last executing test programs: 7.373003492s ago: executing program 2 (id=426): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 7.369473183s ago: executing program 2 (id=427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r3, r2, r2, r2, r2, r3, r2]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r3, r2, r2, r2, r2, r3, r2]}}], 0x30}, 0x400c0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) (async) 7.198251537s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0xdcd9dcd9255d45f3) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x10b900) read$usbmon(r6, &(0x7f0000000140)=""/112, 0x70) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x1000) 6.301065699s ago: executing program 2 (id=445): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x404c484) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000001c0)=0x2, 0x80, 0x2, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000003c0)="b8040000000f23d80f21f835400000100f23f8b9800000c00f3235000800000f30360f01d1b9800000c00f3235010000000f30f3818700980000ca260000f3640f07c4c235af223e0f79872b5fd97a0fc7bcb80070000066ba4300b8ffa50000ef", 0x61}], 0x1, 0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x94, 0x0, 0x0, 0xffffffff}, {0x6}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x6484da68, 0x808002) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x31105b90}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xfffffffffffffffa, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 5.910864231s ago: executing program 2 (id=447): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) poll(&(0x7f00000001c0)=[{r0, 0x4420}, {r0, 0x480}, {r0}, {r1, 0x4460}, {r0, 0x40}, {r2, 0x80}, {r0, 0x8000}, {r0, 0xc020}, {r0, 0x1001}], 0x9, 0x9) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000100)={0xdc, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket(0x1e, 0x1, 0x0) shutdown(r7, 0x2) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) 5.785389231s ago: executing program 2 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000800000000000000000ac1e0101000000000000000000000000e0000002000000000000000000000000fc2100000000000000000000000000003c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x406}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000800000000000000000ac1e0101000000000000000000000000e0000002000000000000000000000000fc2100000000000000000000000000003c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x406}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) (async) 5.730127516s ago: executing program 32 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000800000000000000000ac1e0101000000000000000000000000e0000002000000000000000000000000fc2100000000000000000000000000003c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x406}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000800000000000000000ac1e0101000000000000000000000000e0000002000000000000000000000000fc2100000000000000000000000000003c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x406}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) (async) 5.42517453s ago: executing program 0 (id=452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/45, 0x2d}], 0x1}, 0x22100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 4.612648506s ago: executing program 0 (id=470): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x40047705, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$sock_int(r5, 0x28, 0x2, 0x0, 0x0) r6 = syz_clone(0x2000000, &(0x7f0000000300)="9391b5cb04fcfbba9538dcb70cae552abe74c560630c7be17c5b7a1662d673281e9298c5827e3dff789df929e9f7d7fbe9b55272583854d684b556f447e667f28ca6b6211fd311edd1c15c8740020caaa8005edb3a4eda02a40bb19d85836fb7f3f6eee24c167beb543f5cdc2899670e647cd709d258101675194bfaaafb8aac8d91f3dcf0ef433c3647c2d2383a6a575b3182725d1f1c8d702535dadc8d9e8299c2ed106e56d5566d20355bc45d5061c7e5d13648875f26e5c99c80e20b10f3f4ece1fd2382e795bbcf84fd478c16703c919d9f0ee4c378d0bd3d04254b16532e642d22984115e764", 0xe9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)='k') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1000, 0x80, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r10, &(0x7f0000000480)=""/14, 0xd, 0x8000) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r11, 0x28, 0x2, &(0x7f0000000040), 0x8) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff8) r13 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r14 = socket$inet(0x2, 0x80000, 0x7f) sendmmsg$unix(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r9, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r10, r0, r0, r12, r13, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r14, r0, r0, r0, r0, r0, r0]}}], 0x110, 0x4008000}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.597002608s ago: executing program 0 (id=476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = getpid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}], 0x20, 0x20000010}}], 0x1, 0x0) (async) setfsgid(r3) (async) syz_clone(0x84100, &(0x7f0000000000)="78728d04f2c4e46439852f32810420dd524abaaae1c34e42c0996193ecf2e10738afb30bc509e53fa59235dc747b88da7ea19c119f670cccf18efb6b418f668351f7794e76a9e21c531ac2bd1f55ec4c5acd6cae0a99662f4e276e27f6ad1b1c9a8feaf61de68fc279c95d900587fecbbc7192eb8466885e1f7d4fd6c8e318216e0c8ce8b5c5474f051e784a0f758c35b1d6c9614fc83a36f9bfeed948275004f1fc10937329d4cbde9d5f752c0fe7f6e1373c0532184efae6c59cfd44f9fec40be228c9e9680a4073c290e8e3031cac4acbacf1dfb6b7408a2771a04c", 0xdd, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="574c5199cc188c6cdf64cc02") 3.494716796s ago: executing program 4 (id=480): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000100)={0x40, 0x3, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 3.435463751s ago: executing program 4 (id=481): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x1, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x5, 0x5, 0x8, 0x3, 0x7, "f281249f02631d97513aaa3f1f2fbca15f95a4", 0x1, 0x9}) r1 = socket(0xa, 0x800, 0x7) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/252, 0xfc}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/41, 0x29}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000640)}], 0x9, 0xfffffffe, 0x5) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000740)={0x1, 0x10, 0x5, 0x2}, 0x10) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) write$cgroup_pid(r0, &(0x7f00000007c0)=r2, 0x12) (async) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = accept4$tipc(r1, &(0x7f0000000bc0)=@id, &(0x7f0000000c00)=0x10, 0x800) (async) r6 = openat$cgroup(r0, &(0x7f0000000c40)='syz0\x00', 0x200002, 0x0) r7 = accept$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @empty}, &(0x7f0000000cc0)=0x10) r8 = socket$packet(0x11, 0x1, 0x300) (async) fstat(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() (async) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async) getresuid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)) statx(r0, &(0x7f0000001080)='./file0\x00', 0x400, 0x7ff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r16 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)={0xe0, 0x28, 0x300, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0xda, 0x0, 0x0, @u64=0x40bbcde4}, @generic="11178f62115faf7afabb4120b656bdd9e9baaea663fea4210cae0d5f0d3d48f4e057c98942a4d23d52cd6fc82e80eb5f4ece099df0e4d942347977acacdc721ee595d4a834ddac031e1bdf5a821b39de2f91c0649d11ddd24690ec0f30fd18b6487a04cbd62fbd17da723b54fcbfdee43f588a551a2304781a090f2de85fbb3c58e29c1da0cb1e984100e6ff07e1c058d309e5a3d607cdde95a5c41e6e296727a5be9ae07e3fd90b45d0b7d8", @typed={0x8, 0xfc, 0x0, 0x0, @uid=r3}, @nested={0x10, 0x7c, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @u32=0x68}, @nested={0x4, 0xd}]}]}, 0xe0}, {&(0x7f00000009c0)={0x18, 0x33, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x11f, 0x0, 0x0, @pid=r2}]}, 0x18}, {&(0x7f0000000a00)={0x114, 0x1f, 0x400, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x27, 0x0, 0x0, @ipv4=@empty}, @generic="de729b5980408a3b5fb49605c9eb68a94da1bebcb848ee328c0d0b7bbda7210106aa450bfdaaa61bac74b6c2fc258ae6b46175b3f17d0f850d8a33ccebc3d9d4aa1c475dc0fbda3aa1968a47349d73ee5b4a6bf701aae868ea03f543fecb946f4cc9", @generic="3e2cfb02039477aaa9eaead6c59afff2e54b9470280f62f043d82892d69c53d8b3231c66f62e6c", @typed={0x4, 0xde}, @typed={0x8, 0x151, 0x0, 0x0, @pid=r2}, @generic="4601935f221081c042e91addf3729184d0f2147eb8e55e1117ac864665d5383955574ef70e7edd286069572db6dff660a37bb832de0322150bd7168d10076e8cd3172bbb25f41696c7d702825cab34f4a4653cc8aafcad32b09af34df4f24183fa08fa3b45"]}, 0x114}, {&(0x7f0000000b40)={0x18, 0x31, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@empty}]}, 0x18}], 0x4, &(0x7f00000011c0)=[@rights={{0x28, 0x1, 0x1, [r4, r5, 0xffffffffffffffff, r1, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r6, r1, r0, r7, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r2, r14, r15}}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r0, r1, 0xffffffffffffffff, r0, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r16, r1, r1]}}], 0x130, 0x20008090}, 0x4054) (async) r17 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r17, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000013c0)=[@text16={0x10, &(0x7f0000001340)="baa000b8de9aef66b9800000c00f326635000800000f30b8bf008ee0b8e4000f00d8f08071fa00baf80c66b8508ea38a66efbafc0cec66b9e902000066b88e00000066ba000000000f306166d3090f20d86635080000000f22d8", 0x5a}], 0x1, 0x40, &(0x7f0000001400)=[@cr4={0x1, 0x108}, @cstype0={0x4, 0x7}], 0x2) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001480)={'pim6reg0\x00', &(0x7f0000001440)=@ethtool_rxfh={0x47, 0x80, 0x8, 0x68000000, 0xf, '/E)', 0x98e, [0xfffffffe, 0x7, 0x8, 0x1]}}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000014c0)) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001500)={0x8, 0x2, "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"}) (async) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000001640)) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001680)) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 3.416959883s ago: executing program 4 (id=482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(r5, &(0x7f0000000040)=@access={'system_u:object_r:gpg_agent_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x80000000}, 0x52) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) close_range(r0, 0xffffffffffffffff, 0x0) 3.277195374s ago: executing program 4 (id=483): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000014c059c4b0011e00010029bd7040fddbdf2506000000"], 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) close_range(r0, r6, 0x0) 3.132760026s ago: executing program 0 (id=484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0x604, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000a93000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffff7ffffffe) r6 = socket(0x1, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x90000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) epoll_pwait(r7, &(0x7f0000000040), 0x6, 0x6, 0x0, 0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x1000, 0xfffffffd}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x0) 3.132487286s ago: executing program 4 (id=485): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x220) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='cramfs\x00', 0x2200892, 0x0) 2.372255347s ago: executing program 4 (id=489): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x58, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendto$inet6(r1, 0x0, 0x0, 0x8080, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x30, r0, 0xfdf9b000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = eventfd2(0x1f920, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r8, 0x7, 0x2, r8}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x9, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0xfffffffffffffffe, 0x1000, 0xf1, 0x1000004, 0x7fffffffffffb, 0x3, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4310}) ioctl$KVM_RUN(r7, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xef, 0xbd, 0xcb, 0x40, 0x1a0a, 0x108, 0x617, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0xe5, 0xa6, 0x9d}}]}}]}}, 0x0) 721.213491ms ago: executing program 3 (id=501): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c007e80beefe72ceff19393588a7771f47690ea6f24a7226b60369ebeb6f5a524152378fdff129a299307"]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)=""/179, &(0x7f0000000200)=""/120, 0x80a0000}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r4, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="ed847850999f1d7a2b95046d253e2f71b50d072a4f03159f1c6873cb2160c4771618db7a96ec711a8d63a7773dca2512f1e1d48003b1e1ed87a12175507c694f", 0x40, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, r2, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000540)={0x0, 0x6f7, 0x8}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000940)={r7, 0x39, 0x4}) 720.832611ms ago: executing program 3 (id=502): clock_nanosleep(0xa, 0x1, 0x0, 0x0) mmap(&(0x7f0000256000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="180000001100010000000000020000f7070000000400e380"], 0x18}}, 0x0) madvise(&(0x7f0000578000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x40047705, 0x0) read$FUSE(r3, &(0x7f00000059c0)={0x2020}, 0xffffffffffffffc4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xffffffff}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x1, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) r5 = socket(0x2, 0x3, 0x100000001) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt(r5, 0x1000, 0xe5, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x212840, 0x1a8) 693.207253ms ago: executing program 3 (id=503): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xd5, 0x3a, '.