last executing test programs: 5.460392765s ago: executing program 2 (id=12): r0 = syz_usb_connect$uac3(0x2, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260045d1000013240305000403030607000000040001000400092405060254599189090401000001023000090401010101023000090501090002b905030a25250106000904020000010230000904020101010230000905820908000602080a252507000000010500"], &(0x7f00000006c0)={0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x2, {0x2, 0xa}}, 0x0}, 0x0) mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000) 4.026663776s ago: executing program 2 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xce92}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x28004010) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xc8, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x366}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4d000) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='|:*'], 0x58) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.887746856s ago: executing program 1 (id=22): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') exit(0x7000000000000) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/157, 0x9d}], 0x1, 0x1, 0x0) (async) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/157, 0x9d}], 0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000007980)=ANY=[@ANYBLOB="6c6600001000010002000000fedbdf250c000000070000000000000044661180280012800c001e000100000000000000080000002d7bf200080002"], 0x666c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x6) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d400000015001d03"], 0xd4}}, 0x880) 3.886633646s ago: executing program 2 (id=24): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 3.797198512s ago: executing program 2 (id=26): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3b, 0x28, 0xd, 0xfffd, 0xa, 0x9, 0x10, 0x7, 0x2, 0x40, 0x1, 0x9, 0x4, 0x16, 0x4, 0xff, [0x100003, 0x8009]}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) r4 = syz_io_uring_setup(0x63af, &(0x7f0000000180)={0x0, 0x100577, 0x20, 0x2, 0x43}, &(0x7f0000000340)=0x0, &(0x7f0000011000), 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000140)=0x2) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2040) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f0000000040)=""/240) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x78, 0x18, &(0x7f0000006c00)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r10 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4) syz_usb_connect(0x2, 0x59, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202", @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYRES16=r10], 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 3.083736402s ago: executing program 1 (id=30): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) (async) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='\v\x00'], 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) (async) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]}) (async) syz_io_uring_setup(0x4021, &(0x7f0000000240)={0x0, 0x38d, 0x8, 0x400, 0xda}, 0x0, 0x0, &(0x7f0000000000)) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0x2e, 0x0, &(0x7f0000000040)) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000097}]}) (async) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) sendfile(r8, r8, 0x0, 0x1) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) 3.022725277s ago: executing program 0 (id=31): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x6, 0xc199}, 0x100, './file0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xa000, 0x4, 0x9, 0xfb, 0x9, 0x40, 0x7, 0x0, 0x2e, 0x7f}, {0x5000, 0x2, 0x3, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3, 0xaa}, {0xeeef0003, 0x80a0000, 0xe, 0x5, 0x83, 0x47, 0x0, 0x9, 0x1, 0x5, 0x5, 0x1}, {0x3000, 0x1, 0xd, 0x1, 0x8, 0x42, 0xb, 0xff, 0x6, 0x7, 0x6}, {0x11f6593269eab9dc, 0x60000, 0xb, 0x7, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x70000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0x9e, 0x8, 0xf, 0x1, 0x1}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x9, 0x3, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xf, 0x7, 0x80, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xd000, 0x30}, {0x100000, 0x7}, 0x80000031, 0x0, 0x5000, 0x2424, 0x3, 0x8000, 0x9000, [0x6800000000000000, 0x4, 0x5f, 0x4]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000002640)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40045201, 0xffffffffffffffff) r6 = dup(r4) sendto$inet_nvme_pdu(r6, &(0x7f0000000080)=@data_h2c_no_hdigest={{0x6, 0x2, 0x18, 0x18, 0x8}, 0x3, 0xf, 0x6, 0x10001, "4bf14a64"}, 0x80, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x4000, 0x1}) socket$inet6(0xa, 0x3, 0xff) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x6, 0xc199}, 0x100, './file0\x00'}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xa000, 0x4, 0x9, 0xfb, 0x9, 0x40, 0x7, 0x0, 0x2e, 0x7f}, {0x5000, 0x2, 0x3, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3, 0xaa}, {0xeeef0003, 0x80a0000, 0xe, 0x5, 0x83, 0x47, 0x0, 0x9, 0x1, 0x5, 0x5, 0x1}, {0x3000, 0x1, 0xd, 0x1, 0x8, 0x42, 0xb, 0xff, 0x6, 0x7, 0x6}, {0x11f6593269eab9dc, 0x60000, 0xb, 0x7, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x70000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0x9e, 0x8, 0xf, 0x1, 0x1}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x9, 0x3, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xf, 0x7, 0x80, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xd000, 0x30}, {0x100000, 0x7}, 0x80000031, 0x0, 0x5000, 0x2424, 0x3, 0x8000, 0x9000, [0x6800000000000000, 0x4, 0x5f, 0x4]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000002640)) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$RNDADDENTROPY(r5, 0x40045201, 0xffffffffffffffff) (async) dup(r4) (async) sendto$inet_nvme_pdu(r6, &(0x7f0000000080)=@data_h2c_no_hdigest={{0x6, 0x2, 0x18, 0x18, 0x8}, 0x3, 0xf, 0x6, 0x10001, "4bf14a64"}, 0x80, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x4000, 0x1}) (async) 2.847898129s ago: executing program 0 (id=32): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0x6, 0x5, 0x800000000000102}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000640)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c622379dc46a287748e2e673742f3ce5d57be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442ced8d387fe7282d16851afdc09", 0x97}, {0x0}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8ae", 0x30}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffff", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000002c0)="8584958f28b0e376d97ada717dc6fbe06bc3d007e47f7c9cd23923fe76d6bfd3b7278cbb2c820b9299e923f5ff1daba6011e6aaa41cd06579802b4db22dfaf261e4bda3c239d2fde3a2730388d41c948eaaa27d1ab52f2ad88e3d2293546e2c756296b99d5fb330d2b3547fd07c7aa81c2aba1a1963a40f2aeee7cc9d14cf4a03f68b3b290d12ccde99e89e3d6b7557cb98c5eefac031c97758c6c1f9fb1264854b66ea7688105621743e2d5009a7d18dcc2082e565cc3f27f9a02c4ab3c582b63d229ee8e0e39e5ca5f2406ba7565247134eefa1e27aaf3b6129e95893031208591195ca437", 0xe6}, {&(0x7f0000000400)="9fddd0328c9b06a12c364390df300267c14ebda63306", 0x16}, {&(0x7f0000000440)="7ba97ea9eb98879f22efa58cc3b0f819d60076a742", 0x15}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000001c0)="547ecf9b2beb6e54c8340ad42ce9ab218f7f67", 0x13}], 0x5}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000068a000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000040)=0xfff, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f0000000000)=0x2) prlimit64(r2, 0xd, &(0x7f0000000000)={0x7, 0x40}, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="470f00000000000002004e24ac14142f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000700000002004e21e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000200000000000000e90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac14144200000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e206401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142300"/1040], 0x410) gettid() 2.725607277s ago: executing program 0 (id=34): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x163040, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) write(r2, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="580000000b06010100000000400000000a0000060800094000004a739c00080900020073797a31000000000900020073797a30000000504e396a9b08ab7c08000940000000010900020073797a3100000000080009400000000600"/102], 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4040004) r6 = socket(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r7, @ANYBLOB="000404000000ffdbdf250c0000000c00038008000300030000008c0004800900010073797a30000000000900010073797a31000000003c00078008000300040000000800040086060000080002000008000008000400ff030000080003000a00000008000300d4ab002008000300060000001300010062726f6164636173742d6c696e6b000014000780080004000d00000008000300080000000900010073797a30000000002c00078008000100060000000c00030001010000000000000c0003000500000000000000080001003b880000"], 0xd8}}, 0x40000c0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendto(r1, &(0x7f0000000140)="5a20aad1ab61de1cfa1076008fb8daaef485b3411d6009411f15cad734480dbca9772fd6b8787d32df804fde8e05781dd92093db856af723c6c8481efd174959c6e69d0077d190c9667b6ca6d6102d6faae8a03b17c4b5382b5a5cf155cb617da90f653d84014a2f2268ab86ab66613e01062cbb85f552ebd0579cacd48876375d2f47fc9e7d085cfd4b57472167809055c4e207", 0x94, 0x4800, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r8, 0x1000) r9 = dup(r8) ioctl(r6, 