last executing test programs: 28.748789568s ago: executing program 2 (id=8): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) socketpair(0x1d, 0x3, 0xdea9, &(0x7f00000016c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) bind$bt_l2cap(r2, &(0x7f0000001700)={0x1f, 0xc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f}, 0xe) ioctl$TUNSETPERSIST(r1, 0x400454ce, 0xffffffffffffffff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000002540)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x7, 0x0, 0x8a83, 0x5, 0x10, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0xa, 0x9c, {0x9c, 0x6c, "94f13c22d3bad857e84127fb2c55014074dd7fe35360f7d0cd6e594e42cc6f5a07c7d0712e14cdd10388369b98a58690f624a0fb71fb6ed4443b0b91b6805909f2443edf4741b9bbf5f1456f9e0162f00b5fb5030956819e3cd447e9a4ac51cc81d287f77d127353071e9a632b7046858ba6705af6570aa332e186c6c0c66bc1008e0cb7d5b31f0cf4cf0212c989dfabecb895cf84d036a958a1"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001640)={0x44, &(0x7f0000000340)={0x40, 0x6, 0xb4, "ec6ea115fbb317a6341be80e261c466ff0212b05a51c46a1ed288fd3cdc88852e7bda32f87c79c2e2a167a7ff0ba23b0ea2733ab046026e91ba4789107df1f81087a12769331ebc7d8c7adbd808a30422a6525cb36c11b752769e7c97146fb51dae6e05b4b8ab8ebeecbd215c0e921631ced85dfe4d07951b5b8085a20bf2e87638f4e876c9cd4ed4bdd91e75d13cc7fe5cef4f9cf4f61b66dd3939a36a31300d008b884aca77ae1556b5a12a059d42a7e739ede"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x178, 0x7, 0x0, 0xc, 0x9, 0xe92, 0x1, 0x6, 0x4, 0x6, 0x8}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000001580)={0x20, 0x83, 0x2}, &(0x7f00000015c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000001600)={0x20, 0x89, 0x2, 0x1}}) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000000580)={{r0}, "98b5f0ad9a3cba7a84f962d30a45f74c38d3d6e7fd463ecc07e29c1747fe20ba6cff45dda1535338949bca7eee1639e64ae7d72330a1ead08a1267511bdbb1a194e268eb2e9ed662741647cd1db156a7ca430016d1a8fa17f3c3240909bcc2dc7c88b495cbb73bdf18f59c77d952f205cc12eb6098a4ede2fbf49a889fdd95fbc4e3797b99ec3e08d2b1518126539b5482db207dab915cdb9e08f52696c87ed30773d5024bdb8b2b28dd23c1b9e34625e6b89b018459974b05b36e45fc76a637ab2bed660eb2e12987d981bbe1cd9cf6c157bdbc6d7a5c00f9d96fb2df2bf7eb70da64363ae632a0ded6cc934b79ff67e2095b0ccc3563c0675d0d741930cebaa60ecc565c3343c2c0f90d64e6482ff18dd4bcad79abc8771a472e9c1b19eaa9836a837d00295e2a605196ae649db5677a554fc7987ad0b5cd61ae25d86d7031d4170036165735c6a8742713b7633da5ab7a23681ed45c2dbd880a394cbf15f4a23013ae8cbec6a9106555c18cb1e46ec2c4fe5c0b3c154b6734fb711eca8cf4cf98fc41c98f6a1e6e90defacf1dc0d929418fc044299f3f8ebe2256b6a5a656276791895bd2681203e5a05d5624f77fb45a5b4c039da8d5c17ebf87f28eaf8aca72644676a99e5690bd01ab78a79925921f465c31b8be3e75e6855f9392e46e40ce5d370fa864a0ee757860a11a2dee197a84baafdc8f2fda8f076de1d333e3f6704b709d22b36336f1f8a834322a27a95111ea31b28e42ea4e01d635e431cfbec6309259d3ff52983cf3adccadaf0bacb776118ee724724c13ced6a327ec26563ebfc90b4cb212349b3150003cd86c6f0ebb948bffae3c50c9dfd7511ba7d65a9b28bea5d94fe1261f5c157f440c4ec7781811f4ca8bcd8bac7c9dbfad6c506d08a19faf5e74aae632b3e98858b0d6dba7bc2ce3b45ff431d5e1f9d581bf54bb922cbe5e1a8c1355d68c3f080c4c7199287d633156ea5cd628eeaa1a1901740869f027033f7dc1cb5ef699d9e4947c9db6d2fcea638c994b2a46a1890da35e080c9ae04970c091f0c668abb32ee6674a604b09c96b8403a8e39b0f2820ed3461ee7dcf953b07b70dfe50c15028f8199b9172d0c9346eb817a436f51edb69d65397b8209c13dc151c6c09e3a3d2daf3277c839e0db6d3f92b07eed3d9c39820e611eeb0f8c188024918a71a4fa28ecf2fb24a8bff6e0c196f420f4a80cef77f7b3c6417c8cfc16f365d2dc51f810d35aa1748a1696e506a2854bc772f6aee8fb84af6193a53f4ec1f215be13a7515e6a6bcd03a1a7f14420c95578b56f98985eedcddd283187b086858e8995d13266acfdffb4b93ba48499c600fd9fe1d01efa2add70a22f7fffac12be97b5cfe87c43806c5fc64198ae4f5c7d0146