^', 0x3a, '&]!/\xe7\xc0O\xef(\xef\xc6\x8bMq0\x9d', 0x3a, './cgroup', 0x3a, [0x46, 0x4f]}, 0x3c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) unshare(0x62040200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x20, 0x6, "8d068ad2c2d1"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) fallocate(r1, 0x2, 0x6, 0xcb) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a001511"], 0x14}], 0x1}, 0x4000080) close_range(r1, 0xffffffffffffffff, 0x0) 398.656397ms ago: executing program 3 (id=507): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000) bind$packet(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) getrandom(0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000202000/0x2000)=nil, 0x2000) 370.59582ms ago: executing program 3 (id=509): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 308.603935ms ago: executing program 1 (id=512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0xe81, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x804c090) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="0f01cb36260f6328b9eb0800000f32f30fa13e9465660f38815be6e6003000009d0066ba1b0cb8a56714a196009a8296009a820cec0f0d6ffd0701cf0f01c8", 0x3f}], 0x1, 0x58, &(0x7f0000000080)=[@cstype0={0x4, 0xe}], 0x1) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) shutdown(r9, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xc, 0x1000000000000, &(0x7f00000005c0)="cbe60100f646f195447c88eb"}) 282.079807ms ago: executing program 1 (id=513): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) (async) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0) r2 = eventfd2(0x6, 0x80800) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x300}, 0x4844) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000"], 0x48}, 0x300}, 0x8040) (async) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000"], 0x48}, 0x300}, 0x8040) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000240)="660fdaa100180000c421e5ddc50fc77d0548b800000000000000000f23c80f21f8350800f0000f23f866baf80cb8f49f778aef66bafc0cecc40379097c2d00000f01c8470f0666410f6ce566baf80cb894b7f585ef66bafc0cb800100000ef", 0x5f}], 0x1, 0x4, &(0x7f0000000580), 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, 0xffffffffffffffff, 0x45809000) syz_open_procfs(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 233.222011ms ago: executing program 3 (id=514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 186.987924ms ago: executing program 1 (id=515): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4607030009b09e00000000000003000300080000008f010000380000003f02000007000000100020000200070002000000000000000100000001000000f8ffffff7e0000000300000038000000070000000c0000000300000000000000000000010800000005"], 0x78) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 123.238699ms ago: executing program 1 (id=516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00fb15050d6e1994616a5da7db6135cec7ccf564d3890e4ad1f50f037c0ba1f4c3a743ced08de681b43dc3e620579968c14451bf27e1c47400e85f83c82bd01544a286fdc7f0eafcd75dc2b4a0f6988a2192b0b9f162143a5fcfc642f25d2c9d1773586bf9e0516be7dfef6413de246a827a89658449ba72e1eee1d71d2390ff6103afe5a8e2524baec7a59d9ee8b8f5eb3613bc1ff2f1ddf97c38ca62e92e921819"], 0x15, 0x0) unshare(0x62040200) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 72.422593ms ago: executing program 0 (id=517): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/231}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ftruncate(r1, 0x3d93) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/53, 0x35}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000440)=""/31, 0x1f}], 0x5, &(0x7f0000000500)=""/248, 0xf8}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r3) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r3) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x20000004) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x20c0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000900), 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000940)={0x3, 'ip6gretap0\x00', {0xec8e}, 0x2}) syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r3) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080800}, 0x4010) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="44dabf8bbbecb464d4e9dd47d82a77c8"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c02dce644aceaac6b3b837e914fe426a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4f8c3e5ea370833044dc817d6ae97bee"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d720fda96ffacf96fec3b89aca8bdec385b016c61d891a7b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ef674681549213f0f8a19195236aad41"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1270e24a564a60b1ff7980594989dc6d"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f76b040ce0bbc801bfa47a46f703ca494e381888202f9cb1"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004004}, 0x20008010) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000dc0)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r12, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c044}, 0x80) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_CAP_PTP_KVM(r13, 0x4068aea3, &(0x7f0000001100)) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001180), r11) 1.267149ms ago: executing program 1 (id=518): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000019000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600d, 0x4010, r0, 0x22e78000) 425.869µs ago: executing program 1 (id=519): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100283d7000fddbdf250c000000180004000300"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xd) 0s ago: executing program 0 (id=520): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0800, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f00005e3000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000100)={0x0, &(0x7f00000017c0)=[@wrmsr={0x1e, 0x20, {0x8c4, 0x8}}, @cpuid={0x14, 0x18, {0xf8}}, @cpuid={0x14, 0x18, {0x3, 0xb}}, @cpuid={0x14, 0x18, {0xa, 0x200}}, @cpuid={0x14, 0x18, {0x7, 0x3}}, @cpuid={0x14, 0x18, {0x5, 0xffff}}, @wrmsr={0x1e, 0x20, {0x3fd, 0x6}}, @wrmsr={0x1e, 0x20, {0xb94, 0x1}}, @cpuid={0x14, 0x18, {0x6a, 0x200}}, @wrmsr={0x1e, 0x20, {0xa3c, 0xb49}}, @uexit={0x0, 0x18, 0x40}, @wrmsr={0x1e, 0x20, {0x2b1, 0x4}}, @wr_crn={0x46, 0x20, {0x2, 0x8}}, @rdmsr={0x32, 0x18, {0xb00}}, @wr_crn={0x46, 0x20, {0x4, 0xb}}, @wrmsr={0x1e, 0x20, {0x8c0, 0x5}}, @cpuid={0x14, 0x18, {0xc6}}, @code={0xa, 0x58, {"66400f6dd026660f72f0006766420f38803f66b88f000f00d8c46181fae7c421956691177a8942b9900600000f32b8010000000f01c1c481a5147e290f20e035200000000f22e0"}}, @code={0xa, 0x68, {"44def348b800280000000000000f23d00f21f835200000050f23f8b805000000b9000000000f01c1f040f657bb9c67260f0fc1bbc4417855f4b9700a0000b800000000ba000000800f30c4a2e9914cea0066b81c018ee0"}}, @cpuid={0x14, 0x18, {0x9, 0xaf}}, @rdmsr={0x32, 0x18, {0x267}}, @wrmsr={0x1e, 0x20, {0x19, 0x9}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x14, 0x18, {0x0, 0x800}}, @wrmsr={0x1e, 0x20, {0x8a8, 0x1}}, @cpuid={0x14, 0x18, {0x3, 0x6}}, @rdmsr={0x32, 0x18, {0x8ec}}, @code={0xa, 0x70, {"2666400f3881ba75be2616b95e0b0000b80d000000ba000000000f30f36c66410fc770000f0015080000000f009caa00500000b8010000000f01d948b800009fc07c11321e0f23c80f21f8350c0080000f23f847fe46026542d8b600700000"}}], 0x3d8}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0x23a79bc69b39f48c, 0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x12, r0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000085b000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0xf4d55000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) write(r3, &(0x7f0000000400)="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", 0x1f000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 26.265933][ T36] audit: type=1400 audit(1756665181.540:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.268012][ T282] cgroup: Unknown subsys name 'net' [ 26.288644][ T36] audit: type=1400 audit(1756665181.540:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.315895][ T36] audit: type=1400 audit(1756665181.560:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.316166][ T282] cgroup: Unknown subsys name 'devices' [ 26.477300][ T282] cgroup: Unknown subsys name 'hugetlb' [ 26.483804][ T282] cgroup: Unknown subsys name 'rlimit' [ 26.637954][ T36] audit: type=1400 audit(1756665181.910:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.661243][ T36] audit: type=1400 audit(1756665181.910:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.672312][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.686204][ T36] audit: type=1400 audit(1756665181.910:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.717759][ T36] audit: type=1400 audit(1756665181.970:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.743349][ T36] audit: type=1400 audit(1756665181.970:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.777782][ T36] audit: type=1400 audit(1756665182.050:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.803347][ T36] audit: type=1400 audit(1756665182.050:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.803397][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.179005][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.186288][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.193361][ T289] bridge_slave_0: entered allmulticast mode [ 28.199959][ T289] bridge_slave_0: entered promiscuous mode [ 28.207460][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.214549][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.221706][ T289] bridge_slave_1: entered allmulticast mode [ 28.228036][ T289] bridge_slave_1: entered promiscuous mode [ 28.281339][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.288456][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.295556][ T292] bridge_slave_0: entered allmulticast mode [ 28.301804][ T292] bridge_slave_0: entered promiscuous mode [ 28.313341][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.320429][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.327559][ T291] bridge_slave_0: entered allmulticast mode [ 28.334201][ T291] bridge_slave_0: entered promiscuous mode [ 28.340484][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.347574][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.354720][ T292] bridge_slave_1: entered allmulticast mode [ 28.361042][ T292] bridge_slave_1: entered promiscuous mode [ 28.372953][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.380079][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.387261][ T291] bridge_slave_1: entered allmulticast mode [ 28.393539][ T291] bridge_slave_1: entered promiscuous mode [ 28.415098][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.422168][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.429288][ T290] bridge_slave_0: entered allmulticast mode [ 28.435557][ T290] bridge_slave_0: entered promiscuous mode [ 28.450737][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.457858][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.464950][ T290] bridge_slave_1: entered allmulticast mode [ 28.471168][ T290] bridge_slave_1: entered promiscuous mode [ 