060197][T10232] rust_binder: Error while translating object. [ 318.060245][T10232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 318.068823][T10232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:349 [ 318.137139][T10236] SELinux: failed to load policy [ 318.995068][ T623] hid (null): report_id 516 is invalid [ 319.001216][ T623] hid (null): report_id 516 is invalid [ 319.007011][ T623] hid (null): report_id 516 is invalid [ 319.012762][ T623] hid (null): report_id 516 is invalid [ 319.018502][ T623] hid (null): report_id 516 is invalid [ 319.025455][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.033092][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.041132][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.049138][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.056758][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.064386][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.072224][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.079980][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.087714][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.095364][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.103494][ T623] hid-generic 0000:070D:000A.0021: unknown main item tag 0x0 [ 319.111064][ T623] hid-generic 0000:070D:000A.0021: report_id 516 is invalid [ 319.118551][ T623] hid-generic 0000:070D:000A.0021: item 0 2 1 8 parsing failed [ 319.126627][ T623] hid-generic 0000:070D:000A.0021: probe with driver hid-generic failed with error -22 [ 319.174475][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 319.174498][ T36] audit: type=1400 audit(2000000155.628:1447): avc: denied { getopt } for pid=10267 comm="syz.7.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.240679][T10273] rust_binder: Error while translating object. [ 319.240724][T10273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 319.247271][T10273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:360 [ 319.257453][T10273] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ĂůŇntext' [ 319.331264][ T36] audit: type=1400 audit(2000000155.788:1448): avc: denied { setopt } for pid=10281 comm="syz.4.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 319.445049][ T307] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 319.595021][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 319.601587][ T307] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 319.610142][ T307] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 319.621269][ T307] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 319.632428][ T307] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 319.641792][ T307] usb 4-1: config 1 has no interface number 1 [ 319.648492][ T307] usb 4-1: too many endpoints for config 1 interface 4 altsetting 0: 249, using maximum allowed: 30 [ 319.659971][ T307] usb 4-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 319.675602][ T307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.685076][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.693226][ T307] usb 4-1: Product: syz [ 319.697987][ T307] usb 4-1: Manufacturer: syz [ 319.702729][ T307] usb 4-1: SerialNumber: syz [ 319.913506][ T307] usb 4-1: 0:2 : does not exist [ 319.922298][ T307] usb 4-1: USB disconnect, device number 112 [ 320.085381][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 320.348784][T10309] fuse: Unknown parameter 'flű‹”Uř˝ůşXąŞ' [ 320.372855][ T36] audit: type=1400 audit(2000000156.828:1449): avc: denied { append } for pid=10310 comm="syz.7.3842" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 320.531873][ T36] audit: type=1400 audit(2000000156.988:1450): avc: denied { bind } for pid=10322 comm="syz.3.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.551972][ T36] audit: type=1400 audit(2000000157.008:1451): avc: denied { listen } for pid=10322 comm="syz.3.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.575396][ T36] audit: type=1400 audit(2000000157.008:1452): avc: denied { accept } for pid=10322 comm="syz.3.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.595587][ T36] audit: type=1400 audit(2000000157.008:1453): avc: denied { read } for pid=10322 comm="syz.3.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.622835][T10324] kvm: user requested TSC rate below hardware speed [ 320.833857][T10339] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 320.853944][ T36] audit: type=1400 audit(2000000157.308:1454): avc: denied { relabelto } for pid=10338 comm="syz.7.3852" name="file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dbusd_exec_t:s0" [ 320.903334][ T36] audit: type=1400 audit(2000000157.338:1455): avc: denied { associate } for pid=10338 comm="syz.7.3852" name="file0" dev="tmpfs" ino=853 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dbusd_exec_t:s0" [ 320.951473][ T36] audit: type=1400 audit(2000000157.408:1456): avc: denied { create } for pid=10341 comm="syz.7.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 321.005023][ T693] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 321.165015][ T693] usb 4-1: Using ep0 maxpacket: 16 [ 321.173639][ T693] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 321.186107][ T693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.200519][ T693] usb 4-1: config 0 has no interface number 0 [ 321.211718][ T693] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 321.211902][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3855'. [ 321.221875][ T693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.244990][ T693] usb 4-1: Product: syz [ 321.249300][ T693] usb 4-1: Manufacturer: syz [ 321.254163][ T693] usb 4-1: SerialNumber: syz [ 321.266258][ T693] usb 4-1: config 0 descriptor?? [ 321.273412][ T693] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 321.283904][ T693] usb 4-1: No valid video chain found. [ 321.476217][ T623] usb 4-1: USB disconnect, device number 113 [ 321.595065][T10373] FAULT_INJECTION: forcing a failure. [ 321.595065][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.625365][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.9.3865 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 321.625413][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.625428][T10373] Call Trace: [ 321.625437][T10373] [ 321.625447][T10373] __dump_stack+0x21/0x30 [ 321.625482][T10373] dump_stack_lvl+0x10c/0x190 [ 321.625509][T10373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 321.625536][T10373] ? irqentry_exit+0x4a/0x60 [ 321.625563][T10373] dump_stack+0x19/0x20 [ 321.625622][T10373] should_fail_ex+0x3d9/0x530 [ 321.625649][T10373] should_fail+0xf/0x20 [ 321.625672][T10373] should_fail_usercopy+0x1e/0x30 [ 321.625699][T10373] _copy_from_user+0x22/0xb0 [ 321.625730][T10373] __copy_msghdr+0x3ec/0x5d0 [ 321.625766][T10373] ___sys_sendmsg+0x1a6/0x2a0 [ 321.625798][T10373] ? __sys_sendmsg+0x280/0x280 [ 321.625826][T10373] ? kstrtouint+0x78/0xf0 [ 321.625853][T10373] __sys_sendmmsg+0x271/0x470 [ 321.625875][T10373] ? __cfi___sys_sendmmsg+0x10/0x10 [ 321.625897][T10373] ? __cfi_ksys_write+0x10/0x10 [ 321.625924][T10373] __x64_sys_sendmmsg+0xa4/0xc0 [ 321.625944][T10373] x64_sys_call+0xfec/0x2ee0 [ 321.625987][T10373] do_syscall_64+0x58/0xf0 [ 321.626014][T10373] ? clear_bhb_loop+0x35/0x90 [ 321.626047][T10373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.626076][T10373] RIP: 0033:0x7ffb58b8e929 [ 321.626095][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.626112][T10373] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.626135][T10373] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 321.626150][T10373] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 321.626162][T10373] RBP: 00007ffb599d1090 R08: 0000000000000000 R09: 0000000000000000 [ 321.626174][T10373] R10: 000000002c00c0c4 R11: 0000000000000246 R12: 0000000000000001 [ 321.626187][T10373] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 321.626203][T10373] [ 321.687259][T10377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.855408][T10380] rust_binder: Write failure EFAULT in pid:409 [ 321.866269][T10377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.546417][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.555202][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.924570][T10422] FAULT_INJECTION: forcing a failure. [ 322.924570][T10422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.938809][T10422] CPU: 0 UID: 0 PID: 10422 Comm: syz.3.3885 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 322.938851][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.938867][T10422] Call Trace: [ 322.938875][T10422] [ 322.938884][T10422] __dump_stack+0x21/0x30 [ 322.938918][T10422] dump_stack_lvl+0x10c/0x190 [ 322.938945][T10422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 322.938975][T10422] dump_stack+0x19/0x20 [ 322.939001][T10422] should_fail_ex+0x3d9/0x530 [ 322.939028][T10422] should_fail_alloc_page+0xeb/0x110 [ 322.939063][T10422] __alloc_pages_noprof+0x19d/0x6c0 [ 322.939087][T10422] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 322.939109][T10422] ? filemap_map_pages+0xf16/0x1270 [ 322.939138][T10422] pte_alloc_one+0x97/0x520 [ 322.939170][T10422] ? __cfi_filemap_map_pages+0x10/0x10 [ 322.939194][T10422] ? __cfi_pte_alloc_one+0x10/0x10 [ 322.939223][T10422] ? _raw_spin_unlock+0x45/0x60 [ 322.939256][T10422] do_pte_missing+0x1c0b/0x3e50 [ 322.939292][T10422] ? __kasan_check_write+0x18/0x20 [ 322.939320][T10422] ? pte_marker_clear+0x1b0/0x1b0 [ 322.939357][T10422] handle_mm_fault+0x1166/0x1b90 [ 322.939392][T10422] ? __cfi_handle_mm_fault+0x10/0x10 [ 322.939424][T10422] ? follow_page_pte+0xa5c/0xb90 [ 322.939447][T10422] ? gup_must_unshare+0x1e0/0x1e0 [ 322.939470][T10422] ? vma_pgtable_walk_end+0xd/0x30 [ 322.939501][T10422] __get_user_pages+0x1169/0x22d0 [ 322.939535][T10422] ? __cfi_mt_find+0x10/0x10 [ 322.939567][T10422] ? populate_vma_page_range+0x230/0x230 [ 322.939657][T10422] ? mlock_pte_range+0xc70/0xc70 [ 322.939682][T10422] __mm_populate+0x2f9/0x440 [ 322.939717][T10422] __se_sys_mlockall+0x40d/0x510 [ 322.939741][T10422] __x64_sys_mlockall+0x3c/0x60 [ 322.939763][T10422] x64_sys_call+0x1bcf/0x2ee0 [ 322.939794][T10422] do_syscall_64+0x58/0xf0 [ 322.939824][T10422] ? clear_bhb_loop+0x35/0x90 [ 322.939859][T10422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 322.939893][T10422] RIP: 0033:0x7f1d95d8e929 [ 322.939912][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.939933][T10422] RSP: 002b:00007f1d96b73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 322.939960][T10422] RAX: ffffffffffffffda RBX: 00007f1d95fb5fa0 RCX: 00007f1d95d8e929 [ 322.939978][T10422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 322.939993][T10422] RBP: 00007f1d96b73090 R08: 0000000000000000 R09: 0000000000000000 [ 322.940008][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.940023][T10422] R13: 0000000000000001 R14: 00007f1d95fb5fa0 R15: 00007ffd0f9caea8 [ 322.940042][T10422] [ 323.218350][T10428] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3887'. [ 323.228486][T10428] 9pnet_fd: Insufficient options for proto=fd [ 323.425465][T10441] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 323.835016][ T45] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 323.935480][T10449] FAULT_INJECTION: forcing a failure. [ 323.935480][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.948650][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.7.3895 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 323.948691][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.948706][T10449] Call Trace: [ 323.948715][T10449] [ 323.948724][T10449] __dump_stack+0x21/0x30 [ 323.948757][T10449] dump_stack_lvl+0x10c/0x190 [ 323.948790][T10449] ? __cfi_dump_stack_lvl+0x10/0x10 [ 323.948817][T10449] dump_stack+0x19/0x20 [ 323.948845][T10449] should_fail_ex+0x3d9/0x530 [ 323.948870][T10449] should_fail+0xf/0x20 [ 323.948891][T10449] should_fail_usercopy+0x1e/0x30 [ 323.948916][T10449] _copy_from_user+0x22/0xb0 [ 323.948946][T10449] restore_altstack+0x9e/0x4c0 [ 323.948976][T10449] ? __kasan_check_write+0x18/0x20 [ 323.948997][T10449] ? __cfi_restore_altstack+0x10/0x10 [ 323.949025][T10449] ? __set_current_blocked+0x279/0x2c0 [ 323.949050][T10449] __ia32_sys_rt_sigreturn+0x200/0x7a0 [ 323.949079][T10449] ? recalc_sigpending+0x16d/0x1d0 [ 323.949112][T10449] ? _raw_spin_unlock_irq+0x45/0x70 [ 323.949142][T10449] ? __set_current_blocked+0x279/0x2c0 [ 323.949167][T10449] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 323.949195][T10449] ? signal_setup_done+0x202/0x2e0 [ 323.949218][T10449] ? arch_do_signal_or_restart+0x407/0x720 [ 323.949245][T10449] ? fput+0x1a5/0x240 [ 323.949276][T10449] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 323.949307][T10449] ? ksys_read+0x1ef/0x250 [ 323.949333][T10449] ? __kasan_check_read+0x15/0x20 [ 323.949357][T10449] x64_sys_call+0x2c14/0x2ee0 [ 323.949385][T10449] do_syscall_64+0x58/0xf0 [ 323.949413][T10449] ? clear_bhb_loop+0x35/0x90 [ 323.949447][T10449] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 323.949477][T10449] RIP: 0033:0x7f6bbdf2ab19 [ 323.949497][T10449] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 323.949515][T10449] RSP: 002b:00007f6bbeea7a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 323.949539][T10449] RAX: ffffffffffffffda RBX: 00007f6bbe1b5fa0 RCX: 00007f6bbdf2ab19 [ 323.949557][T10449] RDX: 00007f6bbeea7a80 RSI: 00007f6bbeea7bb0 RDI: 0000000000000011 [ 323.949573][T10449] RBP: 00007f6bbeea8090 R08: 0000000000000000 R09: 0000000000000000 [ 323.949588][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.949602][T10449] R13: 0000000000000000 R14: 00007f6bbe1b5fa0 R15: 00007ffc2e46d168 [ 323.949621][T10449] [ 324.106331][ T45] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 324.205532][ T45] usb 4-1: config 0 has no interface number 0 [ 324.212128][ T45] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.227065][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 324.227087][ T36] audit: type=1326 audit(2000000160.688:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.7.3900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bbdf8e929 code=0x0 [ 324.261191][ T45] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 324.272070][ T45] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 324.284007][ T45] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 324.295319][ T45] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.308936][ T45] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 324.318525][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.328381][ T45] usb 4-1: config 0 descriptor?? [ 324.333846][T10444] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 324.376354][ T36] audit: type=1400 audit(2000000160.838:1472): avc: denied { create } for pid=10471 comm="syz.4.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 324.558688][ T36] audit: type=1326 audit(2000000161.018:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.3.3893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d95d8e929 code=0x0 [ 325.142150][T10493] 9pnet_virtio: no channels available for device syz [ 325.443179][ T36] audit: type=1326 audit(2000000161.898:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.9.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb58b8e929 code=0x7fc00000 [ 325.546197][T10517] rust_binder: Write failure EINVAL in pid:452 [ 325.607145][T10524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 325.616111][ T36] audit: type=1400 audit(2000000162.078:1475): avc: denied { map } for pid=10525 comm="syz.4.3926" path="socket:[104776]" dev="sockfs" ino=104776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 325.649039][ T36] audit: type=1400 audit(2000000162.078:1476): avc: denied { read accept } for pid=10525 comm="syz.4.3926" path="socket:[104776]" dev="sockfs" ino=104776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 325.974432][T10547] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3934'. [ 326.009024][ T36] audit: type=1400 audit(2000000162.468:1477): avc: denied { map } for pid=10549 comm="syz.4.3935" path="pipe:[104326]" dev="pipefs" ino=104326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 326.124561][T10555] tmpfs: Unknown parameter 'indo64' [ 326.269885][ T36] audit: type=1400 audit(2000000162.728:1478): avc: denied { bind } for pid=10564 comm="syz.4.