last executing test programs: 27.015622731s ago: executing program 3 (id=138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1800, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f9ffe8ffff014d564b000000eccd"]) (async) close_range(r0, 0xffffffffffffffff, 0x0) 26.888070843s ago: executing program 3 (id=139): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 26.887370433s ago: executing program 3 (id=140): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) unshare(0x62040200) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x416, 0x0, &(0x7f0000000600)="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"}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 26.812234944s ago: executing program 3 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x82024, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRES8=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000440)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='personality\x00') utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x79ec, 0x7}) exit(0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) fstat(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000001280)='./file0/../file0\x00', 0x6000, 0x7ff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000017c0)='.\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r9, r9) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001980)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xe8) statx(r2, &(0x7f0000001ac0)='./file0/file0/file0\x00', 0x1000, 0x0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001d40)={&(0x7f0000000480)={0x50, 0xfffffffffffffff5, 0x43, {0x7, 0x2b, 0x2, 0x8, 0x1, 0x7fff, 0x8001, 0xc606, 0x0, 0x0, 0x180, 0x9}}, &(0x7f0000000500)={0x18, 0xfffffffffffffffe, 0x6, {0xa}}, &(0x7f0000000540)={0x18, 0xb, 0x1, {0x8000000000000000}}, &(0x7f0000000580)={0x18, 0xfffffffffffffff5, 0x400, {0x5}}, &(0x7f0000000a80)={0x18, 0x0, 0x200}, &(0x7f0000000ac0)={0x28, 0xfffffffffffffff5, 0x9, {{0xffc00, 0x80, 0x1}}}, &(0x7f0000000b00)={0x60, 0x0, 0x6de9e835, {{0x5, 0x6, 0x994, 0x9, 0x9, 0x29, 0x2, 0x8}}}, &(0x7f0000000b80)={0x18, 0xfffffffffffffff5, 0x8, {0x4}}, &(0x7f0000000bc0)={0x12, 0xfffffffffffffffe, 0x43d, {'^\x00'}}, &(0x7f0000000c00)={0x20, 0x0, 0x1, {0x0, 0x1e}}, &(0x7f0000000cc0)={0x78, 0xffffffffffffffda, 0x900000000000000, {0x3ff, 0x3, 0x0, {0x2, 0x81, 0x3, 0x8, 0x8, 0x1ba000000000, 0x1, 0x9, 0x8, 0xc000, 0x4, 0x0, 0x0, 0x0, 0x8}}}, &(0x7f0000000e00)={0x90, 0x0, 0xd, {0x0, 0x0, 0x8, 0x4, 0x9, 0xa2e0, {0x5, 0xfffffffffffffff9, 0x8000000000000000, 0x9, 0x7, 0x7, 0xfffff801, 0x7, 0x3, 0x1000, 0x6, 0x0, 0x0, 0x5f32c788, 0xffffffff}}}, &(0x7f0000000ec0)={0xb8, 0x0, 0x1, [{0x5, 0xef6, 0xc, 0xc359, '/dev/uinput\x00'}, {0x1, 0x8, 0x1, 0x7, '['}, {0x2, 0x8000000000000000, 0x7, 0x0, '/#)\x18@\x1b\x19'}, {0x4, 0x7, 0x1, 0x20000, '/'}, {0x0, 0x4, 0x5, 0x0, 'fd/3\x00'}]}, &(0x7f00000013c0)={0x3e0, 0x0, 0xb1, [{{0x2, 0x2, 0x9, 0x8d7, 0x5, 0x4, {0x5, 0x4, 0x1, 0x8f1a, 0x4, 0x6, 0x5, 0xfffffc01, 0x400, 0x8000, 0xfff, 0x0, 0x0, 0x375, 0x800}}, {0x2, 0x2, 0x0, 0xfffffff3}}, {{0x6, 0x1, 0x5, 0x7, 0x3, 0x81, {0x2, 0x7ff, 0x93e, 0x6, 0xc, 0x7, 0x8, 0x24c, 0x2, 0xa000, 0xfffffffd, 0x0, 0xee00, 0x6, 0x5}}, {0x1, 0x77, 0x3, 0x3ff, '9p\x00'}}, {{0x6, 0x1, 0xc0000000, 0x1, 0xe0, 0x4, {0x4, 0x7fffffff, 0x3, 0x80, 0x688, 0x101, 0x40, 0x5, 0x1, 0x8000, 0x3, 0x0, 0x0, 0x10, 0x6}}, {0x6, 0x9, 0x13, 0x10000, './binderfs/binder0\x00'}}, {{0x0, 0x0, 0x5, 0x5, 0xaf09, 0x200, {0x1, 0x4, 0x651d57ab, 0x2, 0x0, 0xd, 0x7, 0x1, 0x1ff, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x6}}, {0x5, 0x9, 0x3, 0xea, '*(#'}}, {{0x2, 0x1, 0x6, 0x1, 0x2, 0x800, {0x5, 0x7, 0x4, 0x100000001, 0x9, 0x1, 0xc, 0x9, 0x0, 0x0, 0xfbac, 0x0, 0xee01, 0x2, 0x10001}}, {0x2, 0x4, 0x3, 0x800, '9p\x00'}}, {{0x4, 0x1, 0x1, 0x9999, 0x1ea5ba0d, 0x5, {0x1, 0x4, 0x9, 0x49d7, 0x2ef, 0x0, 0x8, 0x2, 0x6, 0x6000, 0x7, r5, r6, 0x0, 0x3}}, {0x1, 0x2, 0xc, 0x3, 'personality\x00'}}]}, &(0x7f0000001880)={0xa0, 0xfffffffffffffff5, 0x9, {{0x2, 0x3, 0x9, 0xfff, 0x70ef, 0x8, {0x1, 0xa, 0x3, 0x3, 0x80000000, 0x8000, 0x240, 0xaf, 0x0, 0x2000, 0x9, r7, r9, 0x2, 0xb50000}}, {0x0, 0x12}}}, &(0x7f0000001940)={0x20, 0x0, 0x1, {0x1000, 0x0, 0x6, 0xdc81}}, &(0x7f0000001c00)={0x130, 0x0, 0xfff, {0x195, 0x1ca500, 0x0, '\x00', {0x10, 0x9, 0x1, 0x9, r10, r11, 0x4000, '\x00', 0x7, 0x8000000000000000, 0x1, 0xf1, {0x2, 0xbba}, {0x5, 0x30000000}, {0x6, 0x8}, {0x140, 0x9}, 0x3, 0x499367d5, 0x7fff, 0x2}}}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c646566636f6e746578743d73797374656d5f752c002b623a2c2c466e2342caa686e22dd08936f9d99c1f6a1353c024ca421105ef464bf152c2ed336e2fffa6cd62fd7abc441c6eb36fafa18c132197d381d4f183d785a1514e34e0ac594fa59a2b3d2f15f1597e6f10ccbe2de70964b0fec37baa2b686e0052850832f774db6dd869241716de7949f4b8a4fc746bfc6994872b72031af67e7a5d57fcf2ae7569c4367c657280ac286430321d6189c65b787ec9071b132f8b94553467ea571900455c8c54fbf7f65d00839dd162a2"]) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz0\x00', {0x0, 0xa2, 0xc4, 0x81}, 0x15, [0x1, 0x3, 0x6, 0x8, 0x10, 0x5, 0x5, 0xc, 0x0, 0xffffffcc, 0x7, 0x5, 0x6, 0x6, 0x7, 0x2, 0xdaa, 0x6, 0x7fff, 0xffffcce0, 0x5, 0xc, 0x6, 0x9, 0x9, 0xd, 0x1, 0x3, 0x1, 0x5, 0xfffffffb, 0x7e, 0x9, 0x7, 0x6, 0x5, 0x86, 0xc4b, 0x4, 0x9, 0x6, 0x1, 0x80000000, 0x7, 0x1, 0x5, 0x2, 0x9, 0x5, 0x0, 0x90, 0xfffffffa, 0x7, 0xfffffff1, 0x6, 0x10000, 0x6, 0x2, 0x6, 0x6, 0x3, 0x9, 0x80], [0x7, 0xfffffff8, 0x8, 0xc, 0x40, 0x8, 0x5, 0x0, 0x4, 0x7d68fa52, 0x40, 0x1, 0x7, 0x1, 0x4, 0x1000, 0x6, 0x9, 0x7, 0x2, 0x3, 0x3, 0x1000, 0xff, 0x82c5, 0xf, 0x2553f7e3, 0x3, 0x80000001, 0x4, 0x0, 0x1, 0x9, 0xfffffe00, 0x100, 0x3, 0x8001, 0x6, 0x5, 0x9, 0xfffffff1, 0x391b, 0x44b7, 0x311, 0x8000, 0x1, 0x9, 0x81, 0x0, 0x0, 0x8000, 0x5, 0x9, 0x2, 0x876, 0x8a8, 0x3, 0x81, 0x8, 0x0, 0x2, 0x7, 0x9, 0x6], [0x10000, 0x9, 0x6e, 0xfffffffa, 0x3b5e, 0x63b4, 0x0, 0x1, 0x7a72, 0x0, 0x7, 0x7, 0x0, 0x7fff, 0x10, 0x4, 0x1, 0x5, 0x8, 0xebf, 0x8000, 0x10, 0x5, 0xdc8d, 0x0, 0x3, 0x0, 0x419, 0x10000, 0x9, 0x8cd, 0x2, 0xfa, 0x8, 0xfffffffd, 0x7, 0x1, 0x74e, 0x7e65, 0x1ffc0, 0x0, 0x4, 0x9, 0x3, 0x5, 0x6, 0x101, 0x9, 0xcb6fffff, 0x1, 0x68c4, 0x8, 0xfff, 0x2, 0xfff, 0xff, 0x3, 0x10000, 0x7, 0x4, 0xe0000000, 0x7, 0xa, 0x4], [0x7, 0xf, 0x401, 0x9, 0xbea9, 0x6, 0x4, 0x3, 0x1, 0x1, 0x6, 0x37, 0x3a05e0af, 0x888, 0x86d, 0x2800, 0x7, 0x4, 0xfffffff7, 0x80000001, 0x60000, 0x5, 0x4, 0x63, 0x8, 0xff, 0x2, 0x9, 0x5, 0x4, 0x5, 0x9, 0x5, 0x8, 0x5, 0x8, 0x7, 0x3b69db9e, 0xffff1510, 0x5, 0x9, 0x5, 0x80000000, 0xf9, 0x3, 0x2, 0x7, 0x1000, 0x3, 0xe, 0x5, 0x8d, 0x77, 0x7, 0x886, 0x3dd, 0x30c, 0x4, 0x8000, 0xffff8000, 0x9f7, 0xffffafc5, 0x2, 0xff]}, 0x45c) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b43707561636374202d68756765746c62200e6e0c716ccae45dd6a90cc1ba49f11bc4b51b4767fe2407645a40161767a76f5ce7f85b47de3a5027b669ef"], 0x1c) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1) 25.967079307s ago: executing program 3 (id=147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000}) write(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000077000/0xc000)=nil, 0xc000}, 0x1}) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 25.876109669s ago: executing program 3 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x189003, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 25.875656589s ago: executing program 32 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x189003, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 10.462614753s ago: executing program 4 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) (async) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1, 0x5, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e100000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00020500080e050a000040"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x2800000, &(0x7f0000001180)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="ab3cdb00f2d34bc80932c9975e84d393c7f59d03080bfc019eef0d9e35f2e922ddd2455c32a0dd70242356c1eb") (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0xfffffffffffffffd, {0x12, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x3ff]}, 0xfffffffffffff200, 0xe}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) write(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x1}}, 0x10) (rerun: 64) 8.484271905s ago: executing program 4 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) (async) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1, 0x5, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e100000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00020500080e050a000040"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x2800000, &(0x7f0000001180)="720866aab75b41a0e7ac7f29d9a0588a64557e5cd012ced21610bc6fcff10b941d5572372091e09743dd68c8c486225c28c08134b89a31db22b71444719a1f06a333d9a64b3ef54ede5b80e9ce8ffeb22002a24c90f465902ed9450fbc81e4497b02b41412526d7ea6590599f30281aa82f2763ee43d7e9b0d3bf9e89215e929b397a526d8b45184b275b37280faf5407fd63a1cd1849011237d10221f5a65977df3ada09fcbffc04777b110fea48297866edb1224acc744da8f976c8a9b88b52ebbe7c73f35102910e29067f62b5635bb8f1a3d2075fdc0eafb420a39121bc38a91fb15f328d79c19e86d0ad1a711a82ca6137c1d4af3caa86748d08dbccaa6c09cb91d6137d6589bd089e93d1d94e459813560bd3a667b00f304ca151a5e5483a08a0f2f5a230ca12ad8c155c8ed21befe3d6bd8c381be4aedb401a4ebfdfed569769bcd97cb4cdfae6a4957562c7d12cf8eac32df26a12a417ba3c4243f93f2450e715d12f0b7ea4ae87ca180f4c6371415de4a97d61cd75fc700031a94b8afb10cfc8d2f27a8027d1cb1a0320459f45b5c017e24ccba01104d36821910325f432bdbc0847c56b30fec49d92142255a0574bc589d50e3542588e04045d77ca8159220bcb9799b67ad7c16ed61cd2f60862b22fd6a85b8b7536620735ceb3d1b81a1a87e2487bb93f28b8ab9d4d3be5140462170f3cd982c384904b29408e1c44943ffb1c2bcfc3c0e2629cbb60c5a035b43c76f229a2b4ab776bf8d1e8e05d1cd88d6c857d686a7c4778f48bbff65fe8132bb95aad6f4631d7a9ac5d6e0b7d074a62eef50011950f3491f49e2ca9a0e630ab3784e8089ee5d07794c82559f85797a4507747f0e4daa6a55441dafa3e870a1df842be406c8a6b9b76eac15111baa4c36702b2e1afa40288c862576bd7931e6c497bf0a495f17c28e4bbf39a88cce01a7407372ab1581f91bc581cb3134028fbccf2514aa2ff81ea9cabd6abd280e1a860ec51cf63d59be7be3c1f0596f1e54765e3a5486d661960f2cd68b81c706ad03d74eef372d6ac5e71a689d6b14569e732c0e35ab39a315abe41f6c51b1fee1e5ec70b4150fdd4947a8342c8f4f9f5c68ab7906968cd47ab0c4546c3b15eb2383fc804baa0ddb1f6debe3534994eb0ba94bc518c081e9cfb0a2637e89f6fa9726e46d46f0dcd0274b41d67f0d5ee4f0c478e31aa98199c4d7db13888b37c8806ceb4ea61b5a77464496e066af20bbda377f6eef7f0252747f6fa2723243737fd039a7388531a0680f7f5bcdd310591624f9f2e97908af42cc7783244b26f0ccb35b630beaf7ca6019e5783d4c771b7b338667159cec9125be400414bd764373edcebfddfff41775bf2abf84a2d23eed651de5e2f456055ac295777aa00b7b1be1a685e35704f312364230307fdc23072c28a408f0477aa148002a9afcae40315ff7a865e9ba26eceecc2644c65625bb39833c54083a98be898d80b1d4a4e2c0182125146e4409eb67129183cdc2410e20ee823803fe74fb92c9d6206fcb359389cdd281abb30d7388847522cfca3d1b0819b205722925d5d9e04ab84357a2e3a18634e056b8a7c28f8ee76d8ce77b8fef8e857af1d2d137d36224e6387da991a28f56f5974379e2bc3a6f0770b4762f157a0f9b9ca2ab3a2ee560139e47b6870575fb0b3a6c52ce8baf421e32ae31a44401dbedf947ff43ad9c3b18c3c5f26083a80676634657e669dbf0a7fd2e1722f719b2c6a5a6aecfe36c3fd09f4c1e745d904b00dc347e91e0e70c34f4d1f140b2a0b0cf426ec6815ef67cd8bc4eddcb489f9b501e72419566c9cc5ccffe3efc01850c5394e1d9cfb7ab37e46dd571accaff9f339262f913a14b7dd920f3f8581f5376abebcfda18173e9d134ad36f45e66eddb9666ec45b15fa664135c56aa9c097037dba4fc8b958a7f1c6d3ceab230778cdc71550726d7d0e0cd908e3b30a8f1a8cca6c2b335886e3fa2383780afe8c6fda3088ccf13e22b6b66e7a238852dc67a7177680132a841fb9f8fe6b4c9c1482c1ff786ccaf77b04656d7182387a00e88fa58dd33129aa9e38cd56fb2f9d8f93a8f647718d43d98e03ea397e9f29e0f1988578b5bad7560c4d22ea71aee85b9f5138f7460ebd4e3f3a13e0f962436e4f7ac4088b764b09640b585be49ea49b15ac9bc70ccfe066d734c850d7c91152afb5383daf97ffd66bde8ad212722ccac1630b47ac5798f9762fdab6abc3d6c9b0e1948a97bcbba919c61de49c0edaffa436ceb0dee2115b486e1def6edb9c6e8a77ce01e00f0c5c409462f075f7c9a069fcec37e03cb6857eecb81df989e4a643ccd602ad0ffbfafdc0e17eeaa4cc2cb52ffa0e76169b6a1867c7e5c5862bec0ea8dd2efcc88408f9d7253ab0b71120afe953ca84f49baffa4188c33b8654b5c78834289e41a3d7c5bda8c51366d90035c8e65d3596c0b7910cc4b5d18a1e2c140d99c918a961a6fe743b67e21042b936e630c9f2977712c513bed761a1c3626b3aeddba3803ca3af52d85b978168b86a5bb4315a5a02fb4b833e078d88e3a67702a6e2c64f7c7da2eff78e42384cba5825187f949601dbc612dbb8ea3569457d8708b2f67c3b053947cf26d520206615b0bdc808299da3b64ebaefd5dcc17aaf74793c77604108d7202b6ccd39233c09da9540427676d5289d63612e71f84eacbc91ce10b0f361bd635a8e8ea553e446775f39fbc1b14777d7e0d47743c31fa3601acae98f2dd9082cb29b550a6c9acac80e4bf258de7e6e3a0ceaa45977a9242da3a2923d4c43a0c015566e5e8ecd838e9e859b0bbfb2e39fc58c781ef6f48d003511918d1ca4b2b5903dbfd0168e06449666bb57cb175c6cef5ef035eda9604d5db0dc1c1c96cbbe112924fdb546246bb35aa59afb41081dc45a93128251470fe988628304a13319d939362a17764f6d4a17700a280b808c28752e6c193e52de9ece396bed0d29e9fd4d66d2910997b57f4fc0b3cb7a3f4c28c989188e70e1d9b8493f543202ae0eaa9e8d7a78d6274a3b850b57c7183ca0710335df8cd2f1411745d7424de1b3b37076d35b3cbab1b8043e25a9a9699197190551646f03c5da01f6f5b76bca0d95bc7de3514268567110f9adfaea7548261c2076f178f71198c9ef5bffb41f13d12b81e26dfae0a6106584de48c3cb3058de0fe05305d19a5a914b949705bd72c51eaf31444aab23880eab272cf8350c799a55c4eabd2537e373922e3f5fc4ef82a79f1501569c92b318e2a578cb16d853814db079b37ccf5894519c4972c1ffb0e2d7c16d13b71a2d6d1e1e233b96adf8ceaac455572c84e83763c1d2b02780bbf40b8570254f2482a79066b17db221e8c05eee2a35fc44859123cffd567acd17a7bf4af1d1f8cc960