0xffff7fff, &(0x7f0000000380)="3e1bd89c88b2aef2001ec4725635f8a89bf2d319263a407aa4aa181c09bbe56136479a5acfa91e42414a96a7efac9aee9cba6c8a5024db307d1833") read$eventfd(r9, &(0x7f0000000000), 0x8) getsockopt$packet_int(r6, 0x107, 0x12, &(0x7f00000003c0), &(0x7f00000005c0)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000000)=0xf, 0x4) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000000)) 2.431870488s ago: executing program 1 (id=35): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$incfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0xa0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = gettid() getpgid(r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc0200, 0x42, 0x1}, 0x18) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x55c, 0x200000) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000540)="703013215b9490bc4a3959156cd55b7ba03819b990db379921ad8c7abb08eae6ef32d43f4992bf9c901ccf2ad7aa5d9f95badbdf8bb66d54926549f7011d817206790bacf920839e85784a11f989e763e383a84d129e0bfac93bc90e27facbfc865dfc02f056a55616d393687f706acaedf0ab69b9dd91b2bdb217f4138ab1856bd3d41b6aaa178a285152c49f09bd6e9b4f8ca6fd50108dc68c61c32effb8e693e766fb0cca13fe2e103c0fc9cd3edf8a2631795871dc88192b4b077b50db06695015e3a21764701710b20306d804b755326218df748b474eaf0c7e2bf5fc10b8419a8099eca90135478dc2be28dc") setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0xc, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mount$incfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0xa0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) gettid() (async) getpgid(r1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc0200, 0x42, 0x1}, 0x18) (async) syz_open_dev$hidraw(&(0x7f00000000c0), 0x55c, 0x200000) (async) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000540)="703013215b9490bc4a3959156cd55b7ba03819b990db379921ad8c7abb08eae6ef32d43f4992bf9c901ccf2ad7aa5d9f95badbdf8bb66d54926549f7011d817206790bacf920839e85784a11f989e763e383a84d129e0bfac93bc90e27facbfc865dfc02f056a55616d393687f706acaedf0ab69b9dd91b2bdb217f4138ab1856bd3d41b6aaa178a285152c49f09bd6e9b4f8ca6fd50108dc68c61c32effb8e693e766fb0cca13fe2e103c0fc9cd3edf8a2631795871dc88192b4b077b50db06695015e3a21764701710b20306d804b755326218df748b474eaf0c7e2bf5fc10b8419a8099eca90135478dc2be28dc") (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0xc, 0x1) (async) 2.431634538s ago: executing program 1 (id=36): syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x15f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14d, 0x1, 0x1, 0x9, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "909c5004c109"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x100, 0x6, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x7, 0xda}, @country_functional={0x10, 0x24, 0x7, 0x0, 0x3, [0xb83, 0x1000, 0x9c1, 0x1, 0x1]}, @mbim={0xc, 0x24, 0x1b, 0xdba, 0x2, 0x13, 0x8, 0x2, 0x81}, @mdlm_detail={0xd2, 0x24, 0x13, 0x44, "f616ab12060bb0664216d701216a649e127cc00973622def1ee019d571fc011b1547fb33f4d5cfcb4c3556bc4f1dfdbda8b527a348d5c1926e4b06fe9b19952b9420c90a862ce488a76e5b7db4b7bbaa77869d6c33b899ebf83b2b61e2347875dbce328e05f35eb5c3e0c5eadebd13a5e808ab7cf55187341cfe8de5a8445093aaae45234f7d639dca6f28dccfd8b117253fb38d1323a7c41882b6777eb58653cbf29ab0c6481d1fab4668c6c1056397e7e36ffab66702a399516f173f7bf3b2e4b56fb7ba230a606c17d8379c24"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x1d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xa, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x68, 0x2, 0x81, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0xe, 0x4, 0x8, 0xa}, 0x74, &(0x7f0000000200)={0x5, 0xf, 0x74, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x2, 0x800}, @generic={0x40, 0x10, 0x4, "eaa32805464bbd5c01343f8e70f77f56031cb68d1452fb63bf7878c1d2a74d312b0bf92e1cdf32f8c214ece4a631ded27da77587a0e61c3efe6ded9026"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x69, 0x5, 0x2, 0x0, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x44, 0x0, 0x97}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x5, 0x4}]}, 0x4, [{0xf5, &(0x7f0000000380)=@string={0xf5, 0x3, "f1b33896586f265c3999c47f18c6644cb61982fa62ac68fd10d639225c482dda55b8f950e124a0785ec3c0991ebfe9eac6f1734e3b68c15d8004d86beea0a48b273adab7b77fca26f6a0e6f245de3a9c0088ab7bc74b865c7ebb278b8f8f3a33ec26ba5f1cedfb74a0b93a030f3c6dc94806c44cbf11b43e7eb08ae13ee663694844fc4dfb5a774d39b80c5bf18b801138ea742cfd703e014f46c5c69bc903f8f83ef027d9d7dcb3f05a47b022b6d6c40d91aa755594238717969de13dc2673361d10a4b0af6dd5121141d24251cb9efea21fbabfc4cee459c044cd026fae0354e45b7ddf2388b75b407e5b510ab8192444452"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xd355d002abcbbe3}}, {0x1e, &(0x7f00000004c0)=@string={0x1e, 0x3, "4cc2825aaae757b27f4ac98a730ddae0c25fcd1f6e4d74507db06794"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x813}}]}) timer_create(0x7, &(0x7f0000000100)={0x0, 0x41, 0x4}, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000280)={0x2, 0x9}) (async) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000280)={0x2, 0x9}) 1.853056409s ago: executing program 0 (id=37): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x22) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (rerun: 64) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb68}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x6}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x400, 0x0, {0x7}, [@generic='~']}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (rerun: 32) 1.803505753s ago: executing program 0 (id=38): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x32) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x2}}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x20000044}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f0000000680)) dup2(r2, r3) 1.247851032s ago: executing program 3 (id=42): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x6) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000180)) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000000904000001030000000921000000b7220500090581030000"], 0x0) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r0, 0x6) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000180)) (async) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) (async) syz_usb_connect$hid(0x0, 0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040b827ed010000000000010902240001000000000904000001030000000921000000b7220500090581030000"], 0x0) (async) 1.244283342s ago: executing program 3 (id=43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x101) accept(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000000)={0xa, 0x4e20, 0x3e8, @empty, 0x6}, 0x1c) 1.240105252s ago: executing program 3 (id=44): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/175) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x3000908) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000300)) quotactl_fd$Q_QUOTAON(r0, 0x0, r1, &(0x7f0000000340)='./file0\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x3c, 0x9, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x80, 0x40, 0x200, 0x8001}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@private2, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x2f, 0x80, 0x0, 0xfffffffd, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x7fff, 0x2}}) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0xa8, 0x4, 0x8, @loopback, @remote, 0x80, 0x80, 0x0, 0x1000000}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x174, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4b96eef83e9e8ce9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r12, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x51) r13 = dup3(r0, r0, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r14, 0x0, 0x27, &(0x7f0000000bc0)="a0b3fac0a25e43787ff7debf6eae65b1402d559af1d96186415509fd14eb5938c6b883dc5cfcca85f2c39adb369f0f6ccdc3524a203f9fe615ff20f6a4dc63b0ccbed74c09b9dafdefe0fd6cf77af4d0dc58bb15f8683d8c6da558b0656d31991c5b52d5cfa102f8242efeb60a2b3452343ef179fb7c07a32dfe266633c722e60be0b3cdf47c72dcc83ddafb201acc528849d1b16476d3b4a4cadf29d60d93fa", 0xa0) sendmsg$key(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000c80)={0x2, 0xf, 0x2, 0x7, 0x3e, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d3, 0xc7, 0x1, 0x29, 0x1}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbd, 0x1000, {0x6, 0xff, 0x9, 0x3, 0x0, 0x8, 0x0, @in6=@private0, @in6=@loopback}}, @sadb_key={0x11, 0x9, 0x3c8, 0x0, "9cc25a0b11839fe10f7c6430284bd542d05b5987d0022f4c5c12ad82c8bc66b1d8e1e541ea472563054f1648b3fbb3aa629861e2db922ebd50d4a8cc58bf7a1f592f6108169ad825a6dcbf96e91f4956d2e57f81f39899a9359a4bb097bcbe20f2620281150ad3731465b5715a1bb8bbf761c55896d56c3e5b"}, @sadb_address={0x3, 0x17, 0xff, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x2, 0x9, 0x3, 0xb}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @in6=@local, 0x29, 0x10, 0x8}, @sadb_key={0x15, 0x9, 0x4e8, 0x0, "5774f29bf2bb91403163ba520c1927c01784853586c82f32222ee39c72b343fec1dbdc46b44624d13212d78812e849004f5bf6ff2533962527f02f68126880f0ecfdc6a7436a1aa92a57d9c40158f58b15467d6be3a5d51531a4ee6bdff07e87f5168c2ca9b4bb45a44cf2fbe34d3ae892749f11e1095fe83de8e4a0789875fd5a015922fca075991de143ffed0c85c743f1be70875283f64864061e09"}]}, 0x1f0}}, 0x200040d0) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r13) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x9c, r15, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x96b7}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x24004800) r16 = gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001280)=0x0) sendmsg$netlink(r13, &(0x7f0000001540)={&(0x7f00000010c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc, &(0x7f0000001500)=[{&(0x7f0000001100)={0x160, 0x11, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xa, 0x55, 0x0, 0x0, @str='vcan0\x00'}, @nested={0x6a, 0xd9, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @ipv4=@broadcast}, @generic="c234af68d04dbff219be12068d615f2d96fd81dd6a2e2e82b0aa320d4e569774f5386671f7413500cace0f6f38caa00c9aba6e1cc8a64cafee7b872548780025053601854870f7daf227bfbe8be922f40531962bdb810798159d44558198"]}, @nested={0x8e, 0x55, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@loopback}, @generic="a55bf5cafaf3dc741f72ff821e2297d1cfd5b0c78cf90c7da553c725863d9e86d194c51d1641512e8a7c1527d32fbfaea9feaded7fd08f5eca9583cd7e7fe089b24c2a795916e2e139037065491ee2d1475aa16ee95988121dc369b2982dca5006382263ba6e262430d7a4a45d5be6e19fb3bd67ab8d0ba884e1e064e283", @nested={0x4, 0x13}]}, @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@remote}, @generic="d1e002d162bc5d268e892661d1206f60405da736599420f78f59613432224e3fb7bd3590b5d5d4b1010730f25a2097057de1f689a9e8509a", @typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}]}, 0x160}, {&(0x7f00000012c0)={0x210, 0x25, 0x2, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x12f, 0x0, 0x0, @pid=r16}, @nested={0xff, 0x9d, 0x0, 0x1, [@generic="2f6a2cc3bdadb3b0df4e93747242953efe11ad28975d22990151adc8458057148730a5462578a8b9120d2ef0f1d9cb7c80d03ca7021540f0b0c609b8e1a940a98e9fb755b5ce78ba55db16ed58", @typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x13d}, @nested={0x4, 0xf1}, @nested={0x4, 0xff}, @generic="79b9022da2a60ac159a5b05e9bfcb809f8f1e4d8fa59934fa3b001f6501ce0e937339eeaa98a080888981c007df854263ddf3689c4a6505ef1535a4adf773944e6e6714816b945cc475b1de461a128fcb414c1a3f0b6bb9b9620845f403e0cd0f7d313e33d0a940ba3d3694668f98e2a1153ee4eb8169ddcefc1d37a92f5b55930f1cc42a2b557f0f1a2749ee352", @typed={0xc, 0x56, 0x0, 0x0, @u64=0x6}]}, @generic="0d9276e58c86ca", @generic="a076220f7a0d196698782bd735a400c0c78992087addb94d55dd6676ed649089766f5ec0d0f0e6e032e49f8d849bc596570fd2fca341c3d643b33b91a43d6374bc697aaaab980b3f88ffb807428417a8787918b775aa65e9e2871a5da7ae5fec14919d49e8df275d794aae1eb4", @typed={0xc, 0x41, 0x0, 0x0, @u64=0x400}, @typed={0xc, 0xc2, 0x0, 0x0, @u64=0x4}, @nested={0x6a, 0x15c, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @u32}, @typed={0xc, 0x68, 0x0, 0x0, @u64}, @generic="d55934f13f1400e92d337a428776012d7c519703efed133c5560efad37a47747878ba2cf4e3a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xd8}, @nested={0x4, 0x71}, @nested={0x4, 0x152}, @typed={0x8, 0x27, 0x0, 0x0, @pid=r17}, @nested={0x4, 0xc}]}]}, 0x210}], 0x2, 0x0, 0x0, 0x4000000}, 0x4008844) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000016c0)={&(0x7f0000001580), 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9548}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x89}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="3421db938841"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40080) 1.226497793s ago: executing program 3 (id=45): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc2c80, 0x0) readv(r0, &(0x7f00000031c0)=[{&(0x7f0000003200)=""/4106, 0x100a}], 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x20c40, 0x0) write$char_usb(r3, &(0x7f00000000c0)="3ed292ac585ddf8bbecfe6ae45e7918bf198478f7361b52bca39", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0xc09) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000100)={0x10, 0x0, 0x40, 0x2}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) fcntl$setstatus(r4, 0x4, 0x400) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e22, @broadcast}}) fcntl$setstatus(r4, 0x4, 0x4000) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="033a6b81c4b9fd99d544ea0762ac298f414e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f00000004c0)={0x14, &(0x7f00000002c0)={0x0, 0xd, 0xd6, {0xd6, 0x31, "3444dc67cef27f7730ef7714227197ec9934c25d123d4440a5d452f7f2d6c7198da2761d04599582a884defbe0dc2a215a9835382e0056359ab29c53ea67e77d0563ea867e504c9352a82524627cc1342c7b1f4a940338672c7931d695136b98a4f1ff438051ef55a7a73e429efd50f1463fd41307cbc1743de996117724c310b78a0aaaae4426944d34551e079de1f97e6f498ac056c18ec73832a3eb25a41679a41b720d12658152866d3908ad6114007f9011329ee3ccfb7e59cfbaa15bc2e7278a34a770ced6d7c4ba767d290517ea9b9a08"}}, &(0x7f00000003c0)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "7ff30d52852edef5356b20c047e2ed9ebce452d66954d0ba9865c299811d551c9f0cd6660fcd4bd8b450d56e1a24a20e1119ed563b3d7cdb239a394f4273f0c6d6814ca12ee2bd256ef6151e237411838a006ee42b2ea4151cdfc62e3c2f8e73a268e735f00aace013ad7e5467031f1540e874036b6107a46dfbd2c2e74ea5e0b3a0734830b72db6f0351ca969482d078e565d05e2fdf7a1f0dc07a62d7b7f97f6a880dc7a47c63d06b4d52e83f3bdd383b7ff2ed769d08abc44bb"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000500)={0x40, 0x11, 0xc5, "63d6b1c42b1f34e8075d934664dabf544c37c7cb6bf2f03f226c1c7fef3eed0698c61f8593540e9734d47e8126ca25553784233701b0f73efff8025ce3657b6711e30648054609f3cd9f69c72d59c632f9f7c9694e60393ddaa235680e5dc54161d2d05442584fb70045a81b2cccac4711520f6223d66fd17b58882776657487a5384f99b34499cd483b6a2d06af39ccb2e21af554302db568976fef129f3b5faaa11aec9ee9ecc6776600a1017dbeccf4be5d43c70a51ff1d5625e6c6f3964b80d4c9c441"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x0, 0xff, {0xfd, "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"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0xb522f000) lseek(r0, 0xff, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r6, 0x1, 0x9, &(0x7f0000000040), 0x29) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f0000000240)={0x0}) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1.192967145s ago: executing program 1 (id=46): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xc0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x50810}, 0x0) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x2, 0x0, 0x10, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xa, 0x10, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x81, [], [{{0x9, 0x5, 0xd, 0x12, 0x20, 0xee, 0x3, 0x1, {0x4}}}]}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0xff47, 0x0}) 915.889355ms ago: executing program 0 (id=47): syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xdf, 0x40, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x24}, {0x60, 0x24, 0xf, 0x1, 0xfffffffc, 0xba, 0xb4, 0x9}, {0x6, 0x24, 0x1a, 0xf8bc, 0x6}, [@mdlm={0xc, 0x24, 0x12, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xdd, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x18, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x6, 0xb}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 784.203624ms ago: executing program 2 (id=48): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x2, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6, 0xffffffff}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 737.005838ms ago: executing program 2 (id=49): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) socket(0x0, 0xa, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000001c0)={{0x11, @private=0xa010101, 0x4e20, 0x0, 'lblc\x00', 0x1a, 0x2, 0x2000000}, {@private=0xa010101, 0x0, 0x0, 0x0, 0x7}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 659.751763ms ago: executing program 3 (id=50): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000009b80), 0x149202, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg$unix(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12020, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6a8a40, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x8) openat$cgroup_ro(r4, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r3, &(0x7f00000066c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffca) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) chown(&(0x7f0000000180)='./file0\x00', r5, r6) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="e6e800001f57f77364744d2fd6c03ad8bc0eed57a9355dd97e15bba5fd71b16982c97371e1a0", @ANYRES16=r10, @ANYBLOB="010300000000fdffffff2b000000"], 0x14}}, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r11, r12, 0x0, 0x0) r13 = fcntl$dupfd(r2, 0x406, r2) epoll_pwait(r13, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x9000000, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r12, 0x40089413, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000002c0)=0x11) 159.789048ms ago: executing program 3 (id=51): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x40, 0x22, 0x2, {0x2}}, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000380)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x1, "c9"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$TCSBRKP(r2, 0x5425, 0x80000000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) 0s ago: executing program 1 (id=52): syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x1e}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 21.199237][ T36] audit: type=1400 audit(1775291134.090:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.200388][ T282] cgroup: Unknown subsys name 'net' [ 21.222088][ T36] audit: type=1400 audit(1775291134.090:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.249902][ T36] audit: type=1400 audit(1775291134.120:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.250140][ T282] cgroup: Unknown subsys name 'devices' [ 21.432462][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.438202][ T282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.530361][ T36] audit: type=1400 audit(1775291134.430:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.549307][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.553586][ T36] audit: type=1400 audit(1775291134.430:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.577883][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.587295][ T36] audit: type=1400 audit(1775291134.430:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.619289][ T36] audit: type=1400 audit(1775291134.460:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.644852][ T36] audit: type=1400 audit(1775291134.460:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.670709][ T36] audit: type=1400 audit(1775291134.470:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.696258][ T36] audit: type=1400 audit(1775291134.470:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.465591][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.472819][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.479894][ T290] bridge_slave_0: entered allmulticast mode [ 22.486401][ T290] bridge_slave_0: entered promiscuous mode [ 22.494822][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.502061][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.509178][ T290] bridge_slave_1: entered allmulticast mode [ 22.515708][ T290] bridge_slave_1: entered promiscuous mode [ 22.538372][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.545512][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.552727][ T289] bridge_slave_0: entered allmulticast mode [ 22.558954][ T289] bridge_slave_0: entered promiscuous mode [ 22.579705][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.586908][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.594143][ T289] bridge_slave_1: entered allmulticast mode [ 22.600353][ T289] bridge_slave_1: entered promiscuous mode [ 22.643285][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.650410][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.657483][ T291] bridge_slave_0: entered allmulticast mode [ 22.663848][ T291] bridge_slave_0: entered promiscuous mode [ 22.670072][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.677113][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.684209][ T292] bridge_slave_0: entered allmulticast mode [ 22.690667][ T292] bridge_slave_0: entered promiscuous mode [ 22.697219][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.704439][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.711614][ T292] bridge_slave_1: entered allmulticast mode [ 22.717811][ T292] bridge_slave_1: entered promiscuous mode [ 22.730549][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.737609][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.744826][ T291] bridge_slave_1: entered allmulticast mode [ 22.751330][ T291] bridge_slave_1: entered promiscuous mode [ 22.892272][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.899347][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.906650][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.913702][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.926996][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.934296][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.941710][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.948833][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.960626][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.967702][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.975070][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.982161][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.035358][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.042467][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.049883][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.057046][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.081025][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.088610][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.095974][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.103760][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.111244][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.118489][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.126728][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.134000][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.152292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.159343][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.167044][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.174117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.182417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.189482][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.197183][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.204374][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.216250][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.223434][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.239926][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.247034][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.292288][ T289] veth0_vlan: entered promiscuous mode [ 23.309620][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.316840][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.332498][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.339614][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.350682][ T289] veth1_macvtap: entered promiscuous mode [ 23.364537][ T290] veth0_vlan: entered promiscuous mode [ 23.376034][ T292] veth0_vlan: entered promiscuous mode [ 23.395136][ T290] veth1_macvtap: entered promiscuous mode [ 23.414242][ T292] veth1_macvtap: entered promiscuous mode [ 23.434886][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.488923][ T291] veth0_vlan: entered promiscuous mode [ 23.507396][ T309] syz.0.1(309): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 23.515044][ T291] veth1_macvtap: entered promiscuous mode [ 23.556992][ T309] Zero length message leads to an empty skb [ 23.590966][ T326] fuseblk: Bad value for 'fd' [ 23.609119][ T328] !: renamed from bond_slave_1 [ 23.760136][ T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.770125][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.840151][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.850097][ T318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.910057][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 23.918046][ T307] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 23.927344][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.935411][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 23.941269][ T307] usb 3-1: Product: syz [ 23.945461][ T307] usb 3-1: Manufacturer: syz [ 23.950172][ T307] usb 3-1: SerialNumber: syz [ 23.955334][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 23.964693][ T45] usb 2-1: config 8 has an invalid interface number: 201 but max is 0 [ 23.973208][ T45] usb 2-1: config 8 has no interface number 0 [ 23.980974][ T45] usb 2-1: New USB device found, idVendor=2dc8, idProduct=92f9, bcdDevice=c3.18 [ 23.990106][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.991480][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.998135][ T45] usb 2-1: Product: syz [ 24.009464][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.013906][ T45] usb 2-1: Manufacturer: syz [ 24.024779][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 24.028825][ T45] usb 2-1: SerialNumber: syz [ 24.037695][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.044054][ T318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 24.054672][ T10] usb 4-1: config 0 descriptor?? [ 24.058296][ T318] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 24.073545][ T318] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 24.086821][ T318] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 24.096081][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.104646][ T318] usb 1-1: Product: syz [ 24.108864][ T318] usb 1-1: Manufacturer: syz [ 24.113716][ T318] usb 1-1: SerialNumber: syz [ 24.169093][ T307] usb 3-1: MIDIStreaming interface descriptor not found [ 24.179930][ T307] usb 3-1: USB disconnect, device number 2 [ 24.198635][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.265907][ T45] usb 2-1: USB disconnect, device number 2 [ 24.320875][ T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.347910][ T328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.403376][ T318] usb 1-1: Can't get UAC3 power state for id 10 [ 24.410832][ T318] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 24.421431][ T318] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 24.432519][ T318] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 24.444068][ T318] usb 1-1: USB disconnect, device number 2 [ 24.455654][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.487784][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 24.495323][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 24.506363][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 24.514012][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 24.521839][ T10] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 24.529853][ T10] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 24.688529][ T331] 9pnet_fd: Insufficient options for proto=fd [ 24.710738][ T333] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 24.718263][ T333] netlink: 'syz.2.8': attribute type 2 has an invalid length. [ 