last executing test programs: 205.168037ms ago: executing program 0 (id=1): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000240)='./file1\x00') r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x10080, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2600, 0x8c) linkat(r1, &(0x7f0000000780)='./file0\x00', r2, &(0x7f0000000800)='./file0\x00', 0x1400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x41) symlinkat(&(0x7f0000000540)='./file0\x00', r3, &(0x7f0000000580)='./file1\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x2) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000000)=""/78, 0x4e) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c80)={0x1e4, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe94}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbdc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x10400}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 151.832488ms ago: executing program 1 (id=2): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0xf552ebe0ecb6fb5a, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000080)=""/21, &(0x7f0000000240)=0x15) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') listen(r4, 0x401) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030307a92ab11"], 0x15) (async) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c771d715e7ee4", @ANYRESHEX=r5, @ANYBLOB=',k']) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x7fffffff, 0x8}) read(r0, &(0x7f0000000080)=""/93, 0x5d) 138.329268ms ago: executing program 2 (id=3): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@mcast1, @local, @loopback={0x1000000}, 0x2, 0x0, 0x0, 0x0, 0x7, 0xca0167, r2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000600)='./file0\x00', 0x54000c58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@mcast1, @local, @loopback={0x1000000}, 0x2, 0x0, 0x0, 0x0, 0x7, 0xca0167, r2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) inotify_init1(0x0) (async) inotify_add_watch(r4, &(0x7f0000000600)='./file0\x00', 0x54000c58) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) (async) 103.383848ms ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') (async) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400243, 0x40) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000240)={0x1, 0x1, 0x3, 0x7, 0x1, 0xf, 0xa, 0x2, 0x9, 0xb, 0x401, 0x8, 0x14c87d59, 0x97}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)=0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000400000000000000000000000000000000006a0e1edf2e8c6a769f8485a1d85166c4e883a1aed019522f12cda302d6c39fd574d66ff892e8bcac85b8b6747f1510a7c2225ed96cd2715da0032b450dc90eff77cd8105e673674a10db34017685c3de9a0d44b8706f112ba06bf1c176e3e6a8f6092532bd345ca7ae671ee7b9d6ef245c78b8ab181bb4e822a5dbcb77bbf3b3"]) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0/file0\x00', r3, &(0x7f0000000080)='./file0/file0/file0\x00', 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000200), 0x80000) (async) r10 = accept4$unix(r3, 0x0, &(0x7f0000000200), 0x80000) fstat(r10, &(0x7f00000000c0)) (async) fstat(r10, &(0x7f00000000c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) 93.154108ms ago: executing program 3 (id=4): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x2, r4}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x10, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180), 0xd, 0x0, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000240), 0x1) 23.92906ms ago: executing program 1 (id=6): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x142450, &(0x7f00000001c0)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x34, 0x35, 0x36, 0x25, 0x31, 0x70, 0x34]}}, {@grpquota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x74, 0x37, 0x67, 0x30, 0x6b, 0x38, 0x38, 0x0, 0xd70ebea13744a558]}}, {@huge_advise}, {@quota}, {@huge_always}, {@quota}], [{@subj_user={'subj_user', 0x3d, '/s/usb/00#/00#\x00\x00\x00\x00\x00\x00\x00'}}]}) ptrace(0x10, r1) ptrace$peek(0x1, r1, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x101200) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xba, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000500)={0x20, 0x12, 0xa, 0x4, 0x5, 0x2, &(0x7f00000004c0)="06a86845ce"}) close(r0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f00000000c0)={&(0x7f0000000040)="72d37107bfd20bcdc96f906c591055ac1f314074f10965cdeba6e869a35ab062ac85a26d25d3346423735cc1d0f1afb89763b0715fa8e519ac527b88c97eb44fc57de2cad3710d7d398445a55ed075ca99aebf9cfb6993079067e41cfd52", 0x5e}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) 22.575849ms ago: executing program 1 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) unshare(0xc000600) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2) fcntl$notify(r1, 0x402, 0x100000000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x1, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0x6b98, 0xfffffffe}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4b8e, 0x100) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x32, 0x2, 0x2007, 0x9, "b7e255d9217af3968d89c0de58501b6e94a4ddf32ea0846f7a293fde3635aef2"}) capset(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0x5, 0x1, 0x1, 