28.635164][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.642243][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.649592][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.656667][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.668775][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.676031][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.683304][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.690364][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.712049][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.719127][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.726423][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.733478][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.743772][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.750847][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.758165][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.765204][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.783045][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.790382][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.797969][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.805289][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.812559][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.820115][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.827630][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.835002][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.846731][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.853796][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.870743][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.877832][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.907333][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.914394][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.927028][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.934107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.961788][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.968983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.982333][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.989400][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.012102][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.019273][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.027348][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.034388][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.060676][ T289] veth0_vlan: entered promiscuous mode [ 29.086569][ T292] veth0_vlan: entered promiscuous mode [ 29.092984][ T291] veth0_vlan: entered promiscuous mode [ 29.115134][ T290] veth0_vlan: entered promiscuous mode [ 29.123871][ T292] veth1_macvtap: entered promiscuous mode [ 29.131995][ T289] veth1_macvtap: entered promiscuous mode [ 29.141182][ T291] veth1_macvtap: entered promiscuous mode [ 29.163451][ T290] veth1_macvtap: entered promiscuous mode [ 29.203097][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.270775][ T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.350676][ T349] binder: Bad value for 'defcontext' [ 29.361916][ T350] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6'. [ 29.483049][ T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 29.514920][ T363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 29.535204][ T364] binder: Bad value for 'stats' [ 29.536065][ T366] support for the xor transformation has been removed. [ 29.624607][ T378] rust_binder: 18: no such ref 1 [ 29.629651][ T378] rust_binder: inc_ref_done called when no active inc_refs [ 29.629674][ T378] rust_binder: 18: no such ref 0 [ 29.654593][ T378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 29.693350][ T383] bridge0: entered allmulticast mode [ 29.974575][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.124627][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 30.131204][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.139654][ T31] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 30.147933][ T31] usb 3-1: config 0 has no interface number 0 [ 30.154553][ T31] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 30.166038][ T31] usb 3-1: config 0 interface 88 has no altsetting 0 [ 30.175013][ T31] usb 3-1: string descriptor 0 read error: -22 [ 30.181277][ T31] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 30.190390][ T31] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 30.200121][ T31] usb 3-1: config 0 descriptor?? [ 30.206732][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input4 [ 30.301228][ T410] /dev/nullb0: Can't lookup blockdev [ 30.309956][ T410] rust_binder: Error while translating object. [ 30.310017][ T410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.316423][ T410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 30.403989][ T420] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 30.420221][ T388] TCP: TCP_TX_DELAY enabled [ 30.492658][ T421] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 30.512830][ T330] usb 3-1: USB disconnect, device number 2 [ 30.695013][ T329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.845847][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.856867][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.868258][ T329] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 30.877659][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.886000][ T329] usb 1-1: Product: syz [ 30.890182][ T329] usb 1-1: Manufacturer: syz [ 30.895160][ T329] usb 1-1: SerialNumber: syz [ 30.903126][ T329] usb 1-1: config 0 descriptor?? [ 30.909325][ T329] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 30.915796][ T329] usb 1-1: No valid video chain found. [ 31.013433][ T438] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.049879][ T440] binder: Unknown parameter 'defcontext01777777777777777777777' [ 31.073519][ T442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.073552][ T442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 31.081309][ T444] binder: Unknown parameter 'fscontext?}' [ 31.111237][ T408] rust_binder: Failed to allocate buffer. len:4192, is_oneway:true [ 31.111267][ T408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.129496][ T408] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 31.144646][ T408] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:26 [ 31.175248][ T329] usb 1-1: USB disconnect, device number 2 [ 31.444646][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.466492][ T64] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 31.614575][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 31.620774][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 31.630688][ T64] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 31.644552][ T64] usb 4-1: config 0 has no interface number 0 [ 31.652128][ T10] usb 3-1: config 0 has no interface number 0 [ 31.659730][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 31.669708][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.680625][ T64] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 31.691302][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.703982][ T459] rust_binder: 407: removing orphan mapping 0:24 [ 31.713040][ T64] usb 4-1: Product: syz [ 31.716925][ T473] rust_binder: 29: no such ref 1 [ 31.717572][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 31.735044][ T64] usb 4-1: Manufacturer: syz [ 31.739687][ T64] usb 4-1: SerialNumber: syz [ 31.744694][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.753478][ T64] usb 4-1: config 0 descriptor?? [ 31.760499][ T10] usb 3-1: Product: syz [ 31.765045][ T10] usb 3-1: Manufacturer: syz [ 31.770655][ T10] usb 3-1: SerialNumber: syz [ 31.780624][ T10] usb 3-1: config 0 descriptor?? [ 31.785896][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 31.785912][ T36] audit: type=1400 audit(1756665187.060:190): avc: denied { ioctl } for pid=474 comm="syz.1.46" path="socket:[4823]" dev="sockfs" ino=4823 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.800296][ T457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.824597][ T479] capability: warning: `syz.0.47' uses 32-bit capabilities (legacy support in use) [ 31.830221][ T36] audit: type=1400 audit(1756665187.070:191): avc: denied { write } for pid=478 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.837083][ T457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.861541][ T36] audit: type=1400 audit(1756665187.130:192): avc: denied { map } for pid=481 comm="syz.1.48" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.900246][ T485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.900476][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 31.931635][ T488] loop7: detected capacity change from 0 to 16384 [ 32.064583][ T457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.071927][ T457] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.097634][ T489] loop7: detected capacity change from 16384 to 16383 [ 32.116936][ T488] rust_binder: inc_ref_done called when no active inc_refs [ 32.158009][ T36] audit: type=1400 audit(1756665187.430:193): avc: denied { setattr } for pid=492 comm="syz.1.51" name="file0" dev="incremental-fs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.190314][ T36] audit: type=1400 audit(1756665187.430:194): avc: denied { unmount } for pid=492 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.230173][ T36] audit: type=1400 audit(1756665187.500:195): avc: denied { bind } for pid=496 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.233722][ T497] fuse: Bad value for 'fd' [ 32.249202][ T36] audit: type=1326 audit(1756665187.500:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=496 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d798ebe9 code=0x7ffc0000 [ 32.257347][ T497] fuseblk: Bad value for 'fd' [ 32.277029][ T36] audit: type=1326 audit(1756665187.500:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=496 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d798ebe9 code=0x7ffc0000 [ 32.305816][ T36] audit: type=1326 audit(1756665187.500:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=496 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d798ebe9 code=0x7ffc0000 [ 32.336580][ T36] audit: type=1326 audit(1756665187.500:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=496 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98d798ebe9 code=0x7ffc0000 [ 32.562845][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 32.573807][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 32.585971][ T10] asix 3-1:0.251: probe with driver asix failed with error -71 [ 32.595869][ T10] usb 3-1: USB disconnect, device number 3 [ 32.874623][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.024761][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 33.031464][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.040018][ T31] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 33.048179][ T31] usb 1-1: config 0 has no interface number 0 [ 33.054364][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 33.065390][ T31] usb 1-1: config 0 interface 88 has no altsetting 0 [ 33.074270][ T31] usb 1-1: string descriptor 0 read error: -22 [ 33.080589][ T31] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 33.089682][ T31] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 33.098603][ T31] usb 1-1: config 0 descriptor?? [ 33.105935][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 33.189988][ T510] cgroup2: Unknown parameter 'net_cls' [ 33.307902][ T31] usb 1-1: USB disconnect, device number 3 [ 33.384844][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.384877][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.392840][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.401421][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.410396][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.414088][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.419031][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.425920][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.432038][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.450527][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.450558][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.457167][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.463652][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.470203][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.476683][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.483228][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.489730][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.496253][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.502705][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.509732][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.516213][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.522707][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.529220][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.535718][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.542191][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.554657][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.561155][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.569292][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.575772][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.582250][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.588798][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.595359][ T531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.694572][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.854568][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 33.865346][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.884631][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.894456][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.903589][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.925767][ T10] usb 3-1: config 0 descriptor?? [ 33.976864][ T553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 34.137134][ T10] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 34.167338][ T10] usb 3-1: USB disconnect, device number 4 [ 34.182160][ T570] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.182185][ T570] rust_binder: Read failure Err(EFAULT) in pid:54 [ 34.194628][ T64] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.212044][ T64] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 34.222896][ T64] asix 4-1:0.251: probe with driver asix failed with error -5 [ 34.226217][ T570] Zero length message leads to an empty skb [ 34.232506][ T64] usb 4-1: USB disconnect, device number 2 [ 34.264579][ T491] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.416158][ T491] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 34.427071][ T491] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 34.436148][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.445022][ T491] usb 1-1: config 0 descriptor?? [ 34.452382][ T491] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 34.545096][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.603503][ T594] fuse: Unknown parameter 'fd70x0000000000000003' [ 34.616372][ T594] overlay: Unknown parameter 'pcr' [ 34.674547][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.914562][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.154560][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.284591][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.304971][ T601] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 35.312049][ T601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 35.396024][ T608] rust_binder: Write failure EFAULT in pid:63 [ 35.418593][ T610] netlink: 'syz.3.90': attribute type 27 has an invalid length. [ 35.442446][ T610] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.449750][ T610] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.481834][ T615] overlayfs: failed to clone upperpath [ 35.507010][ T617] __vm_enough_memory: pid: 617, comm: syz.3.92, bytes: 18014402804453376 not enough memory for the allocation [ 35.527571][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.622174][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.645041][ T10] usb usb3-port1: attempt power cycle [ 35.984555][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.005781][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.135720][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.374564][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.395690][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.525709][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.634650][ T10] usb usb3-port1: unable to enumerate USB device [ 36.962187][ T10] usb 1-1: USB disconnect, device number 4 [ 37.006953][ T627] netlink: 140 bytes leftover after parsing attributes in process `syz.0.95'. [ 37.078579][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 37.078599][ T36] audit: type=1400 audit(1756665192.350:276): avc: denied { setopt } for pid=629 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.078731][ T630] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 37.104108][ T630] rust_binder: Error while translating object. [ 37.116545][ T630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.122751][ T630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 37.198502][ T36] audit: type=1400 audit(1756665192.470:277): avc: denied { relabelfrom } for pid=637 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.227404][ T36] audit: type=1400 audit(1756665192.470:278): avc: denied { relabelto } for pid=637 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.292053][ T644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.524561][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.664572][ T624] Bluetooth: hci0: command 0x1003 tx timeout [ 37.664627][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.694588][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 37.701392][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.710203][ T10] usb 3-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 37.720313][ T10] usb 3-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.733506][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.742174][ T10] usb 3-1: string descriptor 0 read error: -22 [ 37.748464][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.757554][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.766658][ T643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.773983][ T643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.981612][ T643] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 37.992919][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 38.005311][ T10] usb 3-1: USB disconnect, device number 9 [ 38.011895][ T10] usblp0: removed [ 38.191690][ T36] audit: type=1400 audit(1756665193.460:279): avc: denied { ioctl } for pid=645 comm="syz.3.101" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.317364][ T36] audit: type=1400 audit(1756665193.590:280): avc: denied { append } for pid=656 comm="syz.3.104" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.510961][ T36] audit: type=1400 audit(1756665193.780:281): avc: denied { read write } for pid=662 comm="syz.2.106" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.536719][ T666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.548149][ T36] audit: type=1400 audit(1756665193.780:282): avc: denied { open } for pid=662 comm="syz.2.106" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.572840][ T666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.684147][ T36] audit: type=1400 audit(1756665193.950:283): avc: denied { create } for pid=677 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 38.713636][ T36] audit: type=1400 audit(1756665193.980:284): avc: denied { ioctl } for pid=677 comm="syz.2.111" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.741123][ T36] audit: type=1400 audit(1756665193.980:285): avc: denied { execmem } for pid=677 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.789969][ T31] kernel write not supported for file /syz1 (pid: 31 comm: kworker/1:0) [ 39.096889][ T657] 9pnet_fd: p9_fd_create_tcp (657): problem connecting socket to 127.0.0.1 [ 39.215630][ T705] netlink: 'syz.1.122': attribute type 15 has an invalid length. [ 39.615536][ T723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1693830343 (3387660686 ns) > initial count (170653184 ns). Using initial count to start timer. [ 39.973688][ T732] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 39.973720][ T732] rust_binder: Error while translating object. [ 39.982736][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.989081][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 40.110369][ T734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 40.202803][ T745] 9pnet_fd: Insufficient options for proto=fd [ 40.319814][ T760] rust_binder: Error while translating object. [ 40.319865][ T760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.335184][ T760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 40.692024][ T778] usb usb9: check_ctrlrecip: process 778 (syz.2.145) requesting ep 01 but needs 81 [ 40.710520][ T31] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 40.718047][ T778] usb usb9: usbfs: process 778 (syz.2.145) did not claim interface 0 before use [ 40.804202][ T786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.804229][ T786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:109 [ 40.864566][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 41.014573][ T31] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 41.174540][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 41.180094][ T31] usb usb1-port1: attempt power cycle [ 41.508674][ T816] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 41.517660][ T816] overlayfs: missing 'lowerdir' [ 41.534544][ T31] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 41.554942][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 41.694572][ T31] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 41.714923][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 41.720414][ T31] usb usb1-port1: unable to enumerate USB device [ 41.781094][ T822] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 41.790728][ T822] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 42.074626][ T491] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 42.204595][ T491] usb 3-1: device descriptor read/64, error -71 [ 42.430384][ T36] kauditd_printk_skb: 115 callbacks suppressed [ 42.430402][ T36] audit: type=1400 audit(1756665197.700:401): avc: denied { bind } for pid=840 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.456842][ T491] usb 3-1: device descriptor read/64, error -71 [ 42.463378][ T36] audit: type=1400 audit(1756665197.700:402): avc: denied { setopt } for pid=840 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.484685][ T36] audit: type=1400 audit(1756665197.730:403): avc: denied { getopt } for pid=845 comm="syz.1.167" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.492878][ T848] fuseblk: Bad value for 'user_id' [ 42.510621][ T848] fuseblk: Bad value for 'user_id' [ 42.539809][ T36] audit: type=1400 audit(1756665197.810:404): avc: denied { setopt } for pid=851 comm="syz.1.170" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.587147][ T36] audit: type=1400 audit(1756665197.860:405): avc: denied { ioctl } for pid=859 comm="syz.1.172" path="socket:[5836]" dev="sockfs" ino=5836 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.611579][ T36] audit: type=1400 audit(1756665197.880:406): avc: denied { mount } for pid=863 comm="syz.1.173" name="/" dev="ramfs" ino=5846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.694571][ T491] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 42.844564][ T491] usb 3-1: device descriptor read/64, error -71 [ 42.940271][ T36] audit: type=1400 audit(1756665198.210:407): avc: denied { write } for pid=890 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.974313][ T36] audit: type=1400 audit(1756665198.240:408): avc: denied { lock } for pid=892 comm="syz.1.184" path="socket:[6717]" dev="sockfs" ino=6717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 43.084582][ T491] usb 3-1: device descriptor read/64, error -71 [ 43.194653][ T491] usb usb3-port1: attempt power cycle [ 43.421115][ T901] batadv_slave_0: mtu less than device minimum [ 43.488535][ T36] audit: type=1400 audit(1756665198.760:409): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.499519][ T904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 43.535442][ T491] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 43.565573][ T491] usb 3-1: device descriptor read/8, error -71 [ 43.695563][ T491] usb 3-1: device descriptor read/8, error -71 [ 43.850856][ T915] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 43.859775][ T36] audit: type=1400 audit(1756665199.130:410): avc: denied { create } for pid=914 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.877346][ T917] netlink: 'syz.1.191': attribute type 4 has an invalid length. [ 43.895651][ T917] netlink: 'syz.1.191': attribute type 4 has an invalid length. [ 43.934551][ T491] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 43.955527][ T491] usb 3-1: device descriptor read/8, error -71 [ 44.095670][ T491] usb 3-1: device descriptor read/8, error -71 [ 44.135876][ T928] mmap: syz.1.194 (928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.214561][ T491] usb usb3-port1: unable to enumerate USB device [ 44.429983][ T942] cgroup: No subsys list or none specified [ 44.453214][ T944] netlink: 188 bytes leftover after parsing attributes in process `syz.0.201'. [ 44.667051][ T963] netlink: 'syz.0.207': attribute type 4 has an invalid length. [ 44.673295][ T964] /dev/rnullb0: Can't open blockdev [ 44.680960][ T963] netlink: 'syz.0.207': attribute type 4 has an invalid length. [ 44.705253][ T966] /dev/rnullb0: Can't open blockdev [ 44.898448][ T977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=977 comm=syz.0.212 [ 44.899638][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 44.952990][ T990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.962924][ T990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 45.330525][ T1030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.384073][ T1037] fuse: Bad value for 'user_id' [ 45.389252][ T1038] fuse: Bad value for 'user_id' [ 45.394315][ T1038] fuse: Bad value for 'user_id' [ 45.399588][ T1037] fuse: Bad value for 'user_id' [ 45.428624][ T1040] /dev/rnullb0: Can't open blockdev [ 45.485578][ T1047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 45.506827][ T1047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.506859][ T1047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:129 [ 45.551055][ T1047] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 45.570730][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.584596][ T1047] rust_binder: Error while translating object. [ 45.608208][ T1047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.615183][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.644674][ T1047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 45.655763][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.690180][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.699171][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 45.724703][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.724741][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.737111][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.747002][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.768844][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.805279][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.840977][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.860661][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.889568][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.895860][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.902108][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.908346][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.914586][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.920925][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.927203][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.928872][ T1067] fuse: Bad value for 'fd' [ 45.933407][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.944052][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.950280][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.958657][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.979487][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.986865][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 45.993386][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.000006][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.006641][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.013072][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.019517][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.036734][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.043159][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.049667][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.056068][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.062326][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.068768][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.081016][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.087600][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.094093][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.100777][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.119809][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.126578][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.133029][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.139542][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.145984][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.152608][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.159207][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.165583][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.171840][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.185905][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.193792][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.200282][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.206682][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.220865][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.234601][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.245508][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.251723][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.260507][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.274562][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.280788][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.282445][ T1099] usb usb8: usbfs: process 1099 (syz.3.250) did not claim interface 0 before use [ 46.310746][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.310780][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.344588][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.352683][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.365526][ T1058] rust_binder: Write failure EFAULT in pid:136 [ 46.388511][ T1103] incfs: Options parsing error. -22 [ 46.420602][ T1103] incfs: mount failed -22 [ 46.516156][ T1122] netlink: 'syz.1.258': attribute type 4 has an invalid length. [ 46.525039][ T1122] netlink: 'syz.1.258': attribute type 4 has an invalid length. [ 46.584584][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 46.734538][ T45] usb 4-1: device descriptor read/64, error -71 [ 46.915258][ T1150] rust_binder: 148: no such ref 2 [ 46.915751][ T1149] ======================================================= [ 46.915751][ T1149] WARNING: The mand mount option has been deprecated and [ 46.915751][ T1149] and is ignored by this kernel. Remove the mand [ 46.915751][ T1149] option from the mount to silence this warning. [ 46.915751][ T1149] ======================================================= [ 47.014555][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.194570][ T491] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.254659][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 47.355697][ T491] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 47.365980][ T491] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 47.375826][ T491] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.388742][ T491] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 47.394574][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.397835][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.416936][ T491] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 47.436624][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.634573][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.726577][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 47.726596][ T36] audit: type=1400 audit(1756665203.000:446): avc: denied { nlmsg_read } for pid=1155 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 47.747297][ T1158] overlayfs: failed to clone upperpath [ 47.753445][ T45] usb usb4-port1: attempt power cycle [ 47.792639][ T36] audit: type=1400 audit(1756665203.060:447): avc: denied { read } for pid=1164 comm="syz.2.273" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.816452][ T36] audit: type=1400 audit(1756665203.060:448): avc: denied { open } for pid=1164 comm="syz.2.273" path="/53/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.835432][ T1165] rust_binder: Write failure EFAULT in pid:157 [ 47.840990][ T36] audit: type=1400 audit(1756665203.090:449): avc: denied { ioctl } for pid=1164 comm="syz.2.273" path="/53/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.913671][ T36] audit: type=1400 audit(1756665203.180:450): avc: denied { append } for pid=1166 comm="syz.2.274" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.010566][ T36] audit: type=1400 audit(1756665203.280:451): avc: denied { setopt } for pid=1171 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.030117][ T36] audit: type=1400 audit(1756665203.280:452): avc: denied { bind } for pid=1171 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.124585][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 48.155673][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.302228][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.323068][ T36] audit: type=1400 audit(1756665203.590:453): avc: denied { getopt } for pid=1177 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.403091][ T1186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=1186 comm=syz.1.282 [ 48.447663][ T1193] overlayfs: failed to clone upperpath [ 48.522080][ T1201] 9pnet_fd: Insufficient options for proto=fd [ 48.544142][ T36] audit: type=1400 audit(1756665203.810:454): avc: denied { connect } for pid=1202 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.562274][ T1205] 9pnet_fd: Insufficient options for proto=fd [ 48.569987][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 48.584593][ T36] audit: type=1400 audit(1756665203.810:455): avc: denied { mount } for pid=1204 comm="syz.1.290" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.615734][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.745578][ T45] usb 4-1: device descriptor read/8, error -71 [ 48.854718][ T45] usb usb4-port1: unable to enumerate USB device [ 49.091354][ T1231] SELinux: ebitmap: truncated map [ 49.100897][ T1231] SELinux: failed to load policy [ 49.344580][ T491] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 49.495827][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 116, changing to 10 [ 49.507135][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25971, setting to 1024 [ 49.518462][ T491] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.531440][ T491] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.540525][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.549366][ T491] usb 3-1: config 0 descriptor?? [ 49.555056][ T1231] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 49.656041][ T1249] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 49.890552][ T459] usb 1-1: USB disconnect, device number 9 [ 49.966355][ T491] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 49.977658][ T491] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 49.995824][ T491] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.215699][ T1267] overlayfs: failed to clone upperpath [ 50.328424][ T45] usb 3-1: USB disconnect, device number 15 [ 50.631838][ T1294] netlink: 44 bytes leftover after parsing attributes in process `syz.3.319'. [ 50.804575][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.954545][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 50.963950][ T45] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 50.972503][ T45] usb 1-1: config 0 has no interface number 0 [ 50.979231][ T45] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 50.984454][ T1311] 9pnet_fd: Insufficient options for proto=fd [ 51.001475][ T45] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 51.013468][ T45] usb 1-1: config 0 interface 41 has no altsetting 0 [ 51.022298][ T45] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 51.031753][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.039921][ T45] usb 1-1: Product: syz [ 51.044093][ T45] usb 1-1: Manufacturer: syz [ 51.048889][ T45] usb 1-1: SerialNumber: syz [ 51.057206][ T45] usb 1-1: config 0 descriptor?? [ 51.061478][ T1313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.062186][ T1313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:169 [ 51.064417][ T1292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.072438][ T1313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 51.082961][ T1292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.106158][ T1317] netlink: 168 bytes leftover after parsing attributes in process `syz.3.326'. [ 51.109851][ T1313] rust_binder: Write failure EFAULT in pid:169 [ 51.201355][ T1319] overlay: ./file0 is not a directory [ 51.240822][ T1321] netlink: 'syz.3.329': attribute type 27 has an invalid length. [ 51.304894][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:177 [ 51.308583][ T1292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.326795][ T1292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.359684][ T1336] vcan0: entered allmulticast mode [ 51.937004][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 52.153013][ T1376] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 52.160554][ T1376] rust_binder: Write failure EINVAL in pid:181 [ 52.617715][ T1391] rust_binder: Write failure EFAULT in pid:213 [ 52.638381][ T1393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:215 [ 52.644904][ T1393] binder: Bad value for 'stats' [ 52.782442][ T1402] /dev/rnullb0: Can't open blockdev [ 52.811000][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 52.811020][ T36] audit: type=1400 audit(1756665208.080:475): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 