last executing test programs: 1.97801836s ago: executing program 0 (id=523): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bind$inet6(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x52) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000200)=[@exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x38}}, &(0x7f0000000080)}}], 0x5a, 0x0, 0x0}) 1.918568241s ago: executing program 0 (id=526): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) (async) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000140), 0x4) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r4 = getuid() (async) r5 = dup2(r0, r1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) read$FUSE(r6, &(0x7f0000000f00)={0x2020}, 0x2020) setreuid(r4, r4) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x880, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x45809000) (async) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180)=0x0) syz_open_procfs(r11, &(0x7f0000000200)='net/nfsfs\x00') 1.768311354s ago: executing program 0 (id=529): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xf, 0x3, 0xfff) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYRESOCT=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$TIOCSETD(r0, 0x5414, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) munmap(&(0x7f0000ff3000/0x3000)=nil, 0x3000) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a900093d309008483000000000b09007a15d343"], 0x0}, 0x0) (async) connect$tipc(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x58, 0x5922, 0x4000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) (async) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 1.758244234s ago: executing program 2 (id=531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004680)="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", 0x2000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000080000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022070000000539374b"], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004680)="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", 0x2000, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000080000904"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022070000000539374b"], 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) 1.428216588s ago: executing program 1 (id=536): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x294}, 0x1, 0x0, 0x0, 0x20040010}, 0x20044040) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$FUSE(r1, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) chown(&(0x7f0000000140)='./file0\x00', r2, r3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x294}, 0x1, 0x0, 0x0, 0x20040010}, 0x20044040) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) setgroups(0x1, &(0x7f0000000080)=[0x0]) (async) read$FUSE(r1, &(0x7f0000003440)={0x2020}, 0x2020) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) (async) chown(&(0x7f0000000140)='./file0\x00', r2, r3) (async) 1.415525069s ago: executing program 1 (id=537): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r1}, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x1, 0x103, 0x1}, 0xffffff8c) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0xc0000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="180000000000000000000000360000002b000000000000001800000000000000290000003b00"], 0x30}, 0x810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)=ANY=[@ANYBLOB="140000002d00010000000000fbdbdfb67f411945"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup2(0xffffffffffffffff, r0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xc4, 0x0, &(0x7f0000000540)=[@dead_binder_done, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x7, 0x0, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/83, 0x53, 0x1, 0x6}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/154, 0x9a, 0x0, 0x12}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @acquire, @acquire_done, @register_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x1002, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r8 = syz_open_pts(r7, 0x900) r9 = dup3(r8, r7, 0x0) read(r9, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r9, &(0x7f0000001d40)=""/4095, 0xfff) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x14, 0x0) 1.34969351s ago: executing program 1 (id=538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}], [], 0x6b}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.192321652s ago: executing program 1 (id=539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x840) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14001, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0x5, 0x4}) read(r1, &(0x7f0000001480)=""/4096, 0x38) ioctl$BLKGETZONESZ(r0, 0x80041284, 0x0) 1.190407272s ago: executing program 0 (id=540): pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000003c0)) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r0, 0x1) ioprio_set$pid(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x9, 0x7}}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r2, 0x125f, 0x0) 1.028393825s ago: executing program 3 (id=543): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141442, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r2, 0x0) sendfile(r1, r2, 0x0, 0x3) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x20, 0x4) 1.027666045s ago: executing program 3 (id=544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1004, 0x0) mount(0x0, 0x0, 0x0, 0x2314438, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000000401"], 0x38}}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r7 = dup(r5) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000001c0)="8a0e945c2a1693277d3022a9bf5e433d3c5eed2642460c7fc902d215f6ae07c846e2a9170f3877ab104e7a809b1ee55608e688144a7a4d057eeb17c9a6277b6a13022f77d8054b1ddf38314df683301cd4e339b2159848078e", 0x59}, {&(0x7f0000000300)="310524edf06e78ab0b8650f41f14005a38a0d9ec9c6752d74a248b5c53acbad96450b3cc440f1d170dc4307c3f9e1b65287a65838a3f82c61e248a20071c155b03192115cc540b8bfc1c9c", 0x4b}, {&(0x7f00000043c0)="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", 0xf5d}], 0x3) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) rt_sigaction(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.020263405s ago: executing program 0 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair(0x18, 0x6, 0x4, &(0x7f0000000300)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003100)=ANY=[@ANYBLOB="100000001900000827bd7000fcdfdf05"], 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) syz_usb_connect(0x3, 0xe6, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x10, 0x32, 0x1e, 0x40, 0x499, 0x500e, 0x56f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0xa5, 0x9, 0x0, 0x2, [{{0x9, 0x4, 0xb6, 0x73, 0x8, 0x31, 0x9, 0xe4, 0x30, [], [{{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0xff, 0x8, [@generic={0x18, 0x24, "5f87c78e2e38c41345aba3bb7c081c63da24a66e7183"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0x5, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xe0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x83, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x240, 0x8e, 0xe, 0x1, [@generic={0x49, 0x5, "00dec0ffde9af0ad400540cbd3f23a3c0006e59437d6d6b1a12147f4a2f7f9a00f4c321bb5a9b9e89a559369975e336899695c8d474ae8747e791b8fe6d267ff1b56d4031f2f10"}, @generic={0x4, 0x3, "8829"}]}}, {{0x9, 0x5, 0x6, 0x18, 0x40, 0xa, 0x7, 0x78}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0xfa, 0xd, 0xea}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xffff}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x80, 0x0, 0x9, 0x0, 0x2}, 0x24, &(0x7f0000000340)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "857943ccd18111cf64e610dac0ca515b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x34, 0x81, 0x8, 0x8, 0xf}]}, 0x1, [{0x93, &(0x7f0000000580)=@string={0x93, 0x3, "ffd919dce2979660ddc997596122b1e3ff235681ac60238a785bd005e75787d33557df197ad3fff19b1d7ba3e39ac7e13ddd1f36c83a1a63928594fe299aaffbc46e0f3796c9388f23dd428cc883cba7e2e0f666f619f6b889177fd1adc9cbca1f4145954b82a13d32974e1f9b8d89d7ff4ba1eac779870498f4ac98ae508f342c741c647409ca38d5bbd585fa59816820"}}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 969.590796ms ago: executing program 3 (id=546): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0xfff, 0xfffffffe) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x3}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) fstat(r9, &(0x7f00000001c0)) dup3(r7, r2, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 920.324966ms ago: executing program 1 (id=547): mkdir(0x0, 0x9) chdir(0x0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@cache_loose}, {@version_9p2000}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '-\xb8\xf2F\xa8\x8f\xf8\x18\xc9\x86\xdc\xaa\xcb\xc0-Mr\xa2\x86]Zf8$\x13\x01\x99\x966\x92\xae\xba'}}]}}) (async) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) lgetxattr(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=@random={'trusted.', 'subj_user'}, &(0x7f0000000240)=""/21, 0x15) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendfile(r4, r5, 0x0, 0x80000000) 917.150677ms ago: executing program 3 (id=548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x400c620e, 0xfffffffffffffffe) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1b]}, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 863.718377ms ago: executing program 1 (id=549): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x47, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = getpgrp(0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000980), 0xe) listen(0xffffffffffffffff, 0xff) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r9, @ANYRES8=r8], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000004, r7, 0x3, 0x0) fstat(r6, 0x0) setreuid(0x0, 0x0) linkat(r6, &(0x7f00000001c0)='./file1\x00', r6, 0x0, 0x1000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000740)=[@decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) 852.917597ms ago: executing program 3 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1, 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 764.250729ms ago: executing program 3 (id=551): process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f0000000280)=[{0x0, 0xfffffffffffffd8f}, {&(0x7f0000000080)=""/200}, {&(0x7f0000000400)=""/147}], 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000002d00)={{0x12, 0x1, 0x250, 0x29, 0x9, 0x8f, 0x40, 0xb57, 0xb2eb, 0x36b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0x18, 0x4, 0x0, 0x3, 0x1, 0x2, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) madvise(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)={0x3}) 606.146911ms ago: executing program 2 (id=552): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x7, 0x1, 0x1, @local, @mcast2, 0x80, 0x700, 0x7, 0x8}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001fc0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002500)={@local, @empty, 0x0}, &(0x7f0000002540)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002580)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000040)={0x2, 0x1, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="d143b05a86e461c7a8e6bf926ac3d4d4f9066e11ec247d817c10a5b8fe7772b266a6c7394844433271e38ce82c248d9073010405b58e03d3c928628629213c568198fa90db2974f64a8e2d26e08ae92c4a0d429014ac494d47612bf27a8d9175995a8b61bb02df658d6e2d12ee8a116c42ede52a58c688ee2fc30b6697e50ad7ed2a87dc6ac9cef2d9200bbb4c7c893c2e373dd32b37fe9b711ff95d53a7f7f44951a0820838fe1a49cca3d52830356d6e8cf3bd489ff63f08334f0f022490e83c25d74e3fedc8d4bf2e059b6bc82e33d29b8866e500f625b27ce9ffe1f5dd6537692a98a4e1697f9e4c8965e3738d0ada088760", 0xf4}, {&(0x7f0000000180)="e0d955e3ab0d186efabef9b27bb176bb2c5992050779e4846506acd2de8a6d0498827e636758509d72acff9efb42624ed6b1dc6b0e53bde077523bf4a28266776816ca0679ce0a880913b9412ebd92f831242f36c0a8197944ba2a6561edfa185cc71865ef5e6a0ef8b54bbe91d4500cc07c52b971de8da52fd839e59528f006ff4992c35b115431d654ca79e6b5a938e7499052679a45f3886e569cc47b21bfd81c96e561317144289233a8defdc5441fa7c6d3a1c571f58277811acdba91f7e8c0fa1053e0d63a68648b3e58b6cecdea81387c01af9322ed4e", 0xda}, {&(0x7f0000000280)="c43eaa7199c23322a7c64afd270dda97b6fb779b54c0e1d4057398e6298a62b37c9a0f85871899574b1ffb6e9053e51d41f97a815eb43e60c096ef209141c66543c7d608daee9d9a5beeaa42454e1977da07b9ec0dfabddd885729ceaa6df8ff1e2788549bc335e7be55d794e0366896655e81007b67f4818e655b6394cce06aa3ad20a352a80e2ac3740e4b886b84eb464fc2c14286abcfb2323f08ff235cabb552d189d1210bb8e951400cd69f732ed96c2277e3d67aef809ee5a5d858cf2e74b97c0210ac167b88d79c752069e777eeef", 0xd2}], 0x3, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@generic={0x86, 0xc, "971e3fbdfdae8c9f14e7"}, @generic={0x89, 0xd, "92308491a57d7f9e310378"}, @ssrr={0x89, 0xf, 0x88, [@broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x2d, [@loopback, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x91, [@loopback, @local, @multicast2, @loopback, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14}}], 0x138}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000600)="97088fde3a4397dbd386bfc8c3", 0xd}, {&(0x7f0000000640)="d69941181a491e540fc89747cf306b405726078d00f43a5adb42d966b49a2a635b6a4c1a7707aff0e35a95acdd43dfcb13d43dae8eefe2a67180df625197c8fde4637554637dce98c1e9f0f539dcc8fc8922bbbb31af73d4a73ecdfe1d3c5343fd7d3557690131d0ad86498ab8666bfaef6c802b4acbff126b4be6eb9b888237f00d2d3e3b7c743856baf0058284d832b5c19d0f94bfd397891df15b22ac8b59b767b468d3f30b75b88a206311d324161237f43ffc84775b491f5059009d3cc69558c5469b", 0xc5}, {&(0x7f0000000740)="4d5ea9c9b061a753155150a0356cdfaf566c3cc43f842a3be2103d493f713033a34da4c32471112434c78e66cd9cec4e7003147637a01aebde21dab1eaf22de81ce05c5f3bf17378e84d7d189209cabc39b4a0ef17fea425bc5937b3a37c7c11f65062424e2c89197c64d297d73ef3cb8e73906a709ace27de9f561067dc1d388dff5de345276762f569ba6362625bc0db3e3f3aabd0fa07ba86d0475a46962d3eb756a3ad5fd7e674820fdad5e9a063d325bbae6c", 0xb5}, {&(0x7f0000000800)="90d827ce488047fc7a4c83aff80675fdec4a5f572cfd03f5c4c0b57416b04010", 0x20}, {&(0x7f0000000840)="4bd3d5442315b5625beb28ff97f54c9d93f2dc5694973568ee17104bf5437ea0eb399b56dc18a957255e9d7ec46cbcfaea6fb47f3915fefc1060e99ce79270a6afb33706dc0f70c8840bd16588145c4695f9c77f790db846000d33cb5b0b79073554d1bc3cf35c0bb294d6ae1e15608717e04968f7b2", 0x76}, {&(0x7f00000008c0)="a13185c44d208f6768dc04d3643212ba77a5bf12105d8b7d2062127f2e4defe90e239e90645b87", 