b13a3414f7e86ed1637277021efd9cd2d02d488d46908332eb33c8299e4f80ac0acdcd91d13f48f6b5aab3da1b942ba6afaba61afe3b161bdee2571cb84b483a30920935a2119c884925aa4ccf1ddd0ad8759ef02c2967492e95a9a2d82d2a7d80b66d1d4ddbc773259f3dbbca79d37de7534d1aa802e8ae66cb534374c49f9938c0d46de7d95539995f2f464ed0b3e52f83a55060161be15ef60308487ed462f66ea0cbecdfffb6d4bf98dab7ac93656aa1ff2bc6cd7eeaaefac3e46360b6ddd2f5c5cfc5661c43d5af5b762a0b7503ffeac3bc8ed4b3e358e7bdbe45d701a4ef2ba8ce90d946f19e440731a869d823384ad824849713211e45ca4715967f7e036becb3f5f9791723bd2cc421808b51e6e97a7e283985f274c623ee7705d24e59e0cfd9455f531a95c2055c0ecc396d8fa18c9e746fcf2dcd22d3c46386fc1092bae85dbee2fd92a4707b4e2ad5e6dcce35e53960930c367110cd27bf33c1855b9df20073f620777c7c8e66c1fc3eaedb04db3b388902ced06b52f956e60a276041fde3b3c18488f38d12438fd274af089437810ec1251d17de6345dbb5e1c3700f325cb4e277dde8be0d9289620b6358a659f2bd19f2a7d4fb9f46e518a2eba34f2e3bdecc5b5fe8b43b110e1909cb972c6621a6e1b7f736e9f40628628c6fb672ba571d467e593f97838001b40e4ad7d321a51d98f3b0f2fe6960fac39b564d9fc7998209df280c25d0f2141b2fc487d80308d3e107a6833a8e5845d4675d33c92d23d907b660aeba2b96a6c599487a670bd251410ea3c2fcc45a5e46f6a273eab957c082ebd51cbfd63398abe00e5d9290500a806d7997538d8acae436a806f24aed11cf646fa8e822ec254c06a1b2a42b489107291bbb34962cb65298496c98a6bc7a718fc86994356e9d829ca9c3165cfc1ed9dd636b5a99da9ec80ca54101c9e992ab496e32b21b3263a8b0ca490eff6e761c2ba6738250e5bfb3df8c29c5b3a7ce848d284712b769c0b8969a4ef059d63ec77ac22b3bf7bfe59da2329c6b8a5e0afc2b5146563032d6ec47bbe36bc31a6d3927cd5f42afdbfee61704a988af0e851d4fd8709bc9110d9e38f6084cbb9e56f0f47e22c00a4462cae8f2ba5d97c86ee034dd55eea0a863bad86737f785ac088ceb1f485c68616db87a88741325acab9832acf7ca2e6cb4267a3eed4c1f3dfed3b40a2ad6f6fbda1819f37a3a46864973978126b427bf1b46361d818170731697c1d935dcd6a9f1f78a5092728d6097f411beddb08094e8efb027eae9371b2c39af5ceb4d58a8e589933f54bb641bdf1c6c81d3e698c4a075a4cadb263b3a7caed1ca8f0fe9ca66253e1c684b0f73549693a81301e922d1fe52aa910500ec30d1436d839a1c0e4fcadff6ec4cd41d97c3406e4f3d8f87825a3cbad6d3ec891f2019332fb9ac0bf8c8bfb7cb15b8880ce507008b5cd5393dfa597faaf37b6c2877b524c41fe2ae29b089ec4536789a5ab250dd325de1185d7c96701f207f4eba26e76bb749f4d90af01a8ed9e24e92e276e62aa6dbdc7a257bf3426ba5c84335af5935ab613b19305f8cb7ceb4d5a147ce0bb0200bd91b06f9dca1cb7d431a77412a2abbb51c6d8382a369e6aea5498add08609351638d6f8b4004b7ae54deb1a6a7d4bba20aeeebef822412a440f79e080ebc0cc180f154d597f0c1e50b6e9c4c9603e5516163a8d71dabcd26135cf9d10e8aa2b1ec0f166cd6e0c09383a07a8da24eecb92e9f757a37cf4337c17b6db099bcf1b8f8a980ec64a30d4938e2e77526bbc8e9181e4f9eff7dcc90bd8f34689e4bf53aec0fb4a992f8c6ba743ea4388b8a82ec4284ed1d8683456eab49e0b5900c377b79a366c05ac8dcaf0cb751c5747c192a1dc6a60fbf22db997e7a3ad5782dc1f78cdbb542bc0dfa9d0cbbcc0a44356d56b7db504c709cdb0ab44d508577c9c1647238b7795595047a433c924c4c2e803a403bd5effc86ff6345a20aac2e70196c5d70285be9eb616c4abdd665ec50bcfbb2d135ea13b417ed5b0076e4439faeda1ecf05661e7f7021e23fdb4212399303bd5b097ec9022b087b44e233cdccc80d008cb9def4af2d3da929f4bbba4457795bedf6a0cd69634e042b949c4c800f7d5e177f359222b88a52edb50d0d84fa5a61ee33241bc95e7155180f53f6faa261adb893e469daa407db2a2e06232d5bdf054234f2c60b33d62dc8d537d0ae8c7c1f14734fc82798565adc1b241313964389c96e46b73715a0bca47aa233b3b998a1a010e2ca8606c8229daa541897e76e0375a4750a7713b3250990d30adf92328ff5d5b9cc2b904676dcb515aa4bd9a412abf931559acb7d04adeef3197e8c6142ada87c601ba77ea1ffc8e217e5ca0", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="ab3cdb00f2d34bc80932c9975e84d393c7f59d03080bfc019eef0d9e35f2e922ddd2455c32a0dd70242356c1eb") (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0xfffffffffffffffd, {0x12, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x3ff]}, 0xfffffffffffff200, 0xe}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) write(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x1}}, 0x10) (rerun: 64) 6.641369394s ago: executing program 1 (id=240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="857846a6d7bcb43f859847bdcfabf578722072451119b9845ef091ed897a05b7bfd3a9244798824c0658eb2710cc9e0c571c64815355307ba71d531b2ea7c5cf991ce8bf58728256edd0abfe27a11c10"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x8000) sendfile(r1, r1, 0x0, 0x1000000201005) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000180)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x7e, 0x0, &(0x7f0000000200)="2d04294bc51619ecc39668288ad1cf84920dcf4365a805727a1483878267b2a68c4071b27c8ea9c733a86b7d7695bfa5f1a90ef61570819aabc06c9b70ab6661b7e8a8d116919de9b94dc2b69f5dca622d9761c54afc285b93e1d5bc201a9e780bbac004618e90d7d00dd3aec6bdf98b636960cc2d2439b4d421572719c9"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.517850066s ago: executing program 4 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) (async) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1, 0x5, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e100000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00020500080e050a000040"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x2800000, &(0x7f0000001180)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="ab3cdb00f2d34bc80932c9975e84d393c7f59d03080bfc019eef0d9e35f2e922ddd2455c32a0dd70242356c1eb") (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0xfffffffffffffffd, {0x12, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x3ff]}, 0xfffffffffffff200, 0xe}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) write(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x1}}, 0x10) (rerun: 64) 4.682931426s ago: executing program 1 (id=244): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000120, 0x0) r2 = eventfd2(0x1, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x48a0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x101ff, 0x4, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xeffffffffffffffc, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41902}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 4.567892607s ago: executing program 0 (id=248): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000001940)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) flock(r1, 0x6) 4.567353818s ago: executing program 0 (id=249): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$invalidate(0x15, r0) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '', 0x20, 0x1, 0x20, [0x35, 0x37, 0x0]}, 0x2f, r0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)={0x0, 0x0, @b}, 0x48, r1) keyctl$read(0xb, r2, &(0x7f0000000240)=""/116, 0x74) keyctl$join(0x1, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)={0x0, 0x0, @a}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) keyctl$chown(0x4, r0, 0x0, r4) r5 = request_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='load ', r0) r6 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc4}, &(0x7f00000005c0)={0x0, "b8ef9eb975dd2c52eacd742d150104bdd0e7fc9e2e51d42d6ab4bf6dd2a6a397dfd2753d1a68f94734108408eb33c551f2da35f40aa37414e5a1bc5eec491ff1", 0x1d}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000640)='big_key\x00', &(0x7f0000000680)=@secondary) add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000740)="55937498cdfdeccf4b97a201f6ce716deadf96f8b2641e6187af4877436dcd33cad2bd2df5e4060b46b9d75865c0c2e9b1eaeb2750cb9f506fa737b72c88beb949ebb240f9251dadfadaad7832c55ac55b94629862cb89c0c82bfd", 0x5b, r5) r7 = request_key(&(0x7f00000007c0)='cifs.idmap\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)='\x00', r5) r8 = request_key(&(0x7f0000000880)='id_legacy\x00', &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)='\x00', r7) keyctl$read(0xb, r8, &(0x7f0000000940)=""/34, 0x22) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f0000000980)='.&[\x00', &(0x7f00000009c0)) r9 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "02a0b08acab192db9e076d86c17b7635c3f480c21325ce6a170b6d2f20e194e9a3399989072444cb754f6e0e40a25ab59c264b33b358d460353f37b73bf17445", 0x26}, 0x48, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000b00)={r9, 0xe4, 0xd4}, &(0x7f0000000b40)={'enc=', 'oaep', ' hash=', {'xxhash64-generic\x00'}}, &(0x7f0000000bc0)="8bebfdc5b50a045126d33538e64e5c87599a5560c7600db09e8214258cb8a2fadf7d8a65725a632d15e8221472edb2ee81b8c2ded59d9e0abee0877e0ffec97c5d96b751688ecab5a569188335d8658e44e7b05e946a2a50432d0c21cc27ca71188f3c3a9ae1af60467df9152a56e9c3d0a61bef44e8264db63c622174507c304af5e2da1398cdfc686f82e031650c2d91d95bc255c3dab68d21c885ba7129e680ca3f2c8b3f1a7667740ddd14f041bf72acda1a433a06b45d188cc1c0c52ba2da71e90a60474a8f55e6a323a742d4883b8f22f90865b88e898b474bdf5ad56553529de6", &(0x7f0000000cc0)=""/212) r10 = request_key(&(0x7f0000000dc0)='cifs.idmap\x00', &(0x7f0000000e00)={'syz', 0x0}, &(0x7f0000000e40)='enc=', r6) keyctl$KEYCTL_MOVE(0x1e, r6, r9, r1, 0x0) keyctl$set_timeout(0xf, r5, 0x9) keyctl$set_timeout(0xf, 0x0, 0x0) keyctl$invalidate(0x15, r8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000e80)={r10, 0x83, 0x9f}, &(0x7f0000000ec0)={'enc=', 'pkcs1', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000f40)="6e7e24637ea0976181e6026abcfed664c024d2f10a501f667a9a013d0b1a7a0349d379247da810f8898cd8f37584643af4fd3cea4c69307fe7baa60054517beb19d375bb92433f0f8877bd5d73194dfd0f357935a723d338b67af7431cfa13f6bfd289253cf325204c9b7eb81eed29048dead270c97b815b97352993b911b83cf9dede", &(0x7f0000001000)="1cb09e16bd674c3c73fdcaf2aa29b5530f323897c7a97d6089ca5ebf1742549300fa78b8588ef99ffaa3fa82a0816f2c0c12a35797daf1d813615d1d1290d2ec6fcbfcd140489d97f1ecd61a18870e3edd89f977cd82d0132c3e1b89d5e99ade5497b9163631e3ecde869cf671465bb52eaf87a0a80fb7d72a58d8370224b3e4e8798ccbe43b7dd01fdfdf251489d713029c3626314a6c9bcafd484b10cfb6") ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000010c0)={0x400}) keyctl$KEYCTL_MOVE(0x1e, r8, r1, r1, 0x0) keyctl$set_timeout(0xf, r5, 0x6) 4.536706458s ago: executing program 1 (id=252): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x10ae) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 4.490557688s ago: executing program 4 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) (async) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1, 0x5, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e100000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00020500080e050a000040"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x2800000, &(0x7f0000001180)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="ab3cdb00f2d34bc80932c9975e84d393c7f59d03080bfc019eef0d9e35f2e922ddd2455c32a0dd70242356c1eb") (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0xfffffffffffffffd, {0x12, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x3ff]}, 0xfffffffffffff200, 0xe}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) write(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x1}}, 0x10) (rerun: 64) 4.465768219s ago: executing program 0 (id=253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x6a) fcntl$setstatus(r1, 0x4, 0x2800) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2020) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x5}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x40000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) ftruncate(r5, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="2a000200010078", 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 2.464581701s ago: executing program 0 (id=255): open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e720000fff3ffffffffff2c00"]) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0xffffffff, 0x2, 0x2, 0x6, 0x2, 0xfffffffc}) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 2.46273213s ago: executing program 1 (id=256): r0 = creat(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) fstat(r0, 0x0) setuid(0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x0, 0x24, 0x44, {0x44, 0x21, "2295245c98580a8a6b1b23af58306e26e0540803ee1e74dff78734d551fd417f85dbad6b2e9decdde0def8b7e13f581f4f813d75226b474a6fa848d269788dbfe68b"}}, &(0x7f0000000480)={0x0, 0x3, 0x13, @string={0x13, 0x3, "216b4d7b07773ad1e36eef8dd0adf5cd0c"}}}, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)={0x0, 0x1a, 0x98, "aa5ff3e456c340f09fdecb39febe141bacf675b79a5f5b8b5d356d2f82e1b723c257f309547920d423a2c93e7a01d175d9679551740b1c46f77eb512173a81ba486d21371a160128966e98ef4a9eefb1d41a25210cedb0461a96a2f3906eff0c48a0de5b74133dab1d3687ba39efd014a5d2124f6d4306d52fe08747d855dbde64137d929604370ef3c6c5b09316fda420c976eb50161288"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000740)={0x20, 0x81, 0x1, "d2"}, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000940)={0x20, 0x84, 0x1, "1b"}, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, &(0x7f0000000180)={0x0, 0xc, 0xb3, {0xb3, 0x8, "9d5c6aa0e6f6aa554b28253256a667243214d04b8a93e477847c23f4e1b65317e46a999448d56156c251bc10f5f6fcde31fabc62f75f8fbedf072a193b87f35d11467e9818cdeafaf8f0a0756266349fd3b3f736b45d8b85284d19e52a1af8225ad5a3b8379e730d6d5a939dbb9fb6e6ebc71f5ca3687ff472685ca1a80a1f991acbbf7d8a9c953069e9de2964bd4a8ffdb920aec4cb3bc5200e6a5fc5eb59a146490925aaf4dda779ab5aa0d83b265e00"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "b50379f0394cf34c6a07bea4a7d838f548cd564095d0f9606a394ad23826ad60cb0999d137339187214c7cc002a5b85ca46386640de8c1498f4fc6"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x88, "b88c7af3f793d3a65fb7137b88d93c2f9c25efdd0003d40fba212cb4b654b11b08f118dc9efd382aed59340567b04807030017f5b2e8ce37ef5dcf0263527219223633cda2c468d83b8c23f457c488f530ec1500460882491b2e8c15c16af14cd76ca7dd7bf531509fec08ed080b6b0d3b0eca8c3d9e96e4accd511cba16054885e036bbcb77c098"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000640)={0x20, 