52.903524][ T36] audit: type=1400 audit(1756665208.170:476): avc: denied { create } for pid=1291 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.989176][ T1416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 53.013564][ T1419] usb usb8: usbfs: process 1419 (syz.2.364) did not claim interface 0 before use [ 53.082867][ T36] audit: type=1400 audit(1756665208.350:477): avc: denied { read write } for pid=1420 comm="syz.2.365" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.158435][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 53.179683][ T36] audit: type=1400 audit(1756665208.350:478): avc: denied { open } for pid=1420 comm="syz.2.365" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.203499][ T31] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.222214][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 53.242823][ T31] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.254591][ T45] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 53.282249][ T45] usb 1-1: USB disconnect, device number 10 [ 53.483295][ T1433] cgroup2: Unknown parameter 'net_cls' [ 53.550974][ T36] audit: type=1400 audit(1756665208.820:479): avc: denied { setopt } for pid=1439 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.661990][ T1447] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 53.662018][ T1447] rust_binder: Error while translating object. [ 53.673935][ T1447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.704112][ T1447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 53.725578][ T1451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.755912][ T1459] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 53.784622][ T1459] rust_binder: Write failure EINVAL in pid:224 [ 53.810544][ T36] audit: type=1400 audit(1756665209.080:480): avc: denied { mount } for pid=1467 comm="syz.3.379" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 53.825212][ T1469] capability: warning: `syz.1.378' uses deprecated v2 capabilities in a way that may be insecure [ 53.885307][ T1477] rust_binder: Write failure EFAULT in pid:215 [ 53.905708][ T1481] fuse: Bad value for 'fd' [ 53.981561][ T36] audit: type=1400 audit(1756665209.250:481): avc: denied { execute } for pid=1482 comm="syz.2.385" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.994890][ T1485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.004969][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 54.004985][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 54.043577][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.052887][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.060065][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.066638][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.073189][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.074560][ T1366] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 54.080121][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.093693][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.100650][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.107396][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.113830][ T1491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.120972][ T1489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.141950][ T1494] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 54.174560][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 54.179787][ T36] audit: type=1400 audit(1756665209.450:482): avc: denied { validate_trans } for pid=1495 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.201769][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.213102][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.223307][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 54.232606][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.240722][ T1366] usb 4-1: Using ep0 maxpacket: 32 [ 54.247430][ T1366] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.258412][ T31] usb 1-1: config 0 descriptor?? [ 54.263842][ T1366] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.275960][ T1366] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 54.285336][ T1366] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 54.293736][ T1366] usb 4-1: Product: syz [ 54.298286][ T1366] usb 4-1: Manufacturer: syz [ 54.305764][ T1366] hub 4-1:4.0: USB hub found [ 54.469420][ T31] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 54.498704][ T31] usb 1-1: USB disconnect, device number 11 [ 54.505530][ T1509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.505561][ T1509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 54.515099][ T1366] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 54.559991][ T36] audit: type=1400 audit(1756665209.830:483): avc: denied { setopt } for pid=1510 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.602540][ T36] audit: type=1400 audit(1756665209.870:484): avc: denied { write } for pid=1512 comm="syz.0.395" name="file0" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.717725][ T1468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:226 [ 54.834637][ T31] usb 4-1: USB disconnect, device number 7 [ 55.280957][ T1523] syz.1.399 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.403903][ T1540] fuse: Unknown parameter 'p LջNR'UB^'JFG@F718446744073709551615' [ 55.404556][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.560006][ T1553] rust_binder: 176: no such ref 3 [ 55.564624][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 55.575193][ T1553] serio: Serial port ptm1 [ 55.575637][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 55.614874][ T10] usb 3-1: config 0 has no interface number 0 [ 55.621025][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 55.642226][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 55.654174][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 55.663346][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.671618][ T10] usb 3-1: Product: syz [ 55.675885][ T10] usb 3-1: Manufacturer: syz [ 55.680518][ T10] usb 3-1: SerialNumber: syz [ 55.689832][ T10] usb 3-1: config 0 descriptor?? [ 55.695153][ T1519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.702703][ T1519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.873486][ T1569] tipc: Enabling of bearer rejected, failed to enable media [ 55.881969][ T459] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.910462][ T1519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.917738][ T1519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.925876][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 55.936054][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 55.945994][ T10] asix 3-1:0.251: probe with driver asix failed with error -5 [ 56.032344][ T1366] usb 3-1: USB disconnect, device number 16 [ 56.034626][ T459] usb 4-1: Using ep0 maxpacket: 16 [ 56.065092][ T459] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.073840][ T459] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.086423][ T459] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.105923][ T459] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.115095][ T459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.123114][ T459] usb 4-1: Product: syz [ 56.127378][ T459] usb 4-1: Manufacturer: syz [ 56.132004][ T459] usb 4-1: SerialNumber: syz [ 56.184629][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 56.354544][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 56.363446][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.374295][ T31] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 56.382874][ T31] usb 1-1: config 0 has no interface number 0 [ 56.392683][ T31] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 56.423682][ T31] usb 1-1: config 0 interface 88 has no altsetting 0 [ 56.435538][ T31] usb 1-1: string descriptor 0 read error: -22 [ 56.441805][ T31] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 56.451864][ T31] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 56.471494][ T31] usb 1-1: config 0 descriptor?? [ 56.483335][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input8 [ 56.507294][ T1583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 56.557620][ T459] usb 4-1: 0:2 : does not exist [ 56.577009][ T459] usb 4-1: USB disconnect, device number 8 [ 56.592691][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.686790][ T31] usb 1-1: USB disconnect, device number 12 [ 57.129708][ T1586] syz.2.419: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 57.144575][ T1586] CPU: 1 UID: 0 PID: 1586 Comm: syz.2.419 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 57.144612][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.144636][ T1586] Call Trace: [ 57.144645][ T1586] [ 57.144656][ T1586] __dump_stack+0x21/0x30 [ 57.144704][ T1586] dump_stack_lvl+0x10c/0x190 [ 57.144739][ T1586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.144774][ T1586] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.144811][ T1586] dump_stack+0x19/0x20 [ 57.144843][ T1586] warn_alloc+0x1bc/0x2a0 [ 57.144874][ T1586] ? stack_depot_save_flags+0x38/0x800 [ 57.144901][ T1586] ? __cfi_warn_alloc+0x10/0x10 [ 57.144932][ T1586] ? kasan_save_track+0x4f/0x80 [ 57.144957][ T1586] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 57.144995][ T1586] ? xskq_create+0x68/0x2a0 [ 57.145017][ T1586] ? xsk_init_queue+0xb6/0x120 [ 57.145053][ T1586] ? xsk_setsockopt+0x43f/0x6f0 [ 57.145089][ T1586] ? do_sock_setsockopt+0x26d/0x400 [ 57.145127][ T1586] ? __x64_sys_setsockopt+0x1b8/0x250 [ 57.145164][ T1586] ? x64_sys_call+0x2adc/0x2ee0 [ 57.145201][ T1586] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.145229][ T1586] __vmalloc_node_range_noprof+0x135/0x1420 [ 57.145279][ T1586] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 57.145316][ T1586] ? avc_has_perm+0x144/0x220 [ 57.145350][ T1586] ? kasan_save_alloc_info+0x40/0x50 [ 57.145384][ T1586] ? __kasan_kmalloc+0x96/0xb0 [ 57.145412][ T1586] vmalloc_user_noprof+0x77/0x90 [ 57.145446][ T1586] ? xskq_create+0xdb/0x2a0 [ 57.145468][ T1586] xskq_create+0xdb/0x2a0 [ 57.145492][ T1586] xsk_init_queue+0xb6/0x120 [ 57.145531][ T1586] xsk_setsockopt+0x43f/0x6f0 [ 57.145568][ T1586] ? __cfi_xsk_setsockopt+0x10/0x10 [ 57.145604][ T1586] ? do_futex+0x309/0x500 [ 57.145630][ T1586] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 57.145662][ T1586] ? security_socket_setsockopt+0x33/0xd0 [ 57.145687][ T1586] ? __cfi_xsk_setsockopt+0x10/0x10 [ 57.145723][ T1586] do_sock_setsockopt+0x26d/0x400 [ 57.145762][ T1586] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 57.145803][ T1586] __x64_sys_setsockopt+0x1b8/0x250 [ 57.145851][ T1586] x64_sys_call+0x2adc/0x2ee0 [ 57.145888][ T1586] do_syscall_64+0x58/0xf0 [ 57.145921][ T1586] ? clear_bhb_loop+0x50/0xa0 [ 57.145950][ T1586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.145976][ T1586] RIP: 0033:0x7f3e82b8ebe9 [ 57.146005][ T1586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.146028][ T1586] RSP: 002b:00007f3e83973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.146055][ T1586] RAX: ffffffffffffffda RBX: 00007f3e82dc5fa0 RCX: 00007f3e82b8ebe9 [ 57.146075][ T1586] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 57.146091][ T1586] RBP: 00007f3e82c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 57.146108][ T1586] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.146125][ T1586] R13: 00007f3e82dc6038 R14: 00007f3e82dc5fa0 R15: 00007ffda2b95ee8 [ 57.146147][ T1586] [ 57.146161][ T1586] Mem-Info: [ 57.451604][ T1586] active_anon:11886 inactive_anon:0 isolated_anon:0 [ 57.451604][ T1586] active_file:15572 inactive_file:2528 isolated_file:0 [ 57.451604][ T1586] unevictable:0 dirty:41 writeback:0 [ 57.451604][ T1586] slab_reclaimable:7403 slab_unreclaimable:69768 [ 57.451604][ T1586] mapped:27576 shmem:5181 pagetables:904 [ 57.451604][ T1586] sec_pagetables:0 bounce:0 [ 57.451604][ T1586] kernel_misc_reclaimable:0 [ 57.451604][ T1586] free:1510686 free_pcp:16633 free_cma:0 [ 57.521725][ T1586] Node 0 active_anon:47668kB inactive_anon:0kB active_file:62288kB inactive_file:10112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110336kB dirty:180kB writeback:0kB shmem:20724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5596kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no [ 57.554638][ T1586] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965960kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:5680kB free_cma:0kB [ 57.584998][ T1586] lowmem_reserve[]: 0 3921 3921 [ 57.589973][ T1586] Normal free:3130660kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47668kB inactive_anon:0kB active_file:62288kB inactive_file:10112kB unevictable:0kB writepending:180kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:14148kB