0x27}, {&(0x7f0000000900)="6feee0e14e85d008a7652f6e7e9054feb7f1be4cc8207c51ed3dfc3681d4ac80b66a8972860e6a1711522ec113d13b94a0716f181d0b3ed7c33351c09c87e285d984bd69d198f24b8848f5ce87b6bd2a27b87c5aafd547c1045961629ec2d4fb96c5dfb5b6ef50deacc93327f4a8fa47a9eb61e3b480973f6cfd152aa4079524ac031ae0c02054830a3b62c4a9eab639adc228fe94f2ade0d46ed19afb3566e4edd6f406037e95381c52a92f803b6e86ce90f901cceb30962b1cefc8c51989043d38032d1b57d3324ade9200b903b9cc2c055b43b50b4fd19d4376daa7233bcefeb6555b79d88949859b159ec1c5d3478b5b", 0xf2}, {&(0x7f0000000a00)="513ea1e0a2224da6cbee5196b5cdd310145a1f47d358f2c1553bbd40e0f1f4588525ebf48586091f688381e7d4d11bab0411efc9d58b794e14de763df01f2a629d0d0f3dcdac6575b64eb8a697c2d25b6b37c7f03f98235773c5d55168f74ed44133c07367e84bdfef92db63b4b8da3df5fcae23f9c31bc501252fbb71031ff061c04ae66750046f4fee9174e7a2b88661df6f25e07f24057af036888029d58f2cdd89a49b138993f26bfe35270eabae8df922dec1b831f128336adab196aa7a192fd549888b1f7a5410b3aae4465c5cb814302e21698d5cb8f6df99d56e6b1c33681e278d5c32ecf39f10a845aeb36914a9cd950a00", 0xf6}], 0x8, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ca3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x90}}, {{&(0x7f0000000c40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c80)="090ae60e20ffb2ec789984fa434c3596b417f61ae1b7f1e34aa22231e4d943cc214d2a37e396196038d4e5b1bb698fd557559a1fc2286635c4314a45d3a44ada26a3d566dc33ed4acd210080faba46e9eb1f2f45f07281db9945e3892d5b79d19d142863d6abe38f02e300c0c3c538a2a277a11cace700caba45eafb6e817866d29a6a9b40511c92b6b281be80f54efd7c402457f4c523c92fb9674c99caf8dc9f7caf7fc8759bb99e0cc7fadcf3f7802d434c0d95f1dda3e2b3b52e8c70b672598952061da32c4cd2d14443a616f57e3c66a4", 0xd3}, {&(0x7f0000000d80)="fac591fc1ab8d00112de78da478cf7bcfccb6b1d9c98f455994fc01abec5826ca5d0a6ced2896ba7509105", 0x2b}, {&(0x7f0000000dc0)="63e1e253fc56", 0x6}, {&(0x7f0000000e00)="f6bef91780e58d31", 0x8}], 0x4, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}], 0x18}}, {{&(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000f00)="d2e8b0", 0x3}, {&(0x7f0000000f40)="f6c51689d6a8af475b74fde5a616b626a2cbf9903f60adacf5cf60b5d51e9f3cab840caa10be76997e59cee9bfcbb96f46273b6ab69e497a9d1a24648a27c4b55b2cfa8c29e23a9af99071bd5133b294be3ca141eccebae5498ad22c7f466e8dbfb37ca371f73f5ce95819f5df3a33d857ae5915de43ef811fceb6060fa141c44e5cbc631d61ad685188862765230c89445b69fa5b0e6d13e5f888a16274e07cf2d0a039d43ff598", 0xa8}, {&(0x7f0000001000)="95d47628a695d2ffd65c6703fac2e0076fa6afb27af8500886c77029a81a7d784b3ea5153aeebcd3c5771f61413ff902f18b98ab09e107b1c3530318f2aaa40917d6c5571f61d895f2c7d13d85022ddc9023170a93681ba7c7a5196ead7d719640b35484197b140d3c042af50e6f729bf4e0db54b2cc8f27cc9a4947bbcdf4824c2d6fa39980f8b9a35e27b4917a354ab23362eeea541f6a088c03c9815d3434859c5f0c7670c4bbd0e47e7c595c22f6a781837df86763877c678fa321c27d781cfaa147ee8779fa668f9127844c5cdaf58f241ebc06b3282ab3", 0xda}, {&(0x7f0000001100)="57cab24609f2a1028713945f059402c914398850e2ab0d07f8c6d4d0ccf578085337151b5715f69efde81e9eb514644c8c5b49a4c58ede753f60cadc76d91683c2377bc10eb276ad56ec4889b40bbc373d0c5b", 0x53}, {&(0x7f0000001180)="5b43c65f73461f0171675fe2264fc35cdceeb0f8fd2f00b9a71499d69fcea9d2df0ff062eb736aa219ca7dbe29a8fc40b3a288beb4f688bfd7342fea1666e782260d8422659e41127dfc725055eef1365347bbc34d21e41b2ed4ec2ac333effb64a16c4c8f74d527dc6c723035c7f0bea6066e779a8e77d19e9a84301ce49ba107023c864d927993c6d8ce5a079dbe37a920c460f3c7dd153c98f122324d3b99def37394230a25062ba5de1b459ac1489365e4411edec9fc6d096e7b2e3d6dcea8fc2f82a0be413f2efb5986f7da83953fcb449a07c09e87dbc19326649561c5a2b5527a8c9095f5704da5a65028dff86736", 0xf2}, {&(0x7f0000001280)="a91f665a3651783e8a625076c509134f65ea61730ebfc334c03f3a7ca09f3059ce548d155760e78388c3a3d8cfbf5031d16ff5523d3a746c7345d17875e1f03947da6e9cdbaa842ecf57aebaacf391457c67b167f2b1a835550bfcbc15ca58e8dcbda354bdf57441e0879d3f344f6d87a024fc0dd8", 0x75}], 0x6, &(0x7f0000001380)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x16, 0x3, [{0x2, 0xd, "163f40a7e67e1c0c1a71cf"}, {0x5, 0x3, 'R'}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x48}}, {{&(0x7f0000001400)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001440)="5eeb2d378131da98a5db28cd79fcaf33e8844e49aae2927ecb3da200ca9c794518c1ea53843cbd998b1d502d795d018ea72ecb", 0x33}, {&(0x7f0000001480)="42a89d3f0b435e36a8b42a2f4ce01b22bc79bdaa7f9bdf4dfeb56de94bc4289c8abab10004bf487d0352fed89e7255f9ed2b88484814176c4c417466730026c4cc96698e7503db9eb942d6b7deefe7e5", 0x50}, {&(0x7f0000001500)="98831831022347b8d5abccb020f1f15e1325453c82ce5c11983c1af98823e8a5ff0dc46447664083743d9e08de2f0bb3a01cc3053c638cf02c4c9d875acc11a6af18c3eb6bd8560c286475aaf95fdd2a9dc2f7bc98919dd9cdd60dc7ff7f1aae0623815852602c3fa57ce805653a6b1486a057401ecc59a639fe0c11a83ff9bc3451a65e5c227fa0ab7ba10ca90d470ad610f0bd37a2b6a15f1fddc17c802d03fb59869c6ca47c819f0f7dcc17029668e525eeecb1072252082293f4848cda9ac071597ef8149b28be525606214d6257d8ef1a5d27e16399af072a8d250a", 0xde}, {&(0x7f0000001600)="2f422c1625008180795cb49528e9850e3f2297acac18860e6d349eae9f8e298ff30a64a1406f9550446f84dd56", 0x2d}, {&(0x7f0000001640)="e9acf82969596a514b55eb167a2843d752b0a88df8936525e8a1055afc32a86834cd039ec306e0b3ce0cf296f4876b9a24a487a915334b415e1d0d7cad0a4b1b1b8c08bde44d37fc62ab5018963b87afcc924e6b533e916a125374786771cc563b788c550e75f6988e59a6a9b9f86189c880dede5e01a813c19f310db61872b276ea9ea578", 0x85}, {&(0x7f0000001700)="ead2e81f57ece0599668ceb889b1d8b89f5f84a7fa9d3a1e6c29c0bb282793cb63613a3bba38e1d1350d67fe9c7ed23d35afa3185496680d2fd2165d2c738755f6d488e0baf33e80a669160c5ac9e8e8f9b20c20a4d6d1ca2efadea65b3ec26cd3fd98722eb407d53cb980993b53475125dd84e1573dcd34d351400d556b9ee1315f91415613cc6720c8f9f6ded742b61673f276d02b2848979a2dacdff76c03983d", 0xa2}, {&(0x7f00000017c0)="847af17c4b3a50e0386c54b4f5d0be2c5d16e19eff4240ecebeb29304602e1be8ca3ce344c8e2b049c22e3c912cb420af54eadf508141cc765d7cd850bdb97610c71d91ba0bff39692ea34369737d5b46c987d4ccdbd426a4e2ef4b148fafe1f5dc78b75625576fb84115d1895cc47fc828aa35053016056637fafc5665f03c2a9a35d9fc5", 0x85}, {&(0x7f0000001880)="67cd10b469c675a7cfbf8129762c335742b7d04a4758e21111cab9b38e2e38ddcc1e03f7027e9627c4c94f7064a1b9c3fc2907c5ba2e8d4ea8d12b51ca668223ddded1eaa0159b08969a2dc3286a87bb8d5b69e4196111bcf1fd3f8d524a55a97e29f1383781dfa4aeecbc817df0db5978864ae1a399fc0af859588ac3b152ad6178e5604cd2c4db0a92ba1314f8e6686646da8853a3704c55ed09eb02a083b0813c2f99b5235803a5118c7a2c75f8856fee6e38b528466a4ecda05d9d950db02c8bbf6e8a66d7ca0a75a5a71e3e83f97646b941282d2c5d2007bd22d376d276b58f8c12bec4a708", 0xe8}, {&(0x7f0000001980)="177e1f39c43381730968ad6283843156369fbe559ee7ce920239dfc7758f00dfd62c1b8a95dfff5c695a127f6d0858870208548a340056796f7c550efb84c340a45234a621d66e09d5e022d582081d60b83f1d2b6b9bb5c8664a62292a88c63e5511868eaab7a9413225dccfd4ea68cf3b2b2707068ecb91198832b6a724fe2c11a4af76c931d420c6c1183bd2e22f9225988a4ba4426080fceec33ed3dcc38752696a0d916fce4ce2f9be0178e2e0cf7494ae3339b0b86cb70d34faad1a8ac05b2c10f6ee4e636d8e2af77a6ccf0c3155742254cfc82604e22b2bf9729396643b8b", 0xe2}, {&(0x7f0000001a80)="1c3023fd0a", 0x5}], 0xa, &(0x7f0000001b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@cipso={0x86, 0x13, 0x2, [{0x7, 0x8, "ab39ac2ea6aa"}, {0x6, 0x5, "abb857"}]}, @timestamp={0x44, 0x18, 0xc9, 0x0, 0xc, [0x5, 0x6, 0x3, 0x9, 0x1]}, @rr={0x7, 0x13, 0x1b, [@private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102]}, @cipso={0x86, 0x5f, 0x2, [{0x6, 0x11, "6ef677c75eaaf89a839e936b914567"}, {0x7, 0xf, "716b43c771deb2bb3fdd8d42e8"}, {0x0, 0x6, "9c31a0f7"}, {0x6, 0x9, "3b2a7c11e6a408"}, {0x6, 0xc, "40b9ecf894c7981210a4"}, {0x2, 0xc, "9d86181ef0ecaa591813"}, {0x7, 0x3, "a5"}, {0x1, 0xf, "af464f7ccd561207a87b2836f2"}]}, @generic={0x86, 0x6, "7d029070"}, @ssrr={0x89, 0xb, 0x41, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x108}}, {{&(0x7f0000001cc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001d00)="75f66ea3274438b4d8a49f2f93c5554f00ae1b160625738fc5f5586cb3473523df04b49b4c498c1039bd1919286239545e20cd8de7f2c4a778cc92c17468f008c6851183dfe3a427b7c2338e62aba53def4c04aba38964e30d720f3e5a5d7c4cb40f8dc3b4d3adbc921f5bc74df6d330b8bd78088cf61b6d", 0x78}, {&(0x7f0000001d80)="937fa037ce922e8066c78bb28205efe5fe63b1f10aac441ada481dfdeadf14f2bde9fd97b0709d54a79aade35d25d747964494b073dec9c868b100e24bcf1fe622f88c273326b8cfc615ebd76abcc31c4beb4938065dbd4bdd7e58ebb1263a91f4be2dd70ff56cbafb13b5523d8a93f96f66a6c9e5892fd1463bd7bd73a3b51d01873e6ff861824d2f4d3a37d81ab854d61347681fa36c70da7334768d28fbf96ef8bac9377a2ba88ea99d89ae1b0f6b5d88e36a322d5cf010e0473c7df1a8ddd57ff35de866457a5701e997810c8c2f50235328c31d6708442f1890d3cd62e60a7579f62b129a045c7dd4b1c32ec9f9cb", 0xf1}, {&(0x7f0000001e80)="1a2a855161aa1dee2c52b2d17847612cc6d2e984630f119b702de458caf675a8f8380ca3eb29d7c4557ccf1f1031973890acd46371e7f58bb1a47f8881a73378c776bec326758013e72e57463e0d0cf25b6c794c66fb1d9227b22e9e30e057a200a491fc9637f39d93a99a505f3420155a4ab4fd4b79b0f9e2797888dac208541239727da09f1bcaa4f67620e4dfa75fb6dd1ef669594b7cb552bf1fde97a1dcf511807239daa7524b7d9c72c9ef53e40d30", 0xb2}], 0x3, &(0x7f0000002000)=[@ip_retopts={{0x94, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @noop, @end, @rr={0x7, 0x7, 0x2b, [@empty]}, @timestamp={0x44, 0x8, 0x33, 0x0, 0xe, [0x35b107c6]}, @timestamp_addr={0x44, 0x54, 0x19, 0x1, 0xa, [{@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc00000}, {@multicast2, 0x800}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x8}, {@empty, 0x4}, {@multicast1, 0x6}, {@empty, 0x4}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7}]}, @ssrr={0x89, 0x17, 0xf1, [@multicast1, @rand_addr=0x64010101, @remote, @multicast1, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @private=0xa010102}}}], 0xe8}}, {{&(0x7f0000002100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002140)="0d6579901a3e7fa586a86a3c964bd438e1176bbfd402aee0468724b1110f0e9ae85e12275941cb7c8b86f21eb1e860656c37f49c19b7de6d9d7550acd248", 0x3e}, {&(0x7f0000002180)="6de9a470fe0ad443f1bfbc54faf885bb06a246b8a92d8817c6640656f1f833cc645cb4d3700a2b667e64fff5f46471db8a349902422281bc5aa80a9e808624e4be907d1c60ed10ef02e4e6b51fd0c7414aee386a1cd062f77856ed54c6a06d10c9205aa99ad6868ebf", 0x69}, {&(0x7f0000002200)="ccdefebad2fbb202e7c2e10cfcdbac1007621d7f73f2913faab228642d95e84f8f58d80266f461a80f949d4890eaf987b8111a6db793790f5f41d211219be63ff372a19fca4b49b6d69503d6763cf5273e597feddda451202f8373b48e98616aa847c37c1b716beb86b7cc0c82c6fd6449797368c26f0ebf7994ab777e7bc244bba95ef91d7e2882a3f6c8c70536ec012a60e9402f3f48ae53295c0e3d911a51c9", 0xa1}, {&(0x7f00000022c0)="4814495a4d1c003e9d3d3b72a6b9176452a77e3cc9299fc2f26eb751d38e6afdbbb740c2041e12c5997e2625c86ddd38a194f60bb6e5841c15ef66bc3a7a8d67bf4905581f5da2f8eee33b291cd94f2b190b36e4a604498cc5f62d2d33bcf1815c7decf86326e1b6172766c9193970788a9dc3a9dc1573ed8e", 0x79}, {&(0x7f0000002340)="c98e97ca925c25235f8ad4c50f64c21039fb23d2dee8aaed8faf0c099e64a40dc578b7", 0x23}, {&(0x7f0000002380)="10e98da9d255e0ef996357a3cf235ba1207093871509d2c2158e4bf21762cd02257df73205ebaeb1d50870326656b1fcae17046b39a46a99522925ec3a9039d99543ef9e8c6f9968f265c74b42120a43a9e92208850f317bd0c5f996965a1889f80d5fe142745cc00a0bce07cccbf2d92f87daf2a3a9a9d9d48747df9b2fcf117b80eaaa7027e6a380c7606d77c90fe210828d80aa98b8b72f0e862ed9", 0x9d}, {&(0x7f0000002440)="aeade92382fa6cc2c2af01cee3fb5064b90362f3a093b8aa373522a29455cd5fc3df112f1c10f1cb4d1f25678856dd11515d028e8c601a171c5b2e8b15fb", 0x3e}], 0x7, &(0x7f00000025c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xc, [@dev={0xac, 0x14, 0x14, 0x11}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}]}, @cipso={0x86, 0x13, 0x2, [{0x6, 0xd, "ff69a92791d296d10dbe2a"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x3, [{0x0, 0x12, "ded1f4149521eea3a9e83b70be679448"}, {0x6, 0xa, "cfa4b85a6e6f6e08"}, {0x6, 0xf, "c08b87138b6e67482c1099bf07"}, {0x7, 0x9, "7ea91d20ae9064"}, {0x5, 0xe, "bdfc55c63a3755339f606898"}]}, @end, @timestamp={0x44, 0x20, 0x68, 0x0, 0x0, [0x5, 0x7, 0x8, 0x0, 0x9, 0x6, 0xd1]}, @ra={0x94, 0x4}, @generic={0x82, 0x3, "e5"}, @noop, @rr={0x7, 0xf, 0x6b, [@multicast1, @multicast1, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x7}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x190}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002780)="8c07942fb1bf60b4ef0136db527524e7a15996be4482e2c69be4b9e735e4eb75c920784b68c0c1cf62093c4b82373421c193a105bb57950eaf86b3d171d7f12186bdfd65792ba069b1f104c986914c824ce31aba8e819692e1923b323a063f2199f9c40cdb16a47b64be8b69d6f978cc863779d9d8b2ff707d8e255973261ea061d626ae0cdd0e4fc313a21ff1f43e511a7a6e4be7a980ab57951e33a5975864cb8c84462112f21c42d94f85fab53dd60c28e8186f38c8acdf53b0f591f65051f63a5d02", 0xc4}, {&(0x7f0000002880)="b23837b4ae7c0ee1e884deed75f7ba8ce54d8a1edd8e1461ff9310d3dd909db124873b9cf3dc2a08bdbe25143d0adee79f1f180c732cf5d7df5d8ad6e907d12f0a2655e74aaa555185f7019aa71430927da45973c030b1b7f418c1f1ca3fdb824727e41a86334988a9216ad442dacce1cc09a2642e6f362029a683434f103b007ae61871bf2fc4d171a0ac9cf9b0a0cfaf882a7578c9f03b73141f7aebc74cab48e57216236f99caf56040f8ea7c8153c17d1e07e908b4cb6de01c59687c819a3ae13cf6baa2ab8ad318b71ed57db09569be3381ab", 0xd5}, {&(0x7f0000002980)="402960ad2ed76ebc0b1abedd4b433f575f842ebec117152fd10b7cdf36814651cbdfbe1af6971856e95b70b8f303afcaa6cd0b8e83e125a5ba7b44fb6a3e203e37d4d658d533f310522085df517cef7df9e346793b9876bde7dfb768f26dd4250289c6a481b99798d4c7beccf17220e883b0005427a25edcdaaada24d08a8c0dd1a29f63bca73ad42e282c8c78a8a934574f1ea798618282bca7ab002d3c2a49bc17da1526710f3dc750fbc95ebfa3d396c7fd9bd3edb520ff038ea4b86dae885e7935db4eb81154beb1be06c8ededd7ddcdabddbf6ea912472d9e5a4c075b0e93", 0xe1}, {&(0x7f0000002a80)="60aa3d50b6cbb96a89203dd68c00812114c011904ac1940d679194cd1190161d98011d1a475ac3fd083dbfe92d24431a3baf6d019e9e56f018518260f159483b9ad8bc91949097e6b630fa12d8025997f2a99689d37880ca2c19224f2b7cf3b99a60f07568cd1d64ec5f7d7258b24222407eb39f67e73eb885e9d5534986678c9a4e8a9200c02f3c62a8ab", 0x8b}], 0x4, &(0x7f0000002b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}, @timestamp_prespec={0x44, 0x4, 0xd8}, @timestamp={0x44, 0x1c, 0x47, 0x0, 0x9, [0x3, 0x8000, 0x6, 0x0, 0x2, 0x3]}, @lsrr={0x83, 0x23, 0x73, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @empty, @broadcast, @multicast1, @multicast2]}, @lsrr={0x83, 0x7, 0xf, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}], 0xa8}}, {{&(0x7f0000002c40)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002c80)="e8d9bf40667c0f44d13250c08c776233543d2c63066ebe2d0fcd38d0cda272d03bc6f97833fd4d9e2fe2885bb6e611b5", 