0x81, 0x1, "0e"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "c8a9"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "310667"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "0a55f35b"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "4e7f53"}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10ae) 2.438111141s ago: executing program 2 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x2200, 0xe0) finit_module(r1, &(0x7f0000000040)='\x00', 0x3) openat(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x112) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f0000000540)}) 2.320152373s ago: executing program 2 (id=259): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000005}) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0xc, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x22) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x6, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) close(r4) ioctl$KVM_CAP_HYPERV_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0xc080, 0x1b3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x10) renameat2(r5, &(0x7f0000000140)='./file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x3}], 0x50, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) ioctl$FIOCLEX(r1, 0x5451) r7 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) 2.309323954s ago: executing program 2 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000000001050500000000000000000a00003c0002802c00018014000300ff08000000000000000000000000000114000400fc0100002000000000000000000000000c00028005000100000000000800074000000000100006800c000380060002004e20000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000140)={0x5, 0x7, {0x53, 0x2, 0x3, {0x0, 0x5a6}, {0x3, 0x2}, @ramp={0x8, 0x0, {0x3, 0x9a3, 0x0, 0x2}}}, {0x52, 0x0, 0x7b9, {0x9}, {0x8, 0x64}, @ramp={0x7, 0x4, {0x6c, 0x40, 0x16}}}}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x40000, &(0x7f0000000480)=[{&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x2000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000600)=""/225, 0xe1}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000104, 0x40002100, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x5206, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000046a000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r4, 0x147a5000) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040), 0x4) 2.308599534s ago: executing program 4 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) (async) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1, 0x5, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e100000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00020500080e050a000040"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x2800000, &(0x7f0000001180)="720866aab75b41a0e7ac7f29d9a0588a64557e5cd012ced21610bc6fcff10b941d5572372091e09743dd68c8c486225c28c08134b89a31db22b71444719a1f06a333d9a64b3ef54ede5b80e9ce8ffeb22002a24c90f465902ed9450fbc81e4497b02b41412526d7ea6590599f30281aa82f2763ee43d7e9b0d3bf9e89215e929b397a526d8b45184b275b37280faf5407fd63a1cd1849011237d10221f5a65977df3ada09fcbffc04777b110fea48297866edb1224acc744da8f976c8a9b88b52ebbe7c73f35102910e29067f62b5635bb8f1a3d2075fdc0eafb420a39121bc38a91fb15f328d79c19e86d0ad1a711a82ca6137c1d4af3caa86748d08dbccaa6c09cb91d6137d6589bd089e93d1d94e459813560bd3a667b00f304ca151a5e5483a08a0f2f5a230ca12ad8c155c8ed21befe3d6bd8c381be4aedb401a4ebfdfed569769bcd97cb4cdfae6a4957562c7d12cf8eac32df26a12a417ba3c4243f93f2450e715d12f0b7ea4ae87ca180f4c6371415de4a97d61cd75fc700031a94b8afb10cfc8d2f27a8027d1cb1a0320459f45b5c017e24ccba01104d36821910325f432bdbc0847c56b30fec49d92142255a0574bc589d50e3542588e04045d77ca8159220bcb9799b67ad7c16ed61cd2f60862b22fd6a85b8b7536620735ceb3d1b81a1a87e2487bb93f28b8ab9d4d3be5140462170f3cd982c384904b29408e1c44943ffb1c2bcfc3c0e2629cbb60c5a035b43c76f229a2b4ab776bf8d1e8e05d1cd88d6c857d686a7c4778f48bbff65fe8132bb95aad6f4631d7a9ac5d6e0b7d074a62eef50011950f3491f49e2ca9a0e630ab3784e8089ee5d07794c82559f85797a4507747f0e4daa6a55441dafa3e870a1df842be406c8a6b9b76eac15111baa4c36702b2e1afa40288c862576bd7931e6c497bf0a495f17c28e4bbf39a88cce01a7407372ab1581f91bc581cb3134028fbccf2514aa2ff81ea9cabd6abd280e1a860ec51cf63d59be7be3c1f0596f1e54765e3a5486d661960f2cd68b81c706ad03d74eef372d6ac5e71a689d6b14569e732c0e35ab39a315abe41f6c51b1fee1e5ec70b4150fdd4947a8342c8f4f9f5c68ab7906968cd47ab0c4546c3b15eb2383fc804baa0ddb1f6debe3534994eb0ba94bc518c081e9cfb0a2637e89f6fa9726e46d46f0dcd0274b41d67f0d5ee4f0c478e31aa98199c4d7db13888b37c8806ceb4ea61b5a77464496e066af20bbda377f6eef7f0252747f6fa2723243737fd039a7388531a0680f7f5bcdd310591624f9f2e97908af42cc7783244b26f0ccb35b630beaf7ca6019e5783d4c771b7b338667159cec9125be400414bd764373edcebfddfff41775bf2abf84a2d23eed651de5e2f456055ac295777aa00b7b1be1a685e35704f312364230307fdc23072c28a408f0477aa148002a9afcae40315ff7a865e9ba26eceecc2644c65625bb39833c54083a98be898d80b1d4a4e2c0182125146e4409eb67129183cdc2410e20ee823803fe74fb92c9d6206fcb359389cdd281abb30d7388847522cfca3d1b0819b205722925d5d9e04ab84357a2e3a18634e056b8a7c28f8ee76d8ce77b8fef8e857af1d2d137d36224e6387da991a28f56f5974379e2bc3a6f0770b4762f157a0f9b9ca2ab3a2ee560139e47b6870575fb0b3a6c52ce8baf421e32ae31a44401dbedf947ff43ad9c3b18c3c5f26083a80676634657e669dbf0a7fd2e1722f719b2c6a5a6aecfe36c3fd09f4c1e745d904b00dc347e91e0e70c34f4d1f140b2a0b0cf426ec6815ef67cd8bc4eddcb489f9b501e72419566c9cc5ccffe3efc01850c5394e1d9cfb7ab37e46dd571accaff9f339262f913a14b7dd920f3f8581f5376abebcfda18173e9d134ad36f45e66eddb9666ec45b15fa664135c56aa9c097037dba4fc8b958a7f1c6d3ceab230778cdc71550726d7d0e0cd908e3b30a8f1a8cca6c2b335886e3fa2383780afe8c6fda3088ccf13e22b6b66e7a238852dc67a7177680132a841fb9f8fe6b4c9c1482c1ff786ccaf77b04656d7182387a00e88fa58dd33129aa9e38cd56fb2f9d8f93a8f647718d43d98e03ea397e9f29e0f1988578b5bad7560c4d22ea71aee85b9f5138f7460ebd4e3f3a13e0f962436e4f7ac4088b764b09640b585be49ea49b15ac9bc70ccfe066d734c850d7c91152afb5383daf97ffd66bde8ad212722ccac1630b47ac5798f9762fdab6abc3d6c9b0e1948a97bcbba919c61de49c0edaffa436ceb0dee2115b486e1def6edb9c6e8a77ce01e00f0c5c409462f075f7c9a069fcec37e03cb6857eecb81df989e4a643ccd602ad0ffbfafdc0e17eeaa4cc2cb52ffa0e76169b6a1867c7e5c5862bec0ea8dd2efcc88408f9d7253ab0b71120afe953ca84f49baffa4188c33b8654b5c78834289e41a3d7c5bda8c51366d90035c8e65d3596c0b7910cc4b5d18a1e2c140d99c918a961a6fe743b67e21042b936e630c9f2977712c513bed761a1c3626b3aeddba3803ca3af52d85b978168b86a5bb4315a5a02fb4b833e078d88e3a67702a6e2c64f7c7da2eff78e42384cba5825187f949601dbc612dbb8ea3569457d8708b2f67c3b053947cf26d520206615b0bdc808299da3b64ebaefd5dcc17aaf74793c77604108d7202b6ccd39233c09da9540427676d5289d63612e71f84eacbc91ce10b0f361bd635a8e8ea553e446775f39fbc1b14777d7e0d47743c31fa3601acae98f2dd9082cb29b550a6c9acac80e4bf258de7e6e3a0ceaa45977a9242da3a2923d4c43a0c015566e5e8ecd838e9e859b0bbfb2e39fc58c781ef6f48d003511918d1ca4b2b5903dbfd0168e06449666bb57cb175c6cef5ef035eda9604d5db0dc1c1c96cbbe112924fdb546246bb35aa59afb41081dc45a93128251470fe988628304a13319d939362a17764f6d4a17700a280b808c28752e6c193e52de9ece396bed0d29e9fd4d66d2910997b57f4fc0b3cb7a3f4c28c989188e70e1d9b8493f543202ae0eaa9e8d7a78d6274a3b850b57c7183ca0710335df8cd2f1411745d7424de1b3b37076d35b3cbab1b8043e25a9a9699197190551646f03c5da01f6f5b76bca0d95bc7de3514268567110f9adfaea7548261c2076f178f71198c9ef5bffb41f13d12b81e26dfae0a6106584de48c3cb3058de0fe05305d19a5a914b949705bd72c51eaf31444aab23880eab272cf8350c799a55c4eabd2537e373922e3f5fc4ef82a79f1501569c92b318e2a578cb16d853814db079b37ccf5894519c4972c1ffb0e2d7c16d13b71a2d6d1e1e233b96adf8ceaac455572c84e83763c1d2b02780bbf40b8570254f2482a79066b17db221e8c05eee2a35fc44859123cffd567acd17a7bf4af1d1f8cc960b13a3414f7e86ed1637277021efd9cd2d02d488d46908332eb33c8299e4f80ac0acdcd91d13f48f6b5aab3da1b942ba6afaba61afe3b161bdee2571cb84b483a30920935a2119c884925aa4ccf1ddd0ad8759ef02c2967492e95a9a2d82d2a7d80b66d1d4ddbc773259f3dbbca79d37de7534d1aa802e8ae66cb534374c49f9938c0d46de7d95539995f2f464ed0b3e52f83a55060161be15ef60308487ed462f66ea0cbecdfffb6d4bf98dab7ac93656aa1ff2bc6cd7eeaaefac3e46360b6ddd2f5c5cfc5661c43d5af5b762a0b7503ffeac3bc8ed4b3e358e7bdbe45d701a4ef2ba8ce90d946f19e440731a869d823384ad824849713211e45ca4715967f7e036becb3f5f9791723bd2cc421808b51e6e97a7e283985f274c623ee7705d24e59e0cfd9455f531a95c2055c0ecc396d8fa18c9e746fcf2dcd22d3c46386fc1092bae85dbee2fd92a4707b4e2ad5e6dcce35e53960930c367110cd27bf33c1855b9df20073f620777c7c8e66c1fc3eaedb04db3b388902ced06b52f956e60a276041fde3b3c18488f38d12438fd274af089437810ec1251d17de6345dbb5e1c3700f325cb4e277dde8be0d9289620b6358a659f2bd19f2a7d4fb9f46e518a2eba34f2e3bdecc5b5fe8b43b110e1909cb972c6621a6e1b7f736e9f40628628c6fb672ba571d467e593f97838001b40e4ad7d321a51d98f3b0f2fe6960fac39b564d9fc7998209df280c25d0f2141b2fc487d80308d3e107a6833a8e5845d4675d33c92d23d907b660aeba2b96a6c599487a670bd251410ea3c2fcc45a5e46f6a273eab957c082ebd51cbfd63398abe00e5d9290500a806d7997538d8acae436a806f24aed11cf646fa8e822ec254c06a1b2a42b489107291bbb34962cb65298496c98a6bc7a718fc86994356e9d829ca9c3165cfc1ed9dd636b5a99da9ec80ca54101c9e992ab496e32b21b3263a8b0ca490eff6e761c2ba6738250e5bfb3df8c29c5b3a7ce848d284712b769c0b8969a4ef059d63ec77ac22b3bf7bfe59da2329c6b8a5e0afc2b5146563032d6ec47bbe36bc31a6d3927cd5f42afdbfee61704a988af0e851d4fd8709bc9110d9e38f6084cbb9e56f0f47e22c00a4462cae8f2ba5d97c86ee034dd55eea0a863bad86737f785ac088ceb1f485c68616db87a88741325acab9832acf7ca2e6cb4267a3eed4c1f3dfed3b40a2ad6f6fbda1819f37a3a46864973978126b427bf1b46361d818170731697c1d935dcd6a9f1f78a5092728d6097f411beddb08094e8efb027eae9371b2c39af5ceb4d58a8e589933f54bb641bdf1c6c81d3e698c4a075a4cadb263b3a7caed1ca8f0fe9ca66253e1c684b0f73549693a81301e922d1fe52aa910500ec30d1436d839a1c0e4fcadff6ec4cd41d97c3406e4f3d8f87825a3cbad6d3ec891f2019332fb9ac0bf8c8bfb7cb15b8880ce507008b5cd5393dfa597faaf37b6c2877b524c41fe2ae29b089ec4536789a5ab250dd325de1185d7c96701f207f4eba26e76bb749f4d90af01a8ed9e24e92e276e62aa6dbdc7a257bf3426ba5c84335af5935ab613b19305f8cb7ceb4d5a147ce0bb0200bd91b06f9dca1cb7d431a77412a2abbb51c6d8382a369e6aea5498add08609351638d6f8b4004b7ae54deb1a6a7d4bba20aeeebef822412a440f79e080ebc0cc180f154d597f0c1e50b6e9c4c9603e5516163a8d71dabcd26135cf9d10e8aa2b1ec0f166cd6e0c09383a07a8da24eecb92e9f757a37cf4337c17b6db099bcf1b8f8a980ec64a30d4938e2e77526bbc8e9181e4f9eff7dcc90bd8f34689e4bf53aec0fb4a992f8c6ba743ea4388b8a82ec4284ed1d8683456eab49e0b5900c377b79a366c05ac8dcaf0cb751c5747c192a1dc6a60fbf22db997e7a3ad5782dc1f78cdbb542bc0dfa9d0cbbcc0a44356d56b7db504c709cdb0ab44d508577c9c1647238b7795595047a433c924c4c2e803a403bd5effc86ff6345a20aac2e70196c5d70285be9eb616c4abdd665ec50bcfbb2d135ea13b417ed5b0076e4439faeda1ecf05661e7f7021e23fdb4212399303bd5b097ec9022b087b44e233cdccc80d008cb9def4af2d3da929f4bbba4457795bedf6a0cd69634e042b949c4c800f7d5e177f359222b88a52edb50d0d84fa5a61ee33241bc95e7155180f53f6faa261adb893e469daa407db2a2e06232d5bdf054234f2c60b33d62dc8d537d0ae8c7c1f14734fc82798565adc1b241313964389c96e46b73715a0bca47aa233b3b998a1a010e2ca8606c8229daa541897e76e0375a4750a7713b3250990d30adf92328ff5d5b9cc2b904676dcb515aa4bd9a412abf931559acb7d04adeef3197e8c6142ada87c601ba77ea1ffc8e217e5ca0", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="ab3cdb00f2d34bc80932c9975e84d393c7f59d03080bfc019eef0d9e35f2e922ddd2455c32a0dd70242356c1eb") (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0xfffffffffffffffd, {0x12, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x3ff]}, 0xfffffffffffff200, 0xe}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) write(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x1}}, 0x10) (rerun: 64) 250.014026ms ago: executing program 0 (id=261): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8949, &(0x7f0000000040)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x200971}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') r5 = syz_open_procfs(0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) statx(r5, &(0x7f0000000300)='./file2\x00', 0x400, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000002c0)=@filename='./file0\x00', r7, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x127f, 0x3) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0xfd, 0x12, 0x7f, 0x80}, {0x7, 0x7, 0x7, 0x200}, {0x0, 0xbc, 0x3, 0x5}]}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2) 248.824706ms ago: executing program 1 (id=262): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x4000, 0x400, 0x80000001, 0x41, 0x0, [{0x60, 0x6, 0x5}, {0xfa, 0x2, 0x4, '\x00', 0x5}, {0x2, 0x6, 0x6, '\x00', 0x2}, {0xdf, 0x3, 0x3, '\x00', 0x2}, {0x6, 0x0, 0x5, '\x00', 0x2}, {0x9, 0x5, 0x1, '\x00', 0x6}, {0x9, 0x2, 0xf8, '\x00', 0x7}, {0x4b, 0xe3, 0xda, '\x00', 0xc}, {0xc6, 0x4, 0x2, '\x00', 0x9}, {0xc, 0x3, 0xfd, '\x00', 0x5}, {0x80, 0x9, 0x7, '\x00', 0x42}, {0xe, 0xff, 0x7f, '\x00', 0x2}, {0x6, 0x2, 0x0, '\x00', 0xc}, {0x6, 0x3, 0xa3, '\x00', 0xa2}, {0x7, 0xd, 0x2, '\x00', 0x8}, {0x80, 0x6, 0x7f, '\x00', 0x1}, {0x2, 0x5, 0x4, '\x00', 0x1}, {0x0, 0x7, 0x1, '\x00', 0x9}, {0x1, 0x6, 0x8, '\x00', 0x8}, {0x4, 0x6, 0x32, '\x00', 0x9f}, {0xe8, 0x6, 0x4, '\x00', 0x4}, {0x9, 0x40, 0x2, '\x00', 0xfd}, {0x7, 0x80, 0x6, '\x00', 0x9}, {0x8, 0x4, 0x7, '\x00', 0x2}]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x7ffe, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648e000) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$EVIOCGABS3F(r10, 0x8018457f, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) 247.394266ms ago: executing program 2 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x100c, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffff4, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 