24.726267][ T333] netlink: 1339 bytes leftover after parsing attributes in process `syz.2.8'. [ 24.755816][ T336] netlink: 'syz.2.9': attribute type 28 has an invalid length. [ 24.925092][ T349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 24.939075][ T349] tmpfs: Bad value for 'gid' [ 24.943835][ T349] tmpfs: Bad value for 'gid' [ 24.961962][ T10] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 32: -71 [ 24.971642][ T10] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense firmware info: -71 [ 24.982351][ T10] playstation 0003:054C:0DF2.0001: Failed to get firmware info from DualSense [ 24.991701][ T10] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 25.000194][ T10] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 25.012558][ T10] usb 4-1: USB disconnect, device number 2 [ 25.050172][ T65] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 25.070139][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.190117][ T347] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.201617][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.209888][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 25.218583][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.229156][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 25.234479][ T65] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 25.243811][ T65] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 4 [ 25.255854][ T9] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 25.267430][ T65] usb 3-1: string descriptor 0 read error: -22 [ 25.273782][ T65] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 25.283012][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.291284][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=1f.c8 [ 25.302201][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.310470][ T9] usb 2-1: Product: syz [ 25.315137][ T9] usb 2-1: Manufacturer: syz [ 25.320624][ T65] usb 3-1: selecting invalid altsetting 1 [ 25.326600][ T65] usb 3-1: unit 3 not found! [ 25.331290][ T9] usb 2-1: SerialNumber: syz [ 25.350514][ T347] usb 1-1: too many configurations: 45, using maximum allowed: 8 [ 25.366293][ T347] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 25.375467][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.384198][ T347] usb 1-1: Product: syz [ 25.388421][ T347] usb 1-1: Manufacturer: syz [ 25.393144][ T347] usb 1-1: SerialNumber: syz [ 25.516431][ T65] usb 3-1: cannot request logical cluster ID: 35217 (err: -5) [ 25.524249][ T65] usb 3-1: invalid MIXER UNIT descriptor 6 [ 25.530304][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 25.537496][ T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.543537][ T65] usb 3-1: selecting invalid altsetting 1 [ 25.559344][ T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.562555][ T65] usb 3-1: unit 3 not found! [ 25.570387][ T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.580667][ T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.588932][ T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.598642][ T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.607759][ T349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.616500][ T349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.625109][ T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.639636][ T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.650362][ T346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.659224][ T346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.669407][ T355] netlink: 120 bytes leftover after parsing attributes in process `syz.3.16'. [ 25.673546][ T9] snd-usb-audio 2-1:5.0: probe with driver snd-usb-audio failed with error -71 [ 25.691526][ T9] usb 2-1: USB disconnect, device number 3 [ 25.705833][ T347] rtl8150 1-1:1.0: couldn't reset the device [ 25.712169][ T347] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 25.723860][ T347] usb 1-1: USB disconnect, device number 3 [ 25.730604][ T65] usb 3-1: cannot request logical cluster ID: 35217 (err: -71) [ 25.742445][ T65] usb 3-1: invalid MIXER UNIT descriptor 6 [ 25.754617][ T65] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 25.764882][ T65] usb 3-1: USB disconnect, device number 3 [ 26.256016][ T368] tipc: Started in network mode [ 26.261141][ T368] tipc: Node identity 7f000001, cluster identity 4711 [ 26.268499][ T368] tipc: Enabled bearer , priority 10 [ 26.282662][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 26.282683][ T36] audit: type=1400 audit(1775291139.180:150): avc: denied { ioctl } for pid=367 comm="syz.2.20" path="socket:[4585]" dev="sockfs" ino=4585 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.284006][ T368] process 'syz.2.20' launched './file0' with NULL argv: empty string added [ 26.289498][ T36] audit: type=1400 audit(1775291139.180:151): avc: denied { execute } for pid=367 comm="syz.2.20" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.347856][ T36] audit: type=1400 audit(1775291139.240:152): avc: denied { execute_no_trans } for pid=367 comm="syz.2.20" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.378289][ T36] audit: type=1400 audit(1775291139.240:153): avc: denied { write } for pid=374 comm="syz.0.23" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.406218][ T373] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.409657][ T36] audit: type=1400 audit(1775291139.240:154): avc: denied { map } for pid=374 comm="syz.0.23" path="socket:[4594]" dev="sockfs" ino=4594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 26.415656][ T373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.445312][ T36] audit: type=1400 audit(1775291139.240:155): avc: denied { ioctl } for pid=374 comm="syz.0.23" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4595 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.473214][ T36] audit: type=1400 audit(1775291139.300:156): avc: denied { write } for pid=378 comm="syz.0.25" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.497053][ T36] audit: type=1400 audit(1775291139.300:157): avc: denied { open } for pid=378 comm="syz.0.25" path="/7/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.521430][ T36] audit: type=1400 audit(1775291139.300:158): avc: denied { ioctl } for pid=378 comm="syz.0.25" path="/7/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.548200][ T36] audit: type=1400 audit(1775291139.340:159): avc: denied { read } for pid=382 comm="syz.2.26" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.582471][ T384] capability: warning: `syz.2.26' uses 32-bit capabilities (legacy support in use) [ 26.744972][ T383] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.745005][ T383] rust_binder: Read failure Err(EFAULT) in pid:17 [ 26.809100][ T384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 27.022575][ T394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.29'. [ 27.040667][ T394] netlink: 43 bytes leftover after parsing attributes in process `syz.0.29'. [ 27.049576][ T394] netlink: 'syz.0.29': attribute type 6 has an invalid length. [ 27.050051][ T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 27.065347][ T394] netlink: 'syz.0.29': attribute type 5 has an invalid length. [ 27.073733][ T394] netlink: 43 bytes leftover after parsing attributes in process `syz.0.29'. [ 27.122215][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 27.221335][ T45] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 27.229617][ T45] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 27.240121][ T45] usb 3-1: config 0 has no interface number 0 [ 27.249045][ T45] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 27.264967][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.266066][ T402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.273245][ T45] usb 3-1: Product: syz [ 27.286409][ T45] usb 3-1: Manufacturer: syz [ 27.291190][ T45] usb 3-1: SerialNumber: syz [ 27.303179][ T45] usb 3-1: config 0 descriptor?? [ 27.390089][ T347] tipc: Node number set to 2130706433 [ 27.413359][ T408] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 27.690066][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.842369][ T45] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 27.857481][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.868385][ T45] usb 4-1: config 0 has no interface number 0 [ 27.876056][ T45] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 27.886148][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.895008][ T45] usb 4-1: Product: syz [ 27.899233][ T45] usb 4-1: Manufacturer: syz [ 27.904069][ T45] usb 4-1: SerialNumber: syz [ 27.914107][ T45] usb 4-1: config 0 descriptor?? [ 28.070081][ T318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.121621][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.130268][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.141857][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.150529][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.220078][ T318] usb 2-1: Using ep0 maxpacket: 32 [ 28.225888][ T347] usb 4-1: USB disconnect, device number 3 [ 28.229835][ T318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.240455][ T318] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 28.249090][ T318] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 28.259675][ T318] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 28.268952][ T318] usb 2-1: config 128 has no interface number 0 [ 28.275317][ T318] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.288856][ T318] usb 2-1: config 128 interface 127 has no altsetting 0 [ 28.297480][ T318] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 28.306674][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.314781][ T318] usb 2-1: Product: syz [ 28.319056][ T318] usb 2-1: Manufacturer: syz [ 28.323685][ T318] usb 2-1: SerialNumber: syz [ 28.530354][ T421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.538961][ T421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.553030][ T318] usb 2-1: USB disconnect, device number 4 [ 28.571324][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.829668][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.840151][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.848256][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.856938][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.865002][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.873590][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.881776][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.890296][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.898367][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.907264][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.934552][ T440] ======================================================= [ 28.934552][ T440] WARNING: The mand mount option has been deprecated and [ 28.934552][ T440] and is ignored by this kernel. Remove the mand [ 28.934552][ T440] option from the mount to silence this warning. [ 28.934552][ T440] ======================================================= [ 28.972016][ T440] overlayfs: missing 'workdir' [ 28.993601][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.002778][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.060298][ T347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.330186][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.465896][ T65] usb 3-1: USB disconnect, device number 4 [ 29.480202][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 29.491519][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.500306][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 32 [ 29.512110][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 29.521569][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.529611][ T9] usb 2-1: Product: syz [ 29.534095][ T9] usb 2-1: Manufacturer: syz [ 29.538747][ T9] usb 2-1: SerialNumber: syz [ 29.544911][ T453] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 29.560099][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.719242][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 29.727081][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.736073][ T45] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 29.743611][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.752851][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.762050][ T9] usb 2-1: USB disconnect, device number 5 [ 29.793650][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.810629][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.821786][ T45] usb 1-1: Product: syz [ 29.826005][ T45] usb 1-1: Manufacturer: syz [ 29.830936][ T45] usb 1-1: SerialNumber: syz [ 29.850114][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.010068][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 30.016959][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.025970][ T65] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 30.034402][ T65] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 30.045168][ T65] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 30.056706][ T65] usb 3-1: config 128 has no interface number 0 [ 30.057826][ T45] cdc_ncm 1-1:1.0: skipping garbage [ 30.065365][ T65] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 30.073220][ T45] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 30.087703][ T45] cdc_ncm 1-1:1.0: bind() failure [ 30.092931][ T65] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 30.100243][ T45] usb 1-1: USB disconnect, device number 4 [ 30.111285][ T65] usb 3-1: config 128 interface 127 has no altsetting 0 [ 30.120248][ T65] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 30.129736][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.138026][ T65] usb 3-1: Product: syz [ 30.142453][ T65] usb 3-1: Manufacturer: syz [ 30.147154][ T65] usb 3-1: SerialNumber: syz [ 30.288756][ T471] rust_binder: Error while translating object. [ 30.288823][ C1] BUG: TASK stack guard page was hit at ffffc9000dd5ff58 (stack is ffffc9000dd60000..ffffc9000dd68000) [ 30.288850][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 30.288864][ C1] CPU: 1 UID: 0 PID: 471 Comm: syz.1.52 Not tainted syzkaller #0 6df8a48c60291494d9389e53691a3df5daca5615 [ 30.288880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.288888][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 30.288921][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 30.288937][ C1] RSP: 0018:ffffc9000dd5ff60 EFLAGS: 00010a06 [ 30.288955][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001bac028 [ 30.289015][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 30.289026][ C1] RBP: ffffc9000dd60230 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 30.289035][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 30.289045][ C1] R13: dffffc0000000000 R14: 1ffff92001bac04c R15: ffffc9000dd602d0 [ 30.289058][ C1] FS: 00007f02e3df76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.289078][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.289091][ C1] CR2: ffffc9000dd5ff58 CR3: 0000000116e4e000 CR4: 00000000003526b0 [ 30.289111][ C1] Call Trace: [ 30.289122][ C1] [ 30.289135][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 30.289162][ C1] ? static_key_count+0x45/0x70 [ 30.289178][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 30.289193][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 30.289210][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 30.289226][ C1] ? unwind_next_frame+0x3c1/0x750 [ 30.289248][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.289270][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 30.289296][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.289316][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 30.289330][ C1] ? stack_depot_save_flags+0x672/0x800 [ 30.289347][ C1] ? stack_depot_save+0x12/0x20 [ 30.289360][ C1] ? save_stack+0x133/0x240 [ 30.289375][ C1] ? free_contig_range+0x260/0x260 [ 30.289398][ C1] ? __reset_page_owner+0x450/0x450 [ 30.289416][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 30.289434][ C1] ? prep_new_page+0x20/0x120 [ 30.289452][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 30.289468][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 30.289480][ C1] ? stack_depot_save_flags+0x672/0x800 [ 30.289494][ C1] ? kasan_save_track+0x4f/0x80 [ 30.289510][ C1] ? kasan_save_free_info+0x4a/0x60 [ 30.289527][ C1] ? __kasan_slab_free+0x5f/0x80 [ 30.289543][ C1] ? kfree+0x158/0x440 [ 30.289576][ C1] ? krealloc_noprof+0xfa/0x130 [ 30.289601][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 30.289632][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 30.289652][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 30.289674][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 30.289709][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 30.289739][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 30.289762][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 30.289777][ C1] ? sched_clock_noinstr+0xd/0x30 [ 30.289790][ C1] ? __set_page_owner+0x8e/0x600 [ 30.289800][ C1] ? __kasan_check_read+0x15/0x20 [ 30.289817][ C1] ? __zone_watermark_ok+0x134/0x630 [ 30.289838][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 30.289856][ C1] ? __cfi___zone_watermark_ok+0x10/0x10 [ 30.289877][ C1] ? kasan_unpoison+0x4a/0x70 [ 30.289901][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 30.289917][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 30.289928][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 30.289943][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 30.289958][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 30.289978][ C1] ? prep_new_page+0x20/0x120 [ 30.290001][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 30.290025][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 30.290047][ C1] ? static_key_count+0x45/0x70 [ 30.290065][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 30.290089][ C1] ? lruvec_init+0x201/0x280 [ 30.290116][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 30.290138][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.290158][ C1] ? unwind_get_return_address+0x51/0x90 [ 30.290177][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.290203][ C1] ? arch_stack_walk+0x10a/0x170 [ 30.290230][ C1] ? stack_trace_save+0xaa/0x100 [ 30.290248][ C1] ? stack_depot_save_flags+0x672/0x800 [ 30.290272][ C1] ? kasan_save_track+0x4f/0x80 [ 30.290296][ C1] ? kasan_save_track+0x3e/0x80 [ 30.290321][ C1] ? kasan_save_free_info+0x4a/0x60 [ 30.290341][ C1] ? __kasan_slab_free+0x5f/0x80 [ 30.290357][ C1] ? kfree+0x158/0x440 [ 30.290378][ C1] ? krealloc_noprof+0xfa/0x130 [ 30.290401][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 30.290440][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 30.290469][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 30.290500][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 30.290533][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 