local_pcp:11232kB free_cma:0kB [ 57.621641][ T1586] lowmem_reserve[]: 0 0 0 [ 57.626290][ T1586] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 57.642060][ T1586] Normal: 1945*4kB (UME) 1606*8kB (UME) 1131*16kB (UM) 591*32kB (UME) 643*64kB (UME) 56*128kB (UME) 33*256kB (UME) 20*512kB (UME) 6*1024kB (ME) 6*2048kB (ME) 730*4096kB (ME) = 3133156kB [ 57.660617][ T1586] 23277 total pagecache pages [ 57.665397][ T1586] 0 pages in swap cache [ 57.669618][ T1586] Free swap = 124712kB [ 57.673887][ T1586] Total swap = 124996kB [ 57.678826][ T1586] 2097051 pages RAM [ 57.682661][ T1586] 0 pages HighMem/MovableOnly [ 57.687421][ T1586] 351531 pages reserved [ 57.691661][ T1586] 0 pages cma reserved [ 57.697900][ T1586] Memory allocations: [ 57.701889][ T1586] 0 B 0 init/main.c:1370 func:do_initcalls [ 57.709154][ T1586] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 57.717321][ T1586] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 57.725098][ T1586] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 57.733034][ T1586] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 57.741011][ T1586] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 57.749843][ T1586] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 57.757790][ T1586] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 57.765733][ T1586] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 57.773648][ T1586] 0 B 0 init/initramfs.c:101 func:find_link [ 57.874552][ T459] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 57.972253][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 57.972273][ T36] audit: type=1400 audit(1756665213.240:502): avc: denied { remount } for pid=1604 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.013692][ T36] audit: type=1400 audit(1756665213.280:503): avc: denied { attach_queue } for pid=1608 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.014486][ T1609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 58.033631][ T1609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:253 [ 58.049547][ T1609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.049686][ T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.075190][ T1611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 58.075222][ T1611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:253 [ 58.086722][ T459] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 58.105021][ T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.114182][ T459] usb 4-1: config 0 descriptor?? [ 58.206140][ T36] audit: type=1400 audit(1756665213.480:504): avc: denied { getopt } for pid=1628 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.404994][ T36] audit: type=1400 audit(1756665213.680:505): avc: denied { name_bind } for pid=1636 comm="syz.1.436" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.448939][ T36] audit: type=1400 audit(1756665213.680:506): avc: denied { node_bind } for pid=1636 comm="syz.1.436" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.873968][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 58.880812][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 58.887485][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.894823][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 58.901525][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 58.907948][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.915040][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 58.921782][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 58.928179][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.935394][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 58.942012][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 58.948394][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.955593][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 58.962217][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 58.968590][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.975743][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 58.982352][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 58.988820][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.995876][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.002494][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.008902][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.016089][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.022727][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.029121][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.036294][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.042969][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.049544][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.055656][ T36] audit: type=1400 audit(1756665214.320:507): avc: denied { mount } for pid=1665 comm="syz.2.445" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.078786][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.085672][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.092200][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.099504][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.107135][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.113506][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.120650][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.127303][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.134552][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.141791][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.142405][ T36] audit: type=1400 audit(1756665214.410:508): avc: denied { mounton } for pid=1665 comm="syz.2.445" path="/90/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 59.148906][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.179118][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.186401][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.193054][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.199699][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.207444][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.214216][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.221026][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.228635][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.241645][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.250751][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.251700][ T1666] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 59.257560][ T1666] rust_binder: Error while translating object. [ 59.258401][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.270093][ T1666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.276026][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.282866][ T1666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 59.292154][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.323933][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.330678][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.337141][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.344241][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.350935][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.357364][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.364444][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.371121][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.377495][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.384705][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.392488][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.398887][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.405965][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.412575][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.418937][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.426062][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.432679][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.439055][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.446231][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.452877][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.459289][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.467621][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.474348][ T36] audit: type=1400 audit(1756665214.740:509): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 59.494258][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.500889][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.508667][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.515362][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.521740][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.528998][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.535712][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.542203][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.549348][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.555978][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.562448][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.569709][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.576348][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.582700][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.589935][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.596588][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.602946][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.610170][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.616821][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.623176][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.630382][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.637036][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.643407][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.650627][ T1664] exFAT-fs (rnullb0): invalid boot record signature [ 59.657326][ T1664] exFAT-fs (rnullb0): failed to read boot sector [ 59.663695][ T1664] exFAT-fs (rnullb0): failed to recognize exfat type [ 59.724824][ T36] audit: type=1400 audit(1756665215.000:510): avc: denied { mounton } for pid=1675 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 59.784117][ T1675] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.791238][ T1675] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.798425][ T1675] bridge_slave_0: entered allmulticast mode [ 59.804825][ T1675] bridge_slave_0: entered promiscuous mode [ 59.811324][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.818438][ T1675] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.825590][ T1675] bridge_slave_1: entered allmulticast mode [ 59.832105][ T1675] bridge_slave_1: entered promiscuous mode [ 59.935616][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.942702][ T1675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.950014][ T1675] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.957086][ T1675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.980668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.988086][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.998231][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.005313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.016501][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.023604][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.061952][ T1675] veth0_vlan: entered promiscuous mode [ 60.078173][ T1675] veth1_macvtap: entered promiscuous mode [ 60.107086][ T36] audit: type=1400 audit(1756665215.380:511): avc: denied { mounton } for pid=1675 comm="syz-executor" path="/root/syzkaller.sEdNNN/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.147448][ T1705] fuse: Bad value for 'fd' [ 60.305247][ T1721] overlayfs: failed to clone upperpath [ 60.315338][ T1724] overlayfs: failed to clone upperpath [ 60.414712][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.565680][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.575489][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.585394][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.599777][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 60.608999][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 60.617902][ T10] usb 5-1: Product: syz [ 60.622112][ T10] usb 5-1: Manufacturer: syz [ 60.626783][ T10] usb 5-1: SerialNumber: syz [ 60.643297][ T459] usbhid 4-1:0.0: can't add hid device: -71 [ 60.651465][ T459] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 60.665887][ T459] usb 4-1: USB disconnect, device number 9 [ 60.865746][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.954567][ T459] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 61.115685][ T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.149551][ T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.193376][ T459] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 61.220809][ T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.250557][ T459] usb 4-1: config 0 descriptor?? [ 61.733434][ T459] usbhid 4-1:0.0: can't add hid device: -71 [ 61.751253][ T459] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 61.797059][ T459] usb 4-1: USB disconnect, device number 10 [ 61.891232][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.905346][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.264451][ T1801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.274109][ T1801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.385299][ T1807] 9pnet_fd: Insufficient options for proto=fd [ 62.524580][ T583] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 62.544544][ T1366] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 62.675810][ T583] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.685587][ T583] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.694569][ T1366] usb 4-1: Using ep0 maxpacket: 8 [ 62.695261][ T583] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.701948][ T1366] usb 4-1: config 1 has an invalid interface number: 68 but max is 2 [ 62.715335][ T583] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 62.721286][ T1366] usb 4-1: config 1 has an invalid interface number: 38 but max is 2 [ 62.730703][ T583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 62.738403][ T1366] usb 4-1: config 1 has an invalid interface number: 246 but max is 2 [ 62.746926][ T583] usb 1-1: Product: syz [ 62.754734][ T1366] usb 4-1: config 1 has no interface number 0 [ 62.759248][ T583] usb 1-1: Manufacturer: syz [ 62.764979][ T1366] usb 4-1: config 1 has no interface number 1 [ 62.769937][ T583] usb 1-1: SerialNumber: syz [ 62.775648][ T1366] usb 4-1: config 1 has no interface number 2 [ 62.786730][ T1366] usb 4-1: config 1 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 62.797623][ T1366] usb 4-1: config 1 interface 38 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 62.808482][ T1366] usb 4-1: config 1 interface 38 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 62.819343][ T1366] usb 4-1: config 1 interface 38 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 62.830276][ T1366] usb 4-1: config 1 interface 38 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 62.840923][ T1366] usb 4-1: config 1 interface 38 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 62.851849][ T1366] usb 4-1: config 1 interface 38 altsetting 6 bulk endpoint 0xF has invalid maxpacket 16 [ 62.861729][ T1366] usb 4-1: config 1 interface 38 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 62.872701][ T1366] usb 4-1: config 1 interface 38 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 62.885911][ T1366] usb 4-1: config 1 interface 246 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 62.896930][ T1366] usb 4-1: config 1 interface 246 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 62.907681][ T1366] usb 4-1: config 1 interface 68 has no altsetting 0 [ 62.914392][ T1366] usb 4-1: config 1 interface 38 has no altsetting 0 [ 62.921145][ T1366] usb 4-1: config 1 interface 246 has no altsetting 0 [ 62.929516][ T1366] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=aa.4e [ 62.938639][ T1366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.946876][ T1366] usb 4-1: Product: 綍෢钍㝉⃫㽓잌渷庬卻 [ 62.954056][ T1366] usb 4-1: Manufacturer: з [ 62.958621][ T1366] usb 4-1: SerialNumber: syz [ 62.988144][ T583] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 63.137686][ T1815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.146866][ T1815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.175095][ T1366] usb 4-1: USB disconnect, device number 11 [ 63.278398][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 63.278418][ T36] audit: type=1400 audit(1756665218.550:523): avc: denied { connect } for pid=1821 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.304874][ T36] audit: type=1400 audit(1756665218.570:524): avc: denied { shutdown } for pid=1821 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.324787][ T36] audit: type=1400 audit(1756665218.580:525): avc: denied { bind } for pid=1821 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.341125][ T1820] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 63.399433][ T36] audit: type=1400 audit(1756665218.670:526): avc: denied { map } for pid=1821 comm="syz.1.491" path="socket:[10777]" dev="sockfs" ino=10777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.430725][ T36] audit: type=1400 audit(1756665218.670:527): avc: denied { read } for pid=1821 comm="syz.1.491" path="socket:[10777]" dev="sockfs" ino=10777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.503293][ T1825] overlayfs: failed to clone upperpath [ 63.755425][ T36] audit: type=1326 audit(1756665219.020:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1840 comm="syz.3.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04e558ebe9 code=0x0 [ 63.806920][ T1842] syz.3.497 uses obsolete (PF_INET,SOCK_PACKET) [ 64.692941][ T1855] binfmt_misc: register: failed to install interpreter file ./cgroup [ 65.024717][ T1874] exFAT-fs (rnullb0): invalid boot record signature [ 65.031435][ T1874] exFAT-fs (rnullb0): failed to read boot sector [ 65.045593][ T1878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.511'. [ 65.045651][ T1874] exFAT-fs (rnullb0): failed to recognize exfat type [ 65.062529][ T1875] exFAT-fs (rnullb0): invalid boot record signature [ 65.073529][ T1875] exFAT-fs (rnullb0): failed to read boot sector [ 65.080268][ T1875] exFAT-fs (rnullb0): failed to recognize exfat type [ 65.104685][ T1882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 65.122508][ T1883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 65.200265][ T36] audit: type=1400 audit(1756665220.470:529): avc: denied { execute } for pid=1889 comm="syz.1.515" name="file0" dev="ramfs" ino=11462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 65.200287][ T1890] process 'syz.1.515' launched './file0' with NULL argv: empty string added [ 65.231000][ T36] audit: type=1400 audit(1756665220.470:530): avc: denied { execute_no_trans } for pid=1889 comm="syz.1.515" path="/file0" dev="ramfs" ino=11462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 65.269781][ T1366] usb 1-1: USB disconnect, device number 13 [ 65.277031][ T1366] usblp1: removed [ 65.321510][ T36] audit: type=1400 audit(1756665220.590:531): avc: denied { read } for pid=1893 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.354795][ T36] audit: type=1400 audit(1756665220.620:532): avc: denied { map } for pid=1902 comm="syz.0.520" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 65.356286][ T1903] BUG: unable to handle page fault for address: fffffffffffffff1 [ 65.385448][ T1903] #PF: supervisor read access in kernel mode [ 65.391458][ T1903] #PF: error_code(0x0000) - not-present page [ 65.397527][ T1903] PGD 72ac067 P4D 72ac067 PUD 72ae067 PMD 0 [ 65.403540][ T1903] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 65.409620][ T1903] CPU: 0 UID: 0 PID: 1903 Comm: syz.0.520 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 65.421078][ T1903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.431144][ T1903] RIP: 0010:read_pages+0x47e/0x670 [ 65.436266][ T1903] Code: 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 a2 c9 1c 00 49 8b 3c 24 48 89 de 4d 89 f3 41 ba f6 ac 86 0c <45> 03 53 f1 74 02 0f 0b 41 ff d3 0f 1f 00 4c 89 e7 e8 2c 36 00 00 [ 65.455884][ T1903] RSP: 0018:ffffc9000e79f140 EFLAGS: 00010246 [ 65.461965][ T1903] RAX: dffffc0000000000 RBX: ffffea0004925800 RCX: 1ffffffff0c2c649 [ 65.469944][ T1903] RDX: ffffc90001651000 RSI: ffffea0004925800 RDI: ffff88812d8e8000 [ 65.477974][ T1903] RBP: ffffc9000e79f270 R08: ffffea0004925837 R09: 1ffffd4000924b06 [ 65.485954][ T1903] R10: 000000000c86acf6 R11: 0000000000000000 R12: ffffc9000e79f5d0 [ 65.493929][ T1903] R13: 1ffff92001cf3eba R14: 0000000000000000 R15: ffffffff86163248 [ 65.501908][ T1903] FS: 00007fc35ba246c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.510841][ T1903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.517433][ T1903] CR2: fffffffffffffff1 CR3: 000000012edaa000 CR4: 00000000003526b0 [ 65.525422][ T1903] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.533398][ T1903] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 65.541371][ T1903] Call Trace: [ 65.544648][ T1903] [ 65.547586][ T1903] ? page_cache_ra_unbounded+0x960/0x960 [ 65.553229][ T1903] ? folio_add_lru+0xc8/0x170 [ 65.557919][ T1903] ? filemap_add_folio+0x14d/0x2d0 [ 65.563038][ T1903] page_cache_ra_order+0x8cd/0xdf0 [ 65.568156][ T1903] ? __cfi_page_cache_ra_order+0x10/0x10 [ 65.573817][ T1903] page_cache_sync_ra+0x713/0x920 [ 65.578862][ T1903] hpage_collapse_scan_file+0xbab/0x3510 [ 65.584514][ T1903] ? wait_for_completion+0x40/0x40 [ 65.589649][ T1903] ? hugepage_vma_revalidate+0x480/0x480 [ 65.597634][ T1903] ? __virt_addr_valid+0xc5/0x380 [ 65.602695][ T1903] ? kasan_addr_to_slab+0x11/0x80 [ 65.607728][ T1903] ? __kasan_check_write+0x18/0x20 [ 65.612856][ T1903] ? mutex_unlock+0x8b/0x240 [ 65.617450][ T1903] ? __kasan_check_write+0x18/0x20 [ 65.622578][ T1903] madvise_collapse+0x4c6/0xaf0 [ 65.627458][ T1903] madvise_vma_behavior+0x69d/0x2d40 [ 65.632759][ T1903] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 65.638501][ T1903] ? check_preempt_wakeup_fair+0x694/0xae0 [ 65.644340][ T1903] ? preempt_schedule_common+0x2d/0x60 [ 65.649814][ T1903] ? preempt_schedule+0xb0/0xd0 [ 65.654677][ T1903] ? __cfi_preempt_schedule+0x10/0x10 [ 65.660068][ T1903] ? activate_task+0x38b/0x3d0 [ 65.664860][ T1903] ? mtree_range_walk+0x573/0x730 [ 65.669903][ T1903] ? mas_prev_slot+0xab4/0xb60 [ 65.674685][ T1903] ? mas_prev+0x5f/0xa0 [ 65.678871][ T1903] ? find_vma_prev+0xfd/0x170 [ 65.683584][ T1903] ? __cfi_find_vma_prev+0x10/0x10 [ 65.688714][ T1903] ? __kasan_check_write+0x18/0x20 [ 65.693845][ T1903] ? rwsem_read_trylock+0x2b1/0x660 [ 65.699076][ T1903] ? downgrade_write+0x440/0x440 [ 65.704023][ T1903] madvise_walk_vmas+0x1b1/0x2e0 [ 65.708972][ T1903] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 65.714707][ T1903] ? madvise_set_anon_name+0x610/0x610 [ 65.720199][ T1903] ? __asan_memset+0x39/0x50 [ 65.724816][ T1903] ? blk_start_plug+0x72/0x1c0 [ 65.729598][ T1903] do_madvise+0x4b7/0x960 [ 65.733949][ T1903] ? __cfi_do_madvise+0x10/0x10 [ 65.738818][ T1903] ? __kasan_check_write+0x18/0x20 [ 65.743946][ T1903] ? fpregs_restore_userregs+0x11d/0x260 [ 65.749590][ T1903] __x64_sys_madvise+0xae/0xc0 [ 65.754370][ T1903] x64_sys_call+0x20c3/0x2ee0 [ 65.759066][ T1903] do_syscall_64+0x58/0xf0 [ 65.763493][ T1903] ? clear_bhb_loop+0x50/0xa0 [ 65.768186][ T1903] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.774088][ T1903] RIP: 0033:0x7fc35ab8ebe9 [ 65.778505][ T1903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.798120][ T1903] RSP: 002b:00007fc35ba24038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 65.806544][ T1903] RAX: ffffffffffffffda RBX: 00007fc35adc5fa0 RCX: 00007fc35ab8ebe9 [ 65.814532][ T1903] RDX: 0000000000000019 RSI: 0000000000400000 RDI: 0000200000000000 [ 65.822508][ T1903] RBP: 00007fc35ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 65.830504][ T1903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.838490][ T1903] R13: 00007fc35adc6038 R14: 00007fc35adc5fa0 R15: 00007ffe946f5ea8 [ 65.846506][ T1903] [ 65.849551][ T1903] Modules linked in: [ 65.853485][ T1903] CR2: fffffffffffffff1 [ 65.857642][ T1903] ---[ end trace 0000000000000000 ]--- [ 65.863096][ T1903] RIP: 0010:read_pages+0x47e/0x670 [ 65.868216][ T1903] Code: 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 a2 c9 1c 00 49 8b 3c 24 48 89 de 4d 89 f3 41 ba f6 ac 86 0c <45> 03 53 f1 74 02 0f 0b 41 ff d3 0f 1f 00 4c 89 e7 e8 2c 36 00 00 [ 65.887828][ T1903] RSP: 0018:ffffc9000e79f140 EFLAGS: 00010246 [ 65.893925][ T1903] RAX: dffffc0000000000 RBX: ffffea0004925800 RCX: 1ffffffff0c2c649 [ 65.901910][ T1903] RDX: ffffc90001651000 RSI: ffffea0004925800 RDI: ffff88812d8e8000 [ 65.909894][ T1903] RBP: ffffc9000e79f270 R08: ffffea0004925837 R09: 1ffffd4000924b06 [ 65.917871][ T1903] R10: 000000000c86acf6 R11: 0000000000000000 R12: ffffc9000e79f5d0 [ 65.925856][ T1903] R13: 1ffff92001cf3eba R14: 0000000000000000 R15: ffffffff86163248 [ 65.933881][ T1903] FS: 00007fc35ba246c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.942814][ T1903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.949401][ T1903] CR2: fffffffffffffff1 CR3: 000000012edaa000 CR4: 00000000003526b0 [ 65.957388][ T1903] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.965376][ T1903] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 65.973373][ T1903] Kernel panic - not syncing: Fatal exception [ 65.979856][ T1903] Kernel Offset: disabled [ 65.984185][ T1903] Rebooting in 86400 seconds..