192.453617ms ago: executing program 2 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002640)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) close(0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 115.962878ms ago: executing program 2 (id=265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000002240)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/114, 0x85e3dbeac2ac4db6, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 86.393129ms ago: executing program 0 (id=266): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x1) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x118, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x2, 0x2c}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x30}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @release, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0x18}, @ptr={0x70742a85, 0xffff7fff, &(0x7f00000003c0)=""/188, 0xbc, 0x400, 0x1b}, @flat=@binder={0x73622a85, 0x10b, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}}, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x1, 0x2, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/32, 0x20, 0x0, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/192, 0xc0, 0x1, 0x37}}, &(0x7f0000000540)={0x0, 0x20, 0x48}}, 0x400}, @request_death={0x400c630e, 0x3}], 0x79, 0x0, &(0x7f00000007c0)="61fe7287da3dce10c27c40ac8e37a8fbcd5dc5b7446d6e149195b6cbe70ff43b5077107d4693691e715a99fef32c2e866fa3ed4b3860ae2317d94d5d9c3a8b2cd5ab2bf6afb1c3599a265cb4786861b6afb250ad43d87a960e84f69289d8e7d5d4e617b61d7583b7c590b473bde004546103b06bcb78f5d762"}) 8.05935ms ago: executing program 1 (id=267): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = getpid() r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mprotect(&(0x7f00007ea000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000880)={0x80, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f00000004c0), {0x41}, &(0x7f0000000540)=""/79, 0x4f, &(0x7f0000000780)=""/232, &(0x7f00000005c0)=[r0, r1, r2, r3], 0x4, {r4}}, 0x58) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0x81, 0x800, 0x100}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x128, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xd7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x1, 0x1, 0x2, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x69, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "09be325c"}, {0x5, 0x24, 0x0, 0x98b3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x8000, 0xa}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x80, 0x9, 0x3}, @mdlm_detail={0xd0, 0x24, 0x13, 0x56, "8fe537d8de608506e5fd884d9441f64c2974b7dad3e7b46dc75c1010499cccdcfd55eff14be9d08138d9d24642d3cf591ef627ba00b174412766db4d26ef4e588d09ca83c68e62e13512eb94e41deecaa4f5ff4c7b652583bb8afcbec569e7ebe48920d37126dc1a67da54a548e6fb99ed090add8eb48e32046794551939bd819ab160dacf9f5385e120285b64fe4dfc5286c91b3e32b9abd1a7c8b2d27d1ed5522e775d19c5205127a1584e3a93c77be2473f4359acb04e91140b3723f5f5cc61ff775c083a90f1278fad00"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x408, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xd, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x8, 0x6, 0x8, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x105e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x408}}, {0x48, &(0x7f0000000340)=ANY=[@ANYBLOB="4803562187367bf9d9bb1399f96867dc6f96884f475bcc738d42b5f1286828efe618e8696c4d0c88d29f9bb2efbdd25a0a732622b4d5deb1e46cc17cc99e1196f16fe430ab8e89da8ab8b29a2e3c6f34c66043c123897a4b69bc504a002ff8"]}, {0x1d, &(0x7f00000002c0)=@string={0x1d, 0x3, "3ed1ce2aac479467453f348fa218a5803ce2a9fb30cb4394d7eb92"}}]}) 0s ago: executing program 4 (id=149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket(0x1e, 0x4, 0x0) (async) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1, 0x1, 0x5, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e100000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x9, 0x4) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00020500080e050a000040"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x2800000, &(0x7f0000001180)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="ab3cdb00f2d34bc80932c9975e84d393c7f59d03080bfc019eef0d9e35f2e922ddd2455c32a0dd70242356c1eb") (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1, 0x12, 0xfffffffffffffffd, {0x12, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @hdata="616ff9858894b3cc22f06359ecc9021a2d6b4a2d6f227d034e4c403b813cab2a5498ab146a6c5c5afa4903138e87754cf7aff4b8", {0x0, @local, 0xb289, 0x1, [0x3ff]}, 0xfffffffffffff200, 0xe}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) write(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) (async, rerun: 64) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x1}}, 0x10) (rerun: 64) kernel console output (not intermixed with test programs): cess permissive=1 [ 17.461322][ T36] audit: type=1400 audit(1753528041.680:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 26.061193][ T36] audit: type=1400 audit(1753528050.290:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.062769][ T281] cgroup: Unknown subsys name 'net' [ 26.083885][ T36] audit: type=1400 audit(1753528050.290:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.111371][ T36] audit: type=1400 audit(1753528050.320:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.111570][ T281] cgroup: Unknown subsys name 'devices' [ 26.295424][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.301090][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.396341][ T36] audit: type=1400 audit(1753528050.630:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.419584][ T36] audit: type=1400 audit(1753528050.630:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.444332][ T36] audit: type=1400 audit(1753528050.630:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.471462][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.480330][ T36] audit: type=1400 audit(1753528050.710:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.505909][ T36] audit: type=1400 audit(1753528050.710:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.549930][ T36] audit: type=1400 audit(1753528050.780:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.550538][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.575463][ T36] audit: type=1400 audit(1753528050.780:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.638742][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.645977][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.653123][ T288] bridge_slave_0: entered allmulticast mode [ 27.661350][ T288] bridge_slave_0: entered promiscuous mode [ 27.668031][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.675153][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.682256][ T288] bridge_slave_1: entered allmulticast mode [ 27.688579][ T288] bridge_slave_1: entered promiscuous mode [ 27.805304][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.812380][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.819520][ T293] bridge_slave_0: entered allmulticast mode [ 27.825810][ T293] bridge_slave_0: entered promiscuous mode [ 27.835605][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.842848][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.849941][ T293] bridge_slave_1: entered allmulticast mode [ 27.856430][ T293] bridge_slave_1: entered promiscuous mode [ 27.900555][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.907747][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.914953][ T295] bridge_slave_0: entered allmulticast mode [ 27.921306][ T295] bridge_slave_0: entered promiscuous mode [ 27.927879][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.934971][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.942044][ T295] bridge_slave_1: entered allmulticast mode [ 27.948414][ T295] bridge_slave_1: entered promiscuous mode [ 27.989473][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.996592][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.004143][ T294] bridge_slave_0: entered allmulticast mode [ 28.010416][ T294] bridge_slave_0: entered promiscuous mode [ 28.020516][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.027596][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.034769][ T294] bridge_slave_1: entered allmulticast mode [ 28.041017][ T294] bridge_slave_1: entered promiscuous mode [ 28.127234][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.134440][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.141927][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.149009][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.198177][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.205277][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.212564][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.219661][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.236892][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.243969][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.251243][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.258304][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.269758][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.276856][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.284184][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.291260][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.335943][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.344365][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.351721][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.359075][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.366777][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.374105][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.381295][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.388767][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.402514][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.409590][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.417311][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.424365][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.439906][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.446984][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.465837][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.472927][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.486523][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.493607][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.501541][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.508619][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.516594][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.523674][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.533422][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.540469][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.602157][ T288] veth0_vlan: entered promiscuous mode [ 28.614691][ T293] veth0_vlan: entered promiscuous mode [ 28.624215][ T295] veth0_vlan: entered promiscuous mode [ 28.646820][ T295] veth1_macvtap: entered promiscuous mode [ 28.660326][ T288] veth1_macvtap: entered promiscuous mode [ 28.668598][ T293] veth1_macvtap: entered promiscuous mode [ 28.677809][ T294] veth0_vlan: entered promiscuous mode [ 28.716624][ T294] veth1_macvtap: entered promiscuous mode [ 28.737934][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.796461][ T335] netlink: 'syz.1.2': attribute type 33 has an invalid length. [ 28.810607][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.834438][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.907974][ T344] 9pnet_fd: Insufficient options for proto=fd [ 28.919502][ T338] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.919531][ T338] rust_binder: Read failure Err(EFAULT) in pid:2 [ 29.362750][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.500429][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 29.509620][ T354] netlink: 'syz.3.6': attribute type 28 has an invalid length. [ 29.550193][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.575192][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.584854][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.603440][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.611577][ T9] usb 2-1: SerialNumber: syz [ 29.711362][ T362] rust_binder: Error in use_page_slow: ESRCH [ 29.711387][ T362] rust_binder: use_range failure ESRCH [ 29.717698][ T362] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 29.723372][ T362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.778126][ T365] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 29.798309][ T362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:5 [ 29.818808][ T352] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5'. [ 29.974370][ T9] usb 2-1: USB disconnect, device number 2 [ 29.995867][ T360] Zero length message leads to an empty skb [ 30.058460][ T371] 9pnet_fd: Insufficient options for proto=fd [ 30.083942][ T374] binder: Bad value for 'stats' [ 30.142763][ T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.226993][ T377] __vm_enough_memory: pid: 377, comm: syz.0.13, bytes: 18014402804453376 not enough memory for the allocation [ 30.251475][ T379] incfs: Backing dir is not set, filesystem can't be mounted. [ 30.259128][ T379] incfs: mount failed -2 [ 30.292846][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 