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.480432][T10571] FAULT_INJECTION: forcing a failure. [ 326.480432][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.493759][T10571] CPU: 1 UID: 0 PID: 10571 Comm: syz.9.3944 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 326.493788][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.493799][T10571] Call Trace: [ 326.493806][T10571] [ 326.493814][T10571] __dump_stack+0x21/0x30 [ 326.493840][T10571] dump_stack_lvl+0x10c/0x190 [ 326.493859][T10571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 326.493879][T10571] dump_stack+0x19/0x20 [ 326.493896][T10571] should_fail_ex+0x3d9/0x530 [ 326.493914][T10571] should_fail+0xf/0x20 [ 326.493929][T10571] should_fail_usercopy+0x1e/0x30 [ 326.493947][T10571] _copy_from_user+0x22/0xb0 [ 326.493968][T10571] __se_sys_mount+0x182/0x480 [ 326.493988][T10571] ? ksys_write+0x1ef/0x250 [ 326.494007][T10571] ? __x64_sys_mount+0xf0/0xf0 [ 326.494025][T10571] ? do_mknodat+0x6f6/0x740 [ 326.494045][T10571] __x64_sys_mount+0xc3/0xf0 [ 326.494063][T10571] x64_sys_call+0x2021/0x2ee0 [ 326.494083][T10571] do_syscall_64+0x58/0xf0 [ 326.494105][T10571] ? clear_bhb_loop+0x35/0x90 [ 326.494129][T10571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 326.494152][T10571] RIP: 0033:0x7ffb58b8e929 [ 326.494166][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.494180][T10571] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.494197][T10571] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 326.494209][T10571] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 326.494221][T10571] RBP: 00007ffb599d1090 R08: 0000200000000140 R09: 0000000000000000 [ 326.494231][T10571] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 326.494241][T10571] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 326.494255][T10571] [ 326.875665][ T45] usb 4-1: USB disconnect, device number 114 [ 326.965887][T10599] FAULT_INJECTION: forcing a failure. [ 326.965887][T10599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.980193][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.9.3960 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 326.980243][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.980259][T10599] Call Trace: [ 326.980266][T10599] [ 326.980276][T10599] __dump_stack+0x21/0x30 [ 326.980309][T10599] dump_stack_lvl+0x10c/0x190 [ 326.980334][T10599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 326.980381][T10599] dump_stack+0x19/0x20 [ 326.980404][T10599] should_fail_ex+0x3d9/0x530 [ 326.980447][T10599] should_fail+0xf/0x20 [ 326.980468][T10599] should_fail_usercopy+0x1e/0x30 [ 326.980495][T10599] strncpy_from_user+0x28/0x270 [ 326.980519][T10599] ? getname_flags+0xc6/0x710 [ 326.980545][T10599] getname_flags+0x102/0x710 [ 326.980570][T10599] user_path_at+0x2b/0x60 [ 326.980596][T10599] __se_sys_mount+0x288/0x480 [ 326.980621][T10599] ? ksys_write+0x1ef/0x250 [ 326.980646][T10599] ? __x64_sys_mount+0xf0/0xf0 [ 326.980671][T10599] __x64_sys_mount+0xc3/0xf0 [ 326.980697][T10599] x64_sys_call+0x2021/0x2ee0 [ 326.980726][T10599] do_syscall_64+0x58/0xf0 [ 326.980755][T10599] ? clear_bhb_loop+0x35/0x90 [ 326.980791][T10599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 326.980823][T10599] RIP: 0033:0x7ffb58b8e929 [ 326.980842][T10599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.980864][T10599] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.980890][T10599] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 326.980907][T10599] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000200000000140 [ 326.980923][T10599] RBP: 00007ffb599d1090 R08: 0000000000000000 R09: 0000000000000000 [ 326.980938][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.980953][T10599] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 326.980971][T10599] [ 327.279989][T10621] tap0: tun_chr_ioctl cmd 1074025677 [ 327.285540][T10621] tap0: linktype set to 774 [ 327.291931][ T36] audit: type=1400 audit(2000000163.748:1479): avc: denied { setattr } for pid=10620 comm="syz.9.3962" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 327.305270][T10621] rust_binder: Error while translating object. [ 327.316272][ T623] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 327.331804][T10621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.331872][T10621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 327.476222][ T623] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.498172][ T623] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.508121][ T623] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 327.517224][ T623] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.527795][ T623] usb 8-1: config 0 descriptor?? [ 327.937243][ T623] lenovo 0003:17EF:6047.0022: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 328.052261][T10640] rust_binder: Error while translating object. [ 328.052300][T10640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 328.059261][T10640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:378 [ 328.188049][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.206733][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.215440][T10645] fuse: Bad value for 'rootmode' [ 328.222054][T10645] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 328.229959][T10645] SELinux: failed to load policy [ 328.336752][ T36] audit: type=1400 audit(2000000164.798:1480): avc: denied { write } for pid=10597 comm="syz.7.3961" name="/" dev="incremental-fs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.360753][ T623] lenovo 0003:17EF:6047.0022: Failed to switch middle button: -71 [ 328.370765][ T623] lenovo 0003:17EF:6047.0022: Fn-lock setting failed: -71 [ 328.378929][ T623] lenovo 0003:17EF:6047.0022: Sensitivity setting failed: -71 [ 328.388473][ T623] usb 8-1: USB disconnect, device number 48 [ 328.412055][T10646] fido_id[10646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 328.888876][T10671] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 328.888916][T10671] rust_binder: Error while translating object. [ 328.900324][T10671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.906952][T10671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:477 [ 329.024473][T10680] fuse: Unknown parameter 'ro‹hč4˘´otmode' [ 329.045341][T10680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 329.691720][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 329.691741][ T36] audit: type=1400 audit(2000000166.148:1484): avc: denied { write } for pid=10703 comm="syz.4.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.995027][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4006'. [ 330.040324][ T36] audit: type=1400 audit(2000000166.498:1485): avc: denied { append } for pid=10733 comm="syz.7.4009" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 330.195837][T10746] FAULT_INJECTION: forcing a failure. [ 330.195837][T10746] name failslab, interval 1, probability 0, space 0, times 0 [ 330.209306][T10746] CPU: 1 UID: 0 PID: 10746 Comm: syz.7.4014 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 330.209355][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.209373][T10746] Call Trace: [ 330.209385][T10746] [ 330.209397][T10746] __dump_stack+0x21/0x30 [ 330.209435][T10746] dump_stack_lvl+0x10c/0x190 [ 330.209465][T10746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 330.209497][T10746] ? kernel_text_address+0xa9/0xe0 [ 330.209525][T10746] dump_stack+0x19/0x20 [ 330.209551][T10746] should_fail_ex+0x3d9/0x530 [ 330.209579][T10746] should_failslab+0xac/0x100 [ 330.209613][T10746] __kmalloc_cache_noprof+0x41/0x3c0 [ 330.209642][T10746] ? rtnl_newlink+0xf6/0x2130 [ 330.209669][T10746] ? __cfi_rtnl_newlink+0x10/0x10 [ 330.209693][T10746] rtnl_newlink+0xf6/0x2130 [ 330.209720][T10746] ? avc_has_perm_noaudit+0x268/0x360 [ 330.209746][T10746] ? __asan_memcpy+0x5a/0x80 [ 330.209773][T10746] ? avc_has_perm_noaudit+0x286/0x360 [ 330.209799][T10746] ? __cfi_rtnl_newlink+0x10/0x10 [ 330.209822][T10746] ? cred_has_capability+0x281/0x380 [ 330.209860][T10746] ? selinux_perf_event_alloc+0x110/0x110 [ 330.209894][T10746] ? unwind_get_return_address+0x51/0x90 [ 330.209916][T10746] ? arch_stack_walk+0x10b/0x170 [ 330.209952][T10746] ? __kasan_check_write+0x18/0x20 [ 330.209977][T10746] ? mutex_lock+0x92/0x1c0 [ 330.210000][T10746] ? __cfi_mutex_lock+0x10/0x10 [ 330.210022][T10746] ? ns_capable+0x91/0xf0 [ 330.210050][T10746] ? netlink_net_capable+0x129/0x160 [ 330.210093][T10746] ? __cfi_rtnl_newlink+0x10/0x10 [ 330.210117][T10746] rtnetlink_rcv_msg+0x87f/0xa00 [ 330.210145][T10746] ? avc_has_perm_noaudit+0x268/0x360 [ 330.210170][T10746] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 330.210198][T10746] ? avc_has_perm_noaudit+0x286/0x360 [ 330.210223][T10746] ? avc_has_perm+0x144/0x220 [ 330.210258][T10746] netlink_rcv_skb+0x22b/0x4a0 [ 330.210299][T10746] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 330.210332][T10746] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 330.210382][T10746] ? netlink_autobind+0x1c0/0x1c0 [ 330.210415][T10746] ? is_vmalloc_addr+0x11/0x40 [ 330.210450][T10746] rtnetlink_rcv+0x20/0x30 [ 330.210476][T10746] netlink_unicast+0x8c6/0xa60 [ 330.210509][T10746] netlink_sendmsg+0x7f0/0xaf0 [ 330.210545][T10746] ? __cfi_netlink_sendmsg+0x10/0x10 [ 330.210581][T10746] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 330.210615][T10746] ? security_socket_sendmsg+0x33/0xd0 [ 330.210643][T10746] ? __cfi_netlink_sendmsg+0x10/0x10 [ 330.210679][T10746] ____sys_sendmsg+0xa15/0xa70 [ 330.210717][T10746] ? __sys_sendmsg_sock+0x50/0x50 [ 330.210753][T10746] ? import_iovec+0x81/0xb0 [ 330.210788][T10746] ___sys_sendmsg+0x220/0x2a0 [ 330.210822][T10746] ? __sys_sendmsg+0x280/0x280 [ 330.210859][T10746] ? proc_fail_nth_write+0x17e/0x210 [ 330.210883][T10746] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 330.210913][T10746] __x64_sys_sendmsg+0x1eb/0x2c0 [ 330.210934][T10746] ? fput+0x1a5/0x240 [ 330.210968][T10746] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 330.210989][T10746] ? ksys_write+0x1ef/0x250 [ 330.211019][T10746] ? __kasan_check_read+0x15/0x20 [ 330.211046][T10746] x64_sys_call+0x2a4c/0x2ee0 [ 330.211086][T10746] do_syscall_64+0x58/0xf0 [ 330.211115][T10746] ? clear_bhb_loop+0x35/0x90 [ 330.211150][T10746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.211182][T10746] RIP: 0033:0x7f6bbdf8e929 [ 330.211202][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.211226][T10746] RSP: 002b:00007f6bbeea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.211254][T10746] RAX: ffffffffffffffda RBX: 00007f6bbe1b5fa0 RCX: 00007f6bbdf8e929 [ 330.211273][T10746] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 330.211290][T10746] RBP: 00007f6bbeea8090 R08: 0000000000000000 R09: 0000000000000000 [ 330.211307][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.211338][T10746] R13: 0000000000000000 R14: 00007f6bbe1b5fa0 R15: 00007ffc2e46d168 [ 330.211357][T10746] [ 330.706948][T10753] rust_binder: Error while translating object. [ 330.706982][T10753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 330.713203][T10753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:414 [ 330.812660][ T36] audit: type=1400 audit(2000000167.268:1486): avc: denied { setattr } for pid=10757 comm="syz.9.4018" name="PACKET" dev="sockfs" ino=105410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.989305][T10768] FAULT_INJECTION: forcing a failure. [ 330.989305][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 331.002347][T10768] CPU: 0 UID: 0 PID: 10768 Comm: syz.9.4022 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 331.002378][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.002389][T10768] Call Trace: [ 331.002397][T10768] [ 331.002404][T10768] __dump_stack+0x21/0x30 [ 331.002429][T10768] dump_stack_lvl+0x10c/0x190 [ 331.002447][T10768] ? __cfi_dump_stack_lvl+0x10/0x10 [ 331.002467][T10768] dump_stack+0x19/0x20 [ 331.002484][T10768] should_fail_ex+0x3d9/0x530 [ 331.002503][T10768] should_failslab+0xac/0x100 [ 331.002525][T10768] __kmalloc_noprof+0x69/0x450 [ 331.002543][T10768] ? arch_stack_walk+0x10b/0x170 [ 331.002564][T10768] ? ip_options_get+0x5c/0x540 [ 331.002584][T10768] ip_options_get+0x5c/0x540 [ 331.002603][T10768] ip_cmsg_send+0x65f/0xad0 [ 331.002626][T10768] udp_sendmsg+0xb26/0x21f0 [ 331.002649][T10768] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 331.002670][T10768] ? __cfi_udp_sendmsg+0x10/0x10 [ 331.002689][T10768] ? is_bpf_text_address+0x17b/0x1a0 [ 331.002713][T10768] ? kernel_text_address+0xa9/0xe0 [ 331.002732][T10768] ? arch_stack_walk+0x10b/0x170 [ 331.002753][T10768] ? get_random_u32+0x28b/0x500 [ 331.002776][T10768] udpv6_sendmsg+0xa70/0x26c0 [ 331.002792][T10768] ? _raw_spin_unlock_bh+0x54/0x60 [ 331.002815][T10768] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 331.002833][T10768] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 331.002854][T10768] ? _raw_spin_unlock_bh+0x54/0x60 [ 331.002874][T10768] ? release_sock+0x171/0x1f0 [ 331.002895][T10768] ? inet_send_prepare+0x1e7/0x4f0 [ 331.002910][T10768] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 331.002924][T10768] inet6_sendmsg+0xef/0x120 [ 331.002947][T10768] ____sys_sendmsg+0x5db/0xa70 [ 331.002983][T10768] ? __sys_sendmsg_sock+0x50/0x50 [ 331.003007][T10768] ? import_iovec+0x81/0xb0 [ 331.003031][T10768] ___sys_sendmsg+0x220/0x2a0 [ 331.003054][T10768] ? __sys_sendmsg+0x280/0x280 [ 331.003078][T10768] ? kstrtouint+0x78/0xf0 [ 331.003098][T10768] __sys_sendmmsg+0x271/0x470 [ 331.003113][T10768] ? __cfi___sys_sendmmsg+0x10/0x10 [ 331.003131][T10768] ? __cfi_ksys_write+0x10/0x10 [ 331.003152][T10768] __x64_sys_sendmmsg+0xa4/0xc0 [ 331.003166][T10768] x64_sys_call+0xfec/0x2ee0 [ 331.003186][T10768] do_syscall_64+0x58/0xf0 [ 331.003206][T10768] ? clear_bhb_loop+0x35/0x90 [ 331.003230][T10768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 331.003253][T10768] RIP: 0033:0x7ffb58b8e929 [ 331.003267][T10768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.003280][T10768] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 331.003298][T10768] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 331.003310][T10768] RDX: 0000000000000001 RSI: 0000200000001000 RDI: 0000000000000003 [ 331.003321][T10768] RBP: 00007ffb599d1090 R08: 0000000000000000 R09: 0000000000000000 [ 331.003334][T10768] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 331.003348][T10768] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 331.003365][T10768] [ 331.631457][T10788] SELinux: policydb magic number 0x4accc8b4 does not match expected magic number 0xf97cff8c [ 331.642166][T10788] SELinux: failed to load policy [ 331.763040][T10800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 331.814820][T10808] rust_binder: Write failure EINVAL in pid:509 [ 331.989434][T10816] SELinux: security_context_str_to_sid () failed with errno=-22 [ 331.989510][T10817] SELinux: security_context_str_to_sid () failed with errno=-22 [ 332.545057][ T307] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 332.697621][ T307] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 332.706863][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.715235][ T307] usb 4-1: Product: syz [ 332.719562][ T307] usb 4-1: Manufacturer: syz [ 332.724214][ T307] usb 4-1: SerialNumber: syz [ 332.729735][ T307] usb 4-1: config 0 descriptor?? [ 332.885028][ T63] usb 8-1: new low-speed USB device number 50 using dummy_hcd [ 332.943288][ T307] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 332.954129][ T307] asix 4-1:0.0: probe with driver asix failed with error -71 [ 332.962814][ T307] usb 4-1: USB disconnect, device number 115 [ 333.046742][ T63] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 333.059609][ T63] usb 8-1: config 0 has no interface number 0 [ 333.066281][ T63] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.081846][ T63] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 333.092891][ T63] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.108745][ T63] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.120017][ T63] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.138047][ T63] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 333.144734][T10854] overlayfs: failed to clone upperpath [ 333.147404][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.163039][ T63] usb 