0x4, 0x9}) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r4, r5, 0x2) dup2(r5, r3) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setns(r6, 0x0) write$tcp_congestion(r3, &(0x7f0000000300)='reno\x00', 0x5) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRESOCT]) 8.41635ms ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r3, &(0x7f0000000080)=""/93, 0xffffff6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) read(r3, &(0x7f0000000080)=""/93, 0xffffff6c) (async) 0s ago: executing program 2 (id=9): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000980)={0xa, 0x4e24, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) syz_usb_connect(0x0, 0x505, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0x11, 0xe4, 0x8e, 0x20, 0x17cc, 0x1000, 0x6604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f3, 0x4, 0x8, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0xc1, 0x0, 0x9, 0xa3, 0x69, 0xc2, 0x88, [@hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xf69}}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x3, 0x7}, [@acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x39}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x4, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x101}]}], [{{0x9, 0x5, 0x8, 0xc, 0x8, 0x5, 0x0, 0x1, [@generic={0xcb, 0x10, "23665803a4bf0215f287f17dab5e678cd13357d0084bbfd344a8b7c5118623c98355cc18b894278c9b3f23ae6bdc4cb47695ab3d7ac6f7dfdbaedbb6855bde1c97a496f004596bf916063552ce89eee0a07506a5c574e07ddf60b199248a764084a17a256f021489798279c1e27ad287ebfd6820dcdeccf77be3739fa1fc4414eb638920c5c61c4c6fc691993248745e29244e2cb0466f740c01680ba088328a1d88cca946bdea01cd35a78b0c01adb7bf673ad9a577d1b031993b145e0e9edc6347b43f169f32f204"}, @generic={0x66, 0x23, "85ea032f0eb590f59fc780e3d2acbfa55aa8eb716ff6177189599e27098218020c98d927d2c4b7623ccc44ca5c9487fa52274bacb03df5ed1ad989821de8640e58299e6d458440bdd5336ce058f830564feddb98a0c04dd12eaa0b8997828bacf814272d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0xa42}, @generic={0xd2, 0xc, "068acc7f55f1dfdfcf6ac06757a8e58804c183b0b0751d09fd9671382d2510514770f5ac3b8ee26c095f3bfb928a22d6354a2421733a3d98bde273b6fd63ae9c7b7ef4e2a789b7b22a10e174d20a729079cf845db55581c0c16307f69fbcd657d64d0621f0da316d53ad93b7895dada4d72e78211436fd62973366667278d4e64299301a0e8ab28b5ce4e1926947ef73bfba746f2faf2dd4d00b42f25c6c09ec238742e88ecae639654c9b07315b59d910f3b75fd5fc74872d40555fb2dff7540ab6a38bb3c1b68cf9f3b5527cba1584"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0xfffe}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x10, 0x3, 0x9}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x40, 0xfc, 0x40}}]}}, {{0x9, 0x4, 0x25, 0xfe, 0x0, 0x3, 0xab, 0x2, 0x81, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x3, 0x7, "f32e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9a, 0x2, 0x3, "9dea869431"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xc9, 0x7, '=', "2d73b1"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfffa, 0x6, 0x9, "0f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0x3, "e030f6fef20c107990"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf7, 0x4, '='}]}, @uac_control={{0xa, 0x24, 0x1, 0xc38, 0x5}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0xa, 0x5, 0x3], 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xf9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x81, 0x1, 0x8370, 0x3d, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0xe, 0x401, 0x3c, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x6}]}]}}, {{0x9, 0x4, 0xe0, 0x50, 0x6, 0x86, 0x8a, 0xee, 0xd, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xff1, 0x6, 0xab88}, @obex={0x5, 0x24, 0x15, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x6e2, 0x6}}], [{{0x9, 0x5, 0xd, 0xb34e9e9fc12738eb, 0x8, 0xb8, 0x6, 0x8, [@generic={0x4, 0x9, "d31a"}, @generic={0xb8, 0x22, "7bddc3da8db01753572a82d96f2962aea7070b0e8941d302f3c381dafb4d2338ff75b8682dfdd6523a431cd483ca056a797ad1b5d8f07e17df542913d58ad8fec1b04b381d119fc578af030330c0b1f0729b1e8ecde612646273d7698a648a5bea2f87fcc6df5ace9a1de079450683c8d62e0832f69ddaa293a2775441c0d2a4e738ffa6296785dcda38fc6108b14df32092d40536ee717a31029b2712366a2008c6437bba81ef7efdce097d374e8aec8e4ae67589be"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x1b7, 0x1, 0xce, 0x5}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x60, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xc8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1c, 0x7703}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xa, 0x21, 0x7, [@generic={0x3, 0xac685c50043ef25a, "b9"}, @generic={0x47, 0x30, "7b57dc5412431e6dc0798ad667c83cf8e6b27ffa2c73527f1cda42d6d43e380a34a30a982fcc02342cb94d8247fed094da762157a834f17659de555a2995efde3c1a708059"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xc, 0x8, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x9, 0xa, 0x81}}]}}, {{0x9, 0x4, 0xb9, 0x6, 0x0, 0xff, 0x0, 0x0, 0x4, [@hid_hid={0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x9c1}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x200, 0xc, 0xff, 0x1, 0xff, 0x40}, 0x10, &(0x7f00000011c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xfd, 0x8, 0x3309, 0xd}]}, 