30.299283][ T330] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 30.307728][ T330] usb 3-1: config 0 has no interface number 0 [ 30.314158][ T330] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 30.324473][ T330] usb 3-1: config 0 interface 196 has no altsetting 0 [ 30.332948][ T330] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 30.342041][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.350362][ T330] usb 3-1: Product: syz [ 30.354759][ T330] usb 3-1: Manufacturer: syz [ 30.359617][ T330] usb 3-1: SerialNumber: syz [ 30.365041][ T330] usb 3-1: config 0 descriptor?? [ 30.370363][ T367] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.514237][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.525527][ T388] mmap: syz.1.18 (388) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.567602][ T390] ======================================================= [ 30.567602][ T390] WARNING: The mand mount option has been deprecated and [ 30.567602][ T390] and is ignored by this kernel. Remove the mand [ 30.567602][ T390] option from the mount to silence this warning. [ 30.567602][ T390] ======================================================= [ 30.672722][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 30.684057][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.702992][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.725724][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 30.742826][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.763641][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.773216][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.781634][ T10] usb 1-1: SerialNumber: syz [ 30.794468][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 30.804837][ T330] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 2 bytes [ 30.811140][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 30.816669][ T330] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 30.821569][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 30.902721][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.032766][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.052739][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 31.059049][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.072716][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 31.093158][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 31.104621][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 31.113710][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.125206][ T31] usb 2-1: config 0 descriptor?? [ 31.130545][ T395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.143692][ T31] hub 2-1:0.0: USB hub found [ 31.182739][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 31.189062][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 31.200780][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 31.213351][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 31.222458][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.230596][ T9] usb 4-1: Product: syz [ 31.234856][ T9] usb 4-1: Manufacturer: syz [ 31.239491][ T9] usb 4-1: SerialNumber: syz [ 31.245469][ T9] usb 4-1: config 0 descriptor?? [ 31.250582][ T404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 31.261946][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 31.261962][ T36] audit: type=1400 audit(1753528055.490:163): avc: denied { create } for pid=380 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.287354][ T36] audit: type=1400 audit(1753528055.490:164): avc: denied { write } for pid=380 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.338630][ T31] hub 2-1:0.0: 2 ports detected [ 31.368617][ T405] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.381789][ T36] audit: type=1400 audit(1753528055.610:165): avc: denied { read write } for pid=366 comm="syz.2.10" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.392860][ T9] usb 1-1: USB disconnect, device number 2 [ 31.405820][ T36] audit: type=1400 audit(1753528055.610:166): avc: denied { open } for pid=366 comm="syz.2.10" path="/2/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.435591][ T36] audit: type=1400 audit(1753528055.610:167): avc: denied { bind } for pid=366 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.454989][ T36] audit: type=1400 audit(1753528055.610:168): avc: denied { name_bind } for pid=366 comm="syz.2.10" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 31.476015][ T36] audit: type=1400 audit(1753528055.610:169): avc: denied { node_bind } for pid=366 comm="syz.2.10" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 31.498000][ T36] audit: type=1400 audit(1753528055.620:170): avc: denied { write } for pid=366 comm="syz.2.10" laddr=ff02::1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.565480][ T31] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 31.571925][ T31] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 31.580871][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 31.586879][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.613064][ T31] usb 2-1: USB disconnect, device number 3 [ 31.827105][ T36] audit: type=1400 audit(1753528056.060:171): avc: denied { map } for pid=398 comm="syz.3.22" path="/proc/19/task/22/status" dev="proc" ino=4505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 31.909205][ T9] usb 4-1: USB disconnect, device number 2 [ 31.927638][ T408] incfs: Backing dir is not set, filesystem can't be mounted. [ 31.937320][ T408] incfs: mount failed -2 [ 31.981812][ T36] audit: type=1400 audit(1753528056.210:172): avc: denied { write } for pid=409 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 32.185904][ T425] sock: sock_set_timeout: `syz.1.28' (pid 425) tries to set negative timeout [ 32.372868][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 32.523956][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.534575][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.545137][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.554367][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.562488][ T9] usb 4-1: Product: syz [ 32.566737][ T9] usb 4-1: Manufacturer: syz [ 32.571352][ T9] usb 4-1: SerialNumber: syz [ 32.815824][ T9] usb 4-1: 0:2 : does not exist [ 32.823537][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 32.836183][ T9] usb 4-1: USB disconnect, device number 3 [ 32.847531][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.904197][ T330] usb 3-1: USB disconnect, device number 2 [ 32.959624][ T431] input: syz0 as /devices/virtual/input/input5 [ 33.072753][ T438] incfs: Backing dir is not set, filesystem can't be mounted. [ 33.080305][ T438] incfs: mount failed -2 [ 33.308097][ T445] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 33.537747][ T63] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.553387][ T63] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.692728][ T63] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.811722][ T471] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 18 [ 33.819057][ T471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:19 [ 33.842760][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.860842][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.869300][ T63] usb 4-1: config 4 has an invalid interface number: 1 but max is 0 [ 33.877346][ T63] usb 4-1: config 4 has no interface number 0 [ 33.883470][ T63] usb 4-1: config 4 interface 1 altsetting 131 endpoint 0x3 has invalid maxpacket 59676, setting to 1024 [ 33.895223][ T63] usb 4-1: config 4 interface 1 altsetting 131 bulk endpoint 0x3 has invalid maxpacket 1024 [ 33.905334][ T63] usb 4-1: config 4 interface 1 altsetting 131 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 33.917004][ T63] usb 4-1: config 4 interface 1 altsetting 131 endpoint 0x8D has an invalid bInterval 124, changing to 10 [ 33.928499][ T63] usb 4-1: config 4 interface 1 altsetting 131 endpoint 0x8D has invalid maxpacket 1028, setting to 1024 [ 33.945886][ T63] usb 4-1: config 4 interface 1 altsetting 131 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 33.953028][ T475] /dev/nullb0: Can't lookup blockdev [ 33.965236][ T63] usb 4-1: config 4 interface 1 has no altsetting 0 [ 33.973581][ T63] usb 4-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=c3.98 [ 33.982797][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.990788][ T63] usb 4-1: Product: syz [ 33.995052][ T63] usb 4-1: Manufacturer: syz [ 33.999660][ T63] usb 4-1: SerialNumber: syz [ 34.005499][ T456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.012727][ T456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.022694][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 34.028856][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 34.037612][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.047856][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.058758][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.067913][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.075988][ T9] usb 1-1: Product: syz [ 34.080240][ T9] usb 1-1: Manufacturer: syz [ 34.084913][ T9] usb 1-1: SerialNumber: syz [ 34.086433][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.221084][ T456] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 34.224282][ T63] ftdi_sio 4-1:4.1: FTDI USB Serial Device converter detected [ 34.240257][ T63] ftdi_sio ttyUSB0: unknown device type: 0xc398 [ 34.242737][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.248539][ T63] usb 4-1: USB disconnect, device number 4 [ 34.260789][ T63] ftdi_sio 4-1:4.1: device disconnected [ 34.272722][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 34.279067][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.290331][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.300699][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.313655][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.325151][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.334618][ T330] usb 3-1: config 0 descriptor?? [ 34.402715][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 34.408871][ T31] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 34.419155][ T31] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 34.428277][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.438398][ T31] hub 2-1:32.0: bad descriptor, ignoring hub [ 34.444584][ T31] hub 2-1:32.0: probe with driver hub failed with error -5 [ 34.543839][ T9] usb 1-1: 0:2 : does not exist [ 34.748160][ T478] rust_binder: Error while translating object. [ 34.748211][ T478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.754566][ T478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 34.783507][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.946572][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.955262][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.964760][ T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.973862][ T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.036897][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.045513][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.264196][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 35.280739][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.296650][ T330] usb 3-1: USB disconnect, device number 3 [ 35.308141][ T494] loop7: detected capacity change from 0 to 7 [ 35.319807][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 35.328995][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 35.337170][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 35.346378][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 35.354261][ T494] loop7: unable to read partition table [ 35.360622][ T494] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 35.394384][ T495] loop7: detected capacity change from 7 to 8 [ 35.592749][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.742749][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 35.749840][ T330] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 35.759796][ T330] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 35.769617][ T330] usb 3-1: config 1 interface 0 has no altsetting 0 [ 35.777884][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 35.787014][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.795068][ T330] usb 3-1: Product: syz [ 35.799258][ T330] usb 3-1: Manufacturer: 셗䓃䏏絝탽䫝沭ᖙᷝᦚ艫ଘ棏룓嵴Ἒ䶬㳽겝㒟밉풌쯙Ǧﹺﱙ靇୲㮿ᲃ⦞抿Ⱨ잏♰閼酳늒巷憶渜෣윧号귞ᛣ⏂푏演⏗ⅻ◩隠웨伓㥦閇侒월ㆩ츶㎔蔃鸉볶賆㵰둲⢫է釧ᷳ [ 35.824696][ T330] usb 3-1: SerialNumber: syz [ 35.830712][ T492] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.838124][ T492] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.062706][ T330] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 9 proto 3 vid 0x0525 pid 0xA4A8 [ 36.070822][ T500] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.073495][ T500] rust_binder: Read failure Err(EFAULT) in pid:28 [ 36.077218][ T330] usb 3-1: USB disconnect, device number 4 [ 36.095403][ T330] usblp0: removed [ 36.559238][ T9] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 36.582757][ T9] usb 1-1: USB disconnect, device number 3 [ 36.604181][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.809027][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 36.809046][ T36] audit: type=1400 audit(1753528061.040:207): avc: denied { setopt } for pid=513 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.840378][ T36] audit: type=1400 audit(1753528061.070:208): avc: denied { write } for pid=513 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.859813][ T481] Bluetooth: hci0: command 0x1003 tx timeout [ 36.865966][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.902039][ T36] audit: type=1400 audit(1753528061.120:209): avc: denied { read } for pid=513 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.082023][ T36] audit: type=1400 audit(1753528061.310:210): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 37.112215][ T31] usb 2-1: USB disconnect, device number 4 [ 37.133506][ T526] /dev/rnullb0: Can't open blockdev [ 37.140771][ T526] /dev/rnullb0: Can't open blockdev [ 37.152885][ T36] audit: type=1400 audit(1753528061.330:211): avc: denied { write } for pid=520 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.189454][ T532] rust_binder: 524 RLIMIT_NICE not set [ 37.190853][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.218974][ T531] 9pnet_fd: Insufficient options for proto=fd [ 37.223707][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.251033][ T36] audit: type=1400 audit(1753528061.480:212): avc: denied { ioctl } for pid=523 comm="syz.1.61" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 37.378749][ T63] rust_binder: 523: removing orphan mapping 0:40 [ 37.387918][ T536] kvm: MWAIT instruction emulated as NOP! [ 37.558026][ T36] audit: type=1400 audit(1753528061.790:213): avc: denied { mount } for pid=559 comm="syz.2.72" name="/" dev="overlay" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.586689][ T36] audit: type=1400 audit(1753528061.800:214): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.612733][ T63] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.627007][ T36] audit: type=1400 audit(1753528061.860:215): avc: denied { write } for pid=565 comm="syz.2.74" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 37.669212][ T575] fuse: Bad value for 'user_id' [ 37.679204][ T575] fuse: Bad value for 'user_id' [ 37.686719][ T579] rust_binder: 566 RLIMIT_NICE not set [ 37.687266][ T36] audit: type=1400 audit(1753528061.920:216): avc: denied { map } for pid=562 comm="syz.1.73" path="socket:[3863]" dev="sockfs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 37.689943][ T566] tipc: Started in network mode [ 37.732380][ T566] tipc: Node identity 3c, cluster identity 4711 [ 37.740025][ T566] tipc: Node number set to 60 [ 37.782106][ T589] netlink: 'syz.1.82': attribute type 7 has an invalid length. [ 37.802744][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 37.817411][ T63] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 37.827414][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.834632][ T592] bridge0: port 3(veth1_macvtap) entered blocking state [ 37.837674][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.845735][ T592] bridge0: port 3(veth1_macvtap) entered disabled state [ 37.854596][ T594] syz.2.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.869596][ T592] veth1_macvtap: entered allmulticast mode [ 37.874115][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.877393][ T592] veth1_macvtap: left allmulticast mode [ 37.889766][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.908317][ T63] usb 4-1: Product: syz [ 37.918023][ T63] usb 4-1: Manufacturer: syz [ 37.922949][ T63] usb 4-1: SerialNumber: syz [ 38.325652][ T625] capability: warning: `syz.2.91' uses deprecated v2 capabilities in a way that may be insecure [ 38.336578][ T63] usb 4-1: 0:2 : does not exist [ 38.572733][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.650735][ T633] rust_binder: inc_ref_done called when no active inc_refs [ 38.663351][ T635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.95'. [ 38.680167][ T635] rust_binder: 80: no such ref 2 [ 38.713964][ T642] fuse: Unknown parameter 'fy0x0000000000000005' [ 38.725459][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 38.739286][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.748876][ T9] usb 3-1: Product: syz [ 38.753179][ T9] usb 3-1: Manufacturer: syz [ 38.757895][ T9] usb 3-1: SerialNumber: syz [ 39.877250][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 39.900703][ T671] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 40.079157][ T684] binder: Unknown parameter 'r ' [ 40.342741][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.472737][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.712769][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.952745][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.962921][ T9] usb 4-1: USB disconnect, device number 5 [ 41.082752][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.184922][ T695] rust_binder: Write failure EINVAL in pid:67 [ 41.322791][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.341093][ T10] usb 3-1: USB disconnect, device number 5 [ 41.398990][ T707] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.447258][ T31] usb usb2-port1: attempt power cycle [ 41.682721][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.842832][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 41.849695][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 41.858498][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.868826][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.879258][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.888488][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.897029][ T9] usb 1-1: Product: syz [ 41.901257][ T9] usb 1-1: Manufacturer: syz [ 41.912646][ T9] usb 1-1: SerialNumber: syz [ 41.942755][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.950345][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.973832][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.992357][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 41.992376][ T36] audit: type=1400 audit(1753528066.220:244): avc: denied { ioctl } for pid=727 comm="syz.3.125" path="socket:[6437]" dev="sockfs" ino=6437 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.104123][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.112738][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 42.119136][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.130178][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.140034][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.152991][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.162063][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.171075][ T45] usb 3-1: config 0 descriptor?? [ 42.232721][ T476] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.341397][ T9] usb 1-1: 0:2 : does not exist [ 42.342767][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.362739][ T476] usb 4-1: device descriptor read/64, error -71 [ 42.373739][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.503780][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.583145][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 42.589141][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 42.598054][ T45] usb 3-1: USB disconnect, device number 6 [ 42.603962][ T476] usb 4-1: device descriptor read/64, error -71 [ 42.612960][ T31] usb usb2-port1: unable to enumerate USB device [ 42.842754][ T476] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.972745][ T476] usb 4-1: device descriptor read/64, error -71 [ 43.122118][ T731] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 43.129759][ T731] rust_binder: Write failure EINVAL in pid:130 [ 43.211149][ T36] audit: type=1400 audit(1753528067.440:245): avc: denied { name_bind } for pid=736 comm="syz.2.129" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 43.238579][ T476] usb 4-1: device descriptor read/64, error -71 [ 43.340820][ T740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 43.352774][ T476] usb usb4-port1: attempt power cycle [ 43.516684][ T750] random: crng reseeded on system resumption [ 43.517146][ T36] audit: type=1400 audit(1753528067.750:246): avc: denied { append } for pid=749 comm="syz.2.133" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.532760][ T45] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 43.546071][ T36] audit: type=1400 audit(1753528067.750:247): avc: denied { open } for pid=749 comm="syz.2.133" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.594928][ T753] rust_binder: inc_ref_done called when no active inc_refs [ 43.594958][ T753] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 43.609562][ T753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 43.692831][ T476] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 43.723884][ T476] usb 4-1: device descriptor read/8, error -71 [ 43.730102][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.740349][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.754747][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 43.763830][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 43.771901][ T45] usb 2-1: Product: syz [ 43.776116][ T45] usb 2-1: Manufacturer: syz [ 43.780839][ T45] usb 2-1: SerialNumber: syz [ 43.862732][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.863852][ T476] usb 4-1: device descriptor read/8, error -71 [ 43.989520][ T45] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 44.012748][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 44.019096][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.030223][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.039328][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.047374][ T9] usb 3-1: SerialNumber: syz [ 44.054453][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 44.060388][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 44.112800][ T476] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.133783][ T476] usb 4-1: device descriptor read/8, error -71 [ 44.191595][ T36] audit: type=1400 audit(1753528068.420:248): avc: denied { read write } for pid=732 comm="syz.1.127" name="lp0" dev="devtmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 44.215262][ T36] audit: type=1400 audit(1753528068.420:249): avc: denied { open } for pid=732 comm="syz.1.127" path="/dev/usb/lp0" dev="devtmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 44.239604][ T9] usb 2-1: USB disconnect, device number 9 [ 44.246535][ T9] usblp0: removed [ 44.273762][ T476] usb 4-1: device descriptor read/8, error -71 [ 44.382929][ T476] usb usb4-port1: unable to enumerate USB device [ 44.512776][ T10] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 44.520915][ T10] usb 3-1: device reset changed ep0 maxpacket size! [ 44.527848][ T10] usb 3-1: USB disconnect, device number 7 [ 44.822768][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.965753][ T476] usb 1-1: USB disconnect, device number 4 [ 44.983448][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 44.993182][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.001821][ T10] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 45.013978][ T10] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 45.031834][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 45.040219][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 45.050191][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.058449][ T10] usb 3-1: Product: syz [ 45.062723][ T10] usb 3-1: Manufacturer: syz [ 45.067345][ T10] usb 3-1: SerialNumber: syz [ 45.073372][ T756] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.237222][ T36] audit: type=1400 audit(1753528069.470:250): avc: denied { mount } for pid=771 comm="syz.3.141" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.237552][ T772] fuse: Unknown parameter '' [ 45.260000][ T36] audit: type=1400 audit(1753528069.470:251): avc: denied { mounton } for pid=771 comm="syz.3.141" path="/27/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.281266][ T756] binder: Bad value for 'max' [ 45.291078][ T476] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.293500][ T756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=756 comm=syz.2.135 [ 45.313556][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 45.320045][ T773] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 45.326568][ T10] usb 3-1: USB disconnect, device number 8 [ 45.341071][ T10] usblp0: removed [ 45.442720][ T476] usb 1-1: Using ep0 maxpacket: 32 [ 45.448961][ T476] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 45.457372][ T476] usb 1-1: config 0 has no interface number 0 [ 45.463516][ T476] usb 1-1: config 0 interface 196 has no altsetting 0 [ 45.471806][ T476] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 45.480924][ T476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.488960][ T476] usb 1-1: Product: syz [ 45.493167][ T476] usb 1-1: Manufacturer: syz [ 45.497865][ T476] usb 1-1: SerialNumber: syz [ 45.503769][ T476] usb 1-1: config 0 descriptor?? [ 45.626421][ T775] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 96, limit: 96, size: 86) [ 45.626447][ T775] rust_binder: Error while translating object. [ 45.636979][ T775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.643276][ T775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 45.712890][ T476] ipheth 1-1:0.196: Unable to find endpoints [ 45.729270][ T476] usb 1-1: USB disconnect, device number 5 [ 46.112836][ T329] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.133918][ T12] bridge_slave_1: left allmulticast mode [ 46.139608][ T12] bridge_slave_1: left promiscuous mode [ 46.145517][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.153549][ T12] bridge_slave_0: left allmulticast mode [ 46.159326][ T12] bridge_slave_0: left promiscuous mode [ 46.165345][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.252732][ T36] audit: type=1400 audit(1753528070.480:252): avc: denied { mounton } for pid=792 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.270421][ T794] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006' [ 46.282104][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 46.288512][ T329] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 46.307030][ T12] veth1_macvtap: left promiscuous mode [ 46.317942][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.328266][ T12] veth0_vlan: left promiscuous mode [ 46.333897][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.344460][ T329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.374873][ T36] audit: type=1400 audit(1753528070.610:253): avc: denied { shutdown } for pid=793 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.375703][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.432874][ T329] usb 3-1: Product: syz [ 46.438343][ T329] usb 3-1: Manufacturer: syz [ 46.443059][ T329] usb 3-1: SerialNumber: syz [ 46.814610][ T838] rust_binder: 831 RLIMIT_NICE not set [ 46.854203][ T841] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 46.856522][ T329] usb 3-1: 0:2 : does not exist [ 46.890805][ T843] binder: Bad value for 'stats' [ 46.933793][ T845] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.933820][ T845] rust_binder: Read failure Err(EFAULT) in pid:161 [ 47.025206][ T848] rust_binder: 163: no such ref 0 [ 47.664257][ T329] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 47.677734][ T329] usb 3-1: USB disconnect, device number 9 [ 48.085276][ T857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 48.114210][ T862] binder: Bad value for 'max' [ 48.153103][ T864] cgroup: subsys name conflicts with all [ 48.159338][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 48.159361][ T36] audit: type=1400 audit(1753528072.390:259): avc: denied { create } for pid=863 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.217181][ T36] audit: type=1400 audit(1753528072.390:260): avc: denied { connect } for pid=863 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.247967][ T36] audit: type=1400 audit(1753528072.440:261): avc: denied { write } for pid=866 comm="syz.2.172" path="socket:[7322]" dev="sockfs" ino=7322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.281046][ T869] KVM: debugfs: duplicate directory 869-5 [ 48.307517][ T877] raw_sendmsg: syz.0.175 forgot to set AF_INET. Fix it! [ 48.313073][ T329] rust_binder: 866: removing orphan mapping 0:4120 [ 48.966720][ T36] audit: type=1400 audit(1753528073.200:262): avc: denied { getopt } for pid=881 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.989708][ T889] SELinux: policydb magic number 0xda31be78 does not match expected magic number 0xf97cff8c [ 49.000105][ T889] SELinux: failed to load policy [ 49.005646][ T36] audit: type=1400 audit(1753528073.220:263): avc: denied { load_policy } for pid=885 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.087211][ T894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.107152][ T10] rust_binder: 891: removing orphan mapping 0:4216 [ 49.138088][ T896] tmpfs: Bad value for 'nr_blocks' [ 49.315984][ T897] exFAT-fs (rnullb0): invalid boot record signature [ 49.322635][ T897] exFAT-fs (rnullb0): failed to read boot sector [ 49.329285][ T897] exFAT-fs (rnullb0): failed to recognize exfat type [ 49.913688][ T36] audit: type=1400 audit(1753528074.140:264): avc: denied { write } for pid=901 comm="syz.2.182" path="socket:[7480]" dev="sockfs" ino=7480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.953075][ T907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.953387][ T907] rust_binder: Failed to allocate buffer. len:4128, is_oneway:true [ 49.968069][ T907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 49.976208][ T907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:134 [ 49.983624][ T905] input: syz1 as /devices/virtual/input/input6 [ 50.022138][ T36] audit: type=1400 audit(1753528074.250:265): avc: denied { bind } for pid=912 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.966375][ T36] audit: type=1400 audit(1753528075.200:266): avc: denied { ioctl } for pid=924 comm="syz.0.188" path="socket:[7578]" dev="sockfs" ino=7578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.966994][ T927] process 'syz.2.190' launched '/dev/fd/7' with NULL argv: empty string added [ 51.007045][ T927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=73 sclass=netlink_tcpdiag_socket pid=927 comm=syz.2.190 [ 51.019906][ T927] binder: Unknown parameter 'kw' [ 51.048867][ T36] audit: type=1400 audit(1753528075.200:267): avc: denied { execute } for pid=925 comm="syz.2.190" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.073125][ T36] audit: type=1400 audit(1753528075.230:268): avc: denied { execute_no_trans } for pid=925 comm="syz.2.190" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.074932][ T938] FAULT_INJECTION: forcing a failure. [ 51.074932][ T938] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.124279][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.1.192 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 51.124314][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.124336][ T938] Call Trace: [ 51.124344][ T938] [ 51.124352][ T938] __dump_stack+0x21/0x30 [ 51.124392][ T938] dump_stack_lvl+0x10c/0x190 [ 51.124419][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.124447][ T938] dump_stack+0x19/0x20 [ 51.124473][ T938] should_fail_ex+0x3d9/0x530 [ 51.124502][ T938] should_fail+0xf/0x20 [ 51.124527][ T938] should_fail_usercopy+0x1e/0x30 [ 51.124558][ T938] strncpy_from_user+0x28/0x270 [ 51.124585][ T938] ? getname_flags+0xc6/0x710 [ 51.124618][ T938] getname_flags+0x102/0x710 [ 51.124649][ T938] user_path_at+0x2b/0x60 [ 51.124670][ T938] do_utimes+0x135/0x2a0 [ 51.124695][ T938] ? __kasan_check_write+0x18/0x20 [ 51.124723][ T938] ? mutex_unlock+0x8b/0x240 [ 51.124755][ T938] ? __cfi_do_utimes+0x10/0x10 [ 51.124783][ T938] ? __fget_files+0x2c5/0x340 [ 51.124826][ T938] __x64_sys_utimes+0x143/0x220 [ 51.124853][ T938] ? __cfi___x64_sys_utimes+0x10/0x10 [ 51.124881][ T938] ? __kasan_check_read+0x15/0x20 [ 51.124909][ T938] x64_sys_call+0x2b54/0x2ee0 [ 51.124938][ T938] do_syscall_64+0x58/0xf0 [ 51.124963][ T938] ? clear_bhb_loop+0x50/0xa0 [ 51.124993][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.125021][ T938] RIP: 0033:0x7fa8ce98e9a9 [ 51.125049][ T938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.125068][ T938] RSP: 002b:00007fa8cf757038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 51.125097][ T938] RAX: ffffffffffffffda RBX: 00007fa8cebb5fa0 RCX: 00007fa8ce98e9a9 [ 51.125113][ T938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 51.125127][ T938] RBP: 00007fa8cf757090 R08: 0000000000000000 R09: 0000000000000000 [ 51.125141][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.125154][ T938] R13: 0000000000000000 R14: 00007fa8cebb5fa0 R15: 00007ffd70764fb8 [ 51.125172][ T938] [ 51.372725][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.523770][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.534875][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.544048][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.552830][ T45] usb 2-1: config 0 descriptor?? [ 51.760241][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 51.766283][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 51.775025][ T45] usb 2-1: USB disconnect, device number 10 [ 52.192792][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 52.345727][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.373108][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.373427][ T951] rust_binder: Write failure EFAULT in pid:154 [ 52.382189][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.398281][ T45] usb 2-1: config 0 descriptor?? [ 52.642755][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.792736][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 52.799309][ T9] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.810805][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 52.817516][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 52.826729][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.835490][ T9] usb 1-1: config 0 descriptor?? [ 53.215104][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 53.215122][ T36] audit: type=1400 audit(1753528077.450:274): avc: denied { create } for pid=941 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 53.244479][ T9] hid-generic 0003:1B1C:1B34.0003: unknown main item tag 0x7 [ 53.252033][ T9] hid-generic 0003:1B1C:1B34.0003: item fetching failed at offset 4/5 [ 53.260553][ T9] hid-generic 0003:1B1C:1B34.0003: probe with driver hid-generic failed with error -22 [ 53.792721][ T476] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.942728][ T476] usb 3-1: Using ep0 maxpacket: 16 [ 53.948974][ T476] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.957724][ T476] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.967853][ T476] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.978360][ T476] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.987472][ T476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.995536][ T476] usb 3-1: Product: syz [ 53.999760][ T476] usb 3-1: Manufacturer: syz [ 54.004436][ T476] usb 3-1: SerialNumber: syz [ 54.282049][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 54.289197][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.303883][ T45] usb 2-1: USB disconnect, device number 11 [ 54.412383][ T476] usb 3-1: 0:2 : does not exist [ 54.781637][ T964] rust_binder: Write failure EFAULT in pid:196 [ 54.825536][ T476] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 54.852810][ T476] usb 3-1: USB disconnect, device number 10 [ 54.893219][ T967] usb usb1: usbfs: process 967 (syz.1.201) did not claim interface 0 before use [ 54.909675][ T36] audit: type=1400 audit(1753528079.140:275): avc: denied { create } for pid=966 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 54.930779][ T36] audit: type=1400 audit(1753528079.160:276): avc: denied { create } for pid=966 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.355169][ T476] usb 1-1: USB disconnect, device number 6 [ 56.195054][ T971] FAULT_INJECTION: forcing a failure. [ 56.195054][ T971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.212203][ T974] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 56.212754][ T36] audit: type=1400 audit(1753528080.430:277): avc: denied { audit_write } for pid=970 comm="syz.0.202" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.223654][ T971] CPU: 1 UID: 0 PID: 971 Comm: syz.1.203 Not tainted 6.12.38-syzkaller-g21fbbe6cf817 #0 3699ea59a0ce13608b0d0a890a5baf062d2929f8 [ 56.223692][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.223708][ T971] Call Trace: [ 56.223717][ T971] [ 56.223726][ T971] __dump_stack+0x21/0x30 [ 56.223763][ T971] dump_stack_lvl+0x10c/0x190 [ 56.223793][ T971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.223825][ T971] dump_stack+0x19/0x20 [ 56.223854][ T971] should_fail_ex+0x3d9/0x530 [ 56.223886][ T971] should_fail+0xf/0x20 [ 56.223915][ T971] should_fail_usercopy+0x1e/0x30 [ 56.223949][ T971] _copy_to_user+0x24/0xa0 [ 56.223971][ T971] simple_read_from_buffer+0xed/0x160 [ 56.223999][ T971] proc_fail_nth_read+0x19e/0x210 [ 56.224029][ T971] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.224056][ T971] ? bpf_lsm_file_permission+0xd/0x20 [ 56.224086][ T971] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.224113][ T971] vfs_read+0x278/0xb60 [ 56.224144][ T971] ? mntput+0x63/0xd0 [ 56.224171][ T971] ? __cfi_vfs_read+0x10/0x10 [ 56.224212][ T971] ? __kasan_check_write+0x18/0x20 [ 56.224245][ T971] ? mutex_lock+0x92/0x1c0 [ 56.224280][ T971] ? __cfi_mutex_lock+0x10/0x10 [ 56.224316][ T971] ? __fget_files+0x2c5/0x340 [ 56.224357][ T971] ksys_read+0x141/0x250 [ 56.224397][ T971] ? __cfi_ksys_read+0x10/0x10 [ 56.224431][ T971] ? __kasan_check_read+0x15/0x20 [ 56.224462][ T971] __x64_sys_read+0x7f/0x90 [ 56.224495][ T971] x64_sys_call+0x2638/0x2ee0 [ 56.224529][ T971] do_syscall_64+0x58/0xf0 [ 56.224557][ T971] ? clear_bhb_loop+0x50/0xa0 [ 56.224593][ T971] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.224627][ T971] RIP: 0033:0x7fa8ce98d3bc [ 56.224647][ T971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.224667][ T971] RSP: 002b:00007fa8cf757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.224695][ T971] RAX: ffffffffffffffda RBX: 00007fa8cebb5fa0 RCX: 00007fa8ce98d3bc [ 56.224714][ T971] RDX: 000000000000000f RSI: 00007fa8cf7570a0 RDI: 0000000000000003 [ 56.224731][ T971] RBP: 00007fa8cf757090 R08: 0000000000000000 R09: 0000000000000000 [ 56.224747][ T971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.224762][ T971] R13: 0000000000000000 R14: 00007fa8cebb5fa0 R15: 00007ffd70764fb8 [ 56.224795][ T971] [ 57.866114][ T991] SELinux: policydb version -1568170795 does not match my version range 15-33 [ 57.879290][ T36] audit: type=1400 audit(1753528082.110:278): avc: denied { getopt } for pid=987 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.895447][ T991] SELinux: failed to load policy [ 57.915878][ T990] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.915902][ T990] rust_binder: Read failure Err(EFAULT) in pid:205 [ 57.933247][ T36] audit: type=1400 audit(1753528082.170:279): avc: denied { read } for pid=988 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.979449][ T1003] rust_binder: 171: no such ref 3 [ 57.992808][ T1003] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 58.021470][ T36] audit: type=1400 audit(1753528082.250:280): avc: denied { create } for pid=1007 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 58.192758][ T476] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 58.322756][ T476] usb 1-1: device descriptor read/64, error -71 [ 58.562788][ T476] usb 1-1: device descriptor read/64, error -71 [ 58.802800][ T476] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 58.932999][ T476] usb 1-1: device descriptor read/64, error -71 [ 59.172844][ T476] usb 1-1: device descriptor read/64, error -71 [ 59.282873][ T476] usb usb1-port1: attempt power cycle [ 59.572172][ T1022] rust_binder: 180: no such ref 2 [ 59.577409][ T1022] rust_binder: Write failure EFAULT in pid:180 [ 59.622753][ T476] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 59.643574][ T1028] can: request_module (can-proto-0) failed. [ 59.833905][ T476] usb 1-1: device descriptor read/8, error -71 [ 59.964071][ T476] usb 1-1: device descriptor read/8, error -71 [ 60.202795][ T476] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 60.223792][ T476] usb 1-1: device descriptor read/8, error -71 [ 60.353842][ T476] usb 1-1: device descriptor read/8, error -71 [ 60.462851][ T476] usb usb1-port1: unable to enumerate USB device [ 61.305758][ T1038] fuse: Bad value for 'fd' [ 61.333359][ T1038] 9pnet_fd: Insufficient options for proto=fd [ 61.346042][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.346079][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.352647][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.353646][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.366913][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.381600][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.399834][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.406725][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.413670][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.420394][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.427430][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.434338][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.440981][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.447811][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.474408][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.481831][ T36] audit: type=1326 audit(1753528085.710:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1052 comm="syz.2.231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d938e9a9 code=0x0 [ 61.484735][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.498160][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.511205][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.511230][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.511249][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.511268][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.511286][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.560767][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.588793][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.592771][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.602001][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.632104][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.651071][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.664919][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.666412][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.671487][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.671510][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.694588][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.705146][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.711009][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.712028][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.726357][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.728184][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.733195][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.743298][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.746236][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.759060][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.761480][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.765738][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.772323][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.778782][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.785598][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.791912][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.802101][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.805078][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.818303][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.818509][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.824926][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.831586][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.838103][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.844771][ T1045] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.851165][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.864156][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.870712][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.877285][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.883956][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.890678][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.897277][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.903870][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.910426][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 61.917007][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 63.323517][ T36] audit: type=1400 audit(1753528087.560:282): avc: denied { create } for pid=1067 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.350459][ T1069] FAT-fs (rnullb0): bogus number of reserved sectors [ 63.362782][ T1069] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 63.401682][ T1074] rust_binder: 237: no such ref 3 [ 63.412696][ T1074] rust_binder: 237: no such ref 0 [ 63.442970][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 63.947250][ T36] audit: type=1400 audit(1753528088.180:283): avc: denied { append } for pid=1068 comm="syz.0.234" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.410515][ T1084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 65.463424][ T1088] rust_binder: Error while translating object. [ 65.475303][ T1088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 65.481536][ T1088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:240 [ 65.662770][ T329] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 65.702720][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 65.822703][ T329] usb 1-1: Using ep0 maxpacket: 8 [ 65.829542][ T329] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 65.839372][ T329] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.852314][ T329] usb 1-1: config 1 interface 0 has no altsetting 0 [ 65.860360][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 65.862715][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 65.869483][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.877347][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.882742][ T329] usb 1-1: Product: 藾胀╊깹菌㮖ᕇ㙢浙늚碅㩠᧥҉潽핌粭軵봄០㠂웹똷ꭌ饠銰탞䴓꥾՞ȭ땁嗡ứ똤꒛氢℺쌥쾞赮㾔儋鲼ร꩟ᡛ时꭭嬇穵죇♓䰱뉆髵甂嚰࿘Ꞔ퓛寺Ჱ琦䃓尳㲛꺹㥱㼋깚魥ꔈ㐭齻漷튒循檮趰≈㮃㞋鸎蒳쨻⑀绢쐑ン㱯姽嵓塡쳽뇴⥺礦肩☮㒶득즉調 [ 65.893195][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 65.925386][ T329] usb 1-1: Manufacturer: ꐩ籹묞ŀ箕䷆┄苝䃾믺튬釺袻蛿췬셍╫ⷂႈᆔⷠ剕☲໢膠╮摫蟂㪛ꖚڣꔻ傒䬚䲂䞮藽䞭꿞ἅ뀳渿닛䖾詓ᷳ㙹ᅲ抡圖괗⻑姙롉籆쯑゛᷄藄鍖鄔Ǜ屋좈Ƅ褅픍♛柿ޙ徕ヷ컢 [ 65.933138][ T10] usb 3-1: can't read configurations, error -71 [ 65.956786][ T329] usb 1-1: SerialNumber: з [ 65.968370][ T1087] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 65.975590][ T1087] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.188393][ T329] usb 1-1: USB disconnect, device number 11 [ 67.373062][ T1094] rust_binder: 243: no such ref 0 [ 67.400998][ T1101] netlink: 'syz.2.246': attribute type 4 has an invalid length. [ 67.425562][ T1101] FAT-fs (rnullb0): bogus number of reserved sectors [ 67.432298][ T1101] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 67.448329][ T36] audit: type=1400 audit(1753528091.670:284): avc: denied { lock } for pid=1104 comm="syz.0.248" path="socket:[8137]" dev="sockfs" ino=8137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 67.519534][ T36] audit: type=1400 audit(1753528091.750:285): avc: denied { read } for pid=1113 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.587418][ T1130] tmpfs: Unknown parameter 'nr' [ 69.610663][ T36] audit: type=1400 audit(1753528093.840:286): avc: denied { module_load } for pid=1132 comm="syz.2.258" path="/sys/power/disk" dev="sysfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 69.634983][ T1133] rust_binder: Error while translating object. [ 69.635013][ T1133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.641213][ T1133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220 [ 69.659921][ T1134] overlayfs: failed to clone lowerpath [ 69.699254][ T1130] capability: warning: `syz.0.255' uses 32-bit capabilities (legacy support in use) [ 69.722860][ T1139] netlink: 84 bytes leftover after parsing attributes in process `syz.2.260'. [ 69.731906][ T13] tipc: Subscription rejected, illegal request [ 69.753110][ T36] audit: type=1400 audit(1753528093.990:287): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.842795][ T329] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 69.992742][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 69.998877][ T329] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 70.007695][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.017803][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.028117][ T329] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.037293][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.045406][ T329] usb 2-1: Product: syz [ 70.049577][ T329] usb 2-1: Manufacturer: syz [ 70.054248][ T329] usb 2-1: SerialNumber: syz [ 70.462304][ T329] usb 2-1: 0:2 : does not exist [ 71.070139][ T329] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 71.082726][ T329] usb 2-1: USB disconnect, device number 12 [ 71.804438][ T1146] rust_binder: Write failure EINVAL in pid:226 [ 71.808969][ T36] audit: type=1400 audit(1753528096.040:288): avc: denied { create } for pid=1141 comm="syz.0.261" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.812878][ T1145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'. [ 71.842264][ T36] audit: type=1400 audit(1753528096.040:289): avc: denied { write } for pid=1141 comm="syz.0.261" name="file2" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.861479][ T1148] rust_binder: Write failure EFAULT in pid:228 [ 71.882704][ T36] audit: type=1400 audit(1753528096.040:290): avc: denied { open } for pid=1141 comm="syz.0.261" path="/newroot/66/file2" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.920465][ T36] audit: type=1400 audit(1753528096.050:291): avc: denied { ioctl } for pid=1141 comm="syz.0.261" path="/newroot/66/file2" dev="tmpfs" ino=385 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.954171][ T36] audit: type=1400 audit(1753528096.190:292): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.984748][ T1153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.984862][ T1154] rust_binder: BINDER_SET_CONTEXT_MGR already set SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=149 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 72.042050][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 72.087965][ T36] audit: type=1400 audit(1753528325.313:293): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1888]" dev="pipefs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 72.278552][ T331] bridge_slave_1: left allmulticast mode [ 72.284456][ T331] bridge_slave_1: left promiscuous mode [ 72.290095][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.298040][ T331] bridge_slave_0: left allmulticast mode [ 72.303742][ T331] bridge_slave_0: left promiscuous mode [ 72.309358][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.475132][ T331] tipc: Left network mode [ 72.480299][ T331] veth1_macvtap: left promiscuous mode [ 72.486080][ T331] veth0_vlan: left promiscuous mode [ 72.725107][ T331] bridge_slave_1: left allmulticast mode [ 72.730793][ T331] bridge_slave_1: left promiscuous mode [ 72.736494][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.744274][ T331] bridge_slave_0: left allmulticast mode [ 72.749924][ T331] bridge_slave_0: left promiscuous mode [ 72.755580][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.763327][ T331] bridge_slave_1: left allmulticast mode [ 72.768975][ T331] bridge_slave_1: left promiscuous mode [ 72.774828][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.782295][ T331] bridge_slave_0: left allmulticast mode [ 72.788073][ T331] bridge_slave_0: left promiscuous mode [ 72.793721][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976142][ T331] veth1_macvtap: left promiscuous mode [ 72.981690][ T331] veth0_vlan: left promiscuous mode [ 72.987392][ T331] veth1_macvtap: left promiscuous mode [ 72.992957][ T331] veth0_vlan: left promiscuous mode