8-1: config 0 descriptor?? [ 333.169410][T10839] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 333.177217][T10839] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 333.400533][ T45] usb 8-1: USB disconnect, device number 50 [ 333.622653][T10892] overlay: Unknown parameter 'subj_user' [ 333.640778][T10894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:376 [ 333.659044][T10896] overlay: Unknown parameter 'subj_user' [ 333.731438][T10898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 333.731475][T10898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:380 [ 333.762458][T10900] SELinux: ebitmap: truncated map [ 333.778282][T10900] SELinux: failed to load policy [ 333.812437][ T36] audit: type=1400 audit(2000000170.268:1487): avc: denied { mount } for pid=10903 comm="syz.3.4075" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 333.842362][ T36] audit: type=1400 audit(2000000170.298:1488): avc: denied { unmount } for pid=8981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 334.000820][T10914] binder: Bad value for 'max' [ 334.042089][T10921] rust_binder: Error while translating object. [ 334.042117][T10921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 334.048587][T10921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 334.329211][T10871] 9pnet_fd: p9_fd_create_tcp (10871): problem connecting socket to 127.0.0.1 [ 334.438349][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.447153][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.906123][T10951] tmpfs: Unknown parameter 'n' [ 335.041736][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.050504][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.068933][ T36] audit: type=1400 audit(2000000171.528:1489): avc: denied { accept } for pid=10971 comm="syz.9.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 335.103800][T10974] binder: Unknown parameter '18446744073709551615' [ 335.125020][ T45] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 335.286095][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.305070][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.314888][ T45] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 335.324179][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.333148][ T45] usb 4-1: config 0 descriptor?? [ 335.591698][ T36] audit: type=1400 audit(2000000172.048:1490): avc: denied { accept } for pid=11019 comm="syz.4.4110" path="socket:[107457]" dev="sockfs" ino=107457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 335.645515][T11026] FAULT_INJECTION: forcing a failure. [ 335.645515][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 335.659879][T11026] CPU: 0 UID: 0 PID: 11026 Comm: syz.9.4113 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 335.659917][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.659933][T11026] Call Trace: [ 335.659942][T11026] [ 335.659953][T11026] __dump_stack+0x21/0x30 [ 335.659985][T11026] dump_stack_lvl+0x10c/0x190 [ 335.660009][T11026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 335.660034][T11026] ? kasan_save_track+0x4f/0x80 [ 335.660061][T11026] ? kasan_save_track+0x3e/0x80 [ 335.660088][T11026] ? kasan_save_alloc_info+0x40/0x50 [ 335.660113][T11026] dump_stack+0x19/0x20 [ 335.660135][T11026] should_fail_ex+0x3d9/0x530 [ 335.660159][T11026] should_failslab+0xac/0x100 [ 335.660188][T11026] kmem_cache_alloc_noprof+0x42/0x3a0 [ 335.660214][T11026] ? mas_alloc_nodes+0x254/0x9e0 [ 335.660260][T11026] mas_alloc_nodes+0x254/0x9e0 [ 335.660282][T11026] mas_preallocate+0x764/0xc60 [ 335.660302][T11026] ? __cfi_mas_preallocate+0x10/0x10 [ 335.660324][T11026] ? anon_vma_name+0x7e/0xd0 [ 335.660350][T11026] ? vm_area_dup+0x4b8/0x5f0 [ 335.660380][T11026] __split_vma+0x412/0xa80 [ 335.660406][T11026] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 335.660437][T11026] vms_gather_munmap_vmas+0x273/0xdd0 [ 335.660468][T11026] mmap_region+0x59e/0x1bd0 [ 335.660495][T11026] ? __cfi_mmap_region+0x10/0x10 [ 335.660517][T11026] ? __kasan_check_read+0x15/0x20 [ 335.660538][T11026] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 335.660570][T11026] ? file_mmap_ok+0x147/0x1a0 [ 335.660590][T11026] do_mmap+0xb6d/0x13c0 [ 335.660613][T11026] ? __cfi_do_mmap+0x10/0x10 [ 335.660633][T11026] ? down_write_killable+0xe9/0x2d0 [ 335.660654][T11026] ? __cfi_down_write_killable+0x10/0x10 [ 335.660674][T11026] vm_mmap_pgoff+0x38f/0x4e0 [ 335.660698][T11026] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 335.660718][T11026] ? __fget_files+0x2c5/0x340 [ 335.660746][T11026] ksys_mmap_pgoff+0x166/0x1e0 [ 335.660768][T11026] __x64_sys_mmap+0x121/0x140 [ 335.660792][T11026] x64_sys_call+0x13bf/0x2ee0 [ 335.660815][T11026] do_syscall_64+0x58/0xf0 [ 335.660838][T11026] ? clear_bhb_loop+0x35/0x90 [ 335.660866][T11026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 335.660896][T11026] RIP: 0033:0x7ffb58b8e929 [ 335.660913][T11026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.660929][T11026] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 335.660952][T11026] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 335.660966][T11026] RDX: 000000000100000c RSI: 0000000000004000 RDI: 0000200000ff9000 [ 335.660979][T11026] RBP: 00007ffb599d1090 R08: 0000000000000003 R09: 0000000100000000 [ 335.661004][T11026] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 335.661019][T11026] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 335.661035][T11026] [ 335.893769][ T45] playstation 0003:054C:0DF2.0023: item fetching failed at offset 3/5 [ 335.977125][T11031] rust_binder: Write failure EFAULT in pid:492 [ 335.984469][ T45] playstation 0003:054C:0DF2.0023: Parse failed [ 335.997487][ T45] playstation 0003:054C:0DF2.0023: probe with driver playstation failed with error -22 [ 336.012355][ T36] audit: type=1400 audit(2000000172.468:1491): avc: denied { map } for pid=11033 comm="syz.7.4117" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.036884][ T36] audit: type=1400 audit(2000000172.488:1492): avc: denied { write } for pid=11032 comm="syz.9.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 336.122872][T10947] cgroup: Unknown subsys name '#' [ 336.128675][T10947] rust_binder: Error in use_page_slow: ESRCH [ 336.128694][T10947] rust_binder: use_range failure ESRCH [ 336.134694][T10947] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 336.140390][T10947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 336.148437][T10947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:399 [ 336.158529][T11038] rust_binder: Write failure EINVAL in pid:496 [ 336.168871][ T307] usb 4-1: USB disconnect, device number 116 [ 336.282023][T11052] input: syz1 as /devices/virtual/input/input68 [ 336.292916][T11052] bridge0: entered promiscuous mode [ 336.314414][T11054] tmpfs: Bad value for 'nr_inodes' [ 336.322011][T11054] FAULT_INJECTION: forcing a failure. [ 336.322011][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.335627][T11054] CPU: 1 UID: 0 PID: 11054 Comm: syz.9.4126 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 336.335653][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.335665][T11054] Call Trace: [ 336.335670][T11054] [ 336.335677][T11054] __dump_stack+0x21/0x30 [ 336.335702][T11054] dump_stack_lvl+0x10c/0x190 [ 336.335720][T11054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 336.335740][T11054] dump_stack+0x19/0x20 [ 336.335757][T11054] should_fail_ex+0x3d9/0x530 [ 336.335776][T11054] should_fail+0xf/0x20 [ 336.335791][T11054] should_fail_usercopy+0x1e/0x30 [ 336.335809][T11054] _copy_to_user+0x24/0xa0 [ 336.335830][T11054] simple_read_from_buffer+0xed/0x160 [ 336.335856][T11054] proc_fail_nth_read+0x19e/0x210 [ 336.335872][T11054] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 336.335887][T11054] ? bpf_lsm_file_permission+0xd/0x20 [ 336.335904][T11054] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 336.335918][T11054] vfs_read+0x278/0xb60 [ 336.335938][T11054] ? __cfi_vfs_read+0x10/0x10 [ 336.335954][T11054] ? __kasan_check_write+0x18/0x20 [ 336.335972][T11054] ? mutex_lock+0x92/0x1c0 [ 336.335986][T11054] ? __cfi_mutex_lock+0x10/0x10 [ 336.336000][T11054] ? __fget_files+0x2c5/0x340 [ 