0x9, [{0x20, &(0x7f0000001200)=@string={0x20, 0x3, "0757aa885fd479f5dd52aa16972e17a238c6e30451397d15e865c95e4e55"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x404}}, {0xa3, &(0x7f0000001280)=@string={0xa3, 0x3, "4832d033f4deaabf1e668c9d7aecdb84ca809e7cdae33a4089b191b6bd96e80a9e39d565e790dbe9d0634a31e395f7c8a6ae55491b977a6ce757a89856c61e2a49115d68a9d81ec5d445db1d19962462cd2965187b33c2f2380b601dc05b2664ed0833b56e4c467ade240c02980ea49f358b6f4c339fbd88e419d10ea67df94711d67a6f3d7bd0cf77198caa6ffdf7af9a05718261f58154181350d5ff2a60a4bf"}}, {0x53, &(0x7f0000001340)=@string={0x53, 0x3, "5484e04d048fedfc78f262cf2c08c6b8f66250917a88015c11cf3898341666e954da08e5d8c927e0dcce6da00dc6628821da729e6b7485e729c59b8d5544125389bbc09829fbe5f7a0d1c42286afdba6f1"}}, {0x34, &(0x7f00000013c0)=@string={0x34, 0x3, "5109c84bc688a82907f971a54cd4fb504da7f4a880c2bab5d5806836752a3aef82ca25f2dfb239d3ee63cd565052910d0e9a"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x807}}, {0xe8, &(0x7f0000001480)=@string={0xe8, 0x3, "243bf82d71245e6d4eaa1f61dc3c605e4df64c458922f65a66c3a5d9b5943bedcd96bf9fbff7d08dec8728ea9c3730db7fc00ee93fc881efa092196ac757cc11dba03ee63422b84e148a53081250f68e0e4371ce059ae2be41a55e45b154a0c885eda04a3a244b6649397c52bc7d66495f593d35f96263a1921b5928b8fa12c59dbec9c66ce75f25af6a7cbce9f41340a073a25af61b489ad832b30b0940f05c63585b81ae86c3f8db7faa82a1b015b4e791f7e6d82895f714cac08b33cdf0cad80fcd38eb150b1f1030589440c6a814f6f187189cbba364cc356eae8640988b3f6a57ac6bfd"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_open_dev$MSR(&(0x7f0000001680), 0x510d, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000018c0)={0x0, 0x0, @ioapic}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 20.286198][ T36] audit: type=1400 audit(1750720714.809:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.287257][ T282] cgroup: Unknown subsys name 'net' [ 20.308938][ T36] audit: type=1400 audit(1750720714.809:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.336116][ T36] audit: type=1400 audit(1750720714.839:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.336331][ T282] cgroup: Unknown subsys name 'devices' [ 20.461798][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.467399][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.579624][ T36] audit: type=1400 audit(1750720715.099:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.602805][ T36] audit: type=1400 audit(1750720715.109:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.609309][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.627691][ T36] audit: type=1400 audit(1750720715.109:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.659143][ T36] audit: type=1400 audit(1750720715.159:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.662302][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.685007][ T36] audit: type=1400 audit(1750720715.159:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.718892][ T36] audit: type=1400 audit(1750720715.179:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.744410][ T36] audit: type=1400 audit(1750720715.179:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.537294][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.544734][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.551828][ T289] bridge_slave_0: entered allmulticast mode [ 21.558005][ T289] bridge_slave_0: entered promiscuous mode [ 21.564878][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.571927][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.578977][ T289] bridge_slave_1: entered allmulticast mode [ 21.585304][ T289] bridge_slave_1: entered promiscuous mode [ 21.654772][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.661855][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.668927][ T291] bridge_slave_0: entered allmulticast mode [ 21.675116][ T291] bridge_slave_0: entered promiscuous mode [ 21.690531][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.697579][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.704686][ T291] bridge_slave_1: entered allmulticast mode [ 21.710880][ T291] bridge_slave_1: entered promiscuous mode [ 21.716918][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.723991][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.731070][ T292] bridge_slave_0: entered allmulticast mode [ 21.737180][ T292] bridge_slave_0: entered promiscuous mode [ 21.743340][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.750381][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.757425][ T290] bridge_slave_0: entered allmulticast mode [ 21.763721][ T290] bridge_slave_0: entered promiscuous mode [ 21.776190][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.783277][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.790345][ T292] bridge_slave_1: entered allmulticast mode [ 21.796536][ T292] bridge_slave_1: entered promiscuous mode [ 21.802594][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.809610][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.816730][ T290] bridge_slave_1: entered allmulticast mode [ 21.822915][ T290] bridge_slave_1: entered promiscuous mode [ 