0x30}, {&(0x7f0000002cc0)="1c77c0315133b71b2c7e0eb29780ef6bfb67f3f55bc1147344d16a0f6e3b6cd7a4f568e39bc9374bf659339c4fc9d75241bd9bb95f71f9af3bbeba25c48afcc44035d8774529a4b07d5c9e7ca066bea8fa768bf04468752d106b9fe8e06bb80cb1693eea4c91e55f34328b590dc8c7c11da348680865474e878540a69898860a0a038d0de25f93adf3fa87c25f360cb17d4770cf86aed0b79d2d761bac4de0163c1a323175c6880081f86a2079bc63da1a", 0xb1}, {&(0x7f0000002d80)="c3d0842a5379b626a49d27e0aefc310e4657d69f1dad97e52c7562b8df4c1c", 0x1f}, {&(0x7f0000002dc0)="8d756a545a55228ea77c93d62e79ab17", 0x10}], 0x4, &(0x7f0000002e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6899}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x70}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x78, [@dev={0xac, 0x14, 0x14, 0x30}, @local, @loopback, @local]}, @timestamp_addr={0x44, 0x3c, 0xd0, 0x1, 0x1, [{@multicast2, 0x4}, {@local, 0x5}, {@multicast2, 0x2}, {@remote, 0x2}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x8}]}, @lsrr={0x83, 0x7, 0xe0, [@multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x100}}], 0x9, 0x20000090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000031c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x48, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xf8000000}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x28080880}, 0xc0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000003340), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x24, r7, 0xa, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000003440)={@mcast2, 0x0}, &(0x7f0000003480)=0x14) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000034c0)={@private1, r3}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000003580)={0xa, &(0x7f0000003500)=[{0x3, 0x6, 0x39, 0x3572}, {0x9b29, 0x1, 0xb, 0xb}, {0x9, 0x4, 0x4, 0x9}, {0xfff7, 0xc, 0x2, 0x7}, {0x5, 0x8, 0xd, 0xffffff6c}, {0x2, 0xe, 0x9, 0x200}, {0x8, 0x43, 0xf9, 0x1}, {0xff, 0x1, 0x27, 0x6}, {0x1, 0x3, 0x6, 0x6}, {0x0, 0xff, 0x9, 0x3}]}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r10, &(0x7f00000035c0)="88d8e5af03511eeca8f916b82a0ee4da06f420577faf209f6e3d6713d4b3b37626ada6cc29ee5c2f7e5ca1ba", 0x2c, 0x40000, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003600), r5) close_range(r5, r8, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000003640)="89b2eb3a48b63930732a1ce8e95fd5dedb82aad2107ec1505a8a01abbcfec2be20dd0b6a3818362f1dd9b9a3dd2d3fe0f140076db4515e8a251ef69c2abd11f211e078ec967137b08d989081e1d9e917bd5f4eab9466ee121939982a6a1a80d24447d63128abe4cb8a002f", 0x6b, 0x800, 0x0, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003700), r5) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003740)={0x24c, r12, 0x937, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003a40), 0x113000, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x34, r11, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x64d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfeff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = openat(0xffffffffffffff9c, &(0x7f0000003b80)='./file0\x00', 0x8000, 0x0) fcntl$getflags(r14, 0xb) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c00)={0xb8, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4044041) 509.723433ms ago: executing program 2 (id=553): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4a) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@redirect_dir_nofollow}, {@verity_require}]}) (async) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5414, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x60880, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r4 = socket$unix(0x1, 0x5, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r5, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) (async) syz_io_uring_setup(0x35aa, &(0x7f00000000c0)={0x0, 0xdf20, 0xa06, 0x0, 0x44}, &(0x7f00000001c0), &(0x7f0000000180)) 444.311233ms ago: executing program 0 (id=554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x6}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad86558"], 0xffdd) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) (async) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r7, 0x1, r3, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1101, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 439.442193ms ago: executing program 2 (id=555): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) io_setup(0x41c, &(0x7f0000000000)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r3, 0x0, r3, 0x0, 0x2, 0x99) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000080)="81876fbac7300a408e6b735fe40367c7d9485c32be4752cb8b069b3ffef2031a457f14f4bd546b3bb6c9ed082b60aca743d9c022e43184703b423b8c79c3956112884d9d0bb684f635a4eff774a81ce22947a6f09a3bb2e9a42ed4102354ba559715345070e4afa8af4a489e1864f4e342be2f52a9a4afae8c5b0d9bd19f8dc08aad12badc4ffd85150bdd8e6d26694abada41312a0cc92cda7fc98ac8f0783601243b257e", 0xa5, 0xffffffffffffffff, 0x0, 0x0, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x9, r1, &(0x7f0000000180)="d87855d96aae981e2a2d8ffe9fabae9f0b511e42f9a835a8999dea7afaa6887ae8eb6d1c83a7c1ea55b8", 0x2a, 0x5, 0x0, 0x1}]) r6 = userfaultfd(0x80000) fcntl$setlease(r6, 0x400, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0x40047705, 0x2) 329.113715ms ago: executing program 2 (id=556): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000010000040"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000360b000000000000040000000000000074010000000000000200000000000000140300964e87cbdd43eb93d0a80000000000010400000000e400391001c00000000000000000000000004503000000000000b400000000000000f60900000000"]) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) signalfd(r5, &(0x7f0000000c80)={[0x3]}, 0x8) (async) r6 = signalfd(r5, &(0x7f0000000c80)={[0x3]}, 0x8) close(r6) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffff08b, 0x25041) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffff08b, 0x25041) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000240)={0x3, 0xffff, @status={[0x8000000000000001, 0x4c00, 0x2, 0x4, 0x4, 0x5]}, [0x4a90, 0x3, 0x9, 0xffffffffffffffc0, 0x2, 0x5, 0xa, 0x3, 0x7, 0x5, 0x1, 0x51c61137, 0xdfb, 0x2, 0x2db, 0x3, 0x80000001, 0x4, 0xffff, 0x2, 0x1, 0x4, 0x10000, 0x544, 0x7, 0xfffffffffffffff9, 0x7, 0x1, 0x8, 0xc, 0x8, 0x8, 0x1, 0x1, 0x5, 0x7, 0x605, 0xfffffffffffffffe, 0x8000000000000001, 0x6, 0x7, 0x3, 0x8, 0x1, 0xfffffffffffffffb, 0x0, 0x6, 0x10001, 0x0, 0xfa1, 0x3, 0x4, 0x0, 0x7fff, 0x4800000000, 0x0, 0x100000001, 0xffffffff, 0x49cd, 0x3, 0x80, 0x2, 0x5, 0xb16]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000240)={0x3, 0xffff, @status={[0x8000000000000001, 0x4c00, 0x2, 0x4, 0x4, 0x5]}, [0x4a90, 0x3, 0x9, 0xffffffffffffffc0, 0x2, 0x5, 0xa, 0x3, 0x7, 0x5, 0x1, 0x51c61137, 0xdfb, 0x2, 0x2db, 0x3, 0x80000001, 0x4, 0xffff, 0x2, 0x1, 0x4, 0x10000, 0x544, 0x7, 0xfffffffffffffff9, 0x7, 0x1, 0x8, 0xc, 0x8, 0x8, 0x1, 0x1, 0x5, 0x7, 0x605, 0xfffffffffffffffe, 0x8000000000000001, 0x6, 0x7, 0x3, 0x8, 0x1, 0xfffffffffffffffb, 0x0, 0x6, 0x10001, 0x0, 0xfa1, 0x3, 0x4, 0x0, 0x7fff, 0x4800000000, 0x0, 0x100000001, 0xffffffff, 0x49cd, 0x3, 0x80, 0x2, 0x5, 0xb16]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000600)={{0x0, 0xd000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8f}, {0xffff1000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x3}, {0x10000, 0x4, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x15, 0x0, 0x3a, 0xfe, 0x2, 0x2, 0x0, 0x0, 0xaf, 0xfc}, {0x5000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0xff}, {0x80a0000}, {0xf000}, 0x9df8ffd0, 0x0, 0x80a0000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0xffffffffff7ffffc, 0x1]}) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$802154_dgram(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000d80)={&(0x7f0000000d00)="ddf0d55143a0b29293653a57dc1efd3c39ece83918fda1b54179841d8ecfa325d9ae7394a54d7aabff28db1dbe2008d24d7bf86df0a978a82082be48de18fe3002", 0x41}, 0x1, 0x0, 0x0, 0x81}, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r12 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r12, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000100)={0x14, 0x89, &(0x7f0000000180)="486153c51392b044bb94026f4feb61eb87c59d4701d223a04e1d974f1860b794fb3512ec7748637d7929117cb176e64589899fd15a45685f982017bbfd67c1a15557b08c731b21adbea5863510d51e32074fada26b0fef44f387552ca36e8e02c10203ec80a3cc8f151c93b20d96738cf73d6c037d44bb580c79f337911e441201aec5487c03fd9352"}) (async) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000100)={0x14, 0x89, &(0x7f0000000180)="486153c51392b044bb94026f4feb61eb87c59d4701d223a04e1d974f1860b794fb3512ec7748637d7929117cb176e64589899fd15a45685f982017bbfd67c1a15557b08c731b21adbea5863510d51e32074fada26b0fef44f387552ca36e8e02c10203ec80a3cc8f151c93b20d96738cf73d6c037d44bb580c79f337911e441201aec5487c03fd9352"}) 0s ago: executing program 2 (id=557): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000080)=""/100, &(0x7f0000000100)=""/227, &(0x7f0000000200)=""/108, 0x8080000}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/ipc\x00') setns(r1, 0x20000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x9517000) sendfile(r1, r1, &(0x7f0000000300)=0x9e6f, 0x7) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x4, 0x220500) fcntl$setstatus(r2, 0x4, 0x7800) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000003c0)="9953d9024a29aec55181a74c4e729c99cff2fcdd41993e5eff9aae497222b38cff5e4632c23dfc65ac939b620b88269685cc9e21640896affe6f2b3552b97c33bb59d97501f3e6330477b595a080143e1124c1a102c63d812295828242121b50a179ebda1d560780e737", 0x6a) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000440)=""/119, &(0x7f00000004c0)=0x77) r5 = open$dir(&(0x7f0000000500)='./file0\x00', 0x142f2e89a399ede8, 0x4) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x141100, 0x10, 0x4}, 0x18) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000005c0)={'\x00', 0x1, 0x7, 0x7, 0x0, 0x0, 0x8000000, 0x1000, '\x00', 0x100}) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x200001, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r7, 0xe1f95000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x400141, 0x0) ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r6, 0x4018aee2, &(0x7f0000000840)=@attr_other={0x0, 0x80, 0x8001, &(0x7f0000000800)=0x5}) setns(r6, 0x80) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) mkdirat(r5, &(0x7f0000000880)='./file0\x00', 0x109) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x10, &(0x7f0000000940)={[{@redirect_dir_off}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '*'}}, {@dont_measure}]}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000dc0)={0x0, 0x200, 0x140, &(0x7f00000009c0)=[0xffffffff, 0xb, 0x9, 0x7, 0x5, 0x3, 0x1000, 0xffffffffffffff4a, 0x0, 0x1, 0xb, 0x8, 0x6, 0xffffffffffffff01, 0x5, 0x7, 0xbdf, 0x3, 0x80000000, 0x1, 0x7, 0x2, 0x2, 0x80000000, 0xfffffffffffffbff, 0x8001, 0x6, 0xfffffffffffffffe, 0x4, 0x9, 0xb, 0x133b, 0x7, 0x9, 0x2, 0xff, 0x3, 0xe8c, 0x0, 0x7fffffff000, 0x0, 0x101, 0x7, 0x400, 0x0, 0x9, 0x3, 0xe, 0x9, 0x9, 0x4, 0x9d, 0x1, 0x80000000, 0x5, 0x2, 0x1, 0x6, 0x3, 0xd, 0x91, 0x1, 0xb, 0x10, 0x9, 0x2dce, 0xffffffff, 0x2, 0x6, 0x7, 0x0, 0x10, 0xbe, 0x3, 0x9, 0x4, 0x1, 0x7, 0xff, 0x8001, 0xbdd, 0x9, 0x4, 0x7fffffffffffffff, 0x6, 0x8000000000000001, 0x8, 0x100, 0x9, 0x9, 0x401, 0x7fffffffffffffff, 0x5, 0x2, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffb, 0x58f, 0x8c, 0x6, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8, 0x7, 0xa14, 0x5, 0x8000000000000000, 0x8000, 0x8000000000000001, 0x4, 0x2, 0xd32, 0x2, 0x3, 0x3, 0x3, 0x8000000000000000, 0xa3a, 0x40, 0xe, 0x6, 0x6, 0x9, 0x0, 0x10, 0x200]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 20.893731][ T36] audit: type=1400 audit(1750912260.229:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.894868][ T281] cgroup: Unknown subsys name 'net' [ 20.916387][ T36] audit: type=1400 audit(1750912260.229:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.943899][ T36] audit: type=1400 audit(1750912260.259:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.944136][ T281] cgroup: Unknown subsys name 'devices' [ 21.123816][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.129428][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.283172][ T36] audit: type=1400 audit(1750912260.619:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.306438][ T36] audit: type=1400 audit(1750912260.619:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.314945][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.331732][ T36] audit: type=1400 audit(1750912260.619:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.363506][ T36] audit: type=1400 audit(1750912260.669:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.389204][ T36] audit: type=1400 audit(1750912260.669:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.422776][ T36] audit: type=1400 audit(1750912260.759:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.423294][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.448292][ T36] audit: type=1400 audit(1750912260.759:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.186693][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.201897][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.210616][ T288] bridge_slave_0: entered allmulticast mode [ 22.217000][ T288] bridge_slave_0: entered promiscuous mode [ 22.232837][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.239890][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.247238][ T288] bridge_slave_1: entered allmulticast mode [ 22.253555][ T288] bridge_slave_1: entered promiscuous mode [ 22.352793][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.359948][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.367406][ T293] bridge_slave_0: entered allmulticast mode [ 22.374291][ T293] bridge_slave_0: entered promiscuous mode [ 22.389847][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.396936][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.404077][ T293] bridge_slave_1: entered allmulticast mode [ 22.410244][ T293] bridge_slave_1: entered promiscuous mode [ 22.430744][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.437813][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.445163][ T292] bridge_slave_0: entered allmulticast mode [ 22.451487][ T292] bridge_slave_0: entered promiscuous mode [ 22.457862][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.464986][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.472122][ T292] bridge_slave_1: entered allmulticast mode [ 22.478264][ T292] bridge_slave_1: entered promiscuous mode [ 22.536447][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.543527][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.550671][ T294] bridge_slave_0: entered allmulticast mode [ 22.557150][ T294] bridge_slave_0: entered promiscuous mode [ 22.565553][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.572640][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.579699][ T294] bridge_slave_1: entered allmulticast mode [ 22.585988][ T294] bridge_slave_1: entered promiscuous mode [ 22.613441][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.620489][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.627860][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.634927][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.719142][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.726224][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.733496][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.740508][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.749124][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.756177][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.763451][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.770467][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.789603][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.796684][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.803943][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.811033][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.823958][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.831266][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.838921][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.846244][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.853699][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.860935][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.868293][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.875579][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.916786][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.923865][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.931308][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.938396][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.945939][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.952980][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.961172][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.968234][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.977692][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.984773][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.995375][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.002612][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.012274][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.019313][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.044200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.051261][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.072803][ T288] veth0_vlan: entered promiscuous mode [ 23.091784][ T292] veth0_vlan: entered promiscuous mode [ 23.105092][ T288] veth1_macvtap: entered promiscuous mode [ 23.125682][ T294] veth0_vlan: entered promiscuous mode [ 23.136204][ T292] veth1_macvtap: entered promiscuous mode [ 23.148370][ T293] veth0_vlan: entered promiscuous mode [ 23.167650][ T294] veth1_macvtap: entered promiscuous mode [ 23.179032][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.198464][ T293] veth1_macvtap: entered promiscuous mode [ 23.251726][ T308] netlink: 'syz.1.2': attribute type 32 has an invalid length. [ 23.276449][ T308] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 23.287156][ T318] fuse: Bad value for 'fd' [ 23.292684][ T318] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 23.315921][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.404125][ T335] rust_binder: Error in use_page_slow: ESRCH [ 23.404151][ T335] rust_binder: use_range failure ESRCH [ 23.410241][ T335] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 23.417819][ T335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 23.433105][ T335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:5 [ 23.477551][ T347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.486679][ T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 23.511660][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.571055][ T380] rust_binder: Error while translating object. [ 23.571081][ T380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 23.588140][ T380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 23.691478][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 23.714238][ T62] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.731887][ T62] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 23.749877][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.757037][ T392] process 'syz.2.20' launched './file0' with NULL argv: empty string added [ 23.767493][ T62] usb 4-1: config 0 descriptor?? [ 23.851478][ T309] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.980824][ T62] usbhid 4-1:0.0: can't add hid device: -71 [ 23.986957][ T62] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 23.995913][ T62] usb 4-1: USB disconnect, device number 2 [ 24.001487][ T309] usb 1-1: Using ep0 maxpacket: 16 [ 24.011891][ T309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.016858][ T402] rust_binder: Error while translating object. [ 24.022925][ T402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 24.022969][ T309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.029181][ T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:9 [ 24.038764][ T309] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 24.073298][ T309] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.083297][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.091331][ T309] usb 1-1: Manufacturer: á°Š [ 24.096135][ T309] usb 1-1: SerialNumber: æ‚¶ï–¤åæ’½à¡–濨æŠé·•抠çážë”½ã¤­Ñ•æ¾œï„¥æ­¢äƒæŸ’銃䥗䷰㈡Ổ㮟옄릿᧷ా [ 24.218012][ T426] ======================================================= [ 24.218012][ T426] WARNING: The mand mount option has been deprecated and [ 24.218012][ T426] and is ignored by this kernel. Remove the mand [ 24.218012][ T426] option from the mount to silence this warning. [ 24.218012][ T426] ======================================================= [ 24.253051][ T426] binder: Unknown parameter 'contextÀ' [ 24.274870][ T428] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 24.364296][ T430] random: crng reseeded on system resumption [ 24.468942][ T436] rust_binder: Write failure EFAULT in pid:24 [ 24.482635][ T438] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.512092][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.527489][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.545128][ T309] cdc_ncm 1-1:1.0: bind() failure [ 24.558791][ T309] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 24.565704][ T309] cdc_ncm 1-1:1.1: bind() failure [ 24.579503][ T309] usb 1-1: USB disconnect, device number 2 [ 24.861465][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.891673][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.961517][ T406] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.012789][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.027048][ T10] usb 3-1: New USB device found, idVendor=057e, idProduct=670e, bcdDevice=db.e5 [ 25.036222][ T10] usb 3-1: New USB device strings: Mfr=244, Product=8, SerialNumber=0 [ 25.042913][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.044444][ T10] usb 3-1: Product: syz [ 25.052935][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 25.056681][ T10] usb 3-1: Manufacturer: syz [ 25.065229][ T45] usb 2-1: config 1 has an invalid interface number: 121 but max is 0 [ 25.074886][ T10] usb 3-1: config 0 descriptor?? [ 25.083874][ T45] usb 2-1: config 1 has no interface number 0 [ 25.090145][ T45] usb 2-1: config 1 interface 121 has no altsetting 0 [ 25.098055][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 25.098772][ T45] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 25.117896][ T406] usb 4-1: Using ep0 maxpacket: 8 [ 25.123469][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.141832][ T406] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.149748][ T45] usb 2-1: Product: syz [ 25.154827][ T45] usb 2-1: Manufacturer: ,êŠå©§ì—½ä®‘í é³´ìˆ©îž§î„³ê”²í‚„ᢩ辬졘ꚯ뫭ãŒé§”질⛸䫕ྃﱵ薶ç‡á„胬ã›áŽç¦‚⮘紒栢í€ä©°ï±»ä®¥é£²à§€ì¾˜è¨í•™ì¦áœ¹å¬¥ï ½ãª‘à´‡ã€‚è€‰æ£ [ 25.172966][ T406] usb 4-1: config index 0 descriptor too short (expected 8329, got 137) [ 25.181323][ T406] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 25.191177][ T406] usb 4-1: config 1 has an invalid interface association descriptor of length 7, skipping [ 25.201648][ T45] usb 2-1: SerialNumber: syz [ 25.206803][ T406] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 25.217814][ T406] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.229000][ T406] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.238542][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.247362][ T406] usb 4-1: Product: syz [ 25.251843][ T406] usb 4-1: Manufacturer: syz [ 25.256495][ T406] usb 4-1: SerialNumber: syz [ 25.391487][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.445314][ T451] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 25.472090][ T406] usb 4-1: 0:2 : does not exist [ 25.484489][ T406] usb 4-1: USB disconnect, device number 3 [ 25.501758][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.541456][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 25.547792][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.554625][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 25.564865][ T45] usb_ehset_test 2-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 25.566680][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.583363][ T45] usb 2-1: USB disconnect, device number 2 [ 25.589868][ T10] usb 1-1: config 0 descriptor?? [ 26.013314][ T10] hid (null): invalid report_size 41201 [ 26.018113][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 26.018128][ T36] audit: type=1400 audit(1750912265.349:173): avc: denied { read } for pid=464 comm="syz.3.46" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.018992][ T10] hid (null): unknown global tag 0xe [ 26.031095][ T36] audit: type=1400 audit(1750912265.359:174): avc: denied { open } for pid=464 comm="syz.3.46" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.049753][ T10] hid (null): unknown global tag 0xe [ 26.058419][ T36] audit: type=1400 audit(1750912265.359:175): avc: denied { ioctl } for pid=464 comm="syz.3.46" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.106904][ T36] audit: type=1400 audit(1750912265.439:176): avc: denied { create } for pid=467 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.127316][ T36] audit: type=1400 audit(1750912265.459:177): avc: denied { create } for pid=467 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.131011][ T10] hid (null): bogus close delimiter [ 26.158497][ T36] audit: type=1400 audit(1750912265.489:178): avc: denied { setopt } for pid=467 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.185772][ T36] audit: type=1400 audit(1750912265.489:179): avc: denied { bind } for pid=467 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.221929][ T10] usb 1-1: USB disconnect, device number 3 [ 26.267077][ T473] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 26.369862][ T36] audit: type=1400 audit(1750912265.699:180): avc: denied { unlink } for pid=476 comm="syz.3.49" name="#1" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.399723][ T36] audit: type=1400 audit(1750912265.699:181): avc: denied { mount } for pid=476 comm="syz.3.49" name="/" dev="overlay" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.611499][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.762739][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.772592][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 26.785453][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 26.794614][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.803363][ T45] usb 4-1: config 0 descriptor?? [ 26.981467][ T459] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.054995][ T36] audit: type=1400 audit(1750912266.389:182): avc: denied { create } for pid=485 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.111505][ T459] usb 1-1: device descriptor read/64, error -71 [ 27.211847][ T45] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 27.301463][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.351433][ T459] usb 1-1: device descriptor read/64, error -71 [ 27.411183][ T45] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 27.419455][ T45] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 27.426926][ T45] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 27.437196][ T45] usb 4-1: USB disconnect, device number 4 [ 27.463083][ T309] usb 2-1: config 165 has an invalid interface number: 182 but max is 0 [ 27.471535][ T309] usb 2-1: config 165 has no interface number 0 [ 27.477791][ T309] usb 2-1: config 165 interface 182 altsetting 115 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 27.489619][ T309] usb 2-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 27.500900][ T309] usb 2-1: config 165 interface 182 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 27.512566][ T309] usb 2-1: config 165 interface 182 altsetting 115 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 27.523859][ T309] usb 2-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 27.535142][ T309] usb 2-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 27.546375][ T309] usb 2-1: config 165 interface 182 altsetting 115 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 27.557798][ T309] usb 2-1: config 165 interface 182 altsetting 115 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 27.571192][ T309] usb 2-1: config 165 interface 182 has no altsetting 0 [ 27.579529][ T309] usb 2-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=56.f4 [ 27.588595][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.596601][ T309] usb 2-1: Product: syz [ 27.600741][ T309] usb 2-1: Manufacturer: syz [ 27.601435][ T459] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.605350][ T309] usb 2-1: SerialNumber: syz [ 27.618323][ T486] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 27.629058][ T305] usb 3-1: USB disconnect, device number 2 [ 27.665843][ T497] rust_binder: Error while translating object. [ 27.665865][ T497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 27.672435][ T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57 [ 27.751484][ T459] usb 1-1: device descriptor read/64, error -71 [ 27.828279][ T486] rust_binder: inc_ref_done called when no active inc_refs [ 27.828307][ T486] rust_binder: Write failure EFAULT in pid:48 [ 27.840121][ T309] snd-usb-audio 2-1:165.182: probe with driver snd-usb-audio failed with error -2 [ 27.857953][ T309] usb 2-1: USB disconnect, device number 3 [ 27.875310][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:165.182/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.942395][ T501] FAULT_INJECTION: forcing a failure. [ 27.942395][ T501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.955737][ T501] CPU: 1 UID: 0 PID: 501 Comm: syz.3.58 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 27.955768][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.955786][ T501] Call Trace: [ 27.955793][ T501] [ 27.955801][ T501] __dump_stack+0x21/0x30 [ 27.955831][ T501] dump_stack_lvl+0x10c/0x190 [ 27.955851][ T501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.955871][ T501] ? kstrtoull+0x13b/0x1e0 [ 27.955891][ T501] dump_stack+0x19/0x20 [ 27.955910][ T501] should_fail_ex+0x3d9/0x530 [ 27.955931][ T501] should_fail+0xf/0x20 [ 27.955949][ T501] should_fail_usercopy+0x1e/0x30 [ 27.955969][ T501] _copy_from_user+0x22/0xb0 [ 27.955993][ T501] ___sys_sendmsg+0x159/0x2a0 [ 27.956013][ T501] ? __sys_sendmsg+0x280/0x280 [ 27.956032][ T501] ? proc_fail_nth_write+0x17e/0x210 [ 27.956051][ T501] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 27.956075][ T501] __x64_sys_sendmsg+0x1eb/0x2c0 [ 27.956094][ T501] ? fput+0x1a5/0x240 [ 27.956110][ T501] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 27.956129][ T501] ? ksys_write+0x1ef/0x250 [ 27.956151][ T501] ? __kasan_check_read+0x15/0x20 [ 27.956173][ T501] x64_sys_call+0x2a4c/0x2ee0 [ 27.956194][ T501] do_syscall_64+0x58/0xf0 [ 27.956210][ T501] ? clear_bhb_loop+0x50/0xa0 [ 27.956230][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.956249][ T501] RIP: 0033:0x7f273818e929 [ 27.956267][ T501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.956282][ T501] RSP: 002b:00007f2738f5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 27.956308][ T501] RAX: ffffffffffffffda RBX: 00007f27383b5fa0 RCX: 00007f273818e929 [ 27.956321][ T501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 27.956331][ T501] RBP: 00007f2738f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 27.956343][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.956355][ T501] R13: 0000000000000000 R14: 00007f27383b5fa0 R15: 00007ffe3e71d3f8 [ 27.956369][ T501] [ 28.171875][ T459] usb 1-1: device descriptor read/64, error -71 [ 28.234892][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.234917][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 28.281714][ T459] usb usb1-port1: attempt power cycle [ 28.400826][ T515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.409376][ T515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.417263][ T515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.427100][ T516] rust_binder: Error in use_page_slow: ESRCH [ 28.427118][ T516] rust_binder: use_range failure ESRCH [ 28.433181][ T515] rust_binder: Error in use_page_slow: ESRCH [ 28.436162][ T516] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 28.438686][ T515] rust_binder: use_range failure ESRCH [ 28.445513][ T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.453182][ T515] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 28.458749][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:53 [ 28.467754][ T515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.485366][ T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:53 [ 28.621490][ T309] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.641495][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.649029][ T459] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.672432][ T459] usb 1-1: device descriptor read/8, error -71 [ 28.781466][ T45] usb 2-1: device descriptor read/64, error -71 [ 28.782593][ T309] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 28.796908][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.802446][ T459] usb 1-1: device descriptor read/8, error -71 [ 28.805630][ T309] usb 3-1: config 0 descriptor?? [ 29.021323][ T309] usb 3-1: Cannot read MAC address [ 29.022426][ T45] usb 2-1: device descriptor read/64, error -71 [ 29.026815][ T309] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 29.052704][ T459] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.053085][ T309] usb 3-1: USB disconnect, device number 3 [ 29.082617][ T459] usb 1-1: device descriptor read/8, error -71 [ 29.146253][ T523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.146347][ T523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.212705][ T459] usb 1-1: device descriptor read/8, error -71 [ 29.271460][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.331567][ T459] usb usb1-port1: unable to enumerate USB device [ 29.401679][ T45] usb 2-1: device descriptor read/64, error -71 [ 29.536529][ T525] FAULT_INJECTION: forcing a failure. [ 29.536529][ T525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 29.549671][ T525] CPU: 1 UID: 0 PID: 525 Comm: syz.2.67 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 29.549701][ T525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.549711][ T525] Call Trace: [ 29.549717][ T525] [ 29.549723][ T525] __dump_stack+0x21/0x30 [ 29.549740][ T525] dump_stack_lvl+0x10c/0x190 [ 29.549752][ T525] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.549764][ T525] dump_stack+0x19/0x20 [ 29.549774][ T525] should_fail_ex+0x3d9/0x530 [ 29.549786][ T525] should_fail+0xf/0x20 [ 29.549796][ T525] should_fail_usercopy+0x1e/0x30 [ 29.549808][ T525] _copy_from_user+0x22/0xb0 [ 29.549821][ T525] __copy_msghdr+0x3ec/0x5d0 [ 29.549833][ T525] ___sys_sendmsg+0x1a6/0x2a0 [ 29.549843][ T525] ? __sys_sendmsg+0x280/0x280 [ 29.549853][ T525] ? proc_fail_nth_write+0x17e/0x210 [ 29.549864][ T525] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 29.549877][ T525] __x64_sys_sendmsg+0x1eb/0x2c0 [ 29.549887][ T525] ? fput+0x1a5/0x240 [ 29.549896][ T525] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 29.549906][ T525] ? ksys_write+0x1ef/0x250 [ 29.549919][ T525] ? __kasan_check_read+0x15/0x20 [ 29.549930][ T525] x64_sys_call+0x2a4c/0x2ee0 [ 29.549942][ T525] do_syscall_64+0x58/0xf0 [ 29.549951][ T525] ? clear_bhb_loop+0x50/0xa0 [ 29.549962][ T525] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.549972][ T525] RIP: 0033:0x7fa79dd8e929 [ 29.549981][ T525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.549990][ T525] RSP: 002b:00007fa79eb27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.550002][ T525] RAX: ffffffffffffffda RBX: 00007fa79dfb5fa0 RCX: 00007fa79dd8e929 [ 29.550010][ T525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 29.550016][ T525] RBP: 00007fa79eb27090 R08: 0000000000000000 R09: 0000000000000000 [ 29.550022][ T525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.550028][ T525] R13: 0000000000000000 R14: 00007fa79dfb5fa0 R15: 00007ffcb3a1ded8 [ 29.550036][ T525] [ 29.812926][ T45] usb 2-1: device descriptor read/64, error -71 [ 29.921534][ T45] usb usb2-port1: attempt power cycle [ 30.108923][ T558] futex_wake_op: syz.2.78 tries to shift op by 144; fix this program [ 30.162459][ T560] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 30.162478][ T560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 30.171024][ T560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:90 [ 30.181433][ T309] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 30.271457][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.279036][ T488] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.302520][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.343322][ T309] usb 1-1: config 165 has an invalid interface number: 182 but max is 0 [ 30.351877][ T309] usb 1-1: config 165 has no interface number 0 [ 30.358250][ T309] usb 1-1: config 165 interface 182 altsetting 115 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 30.369924][ T309] usb 1-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 30.381368][ T309] usb 1-1: config 165 interface 182 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 30.392644][ T309] usb 1-1: config 165 interface 182 altsetting 115 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 30.404064][ T309] usb 1-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 30.415480][ T309] usb 1-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 30.426886][ T309] usb 1-1: config 165 interface 182 altsetting 115 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 30.438442][ T309] usb 1-1: config 165 interface 182 altsetting 115 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 30.439689][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.452656][ T309] usb 1-1: config 165 interface 182 has no altsetting 0 [ 30.458109][ T488] usb 4-1: Using ep0 maxpacket: 8 [ 30.466782][ T309] usb 1-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=56.f4 [ 30.471280][ T488] usb 4-1: config 5 has an invalid interface number: 143 but max is 2 [ 30.479714][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.495761][ T488] usb 4-1: config 5 has an invalid interface number: 6 but max is 2 [ 30.495812][ T309] usb 1-1: Product: syz [ 30.508286][ T309] usb 1-1: Manufacturer: syz [ 30.508317][ T488] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 30.513117][ T309] usb 1-1: SerialNumber: syz [ 30.529368][ T534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 30.537156][ T488] usb 4-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config [ 30.547638][ T488] usb 4-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 30.556854][ T488] usb 4-1: config 5 has no interface number 0 [ 30.563138][ T488] usb 4-1: config 5 has no interface number 1 [ 30.569246][ T488] usb 4-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 30.582926][ T488] usb 4-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 30.593975][ T488] usb 4-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 30.607269][ T488] usb 4-1: config 5 interface 143 has no altsetting 0 [ 30.614405][ T488] usb 4-1: config 5 interface 6 has no altsetting 0 [ 30.622723][ T488] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 30.631902][ T488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.639980][ T488] usb 4-1: Product: syz [ 30.644506][ T488] usb 4-1: Manufacturer: syz [ 30.649179][ T488] usb 4-1: SerialNumber: syz [ 30.711472][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 30.732423][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.739956][ T534] rust_binder: inc_ref_done called when no active inc_refs [ 30.739979][ T534] rust_binder: Write failure EFAULT in pid:28 [ 30.751813][ T309] snd-usb-audio 1-1:165.182: probe with driver snd-usb-audio failed with error -2 [ 30.771685][ T309] usb 1-1: USB disconnect, device number 8 [ 30.776663][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:165.182/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.872458][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.981566][ T45] usb usb2-port1: unable to enumerate USB device [ 31.029321][ T488] usb 4-1: USB disconnect, device number 5 [ 31.137575][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 31.137593][ T36] audit: type=1400 audit(1750912270.469:204): avc: denied { setopt } for pid=577 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.163384][ T36] audit: type=1400 audit(1750912270.479:205): avc: denied { map } for pid=580 comm="syz.2.84" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.165716][ T581] rust_binder: Write failure EINVAL in pid:108 [ 31.227125][ T583] can0: slcan on ptm0. [ 31.229512][ T36] audit: type=1400 audit(1750912270.559:206): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.258541][ T36] audit: type=1400 audit(1750912270.569:207): avc: denied { map } for pid=582 comm="syz.2.85" path="socket:[6512]" dev="sockfs" ino=6512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 31.281206][ T36] audit: type=1400 audit(1750912270.569:208): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=917 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.303184][ T36] audit: type=1400 audit(1750912270.569:209): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=917 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.326236][ T36] audit: type=1400 audit(1750912270.569:210): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=917 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.365269][ T582] can0 (unregistered): slcan off ptm0. [ 31.371916][ T36] audit: type=1400 audit(1750912270.659:211): avc: denied { search } for pid=584 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.398653][ T36] audit: type=1400 audit(1750912270.689:212): avc: denied { read } for pid=586 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.446067][ T36] audit: type=1400 audit(1750912270.689:213): avc: denied { open } for pid=586 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.479896][ T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 31.532722][ T611] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 31.577607][ T614] Zero length message leads to an empty skb [ 31.585893][ T616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.637759][ T624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 31.718273][ T636] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 31.841456][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 31.951460][ T309] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.991421][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 31.998566][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.008745][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 32.022448][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.031540][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.039522][ T45] usb 2-1: SerialNumber: syz [ 32.046035][ T45] usb 2-1: bad CDC descriptors [ 32.113285][ T309] usb 