336.336024][T11054] ksys_read+0x141/0x250 [ 336.336041][T11054] ? xfd_validate_state+0x68/0x150 [ 336.336059][T11054] ? __cfi_ksys_read+0x10/0x10 [ 336.336076][T11054] ? __kasan_check_write+0x18/0x20 [ 336.336093][T11054] ? fpregs_restore_userregs+0x11d/0x260 [ 336.336118][T11054] __x64_sys_read+0x7f/0x90 [ 336.336136][T11054] x64_sys_call+0x2638/0x2ee0 [ 336.336157][T11054] do_syscall_64+0x58/0xf0 [ 336.336177][T11054] ? clear_bhb_loop+0x35/0x90 [ 336.336201][T11054] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 336.336223][T11054] RIP: 0033:0x7ffb58b8d33c [ 336.336238][T11054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.336251][T11054] RSP: 002b:00007ffb599d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.336268][T11054] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8d33c [ 336.336280][T11054] RDX: 000000000000000f RSI: 00007ffb599d10a0 RDI: 0000000000000003 [ 336.336290][T11054] RBP: 00007ffb599d1090 R08: 0000000000000000 R09: 0000000000000000 [ 336.336300][T11054] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 336.336311][T11054] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 336.336324][T11054] [ 336.645371][ T623] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 336.795032][ T623] usb 8-1: Using ep0 maxpacket: 16 [ 336.801486][ T623] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.812346][ T623] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.825618][ T623] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.834692][ T623] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.843661][ T623] usb 8-1: config 0 descriptor?? [ 336.850061][ T623] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 337.051614][ T307] usb 8-1: USB disconnect, device number 51 [ 337.060490][T11051] bridge0: left promiscuous mode [ 337.158451][T11071] overlayfs: failed to clone upperpath [ 337.165299][ T620] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 337.173398][ T36] audit: type=1400 audit(2000000173.628:1493): avc: denied { create } for pid=11070 comm="syz.4.4130" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.196939][ T36] audit: type=1400 audit(2000000173.628:1494): avc: denied { link } for pid=11070 comm="syz.4.4130" name="file1" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.225391][ T36] audit: type=1400 audit(2000000173.658:1495): avc: denied { unlink } for pid=8925 comm="syz-executor" name="file0" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.314865][ T36] audit: type=1326 audit(2000000173.768:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.4.4138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1316b8e929 code=0x0 [ 337.356346][ T620] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 337.365414][ T620] usb 4-1: config 0 has no interface number 0 [ 337.371542][ T620] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 337.382397][ T620] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 337.393191][ T620] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.404848][ T620] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 337.415885][ T620] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.429084][ T620] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 337.438322][ T620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.447270][ T620] usb 4-1: config 0 descriptor?? [ 337.452789][T11063] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 337.460822][T11063] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 337.464865][T11093] 9pnet_fd: Insufficient options for proto=fd [ 337.690999][ T307] usb 4-1: USB disconnect, device number 117 [ 337.792561][T11100] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 337.792796][T11100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.942416][ T36] audit: type=1400 audit(2000000174.398:1497): avc: denied { listen } for pid=11104 comm="syz.7.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.223513][ T36] audit: type=1400 audit(2000000174.678:1498): avc: denied { create } for pid=11115 comm="syz.4.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 338.300721][T11126] FAULT_INJECTION: forcing a failure. [ 338.300721][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 338.325053][ T620] usb 8-1: new low-speed USB device number 52 using dummy_hcd [ 338.345020][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.3.4150 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 338.345052][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.345065][T11126] Call Trace: [ 338.345073][T11126] [ 338.345082][T11126] __dump_stack+0x21/0x30 [ 338.345113][T11126] dump_stack_lvl+0x10c/0x190 [ 338.345137][T11126] ? __cfi_dump_stack_lvl+0x10/0x10 [ 338.345164][T11126] ? kernel_text_address+0xa9/0xe0 [ 338.345188][T11126] dump_stack+0x19/0x20 [ 338.345212][T11126] should_fail_ex+0x3d9/0x530 [ 338.345239][T11126] should_failslab+0xac/0x100 [ 338.345269][T11126] __kmalloc_cache_noprof+0x41/0x3c0 [ 338.345296][T11126] ? rtnl_newlink+0xf6/0x2130 [ 338.345320][T11126] ? __cfi_rtnl_newlink+0x10/0x10 [ 338.345342][T11126] rtnl_newlink+0xf6/0x2130 [ 338.345366][T11126] ? avc_has_perm_noaudit+0x268/0x360 [ 338.345390][T11126] ? __asan_memcpy+0x5a/0x80 [ 338.345414][T11126] ? avc_has_perm_noaudit+0x286/0x360 [ 338.345438][T11126] ? __cfi_rtnl_newlink+0x10/0x10 [ 338.345460][T11126] ? cred_has_capability+0x281/0x380 [ 338.345492][T11126] ? selinux_perf_event_alloc+0x110/0x110 [ 338.345524][T11126] ? unwind_get_return_address+0x51/0x90 [ 338.345546][T11126] ? arch_stack_walk+0x10b/0x170 [ 338.345578][T11126] ? __kasan_check_write+0x18/0x20 [ 338.345602][T11126] ? mutex_lock+0x92/0x1c0 [ 338.345622][T11126] ? __cfi_mutex_lock+0x10/0x10 [ 338.345643][T11126] ? ns_capable+0x91/0xf0 [ 338.345667][T11126] ? netlink_net_capable+0x129/0x160 [ 338.345697][T11126] ? __cfi_rtnl_newlink+0x10/0x10 [ 338.345718][T11126] rtnetlink_rcv_msg+0x87f/0xa00 [ 338.345743][T11126] ? avc_has_perm_noaudit+0x268/0x360 [ 338.345767][T11126] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 338.345792][T11126] ? avc_has_perm_noaudit+0x286/0x360 [ 338.345816][T11126] ? avc_has_perm+0x144/0x220 [ 338.345838][T11126] netlink_rcv_skb+0x22b/0x4a0 [ 338.345868][T11126] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 338.345893][T11126] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 338.345928][T11126] ? netlink_autobind+0x1c0/0x1c0 [ 338.345962][T11126] ? is_vmalloc_addr+0x11/0x40 [ 338.346012][T11126] rtnetlink_rcv+0x20/0x30 [ 338.346037][T11126] netlink_unicast+0x8c6/0xa60 [ 338.346067][T11126] netlink_sendmsg+0x7f0/0xaf0 [ 338.346101][T11126] ? __cfi_netlink_sendmsg+0x10/0x10 [ 338.346135][T11126] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 338.346169][T11126] ? security_socket_sendmsg+0x33/0xd0 [ 338.346195][T11126] ? __cfi_netlink_sendmsg+0x10/0x10 [ 338.346226][T11126] ____sys_sendmsg+0xa15/0xa70 [ 338.346261][T11126] ? __sys_sendmsg_sock+0x50/0x50 [ 338.346294][T11126] ? import_iovec+0x81/0xb0 [ 338.346326][T11126] ___sys_sendmsg+0x220/0x2a0 [ 338.346360][T11126] ? __sys_sendmsg+0x280/0x280 [ 338.346393][T11126] ? proc_fail_nth_write+0x17e/0x210 [ 338.346414][T11126] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 338.346440][T11126] __x64_sys_sendmsg+0x1eb/0x2c0 [ 338.346456][T11126] ? fput+0x1a5/0x240 [ 338.346485][T11126] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 338.346503][T11126] ? ksys_write+0x1ef/0x250 [ 338.346528][T11126] ? __kasan_check_read+0x15/0x20 [ 338.346551][T11126] x64_sys_call+0x2a4c/0x2ee0 [ 338.346579][T11126] do_syscall_64+0x58/0xf0 [ 338.346606][T11126] ? clear_bhb_loop+0x35/0x90 [ 338.346638][T11126] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 338.346667][T11126] RIP: 0033:0x7f1d95d8e929 [ 338.346685][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.346705][T11126] RSP: 002b:00007f1d96b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.346730][T11126] RAX: ffffffffffffffda RBX: 00007f1d95fb5fa0 RCX: 00007f1d95d8e929 [ 338.346748][T11126] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 338.346762][T11126] RBP: 00007f1d96b73090 R08: 0000000000000000 R09: 0000000000000000 [ 338.346777][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.346790][T11126] R13: 