21.935039][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.942119][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.949372][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.956417][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.973760][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.980812][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.988061][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.995115][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.038793][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.045861][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.053147][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.060191][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.078406][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.085481][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.092769][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.099808][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.113173][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.120712][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.128043][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.135566][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.142920][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.150194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.157331][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.164665][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.178550][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.185649][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.193325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.200367][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.220424][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.227472][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.241391][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.248436][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.268894][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.275951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.289992][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.297032][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.327769][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.334826][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.348534][ T291] veth0_vlan: entered promiscuous mode [ 22.355326][ T289] veth0_vlan: entered promiscuous mode [ 22.362941][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.369998][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.396694][ T290] veth0_vlan: entered promiscuous mode [ 22.406953][ T291] veth1_macvtap: entered promiscuous mode [ 22.413525][ T289] veth1_macvtap: entered promiscuous mode [ 22.425512][ T290] veth1_macvtap: entered promiscuous mode [ 22.457397][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.476759][ T292] veth0_vlan: entered promiscuous mode [ 22.507591][ T292] veth1_macvtap: entered promiscuous mode [ 22.522594][ T306] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 22.522621][ T306] rust_binder: Error while translating object. [ 22.533533][ T306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.550895][ T306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 22.557971][ T312] 9pnet_fd: Insufficient options for proto=fd [ 22.610433][ T322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 22.612238][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.660796][ T320] rust_kernel: panicked at drivers/staging/android/ashmem_rust.rs:418:13: [ 22.660796][ T320] attempt to subtract with overflow [ 22.697046][ T320] ------------[ cut here ]------------ [ 22.702568][ T320] kernel BUG at rust/helpers/bug.c:7! [ 22.742952][ T320] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 22.749936][ T320] CPU: 0 UID: 0 PID: 320 Comm: syz.3.4 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 22.763051][ T320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 22.773121][ T320] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 22.778447][ T320] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 b0 22 17 54 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 fa e6 5e d8 90 90 90 90 90 90 90 90 90 [ 22.798072][ T320] RSP: 0018:ffffc9000b87f670 EFLAGS: 00010246 [ 22.804166][ T320] RAX: 0000000000000069 RBX: 1ffff9200170fed0 RCX: d412c10ee5a7dd00 [ 22.812149][ T320] RDX: ffffc900026a5000 RSI: 000000000000403d RDI: 000000000000403e [ 22.820127][ T320] RBP: ffffc9000b87f670 R08: ffffc9000b87f367 R09: 1ffff9200170fe6c [ 22.828080][ T320] R10: dffffc0000000000 R11: fffff5200170fe6d R12: 0000000000000000 [ 22.836031][ T320] R13: dffffc0000000000 R14: ffffc9000b87f6a0 R15: ffffc9000b87f6d0 [ 22.843992][ T320] FS: 00007f8090a826c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 22.852924][ T320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.859483][ T320] CR2: 0000200000017038 CR3: 000000010f782000 CR4: 00000000003526b0 [ 22.867435][ T320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.875391][ T320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.883343][ T320] Call Trace: [ 22.886609][ T320] [ 22.889527][ T320] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 22.896976][ T320] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 22.904976][ T320] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 22.918544][ T320] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 22.925768][ T320] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 22.933684][ T320] ? rust_helper_krealloc+0x33/0xd0 [ 22.938907][ T320] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 22.948817][ T320] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 22.959416][ T320] ? rust_helper_krealloc+0x33/0xd0 [ 22.964605][ T320] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xbe/0x100 [ 22.970881][ T333] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 22.974134][ T320] ? _RNvNtCs43vyB533jt3_6kernel4page10page_align+0x20/0x50 [ 22.990577][ T320] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice5ioctl+0x2c01/0x2ed0 [ 23.003062][ T320] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice5ioctl+0x10/0x10 [ 23.010125][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.015890][ T320] ? do_vfs_ioctl+0xeda/0x1e30 [ 23.028195][ T320] ? __futex_queue+0x19a/0x340 [ 23.032950][ T320] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 23.038590][ T320] ? __cfi___futex_queue+0x10/0x10 [ 23.043710][ T320] ? futex_wait_setup+0x1bc/0x260 [ 23.048719][ T320] ? __futex_wait+0x218/0x2a0 [ 23.053377][ T320] ? ioctl_has_perm+0x384/0x4d0 [ 23.058217][ T320] ? has_cap_mac_admin+0xd0/0xd0 [ 23.063147][ T320] ? futex_wake+0x5fb/0x900 [ 23.067655][ T320] ? futex_setup_timer+0xb4/0xd0 [ 23.072588][ T320] ? futex_wait+0x288/0x540 [ 23.077082][ T320] ? __cfi_futex_wait+0x10/0x10 [ 23.081927][ T320] ? selinux_file_ioctl+0x6e0/0x1360 [ 23.087198][ T320] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 23.092734][ T320] ? do_futex+0x309/0x500 [ 23.097052][ T320] ? __cfi_do_futex+0x10/0x10 [ 23.101719][ T320] ? __fget_files+0x2c5/0x340 [ 23.106383][ T320] _RINvNtCs43vyB533jt3_6kernel10miscdevice10fops_ioctlNtCscPPBqWtAqum_11ashmem_rust6AshmemEBP_+0x99/0x110 [ 23.117755][ T320] ? security_file_ioctl+0x34/0xd0 [ 23.122858][ T320] ? __cfi__RINvNtCs43vyB533jt3_6kernel10miscdevice10fops_ioctlNtCscPPBqWtAqum_11ashmem_rust6AshmemEBP_+0x10/0x10 [ 23.134831][ T320] __se_sys_ioctl+0x135/0x1b0 [ 23.139501][ T320] __x64_sys_ioctl+0x7f/0xa0 [ 23.144079][ T320] x64_sys_call+0x1878/0x2ee0 [ 23.148759][ T320] do_syscall_64+0x58/0xf0 [ 23.153171][ T320] ? clear_bhb_loop+0x50/0xa0 [ 23.157849][ T320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.163736][ T320] RIP: 0033:0x7f808fb8e929 [ 23.168147][ T320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 23.187823][ T320] RSP: 002b:00007f8090a82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.196228][ T320] RAX: ffffffffffffffda RBX: 00007f808fdb5fa0 RCX: 00007f808fb8e929 [ 23.204190][ T320] RDX: 0000200000002600 RSI: 0000000040087708 RDI: 0000000000000003 [ 23.212156][ T320] RBP: 00007f808fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 23.220130][ T320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.228085][ T320] R13: 0000000000000000 R14: 00007f808fdb5fa0 R15: 00007ffed9208318 [ 23.236041][ T320] [ 23.239044][ T320] Modules linked in: [ 23.243395][ T320] ---[ end trace 0000000000000000 ]--- [ 23.249014][ T320] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 23.254505][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 23.255120][ T320] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 b0 22 17 54 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 fa e6 5e d8 90 90 90 90 90 90 90 90 90 [ 23.262020][ T31] usb 3-1: config 8 has an invalid interface number: 193 but max is 3 [ 23.279586][ T320] RSP: 0018:ffffc9000b87f670 EFLAGS: 00010246 [ 23.287647][ T31] usb 3-1: config 8 has an invalid interface number: 37 but max is 3 [ 23.290395][ T320] [ 23.293906][ T31] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 23.302059][ T320] RAX: 0000000000000069 RBX: 1ffff9200170fed0 RCX: d412c10ee5a7dd00 [ 23.308114][ T31] usb 3-1: config 8 has an invalid interface number: 224 but max is 3 [ 23.317454][ T320] RDX: ffffc900026a5000 RSI: 000000000000403d RDI: 000000000000403e [ 23.337699][ T320] RBP: ffffc9000b87f670 R08: ffffc9000b87f367 R09: 1ffff9200170fe6c [ 23.339694][ T31] usb 3-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config [ 23.345998][ T320] R10: dffffc0000000000 R11: fffff5200170fe6d R12: 0000000000000000 [ 23.364594][ T320] R13: dffffc0000000000 R14: ffffc9000b87f6a0 R15: ffffc9000b87f6d0 [ 23.372690][ T320] FS: 00007f8090a826c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 23.372770][ T31] usb 3-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 23.381844][ T320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.398464][ T320] CR2: 0000200000017038 CR3: 000000010f782000 CR4: 00000000003526b0 [ 23.406626][ T31] usb 3-1: config 8 has no interface number 0 [ 23.408232][ T320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.419875][ T31] usb 3-1: config 8 has no interface number 1 [ 23.420927][ T320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.436983][ T31] usb 3-1: config 8 has no interface number 2 [ 23.441230][ T320] Kernel panic - not syncing: Fatal exception [ 23.443276][ T320] Kernel Offset: disabled