3-1: config 165 has an invalid interface number: 182 but max is 0 [ 32.121779][ T309] usb 3-1: config 165 has no interface number 0 [ 32.128158][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 32.139584][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 32.151031][ T309] usb 3-1: config 165 interface 182 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 32.162211][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 32.173464][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 32.184725][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 32.195953][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 32.207464][ T309] usb 3-1: config 165 interface 182 altsetting 115 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 32.220882][ T309] usb 3-1: config 165 interface 182 has no altsetting 0 [ 32.229473][ T309] usb 3-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=56.f4 [ 32.238587][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.246601][ T309] usb 3-1: Product: syz [ 32.247673][ T618] capability: warning: `syz.1.91' uses 32-bit capabilities (legacy support in use) [ 32.251032][ T309] usb 3-1: Manufacturer: syz [ 32.264903][ T309] usb 3-1: SerialNumber: syz [ 32.270563][ T634] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.480130][ T634] rust_binder: inc_ref_done called when no active inc_refs [ 32.480154][ T634] rust_binder: Write failure EFAULT in pid:114 [ 32.495400][ T309] snd-usb-audio 3-1:165.182: probe with driver snd-usb-audio failed with error -2 [ 32.514003][ T309] usb 3-1: USB disconnect, device number 4 [ 32.518287][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:165.182/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.656953][ T661] netlink: 80 bytes leftover after parsing attributes in process `syz.0.105'. [ 32.667437][ T661] 9pnet_fd: Insufficient options for proto=fd [ 33.041455][ T669] input: syz0 as /devices/virtual/input/input4 [ 33.048405][ T670] netlink: 492 bytes leftover after parsing attributes in process `syz.2.108'. [ 33.431460][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.562803][ T309] usb 2-1: USB disconnect, device number 8 [ 33.592463][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.602689][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 33.611844][ T45] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 33.620882][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.629589][ T45] usb 3-1: config 0 descriptor?? [ 33.838430][ T45] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 33.849827][ T45] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.897547][ T309] usb 3-1: USB disconnect, device number 5 [ 34.227796][ T719] usb usb8: usbfs: process 719 (syz.1.123) did not claim interface 0 before use [ 34.511476][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.641490][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.772411][ T309] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.884345][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.925026][ T309] usb 3-1: config 165 has an invalid interface number: 182 but max is 0 [ 34.933741][ T309] usb 3-1: config 165 has no interface number 0 [ 34.940022][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 34.951363][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 34.963355][ T309] usb 3-1: config 165 interface 182 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 34.975234][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 34.986639][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 34.997956][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 35.009190][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 35.020497][ T309] usb 3-1: config 165 interface 182 altsetting 115 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 35.034022][ T309] usb 3-1: config 165 interface 182 has no altsetting 0 [ 35.044286][ T309] usb 3-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=56.f4 [ 35.053485][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.061515][ T309] usb 3-1: Product: syz [ 35.065680][ T309] usb 3-1: Manufacturer: syz [ 35.070256][ T309] usb 3-1: SerialNumber: syz [ 35.076091][ T738] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.121451][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 35.251444][ T45] usb 2-1: device descriptor read/64, error -71 [ 35.288366][ T309] snd-usb-audio 3-1:165.182: probe with driver snd-usb-audio failed with error -2 [ 35.299474][ T309] usb 3-1: USB disconnect, device number 6 [ 35.304861][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:165.182/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.491471][ T45] usb 2-1: device descriptor read/64, error -71 [ 35.604218][ T45] usb usb2-port1: attempt power cycle [ 35.941545][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 35.962629][ T45] usb 2-1: device descriptor read/8, error -71 [ 36.073834][ T785] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 36.073861][ T785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 36.082482][ T785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:152 [ 36.093308][ T45] usb 2-1: device descriptor read/8, error -71 [ 36.109460][ T787] PM: Enabling pm_trace changes system date and time during resume. [ 36.109460][ T787] PM: Correct system time has to be restored manually after resume. [ 36.155907][ T789] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 36.165109][ T789] overlayfs: missing 'lowerdir' [ 36.341450][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 36.362567][ T45] usb 2-1: device descriptor read/8, error -71 [ 36.492926][ T45] usb 2-1: device descriptor read/8, error -71 [ 36.601547][ T45] usb usb2-port1: unable to enumerate USB device [ 36.737110][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 36.737129][ T36] audit: type=1400 audit(1750912276.069:260): avc: denied { lock } for pid=797 comm="syz.2.152" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.737997][ T798] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.786214][ T36] audit: type=1400 audit(1750912276.119:261): avc: denied { name_bind } for pid=806 comm="syz.0.155" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.809728][ T36] audit: type=1400 audit(1750912276.129:262): avc: denied { ioctl } for pid=806 comm="syz.0.155" path="socket:[7188]" dev="sockfs" ino=7188 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.835275][ T36] audit: type=1400 audit(1750912276.149:263): avc: denied { bind } for pid=809 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.854706][ T36] audit: type=1400 audit(1750912276.149:264): avc: denied { listen } for pid=809 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.874131][ T36] audit: type=1400 audit(1750912276.149:265): avc: denied { accept } for pid=809 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.218317][ T820] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 37.259373][ T830] netlink: 80 bytes leftover after parsing attributes in process `syz.3.163'. [ 37.281417][ T36] audit: type=1400 audit(1750912276.609:266): avc: denied { setopt } for pid=834 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.319394][ T36] audit: type=1400 audit(1750912276.649:267): avc: denied { mount } for pid=845 comm="syz.3.167" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 37.319792][ T846] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 37.369990][ T846] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 37.390412][ T36] audit: type=1326 audit(1750912276.719:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=850 comm="syz.0.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8d18e929 code=0x0 [ 37.417773][ T36] audit: type=1400 audit(1750912276.749:269): avc: denied { map } for pid=856 comm="syz.2.171" path="pipe:[5579]" dev="pipefs" ino=5579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 37.536348][ T874] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 37.543526][ T874] rust_binder: Write failure EINVAL in pid:180 [ 37.544146][ T876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.561691][ T879] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.568212][ T879] rust_binder: Read failure Err(EFAULT) in pid:185 [ 38.655884][ T936] rust_binder: Read failure Err(EAGAIN) in pid:89 [ 39.439073][ T969] rust_binder: Error while translating object. [ 39.445923][ T969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.452881][ T969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 39.553756][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.721426][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 39.738968][ T45] usb 3-1: unable to get BOS descriptor set [ 39.739863][ T980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.745055][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105 [ 39.748103][ T45] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 39.774302][ T982] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 39.796199][ T45] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 39.811331][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 39.820042][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.829476][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.838480][ T45] usb 3-1: Product: syz [ 39.842985][ T45] usb 3-1: Manufacturer: syz [ 39.847622][ T45] usb 3-1: SerialNumber: syz [ 39.857799][ T959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.867106][ T959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.031436][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 40.058666][ T1004] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 40.139320][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 40.152252][ T45] usb 3-1: USB disconnect, device number 7 [ 40.194110][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 40.203549][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.212160][ T31] usb 2-1: Product: syz [ 40.216827][ T31] usb 2-1: Manufacturer: syz [ 40.221524][ T31] usb 2-1: SerialNumber: syz [ 40.663742][ T1028] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.663763][ T1028] rust_binder: Read failure Err(EFAULT) in pid:213 [ 40.705096][ T1028] rust_binder: Write failure EINVAL in pid:213 [ 41.231501][ T309] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.393186][ T309] usb 3-1: config 165 has an invalid interface number: 182 but max is 0 [ 41.401632][ T309] usb 3-1: config 165 has no interface number 0 [ 41.407881][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 41.419217][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 41.430447][ T309] usb 3-1: config 165 interface 182 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 41.441503][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 41.452944][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 41.464165][ T309] usb 3-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 41.475440][ T309] usb 3-1: config 165 interface 182 altsetting 115 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 41.487013][ T309] usb 3-1: config 165 interface 182 altsetting 115 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 41.501415][ T309] usb 3-1: config 165 interface 182 has no altsetting 0 [ 41.509893][ T309] usb 3-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=56.f4 [ 41.519068][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.527088][ T309] usb 3-1: Product: syz [ 41.531236][ T309] usb 3-1: Manufacturer: syz [ 41.535855][ T309] usb 3-1: SerialNumber: syz [ 41.541468][ T1037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.753399][ T309] snd-usb-audio 3-1:165.182: probe with driver snd-usb-audio failed with error -2 [ 41.764427][ T309] usb 3-1: USB disconnect, device number 8 [ 41.769659][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:165.182/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.806328][ T1065] fuse: Bad value for 'fd' [ 41.995404][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 41.995420][ T36] audit: type=1400 audit(1750912281.329:294): avc: denied { setopt } for pid=1069 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.275686][ T36] audit: type=1400 audit(1750912281.609:295): avc: denied { read } for pid=1081 comm="syz.2.250" path="socket:[7713]" dev="sockfs" ino=7713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.541491][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.691471][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 42.697969][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 42.707876][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 42.718644][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.727839][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.735859][ T45] usb 3-1: SerialNumber: syz [ 42.742525][ T1084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.750300][ T1084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.798466][ T31] usb 2-1: USB disconnect, device number 13 [ 42.833803][ T36] audit: type=1326 audit(1750912282.169:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.1.