0000000000000000 R14: 00007f1d95fb5fa0 R15: 00007ffd0f9caea8 [ 338.346808][T11126] [ 338.833930][ T620] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 338.845022][ T620] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.854370][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'. [ 338.869171][ T620] usb 8-1: config 0 descriptor?? [ 338.913549][T11140] FAULT_INJECTION: forcing a failure. [ 338.913549][T11140] name failslab, interval 1, probability 0, space 0, times 0 [ 338.927103][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.3.4157 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 338.927141][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.927160][T11140] Call Trace: [ 338.927168][T11140] [ 338.927176][T11140] __dump_stack+0x21/0x30 [ 338.927220][T11140] dump_stack_lvl+0x10c/0x190 [ 338.927245][T11140] ? __cfi_dump_stack_lvl+0x10/0x10 [ 338.927270][T11140] ? stack_depot_save_flags+0x38/0x800 [ 338.927296][T11140] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 338.927324][T11140] dump_stack+0x19/0x20 [ 338.927346][T11140] should_fail_ex+0x3d9/0x530 [ 338.927369][T11140] should_failslab+0xac/0x100 [ 338.927397][T11140] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 338.927423][T11140] ? parse_opts+0x15a/0x570 [ 338.927453][T11140] kstrdup+0x4d/0x140 [ 338.927477][T11140] parse_opts+0x15a/0x570 [ 338.927505][T11140] ? p9_fd_show_options+0x1c0/0x1c0 [ 338.927535][T11140] p9_fd_create+0x39/0x4c0 [ 338.927562][T11140] p9_client_create+0x7fd/0x1190 [ 338.927584][T11140] ? __cfi_p9_client_create+0x10/0x10 [ 338.927609][T11140] ? kasan_save_alloc_info+0x40/0x50 [ 338.927632][T11140] ? __kasan_kmalloc+0x96/0xb0 [ 338.927661][T11140] ? kstrdup+0x7b/0x140 [ 338.927684][T11140] ? __kasan_check_write+0x18/0x20 [ 338.927709][T11140] v9fs_session_init+0x1e1/0x1820 [ 338.927736][T11140] ? __cfi_v9fs_session_init+0x10/0x10 [ 338.927760][T11140] ? kasan_save_alloc_info+0x40/0x50 [ 338.927782][T11140] ? __kasan_kmalloc+0x96/0xb0 [ 338.927813][T11140] ? v9fs_mount+0xbd/0xa00 [ 338.927840][T11140] v9fs_mount+0xd7/0xa00 [ 338.927868][T11140] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 338.927899][T11140] ? __cfi_v9fs_mount+0x10/0x10 [ 338.927927][T11140] ? selinux_capable+0x38/0x50 [ 338.927951][T11140] legacy_get_tree+0x103/0x1b0 [ 338.927979][T11140] ? __cfi_v9fs_mount+0x10/0x10 [ 338.928001][T11140] vfs_get_tree+0x9e/0x290 [ 338.928024][T11140] do_new_mount+0x251/0xb40 [ 338.928051][T11140] path_mount+0x688/0x1050 [ 338.928082][T11140] ? putname+0x113/0x150 [ 338.928107][T11140] __se_sys_mount+0x2bd/0x480 [ 338.928132][T11140] ? ksys_write+0x1ef/0x250 [ 338.928158][T11140] ? __x64_sys_mount+0xf0/0xf0 [ 338.928186][T11140] __x64_sys_mount+0xc3/0xf0 [ 338.928221][T11140] x64_sys_call+0x2021/0x2ee0 [ 338.928250][T11140] do_syscall_64+0x58/0xf0 [ 338.928278][T11140] ? clear_bhb_loop+0x35/0x90 [ 338.928312][T11140] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 338.928342][T11140] RIP: 0033:0x7f1d95d8e929 [ 338.928361][T11140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.928379][T11140] RSP: 002b:00007f1d96b73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 338.928401][T11140] RAX: ffffffffffffffda RBX: 00007f1d95fb5fa0 RCX: 00007f1d95d8e929 [ 338.928416][T11140] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 338.928429][T11140] RBP: 00007f1d96b73090 R08: 0000200000000080 R09: 0000000000000000 [ 338.928443][T11140] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000002 [ 338.928455][T11140] R13: 0000000000000000 R14: 00007f1d95fb5fa0 R15: 00007ffd0f9caea8 [ 338.928472][T11140] [ 339.271998][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 339.315545][T11159] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 339.457188][ T620] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 339.467435][ T620] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 339.477825][ T620] asix 8-1:0.0: probe with driver asix failed with error -71 [ 339.495149][ T620] usb 8-1: USB disconnect, device number 52 [ 339.536152][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.544819][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.625009][ T307] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 339.795127][ T307] usb 4-1: Invalid ep0 maxpacket: 16 [ 339.925024][ T307] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 340.075007][ T307] usb 4-1: Invalid ep0 maxpacket: 16 [ 340.080749][ T307] usb usb4-port1: attempt power cycle [ 340.134277][T11189] tipc: Enabling of bearer rejected, failed to enable media [ 340.345548][T11200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.355369][T11200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.424996][ T307] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 340.455328][ T307] usb 4-1: Invalid ep0 maxpacket: 16 [ 340.591120][ T307] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 340.615379][ T307] usb 4-1: Invalid ep0 maxpacket: 16 [ 340.620930][ T307] usb usb4-port1: unable to enumerate USB device [ 340.690363][T11212] kvm: kvm [11211]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xff0d48320f000004 [ 340.917843][T11218] input: syz1 as /devices/virtual/input/input69 [ 341.020973][T11223] syzkaller0: entered promiscuous mode [ 341.026536][T11223] syzkaller0: entered allmulticast mode [ 341.171745][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.180813][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.225105][ T10] usb 8-1: new low-speed USB device number 53 using dummy_hcd [ 341.376638][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 341.385906][ T10] usb 8-1: config 0 has no interface number 0 [ 341.392307][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.404046][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 341.415290][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.427005][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 341.438323][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.451544][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 341.460695][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.469799][ T10] usb 8-1: config 0 descriptor?? [ 341.475251][T11220] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 341.482845][T11220] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 341.705063][ T10] usb 8-1: USB disconnect, device number 53 [ 341.706559][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4195'. [ 341.721412][T11245] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4195'. [ 341.782634][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 341.782653][ T36] audit: type=1400 audit(2000000178.238:1504): avc: denied { nlmsg_write } for pid=11244 comm="syz.9.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 341.783063][T11245] rust_binder: Write failure EFAULT in pid:566 [ 341.823976][ T36] audit: type=1326 audit(2000000178.278:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.9.4196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb58b8e929 code=0x0 [ 342.361186][ T36] audit: type=1400 audit(2000000178.818:1506): avc: denied { mounton } for pid=11259 comm="syz.4.4201" path="/297/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 342.486242][T11266] sock: sock_set_timeout: `syz.3.4203' (pid 11266) tries to set negative timeout [ 342.545049][ T10] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 342.691186][T11280] SELinux: failed to load policy [ 342.696359][ T10] usb 8-1: device descriptor read/64, error -71 [ 342.705652][T11280] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 342.705652][T11280] null pointer dereference occurred [ 342.718225][T11280] ------------[ cut here ]------------ [ 342.723702][T11280] kernel BUG at rust/helpers/bug.c:7! [ 342.729513][T11280] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 342.735182][ T36] audit: type=1400 audit(2000000179.198:1507): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 342.736505][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.9.4208 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 342.759433][ T36] audit: type=1400 audit(2000000179.198:1508): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.771912][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.771946][T11280] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 