30.290570][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 30.290591][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 30.290623][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 30.290647][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 30.290668][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 30.290686][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.290701][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 30.290725][ C1] ? do_syscall_64+0x57/0xf0 [ 30.290749][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.290779][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 30.290806][ C1] ? kasan_save_free_info+0x4a/0x60 [ 30.290826][ C1] ? __kasan_slab_free+0x5f/0x80 [ 30.290842][ C1] ? kfree+0x158/0x440 [ 30.290863][ C1] ? krealloc_noprof+0xfa/0x130 [ 30.290887][ C1] ? krealloc_noprof+0xfa/0x130 [ 30.290911][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 30.290952][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 30.290976][ C1] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 30.291017][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 30.291058][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 30.291100][ C1] ? __kasan_check_write+0x18/0x20 [ 30.291122][ C1] ? _raw_spin_lock+0x92/0x120 [ 30.291145][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.291170][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 30.291201][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 30.291235][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.291265][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.291288][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.291317][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 30.291347][ C1] ? __kasan_check_write+0x18/0x20 [ 30.291368][ C1] ? _raw_spin_lock+0x92/0x120 [ 30.291392][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.291416][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 30.291450][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.291471][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 30.291504][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 30.291536][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.291572][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.291594][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.291622][ C1] ? __kasan_check_write+0x18/0x20 [ 30.291644][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 30.291672][ C1] ? __kasan_check_write+0x18/0x20 [ 30.291694][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.291719][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 30.291749][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.291771][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 30.291807][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 30.291836][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 30.291865][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 30.291896][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 30.291951][ C1] ? __kasan_check_write+0x18/0x20 [ 30.291973][ C1] ? mutex_unlock+0x90/0x240 [ 30.291991][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 30.292011][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 30.292031][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 30.292065][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 30.292096][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 30.292127][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.292149][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 30.292179][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 30.292209][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 30.292239][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 30.292269][ C1] ? desc_read+0x202/0x3e0 [ 30.292286][ C1] ? __kasan_check_write+0x18/0x20 [ 30.292309][ C1] ? desc_read+0x1ab/0x3e0 [ 30.292326][ C1] ? prb_first_seq+0x109/0x1d0 [ 30.292342][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 30.292360][ C1] ? __kasan_check_write+0x18/0x20 [ 30.292381][ C1] ? desc_read+0x1ab/0x3e0 [ 30.292397][ C1] ? __kasan_check_read+0x15/0x20 [ 30.292420][ C1] ? this_cpu_in_panic+0x56/0x90 [ 30.292438][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 30.292456][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.292478][ C1] ? prb_read_valid+0x80/0x80 [ 30.292495][ C1] ? data_alloc+0x4d0/0x7e0 [ 30.292512][ C1] ? desc_read+0x202/0x3e0 [ 30.292528][ C1] ? __kasan_check_write+0x18/0x20 [ 30.292550][ C1] ? desc_read+0x1ab/0x3e0 [ 30.292574][ C1] ? prb_first_seq+0x109/0x1d0 [ 30.292591][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 30.292607][ C1] ? __kasan_check_write+0x18/0x20 [ 30.292628][ C1] ? desc_read+0x1ab/0x3e0 [ 30.292643][ C1] ? __kasan_check_read+0x15/0x20 [ 30.292665][ C1] ? this_cpu_in_panic+0x56/0x90 [ 30.292683][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 30.292699][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.292723][ C1] ? prb_read_valid+0x80/0x80 [ 30.292739][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.292763][ C1] ? up+0x10a/0x1b0 [ 30.292781][ C1] ? __cfi_up+0x10/0x10 [ 30.292800][ C1] ? __kasan_check_write+0x18/0x20 [ 30.292821][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 30.292846][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 30.292869][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 30.292889][ C1] ? console_unlock+0x247/0x2c0 [ 30.292908][ C1] ? __cfi_console_unlock+0x10/0x10 [ 30.292927][ C1] ? krealloc_noprof+0xfa/0x130 [ 30.292951][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 30.292972][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 30.293007][ C1] ? irq_work_queue+0xc2/0x160 [ 30.293027][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 30.293062][ C1] ? vprintk_emit+0x3e3/0x650 [ 30.293090][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 30.293109][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 30.293139][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 30.293169][ C1] ? vprintk_default+0x2a/0x40 [ 30.293188][ C1] ? vprintk+0x93/0xa0 [ 30.293209][ C1] ? _printk+0xde/0x140 [ 30.293228][ C1] ? __cfi___check_object_size+0x10/0x10 [ 30.293252][ C1] ? __cfi__printk+0x10/0x10 [ 30.293270][ C1] ? _copy_from_user+0x87/0xa0 [ 30.293286][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 30.293317][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 30.293346][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 30.293384][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 30.293475][ C1] ? __kernel_text_address+0x11/0x40 [ 30.293499][ C1] ? __kasan_check_write+0x18/0x20 [ 30.293521][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.293544][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.293575][ C1] ? stack_trace_save+0xaa/0x100 [ 30.293592][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.293616][ C1] ? stack_depot_save_flags+0x399/0x800 [ 30.293639][ C1] ? ttwu_queue_wakelist+0x324/0x500 [ 30.293658][ C1] ? native_send_call_func_single_ipi+0x12/0x20 [ 30.293681][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 30.293706][ C1] ? __kasan_slab_free+0x6a/0x80 [ 30.293723][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 30.293745][ C1] ? __wake_up+0x169/0x190 [ 30.293761][ C1] ? audit_log_end+0x1f1/0x240 [ 30.293786][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 30.293808][ C1] ? audit_log_end+0x1f1/0x240 [ 30.293831][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 30.293856][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 30.293880][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 30.293904][ C1] ? __cfi_common_lsm_audit+0x10/0x10 [ 30.293927][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.293951][ C1] ? call_rcu_hurry+0x30/0x30 [ 30.293968][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 30.293992][ C1] ? avc_update_node+0x2f1/0x9c0 [ 30.294016][ C1] ? slow_avc_audit+0x19f/0x220 [ 30.294040][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 30.294064][ C1] ? avc_has_perm_noaudit+0x2bd/0x360 [ 30.294101][ C1] ? avc_has_perm+0x1ec/0x240 [ 30.294124][ C1] ? avc_has_perm+0x211/0x240 [ 30.294146][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 30.294169][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 30.294191][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 30.294208][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 30.294231][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 30.294264][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 30.294295][ C1] ? __kasan_check_write+0x18/0x20 [ 30.294318][ C1] ? _raw_spin_lock+0x92/0x120 [ 30.294341][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.294364][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0xfc0/0xaf80 [ 30.294389][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.294411][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 30.294446][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 30.294502][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 30.294525][ C1] ? kernel_text_address+0xa9/0xe0 [ 30.294546][ C1] ? __kasan_check_write+0x18/0x20 [ 30.294574][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.294597][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.294622][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.294646][ C1] ? stack_depot_save_flags+0x399/0x800 [ 30.294669][ C1] ? kasan_save_track+0x4f/0x80 [ 30.294693][ C1] ? kasan_save_track+0x3e/0x80 [ 