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f6f8e929 code=0x0 [ 42.935107][ T1105] sit0: entered promiscuous mode [ 42.940245][ T1105] sit0: entered allmulticast mode [ 42.947674][ T1105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.947704][ T1105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:119 [ 42.961208][ T45] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 42.979795][ T45] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 42.991212][ T45] usb 3-1: USB disconnect, device number 9 [ 43.122457][ T36] audit: type=1400 audit(1750912282.459:297): avc: denied { mount } for pid=1126 comm="syz.0.264" name="/" dev="configfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.145844][ T36] audit: type=1400 audit(1750912282.459:298): avc: denied { search } for pid=1126 comm="syz.0.264" name="/" dev="configfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.168182][ T36] audit: type=1400 audit(1750912282.459:299): avc: denied { search } for pid=1126 comm="syz.0.264" name="/" dev="configfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.194427][ T36] audit: type=1400 audit(1750912282.459:300): avc: denied { read } for pid=1126 comm="syz.0.264" name="/" dev="configfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.217206][ T36] audit: type=1400 audit(1750912282.459:301): avc: denied { open } for pid=1126 comm="syz.0.264" path="/" dev="configfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.252203][ T36] audit: type=1400 audit(1750912282.589:302): avc: denied { map } for pid=1145 comm="syz.3.272" path="socket:[6141]" dev="sockfs" ino=6141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 43.278040][ T36] audit: type=1400 audit(1750912282.589:303): avc: denied { accept } for pid=1145 comm="syz.3.272" path="socket:[6141]" dev="sockfs" ino=6141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 43.333666][ T1154] overlayfs: failed to clone upperpath [ 43.608280][ T1189] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 43.644577][ T1198] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.644595][ T1198] rust_binder: Read failure Err(EFAULT) in pid:251 [ 43.676345][ T1201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.691374][ T1201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.911452][ T309] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 44.072682][ T309] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 44.080015][ T309] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 44.089090][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.097849][ T309] usb 2-1: config 0 descriptor?? [ 44.105435][ T309] rndis_host 2-1:0.0: skipping garbage [ 44.111154][ T309] usb 2-1: bad CDC descriptors [ 44.209617][ T1222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257 [ 44.221341][ T1224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.231287][ T1225] rust_binder: Error while translating object. [ 44.238281][ T1225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.244501][ T1225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 44.281303][ T1231] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 44.297989][ T1231] rust_binder: Write failure EINVAL in pid:264 [ 44.303919][ T45] usb 2-1: USB disconnect, device number 14 [ 44.342531][ T1237] /dev/rnullb0: Can't open blockdev [ 44.360014][ T1240] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27677 sclass=netlink_xfrm_socket pid=1240 comm=syz.2.307 [ 44.485066][ T1243] rust_binder: Write failure EINVAL in pid:275 [ 45.061443][ T45] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 45.130739][ T1290] 9pnet_fd: Insufficient options for proto=fd [ 45.170320][ T1309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 45.179092][ T1309] overlayfs: conflicting options: userxattr,metacopy=on [ 45.232551][ T45] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 45.240909][ T45] usb 2-1: config 0 has no interface number 0 [ 45.247257][ T45] usb 2-1: config 0 interface 41 has no altsetting 0 [ 45.255693][ T45] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 45.264993][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.273176][ T45] usb 2-1: Product: syz [ 45.277462][ T45] usb 2-1: Manufacturer: syz [ 45.282308][ T45] usb 2-1: SerialNumber: syz [ 45.287788][ T45] usb 2-1: config 0 descriptor?? [ 45.495446][ T45] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 45.506846][ T45] usb 2-1: USB disconnect, device number 15 [ 45.538465][ T1341] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 45.538486][ T1341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 45.547315][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:302 [ 45.582133][ T1345] rust_binder: Write failure EFAULT in pid:308 [ 45.592023][ T1345] rust_binder: Write failure EFAULT in pid:308 [ 45.667181][ T1358] rust_binder: Error while translating object. [ 45.673504][ T1358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.679809][ T1358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 45.772892][ T1375] tmpfs: Unknown parameter '~o]wap' [ 46.034190][ T1391] rust_binder: Error while translating object. [ 46.034218][ T1391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 46.040459][ T1391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:333 [ 46.161243][ T1416] 9pnet_fd: Insufficient options for proto=fd [ 46.251428][ T305] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 46.302478][ T1436] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 46.311875][ T1436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.370714][ T1439] cgroup: fork rejected by pids controller in /syz3 [ 46.413214][ T305] usb 2-1: config 165 has an invalid interface number: 182 but max is 0 [ 46.421764][ T305] usb 2-1: config 165 has no interface number 0 [ 46.422809][ T1533] 9pnet_fd: Insufficient options for proto=fd [ 46.428097][ T305] usb 2-1: config 165 interface 182 altsetting 115 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 46.434374][ T1532] 9pnet_fd: Insufficient options for proto=fd [ 46.445675][ T305] usb 2-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 46.462944][ T305] usb 2-1: config 165 interface 182 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 46.474600][ T305] usb 2-1: config 165 interface 182 altsetting 115 endpoint 0xF has invalid maxpacket 576, setting to 64 [ 46.486340][ T305] usb 2-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 46.498150][ T305] usb 2-1: config 165 interface 182 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 46.509830][ T305] usb 2-1: config 165 interface 182 altsetting 115 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 46.521285][ T305] usb 2-1: config 165 interface 182 altsetting 115 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 46.534870][ T305] usb 2-1: config 165 interface 182 has no altsetting 0 [ 46.544750][ T305] usb 2-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=56.f4 [ 46.557411][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.571407][ T305] usb 2-1: Product: syz [ 46.575608][ T305] usb 2-1: Manufacturer: syz [ 46.580209][ T305] usb 2-1: SerialNumber: syz [ 46.594906][ T1388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.604676][ T1544] tipc: Enabling of bearer rejected, failed to enable media [ 46.819043][ T305] snd-usb-audio 2-1:165.182: probe with driver snd-usb-audio failed with error -2 [ 46.834259][ T305] usb 2-1: USB disconnect, device number 16 [ 46.849051][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:165.182/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.879384][ T1555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 46.961942][ T1566] overlay: Unknown parameter 'smackfsdef' [ 46.992128][ T1573] overlayfs: failed to clone upperpath [ 47.191446][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 47.341558][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 47.348008][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.358984][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.368750][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.377930][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.386555][ T31] usb 3-1: config 0 descriptor?? [ 47.392463][ T31] hub 3-1:0.0: USB hub found [ 47.518110][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 47.518126][ T36] audit: type=1326 audit(1750912286.849:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1581 comm="syz.0.397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed8d18e929 code=0x0 [ 47.560506][ T36] audit: type=1400 audit(1750912286.889:334): avc: denied { write } for pid=1579 comm="syz.1.396" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.592363][ T31] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 48.003966][ T31] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 48.079712][ T36] audit: type=1326 audit(1750912287.409:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1599 comm="syz.3.402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273818e929 code=0x0 [ 48.154264][ T1607] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.227558][ T36] audit: type=1400 audit(1750912287.559:336): avc: denied { map } for pid=1608 comm="syz.1.406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.251664][ T36] audit: type=1400 audit(1750912287.559:337): avc: denied { read write } for pid=1608 comm="syz.1.406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.370712][ T36] audit: type=1400 audit(1750912287.699:338): avc: denied { write } for pid=1613 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.402748][ T36] audit: type=1400 audit(1750912287.739:339): avc: denied { setopt } for pid=1619 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.438881][ T36] audit: type=1400 audit(1750912287.769:340): avc: denied { mount } for pid=1629 comm="syz.0.412" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.027484][ T1660] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 49.036813][ T1662] /dev/rnullb0: Can't open blockdev [ 49.086641][ T1671] tmpfs: Unknown parameter 'q¶GO¯ ý[¨^±– mpol' [ 49.195259][ T36] audit: type=1400 audit(1750912288.529:341): avc: granted { setsecparam } for pid=1688 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 49.568207][ T36] audit: type=1400 audit(1750912288.899:342): avc: denied { accept } for pid=1726 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 49.589265][ T1727] 9pnet_fd: Insufficient options for proto=fd [ 50.011545][ T45] usb 3-1: USB disconnect, device number 10 [ 50.041461][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 50.113488][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 50.211418][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 50.225577][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.239159][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 50.252036][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.270368][ T31] usb 2-1: config 0 descriptor?? [ 50.282708][ T1777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.284872][ T1777] rust_binder: Error in use_page_slow: ESRCH [ 50.297278][ T1777] rust_binder: use_range failure ESRCH [ 50.304099][ T1777] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 50.309658][ T1777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.320527][ T1777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:363 [ 50.488766][ T1744] cgroup: Invalid name [ 50.522010][ T1744] cgroup: Invalid name [ 50.527827][ T1744] cgroup: Invalid name [ 50.532715][ T1744] cgroup: Invalid name [ 50.537546][ T1744] cgroup: Invalid name [ 50.543523][ T1744] cgroup: Invalid name [ 50.553707][ T1784] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 50.564528][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 50.591501][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 50.601542][ T1784] rust_binder: Write failure EINVAL in pid:367 [ 50.612600][ T31] usb 2-1: USB disconnect, device number 17 [ 50.627659][ T1790] fuse: Bad value for 'fd' [ 50.668086][ T1790] rust_binder: Error while translating object. [ 50.668127][ T1790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.694003][ T1790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 50.734124][ T1796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 51.088809][ T1812] rust_binder: Write failure EINVAL in pid:379 [ 51.638570][ T1853] rust_binder: Got transaction with invalid offset. [ 51.650844][ T1853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.666510][ T1853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 51.775471][ T1864] usb usb5: usbfs: process 1864 (syz.1.493) did not claim interface 4 before use [ 51.795948][ T1868] fuse: Bad value for 'group_id' [ 51.801027][ T1868] fuse: Bad value for 'group_id' [ 51.858758][ T1872] netlink: 100 bytes leftover after parsing attributes in process `syz.0.496'. [ 52.031443][ T305] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 52.181447][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 52.188855][ T305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.201442][ T305] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 52.209053][ T305] usb 2-1: can't read configurations, error -71 [ 52.529970][ T36] kauditd_printk_skb: 500 callbacks suppressed [ 52.529986][ T36] audit: type=1400 audit(1750912297.854:843): avc: denied { name_bind } for pid=1919 comm="syz.0.510" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.557912][ T36] audit: type=1400 audit(1750912297.854:844): avc: denied { node_bind } for pid=1919 comm="syz.0.510" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.621500][ T36] audit: type=1400 audit(1750912297.914:845): avc: denied { read write } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.655586][ T36] audit: type=1400 audit(1750912297.914:846): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.682896][ T36] audit: type=1400 audit(1750912297.914:847): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.708919][ T36] audit: type=1400 audit(1750912297.984:848): avc: denied { read } for pid=1927 comm="syz.2.513" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.731584][ T36] audit: type=1400 audit(1750912297.984:849): avc: denied { read open } for pid=1927 comm="syz.2.513" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.803729][ T36] audit: type=1400 audit(1750912297.984:850): avc: denied { map } for pid=1927 comm="syz.2.513" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.873555][ T36] audit: type=1400 audit(1750912297.984:851): avc: denied { read } for pid=1927 comm="syz.2.513" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.936882][ T1951] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 52.936907][ T1951] rust_binder: Error while translating object. [ 52.944524][ T36] audit: type=1400 audit(1750912298.004:852): avc: denied { ioctl } for pid=1927 comm="syz.2.513" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.965029][ T1951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.983105][ T1951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 53.098215][ T1963] rust_binder: Read failure Err(EAGAIN) in pid:401 [ 53.300385][ T1992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.307672][ T1991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.315988][ T1991] rust_binder: Got transaction with invalid offset. [ 53.324581][ T1991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.331266][ T1991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 53.395287][ T1994] rust_binder: Error while translating object. [ 53.404837][ T1994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 53.411146][ T1994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 53.535902][ T2010] binder: Bad value for 'max' [ 53.551416][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.694986][ T2018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.695755][ T2018] rust_binder: Error in use_page_slow: ESRCH [ 53.702244][ T2018] rust_binder: use_range failure ESRCH [ 53.708243][ T2018] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 53.713787][ T2018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.721767][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 53.722557][ T2018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:246 [ 53.737658][ T31] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 53.756763][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.765467][ T31] usb 3-1: Product: syz [ 53.769756][ T31] usb 3-1: Manufacturer: syz [ 53.775332][ T31] usb 3-1: SerialNumber: syz [ 53.782351][ T31] usb 3-1: config 0 descriptor?? [ 53.792085][ T31] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 53.815350][ T31] usb 3-1: Detected FT4233HP [ 53.864311][ T2026] netlink: 64 bytes leftover after parsing attributes in process `syz.3.541'. [ 53.989848][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 53.994006][ T2035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 54.003538][ T31] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 54.107767][ T2045] 9pnet_fd: Insufficient options for proto=fd [ 54.223048][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.242480][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.252408][ T2051] rust_binder: Write failure EINVAL in pid:258 [ 54.286454][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.297360][ T1992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.302625][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.327976][ T9] usb 3-1: USB disconnect, device number 11 [ 54.341271][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.371587][ T9] ftdi_sio 3-1:0.0: device disconnected [ 54.511424][ T305] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 54.518785][ T2063] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 54.680446][ T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.691439][ T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.706030][ T305] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.719548][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.728595][ T305] usb 2-1: Product: syz [ 54.733513][ T305] usb 2-1: Manufacturer: syz [ 54.738204][ T305] usb 2-1: SerialNumber: syz [ 54.959707][ T2051] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 54.959707][ T2051] attempt to subtract with overflow [ 54.973892][ T2051] ------------[ cut here ]------------ [ 54.979401][ T2051] kernel BUG at rust/helpers/bug.c:7! [ 54.991837][ T2051] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 54.998818][ T2051] CPU: 0 UID: 0 PID: 2051 Comm: syz.1.549 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 55.012197][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.022261][ T2051] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 55.027575][ T2051] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 69 96 02 6b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 23 52 4b e7 90 90 90 90 90 90 90 90 90 [ 55.047372][ T2051] RSP: 0018:ffffc9000fb55a90 EFLAGS: 00010246 [ 55.053459][ T2051] RAX: 0000000000000061 RBX: 1ffff92001f6ab54 RCX: 0dd883c7d0f3eb00 [ 55.061443][ T2051] RDX: ffffc90001b02000 RSI: 0000000000004958 RDI: 0000000000004959 [ 55.069442][ T2051] RBP: ffffc9000fb55a90 R08: ffffc9000fb55787 R09: 1ffff92001f6aaf0 [ 55.077434][ T2051] R10: dffffc0000000000 R11: fffff52001f6aaf1 R12: 0000000000000000 [ 55.085427][ T2051] R13: dffffc0000000000 R14: ffffc9000fb55ac0 R15: ffffc9000fb55af0 [ 55.093425][ T2051] FS: 00007f12f7d6e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.102374][ T2051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.108972][ T2051] CR2: 0000001b2de1fffc CR3: 000000011b7b2000 CR4: 00000000003526b0 [ 55.116959][ T2051] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.124943][ T2051] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.132937][ T2051] Call Trace: [ 55.136296][ T2051] [ 55.139240][ T2051] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 55.146721][ T2051] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 55.154729][ T2051] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 55.155513][ T2083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.164984][ T2051] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 55.165033][ T2051] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 55.195645][ T2051] ? __kasan_check_write+0x18/0x20 [ 55.200798][ T2051] ? _raw_spin_lock+0x8c/0x120 [ 55.205632][ T2051] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.210859][ T2051] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 55.218077][ T2051] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 55.225993][ T2051] ? irqentry_exit+0x4a/0x60 [ 55.230601][ T2051] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 55.236429][ T2051] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 55.242610][ T2051] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 55.252604][ T2051] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 55.263217][ T2051] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 55.273819][ T2051] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 55.283570][ T2051] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 55.293657][ T2051] ? vprintk_emit+0x3dd/0x640 [ 55.298403][ T2051] ? __cfi_vprintk_emit+0x10/0x10 [ 55.303463][ T2051] ? vprintk_default+0x2a/0x40 [ 55.308279][ T2051] ? vprintk+0x93/0xa0 [ 55.312367][ T2051] ? __kasan_check_write+0x18/0x20 [ 55.317502][ T2051] ? _raw_spin_lock+0x8c/0x120 [ 55.322293][ T2051] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.327520][ T2051] ? __kasan_check_write+0x18/0x20 [ 55.332651][ T2051] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 55.342246][ T2051] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 55.352181][ T2051] ? is_bpf_text_address+0x17b/0x1a0 [ 55.357583][ T2051] ? kernel_text_address+0xa9/0xe0 [ 55.362720][ T2051] ? __kasan_check_write+0x18/0x20 [ 55.367849][ T2051] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 55.373310][ T2051] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 55.379229][ T2051] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 55.385048][ T2051] ? stack_depot_save_flags+0x399/0x800 [ 55.390617][ T2051] ? kasan_save_track+0x4f/0x80 [ 55.395500][ T2051] ? kasan_save_track+0x3e/0x80 [ 55.400374][ T2051] ? kasan_save_alloc_info+0x40/0x50 [ 55.405684][ T2051] ? __kasan_kmalloc+0x96/0xb0 [ 55.410467][ T2051] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 55.416026][ T2051] ? __set_page_owner+0x294/0x5d0 [ 55.421072][ T2051] ? post_alloc_hook+0x3b9/0x3f0 [ 55.426025][ T2051] ? prep_new_page+0x1c/0x120 [ 55.430718][ T2051] ? get_page_from_freelist+0x46bb/0x4750 [ 55.436455][ T2051] ? __alloc_pages_noprof+0x30d/0x6c0 [ 55.441856][ T2051] ? alloc_slab_page+0x6b/0x1f0 [ 55.446729][ T2051] ? allocate_slab+0x69/0x440 [ 55.451423][ T2051] ? ___slab_alloc+0x59a/0x8b0 [ 55.456196][ T2051] ? __kmalloc_node_track_caller_noprof+0x23a/0x440 [ 55.462805][ T2051] ? kmemdup_noprof+0x31/0x80 [ 55.467502][ T2051] ? sidtab_sid2str_get+0x139/0x370 [ 55.472719][ T2051] ? security_sid_to_context_core+0x30d/0x5d0 [ 55.478813][ T2051] ? unwind_next_frame+0x3c2/0x750 [ 55.483939][ T2051] ? __se_sys_ioctl+0x53/0x1b0 [ 55.488728][ T2051] ? __se_sys_ioctl+0x53/0x1b0 [ 55.493510][ T2051] ? __kernel_text_address+0x11/0x40 [ 55.498807][ T2051] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 55.504983][ T2051] ? arch_stack_walk+0x12a/0x170 [ 55.509955][ T2051] ? __se_sys_ioctl+0x53/0x1b0 [ 55.514715][ T2051] ? stack_depot_save_flags+0x38/0x800 [ 55.520165][ T2051] ? stack_depot_save+0x12/0x20 [ 55.525110][ T2051] ? save_stack+0x11c/0x1f0 [ 55.529607][ T2051] ? free_contig_range+0x270/0x270 [ 55.534714][ T2051] ? __reset_page_owner+0x450/0x450 [ 55.539896][ T2051] ? zone_page_state_add+0x43/0x90 [ 55.544989][ T2051] ? post_alloc_hook+0x3b9/0x3f0 [ 55.549911][ T2051] ? prep_new_page+0x1c/0x120 [ 55.554578][ T2051] ? get_page_from_freelist+0x46bb/0x4750 [ 55.560284][ T2051] ? __alloc_pages_noprof+0x30d/0x6c0 [ 55.565642][ T2051] ? alloc_slab_page+0x6b/0x1f0 [ 55.570493][ T2051] ? allocate_slab+0x69/0x440 [ 55.575156][ T2051] ? __kasan_check_write+0x18/0x20 [ 55.580361][ T2051] ? __update_page_owner_handle+0x318/0x370 [ 55.586236][ T2051] ? is_bpf_text_address+0x17b/0x1a0 [ 55.591521][ T2051] ? is_bpf_text_address+0x17b/0x1a0 [ 55.596797][ T2051] ? kernel_text_address+0xa9/0xe0 [ 55.601892][ T2051] ? __kernel_text_address+0x11/0x40 [ 55.607245][ T2051] ? unwind_get_return_address+0x51/0x90 [ 55.612861][ T2051] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 55.618994][ T2051] ? arch_stack_walk+0x10b/0x170 [ 55.623918][ T2051] ? stack_trace_save+0x9d/0xe0 [ 55.628751][ T2051] ? stack_depot_save_flags+0x38/0x800 [ 55.634189][ T2051] ? kasan_save_track+0x4f/0x80 [ 55.639042][ T2051] ? kasan_save_track+0x3e/0x80 [ 55.643978][ T2051] ? kasan_save_free_info+0x4a/0x60 [ 55.649156][ T2051] ? __kasan_slab_free+0x5f/0x80 [ 55.654075][ T2051] ? kmem_cache_free+0x1c1/0x4c0 [ 55.658992][ T2051] ? audit_log_end+0x1f1/0x240 [ 55.663738][ T2051] ? common_lsm_audit+0x148c/0x1860 [ 55.668913][ T2051] ? slow_avc_audit+0x18d/0x1f0 [ 55.673743][ T2051] ? avc_has_extended_perms+0x895/0xdd0 [ 55.679269][ T2051] ? ioctl_has_perm+0x384/0x4d0 [ 55.684119][ T2051] ? selinux_file_ioctl+0x6e0/0x1360 [ 55.689408][ T2051] ? security_file_ioctl+0x58/0xd0 [ 55.694537][ T2051] ? __se_sys_ioctl+0x53/0x1b0 [ 55.699286][ T2051] ? __x64_sys_ioctl+0x7f/0xa0 [ 55.704041][ T2051] ? x64_sys_call+0x1878/0x2ee0 [ 55.708879][ T2051] ? do_syscall_64+0x58/0xf0 [ 55.713448][ T2051] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.719529][ T2051] ? __kasan_check_write+0x18/0x20 [ 55.724628][ T2051] ? _raw_spin_lock+0x8c/0x120 [ 55.729374][ T2051] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.734556][ T2051] ? _raw_spin_unlock+0x45/0x60 [ 55.739387][ T2051] ? rust_helper_spin_unlock+0x19/0x30 [ 55.744829][ T2051] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 55.755336][ T2051] ? kmem_cache_free+0x1c1/0x4c0 [ 55.760258][ T2051] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 55.771007][ T2051] ? audit_log_end+0x1f1/0x240 [ 55.775755][ T2051] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 55.781712][ T2051] ? common_lsm_audit+0x148c/0x1860 [ 55.787074][ T2051] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 55.793035][ T2051] ? slow_avc_audit+0x18d/0x1f0 [ 55.797867][ T2051] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 55.806959][ T2051] ? avc_denied+0x112/0x180 [ 55.811443][ T2051] ? avc_has_extended_perms+0x895/0xdd0 [ 55.816968][ T2051] ? avc_has_extended_perms+0x91a/0xdd0 [ 55.822490][ T2051] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 55.832037][ T2051] ? do_vfs_ioctl+0xeda/0x1e30 [ 55.836786][ T2051] ? preempt_schedule_common+0x2d/0x60 [ 55.842225][ T2051] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 55.847844][ T2051] ? __cfi_preempt_schedule+0x10/0x10 [ 55.853209][ T2051] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 55.859343][ T2051] ? preempt_schedule_thunk+0x1a/0x40 [ 55.864702][ T2051] ? try_to_wake_up+0xe17/0x1aa0 [ 55.869625][ T2051] ? ioctl_has_perm+0x384/0x4d0 [ 55.874461][ T2051] ? has_cap_mac_admin+0xd0/0xd0 [ 55.879383][ T2051] ? futex_wake+0x63a/0x900 [ 55.883872][ T2051] ? __cfi_futex_wake+0x10/0x10 [ 55.888711][ T2051] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 55.894626][ T2051] ? selinux_file_ioctl+0x6e0/0x1360 [ 55.899921][ T2051] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 55.905540][ T2051] ? __cfi_do_mmap+0x10/0x10 [ 55.910111][ T2051] ? down_write_killable+0xe9/0x2d0 [ 55.915294][ T2051] ? do_futex+0x356/0x500 [ 55.919614][ T2051] ? __cfi_do_futex+0x10/0x10 [ 55.924272][ T2051] ? vm_mmap_pgoff+0x145/0x4e0 [ 55.929020][ T2051] ? __fget_files+0x2c5/0x340 [ 55.933690][ T2051] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 55.942173][ T2051] ? __se_sys_ioctl+0x114/0x1b0 [ 55.947008][ T2051] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 55.956104][ T2051] __se_sys_ioctl+0x132/0x1b0 [ 55.960770][ T2051] __x64_sys_ioctl+0x7f/0xa0 [ 55.965346][ T2051] x64_sys_call+0x1878/0x2ee0 [ 55.970006][ T2051] do_syscall_64+0x58/0xf0 [ 55.974406][ T2051] ? clear_bhb_loop+0x50/0xa0 [ 55.979064][ T2051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.984935][ T2051] RIP: 0033:0x7f12f6f8e929 [ 55.989329][ T2051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.008919][ T2051] RSP: 002b:00007f12f7d6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.017417][ T2051] RAX: ffffffffffffffda RBX: 00007f12f71b5fa0 RCX: 00007f12f6f8e929 [ 56.025384][ T2051] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 56.033434][ T2051] RBP: 00007f12f7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.041422][ T2051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.049409][ T2051] R13: 0000000000000000 R14: 00007f12f71b5fa0 R15: 00007ffd89f040d8 [ 56.057381][ T2051] [ 56.060386][ T2051] Modules linked in: [ 56.065464][ T2051] ---[ end trace 0000000000000000 ]--- [ 56.071815][ T2051] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 56.078326][ T2051] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 69 96 02 6b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 23 52 4b e7 90 90 90 90 90 90 90 90 90 [ 56.098042][ T2051] RSP: 0018:ffffc9000fb55a90 EFLAGS: 00010246 [ 56.104193][ T2051] RAX: 0000000000000061 RBX: 1ffff92001f6ab54 RCX: 0dd883c7d0f3eb00 [ 56.112225][ T2051] RDX: ffffc90001b02000 RSI: 0000000000004958 RDI: 0000000000004959 [ 56.120298][ T2051] RBP: ffffc9000fb55a90 R08: ffffc9000fb55787 R09: 1ffff92001f6aaf0 [ 56.128333][ T2051] R10: dffffc0000000000 R11: fffff52001f6aaf1 R12: 0000000000000000 [ 56.136373][ T2051] R13: dffffc0000000000 R14: ffffc9000fb55ac0 R15: ffffc9000fb55af0 [ 56.144389][ T2051] FS: 00007f12f7d6e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.153417][ T2051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.160002][ T2051] CR2: 00007f12f7185560 CR3: 000000011b7b2000 CR4: 00000000003526b0 [ 56.168012][ T2051] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.176100][ T2051] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.184151][ T2051] Kernel panic - not syncing: Fatal exception [ 56.190506][ T2051] Kernel Offset: disabled [ 56.194817][ T2051] Rebooting in 86400 seconds..