342.771998][T11280] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 20 02 4c f6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 6a c6 05 7a 90 90 90 90 90 90 90 90 90 [ 342.772017][T11280] RSP: 0018:ffffc900028b71d0 EFLAGS: 00010246 [ 342.772040][T11280] RAX: 000000000000005a RBX: 1ffff92000516e3c RCX: ac54d38d61b1c200 [ 342.794748][T11281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:575 [ 342.803703][T11280] RDX: ffffc90001651000 RSI: 0000000000002fe4 RDI: 0000000000002fe5 [ 342.803739][T11280] RBP: ffffc900028b71d0 R08: ffffc900028b6ec7 R09: 1ffff92000516dd8 [ 342.803757][T11280] R10: dffffc0000000000 R11: fffff52000516dd9 R12: 0000000000000000 [ 342.812684][ T36] audit: type=1400 audit(2000000179.198:1509): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.828922][T11280] R13: dffffc0000000000 R14: ffffc900028b7200 R15: ffffc900028b7230 [ 342.828952][T11280] FS: 00007ffb599d16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 342.828972][T11280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.828987][T11280] CR2: 0000200000001000 CR3: 000000012ed44000 CR4: 00000000003526b0 [ 342.829006][T11280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.829019][T11280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.829034][T11280] Call Trace: [ 342.829043][T11280] [ 342.829055][T11280] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 342.836097][ T36] audit: type=1400 audit(2000000179.198:1510): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.843112][T11280] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 342.852835][ T36] audit: type=1400 audit(2000000179.198:1511): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.860358][T11280] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 342.860416][T11280] ? p9pdu_vwritef+0x2720/0x2720 [ 342.860447][T11280] ? radix_tree_node_alloc+0x1af/0x400 [ 342.868677][ T45] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 342.876677][T11280] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 342.876723][T11280] ? p9pdu_vwritef+0x1c5e/0x2720 [ 342.899120][ T36] audit: type=1400 audit(2000000179.198:1512): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.906178][T11280] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 342.906229][T11280] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 342.906266][T11280] ? p9pdu_writef+0xdb/0x130 [ 342.916207][ T36] audit: type=1400 audit(2000000179.198:1513): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.921871][T11280] ? p9pdu_vwritef+0x2720/0x2720 [ 343.124286][T11280] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 343.133436][T11280] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 343.142330][T11280] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 343.150354][T11280] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 343.156640][ T45] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 343.158022][T11280] ? p9_client_prepare_req+0x732/0xa10 [ 343.166509][ T45] usb 4-1: config 0 has no interface number 0 [ 343.171627][T11280] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 343.178833][ T45] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.186189][T11280] ? __kasan_check_write+0x18/0x20 [ 343.186232][T11280] ? _raw_spin_lock+0x8c/0x120 [ 343.186261][T11280] ? __cfi__raw_spin_lock+0x10/0x10 [ 343.199368][ T45] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 343.202187][T11280] ? __kasan_check_write+0x18/0x20 [ 343.202225][T11280] ? _raw_spin_lock+0x8c/0x120 [ 343.207516][ T45] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.212301][T11280] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 343.212354][T11280] p9_fd_request+0x391/0x520 [ 343.223626][ T45] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.228200][T11280] p9_client_rpc+0x2f9/0xb40 [ 343.228241][T11280] ? bt_sock_poll+0x477/0x7b0 [ 343.228268][T11280] ? p9_fid_create+0x3d0/0x3d0 [ 343.233661][ T45] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.244599][T11280] ? __cfi_sock_poll+0x10/0x10 [ 343.244641][T11280] ? p9_conn_create+0x4c9/0x570 [ 343.244670][T11280] ? p9_fd_create+0x2f3/0x4c0 [ 343.253980][ T45] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 343.257571][T11280] p9_client_create+0x96a/0x1190 [ 343.257620][T11280] ? __cfi_p9_client_create+0x10/0x10 [ 343.257644][T11280] ? kasan_save_alloc_info+0x40/0x50 [ 343.257668][T11280] ? __kasan_kmalloc+0x96/0xb0 [ 343.257697][T11280] ? kstrdup+0x7b/0x140 [ 343.269666][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.273618][T11280] ? __kasan_check_write+0x18/0x20 [ 343.273658][T11280] v9fs_session_init+0x1e1/0x1820 [ 343.273688][T11280] ? __cfi_v9fs_session_init+0x10/0x10 [ 343.345893][ T45] usb 4-1: config 0 descriptor?? [ 343.352261][T11280] ? kasan_save_alloc_info+0x40/0x50 [ 343.352306][T11280] ? __kasan_kmalloc+0x96/0xb0 [ 343.358820][T11275] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 343.362536][T11280] ? v9fs_mount+0xbd/0xa00 [ 343.368938][T11275] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 343.372969][T11280] v9fs_mount+0xd7/0xa00 [ 343.406107][T11280] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 343.411785][T11280] ? __cfi_v9fs_mount+0x10/0x10 [ 343.416865][T11280] ? selinux_capable+0x38/0x50 [ 343.421671][T11280] legacy_get_tree+0x103/0x1b0 [ 343.426469][T11280] ? __cfi_v9fs_mount+0x10/0x10 [ 343.431365][T11280] vfs_get_tree+0x9e/0x290 [ 343.435819][T11280] do_new_mount+0x251/0xb40 [ 343.440379][T11280] path_mount+0x688/0x1050 [ 343.444896][T11280] ? putname+0x113/0x150 [ 343.449192][T11280] __se_sys_mount+0x2bd/0x480 [ 343.453898][T11280] ? __x64_sys_mount+0xf0/0xf0 [ 343.458689][T11280] ? __kasan_check_write+0x18/0x20 [ 343.463822][T11280] ? fpregs_restore_userregs+0x11d/0x260 [ 343.469484][T11280] __x64_sys_mount+0xc3/0xf0 [ 343.474311][T11280] x64_sys_call+0x2021/0x2ee0 [ 343.479022][T11280] do_syscall_64+0x58/0xf0 [ 343.483471][T11280] ? clear_bhb_loop+0x35/0x90 [ 343.488178][T11280] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 343.494144][T11280] RIP: 0033:0x7ffb58b8e929 [ 343.498575][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.518324][T11280] RSP: 002b:00007ffb599d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.526793][T11280] RAX: ffffffffffffffda RBX: 00007ffb58db5fa0 RCX: 00007ffb58b8e929 [ 343.534881][T11280] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 343.542870][T11280] RBP: 00007ffb58c10b39 R08: 0000200000000340 R09: 0000000000000000 [ 343.550857][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.558845][T11280] R13: 0000000000000000 R14: 00007ffb58db5fa0 R15: 00007fff6992b3a8 [ 343.566870][T11280] [ 343.569919][T11280] Modules linked in: [ 343.574360][T11280] ---[ end trace 0000000000000000 ]--- [ 343.581471][T11280] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 343.587017][T11280] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 20 02 4c f6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 6a c6 05 7a 90 90 90 90 90 90 90 90 90 [ 343.593733][ T45] usb 4-1: USB disconnect, device number 122 [ 343.607058][T11280] RSP: 0018:ffffc900028b71d0 EFLAGS: 00010246 [ 343.620395][T11280] RAX: 000000000000005a RBX: 1ffff92000516e3c RCX: ac54d38d61b1c200 [ 343.629493][T11280] RDX: ffffc90001651000 RSI: 0000000000002fe4 RDI: 0000000000002fe5 [ 343.639178][T11280] RBP: ffffc900028b71d0 R08: ffffc900028b6ec7 R09: 1ffff92000516dd8 [ 343.647281][T11280] R10: dffffc0000000000 R11: fffff52000516dd9 R12: 0000000000000000 [ 343.655594][T11280] R13: dffffc0000000000 R14: ffffc900028b7200 R15: ffffc900028b7230 [ 343.663745][T11280] FS: 00007ffb599d16c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 343.672783][T11280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.679530][T11280] CR2: 0000200000001000 CR3: 000000012ed44000 CR4: 00000000003526b0 [ 343.687841][T11280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.695959][T11280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.703983][T11280] Kernel panic - not syncing: Fatal exception [ 343.710463][T11280] Kernel Offset: disabled [ 343.714821][T11280] Rebooting in 86400 seconds..