30.294717][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 30.294738][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 30.294753][ C1] ? __kmalloc_cache_noprof+0x23c/0x470 [ 30.294776][ C1] ? __set_page_owner+0x2af/0x600 [ 30.294793][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 30.294812][ C1] ? prep_new_page+0x20/0x120 [ 30.294830][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 30.294849][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 30.294861][ C1] ? alloc_slab_page+0x6b/0x1e0 [ 30.294871][ C1] ? allocate_slab+0x69/0x420 [ 30.294884][ C1] ? ___slab_alloc+0x5a2/0x8d0 [ 30.294907][ C1] ? __kmalloc_node_track_caller_noprof+0x2e6/0x4f0 [ 30.294933][ C1] ? krealloc_noprof+0x8d/0x130 [ 30.294958][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 30.294984][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x408/0x5c20 [ 30.294997][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 30.295007][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.295017][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 30.295032][ C1] ? do_syscall_64+0x57/0xf0 [ 30.295055][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.295086][ C1] ? __kasan_check_write+0x18/0x20 [ 30.295109][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.295132][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.295150][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 30.295164][ C1] ? kernel_text_address+0xa9/0xe0 [ 30.295177][ C1] ? __kernel_text_address+0x11/0x40 [ 30.295191][ C1] ? unwind_get_return_address+0x51/0x90 [ 30.295210][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.295229][ C1] ? arch_stack_walk+0x10a/0x170 [ 30.295260][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 30.295284][ C1] ? kernel_text_address+0xa9/0xe0 [ 30.295298][ C1] ? __kernel_text_address+0x11/0x40 [ 30.295310][ C1] ? unwind_get_return_address+0x51/0x90 [ 30.295322][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.295333][ C1] ? arch_stack_walk+0x10a/0x170 [ 30.295354][ C1] ? stack_depot_save_flags+0x38/0x800 [ 30.295379][ C1] ? kasan_save_track+0x4f/0x80 [ 30.295404][ C1] ? kasan_save_track+0x3e/0x80 [ 30.295429][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 30.295445][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 30.295454][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 30.295487][ C1] ? krealloc_noprof+0x8d/0x130 [ 30.295507][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 30.295534][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 30.295555][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 30.295580][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.295593][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 30.295607][ C1] ? do_syscall_64+0x57/0xf0 [ 30.295623][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.295641][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 30.295673][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 30.295708][ C1] ? __kasan_check_write+0x18/0x20 [ 30.295731][ C1] ? _raw_spin_lock+0x92/0x120 [ 30.295749][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.295764][ C1] ? _raw_spin_unlock+0x45/0x60 [ 30.295779][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 30.295791][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 30.295816][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 30.295846][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 30.295872][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.295896][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 30.295911][ C1] ? kernel_text_address+0xa9/0xe0 [ 30.295923][ C1] ? __kernel_text_address+0x11/0x40 [ 30.295936][ C1] ? unwind_get_return_address+0x51/0x90 [ 30.295948][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.295965][ C1] ? arch_stack_walk+0x10a/0x170 [ 30.295990][ C1] ? stack_trace_save+0xaa/0x100 [ 30.296009][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 30.296029][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.296053][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 30.296075][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 30.296100][ C1] ? _raw_spin_unlock+0x45/0x60 [ 30.296118][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 30.296141][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 30.296164][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 30.296187][ C1] ? __cfi_mt_free_rcu+0x10/0x10 [ 30.296212][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 30.296226][ C1] ? kernel_text_address+0xa9/0xe0 [ 30.296239][ C1] ? __kernel_text_address+0x11/0x40 [ 30.296251][ C1] ? unwind_get_return_address+0x51/0x90 [ 30.296265][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.296283][ C1] ? arch_stack_walk+0x10a/0x170 [ 30.296309][ C1] ? stack_trace_save+0xaa/0x100 [ 30.296327][ C1] ? stack_depot_save_flags+0x38/0x800 [ 30.296352][ C1] ? kasan_save_track+0x4f/0x80 [ 30.296369][ C1] ? kasan_save_track+0x3e/0x80 [ 30.296383][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 30.296396][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 30.296406][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 30.296426][ C1] ? krealloc_noprof+0x8d/0x130 [ 30.296449][ C1] ? kvrealloc_noprof+0x59/0x120 [ 30.296472][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 30.296494][ C1] ? mmap_region+0x1579/0x1d60 [ 30.296513][ C1] ? do_mmap+0xb85/0x13c0 [ 30.296526][ C1] ? vm_mmap_pgoff+0x36e/0x4b0 [ 30.296542][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 30.296553][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 30.296576][ C1] ? __kernel_text_address+0x11/0x40 [ 30.296596][ C1] ? unwind_get_return_address+0x51/0x90 [ 30.296616][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.296636][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 30.296661][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.296674][ C1] ? update_curr+0x6c1/0x9e0 [ 30.296690][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 30.296705][ C1] ? __calc_delta+0x280/0x280 [ 30.296725][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 30.296747][ C1] ? update_entity_lag+0x28f/0x2c0 [ 30.296773][ C1] ? dequeue_entity+0x809/0x1380 [ 30.296795][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 30.296817][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 30.296831][ C1] ? dequeue_entities+0x1d7/0x1400 [ 30.296846][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 30.296860][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 30.296878][ C1] ? sched_clock_noinstr+0xd/0x30 [ 30.296898][ C1] ? __kasan_check_write+0x18/0x20 [ 30.296921][ C1] ? __switch_to+0xc4f/0x1300 [ 30.296946][ C1] ? __cfi___switch_to+0x10/0x10 [ 30.296964][ C1] ? psi_task_switch+0x4f2/0xa10 [ 30.296977][ C1] ? __kasan_check_write+0x18/0x20 [ 30.296991][ C1] ? finish_task_switch+0x1d9/0x760 [ 30.297004][ C1] ? __switch_to_asm+0x3d/0x70 [ 30.297023][ C1] ? __schedule+0x13a1/0x1fa0 [ 30.297041][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 30.297067][ C1] ? __asan_memcpy+0x5a/0x80 [ 30.297090][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 30.297112][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 30.297124][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 30.297135][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 30.297146][ C1] ? schedule+0xc5/0x240 [ 30.297156][ C1] ? futex_unqueue+0x136/0x160 [ 30.297177][ C1] ? ioctl_has_perm+0x39a/0x500 [ 30.297201][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 30.297222][ C1] ? futex_wait+0x2ac/0x7b0 [ 30.297246][ C1] ? __cfi_futex_wait+0x10/0x10 [ 30.297263][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 30.297277][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 30.297293][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 30.297306][ C1] ? do_futex+0x32a/0x510 [ 30.297325][ C1] ? __cfi_do_futex+0x10/0x10 [ 30.297346][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 30.297370][ C1] ? __fget_files+0x2c5/0x340 [ 30.297387][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.297404][ C1] ? security_file_ioctl+0x3e/0x110 [ 30.297417][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 30.297430][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 30.297440][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.297450][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 30.297470][ C1] ? do_syscall_64+0x57/0xf0 [ 30.297494][ C1] ? clear_bhb_loop+0x50/0xa0 [ 30.297511][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.297539][ C1] [ 30.297546][ C1] Modules linked in: [ 30.297568][ C1] ---[ end trace 0000000000000000 ]--- [ 30.297577][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 30.297595][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 30.297605][ C1] RSP: 0018:ffffc9000dd5ff60 EFLAGS: 00010a06 [ 30.297620][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001bac028 [ 30.297634][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 30.297647][ C1] RBP: ffffc9000dd60230 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 30.297661][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 30.297675][ C1] R13: dffffc0000000000 R14: 1ffff92001bac04c R15: ffffc9000dd602d0 [ 30.297689][ C1] FS: 00007f02e3df76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.297704][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.297712][ C1] CR2: ffffc9000dd5ff58 CR3: 0000000116e4e000 CR4: 00000000003526b0 [ 30.297726][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 30.298097][ C1] Kernel Offset: disabled