365d8631599f79c8c5482fb29292515bf49e6cc9f97ccdf0ae8af4f4f121d1e5159840ecedbeaa7db327e87e84941f233209fa28ebd3a806c3e11c936cd85425000b2c38c00d8e87a688bff761850ae9cb800fcf599f3ead85b5151fca1cb9d7588411ac285b392467156c16ea46790ed06b2b19a6acb9d8d87f06391508688ee828685407b22e7aeb2d2420a68ea447dabf6a0d08d2696c95711acbe383463a95151ccfcdaa9a27469c0e9a61c028925de759b472e5c85015fc641ffeef7fe08279b6b246586db86cc9149de3de558c82f66f993a97168d13255cbd1473039b405e98006f89da024e29b6e69f8768f1d0a6bc868bbbecbd4adc58aa63ec9a929c84ff4ccdaa6745bd9c37116a8b0586d143bb40bd1c6db50eb48b4d00b23fb977e9ea25ecc552af996fc0525db51252b9dcb1e364c3f1bfdc58f54b0d7f45b0b3495a80b7fe43ebfe9ffdc282c665e27e47c50795efcc24c0701d629bdbadabb3f16080890793d5a98ec4218644d7ecb5cef8b7a0e8e7dfeca75fea409b490b0da3a13a0173961d9953ffe61e212d6b0e69c2117b24bec1c1d6be9e7405d0920e682493789adc2a9a66d2e18c71bd836844578487f78b7584762ecf195efdb4cbdfe5cac35df54468a610f5aa60947a197f7cb1e6ff1854a92e5018cee886626bfaee135f8c1393893a28b28ff0d4fbac23b94984e99070e754dc4c3256fa5fa0b9a24135fd4f91fc99ae4ab021f031f3eaff5b19c14c1f3701bcf066e340752f6992a90e8a34af3cbf3b10cb9a4800ebde96e815917e8e541df986535b450422c8d6dcb0d566112fdbf50809a53505a92f8cdafd07b49574acef5a3f841c9c3ff4891ea71fb8917cf022b004fd27a24a10bb6a0d46f83260ae73b5435829ed8506bbe6764b569b07d525d48e5fce8b1507dc9d1db98a59fea5f75cbe62462d663aa2821ef9bc655a71ce20237eef9c120e277e22b73851dfbf769cfe4659160779e08fdfc12bf29af08d1915825dce1ff6f99c677d36ddc37edf360e02ff7c9271c374641579f381cd4ef69773305121c607f6e5b8f8b904a3f60c35d62b7a10b8e376f41f10e70ce5ef3e0c6ae94846fa7e15270e4d558e50a9ad3a300272bbbaad45b38789a8d85b9fa0cebc6fd37b8ef2dd30151757c4897c5f83cf35986f83eef661ffa3bcb81b04990dcc4d25baef5f6288ad92b0fd887668e4a447c19aa87c5a75544d6221abbe59e5450aedeffb45363b04c4c746083d237234a69f8c2436a82f6ff6919220f0d17a65aad3ca36ea20aa680b32f3fd203353c41071d46f88849b619588f9fc787a131454c4653b424871eb2e7cd567e469fbc12a938d829ea085c68ce1d0a3e0fcd1d6330ee500319168c7911899eadaddb45e9d6b71c1210b100d9ac021c354fd572b6dfde664834ea922e74bda305bb30c68153ec946697081b1e3931fd785828df35983be784d6b7e8f94a55d3bb4f89cfa1fb5282cc531631c52b5fbaf56440dceaa1be2286c8444cbec22d738646e89552edbde69a2526953b8a081fd4c0c4068cae1cc18cd63e002608b01845746e0082beddf5d20855fd83f9f4a9bd3368ad4d63bbc8a03962bc1738473eeac253d25ca3a4782a453c06fa401868118f8cdca45927e230c5c499dfe4abf9ba7543ccf79ddaca113ab0610893b0ee8f529d898d9b9a1614a758c4ff70a35d956b7fe2fb094c8fe59e9582a7cab6cf827e957136364b448ec9bf77df8ed8054692454fbb3b81590e6a7dccf62a8edbfcf692d72d9a2634e6e4eb49a6799762910136fad48d43888e6a238558831bd98507f31ec04373ce0b49c37ca13b352966483c8d709610d9ef82d3c9a722f95ea54ca8aeac83fac21c92cbea9ea2634dad55446fd4b3c8db5acd0a9becf6de0162f0bd1b9a64091d660980b521cbd4477f981d27bd2ebaaaf8fc18300e97d70e0c253a1d95062e85d725793ad3dcdfff4390d668d5791f659cfb71da56a4bd0038f6ae19d0945b94a5fe478e7c7789af2e0acc7f352a5266d297e4bfd4aa655c424a51079e524ccfc03ac58a8c176b38551e9ce106a64622dbbcfd9c9b228a5e4333c0d090d90800e2484fe2cf1c2b39a2b9a2e0db2ff88faf10bfbee1f9b1e7135d39a0fdf8dfeffb1811fe80256960de3232d3df4ae01fbd2f9a04a235185fe933327b461be1f7ac1688d66d25da992024c406c8f91b9cb914a52c4bbf4673383465a0bd5ee613f2060e4dda30c0a70b8091918463a00dd3cd93a496a1be999d83c7fb4fb21a110f455f3810a99ae3bd93b73e6e86f870b56f259eee52c94c9fa77752c0f8153e81afe4117a646b925e95f5dc19e789fbd8ee563e653396d464846dc00a949ba52ee0482f9c83174447218b00078d7bf5b9cc93821884965e6ff310582e52ebde3c11970bc784c3abd1b14bd4c67c481ed81537498381c1286bbdccea45c26ee65c3d7814d5e260752196061d73355233451f4f4a23e7853dc92e9646390312295574aa9fa38df26b5d5629303dd8c2f02aab7a19913014f8b37cbbbf6f7a61f5c715f499744593adca69152e8492abc696429930a124f55c18b696fb3c143daa66788b84bb23c48c057e8421dc3eb8f57e70d20577690cbd9d9e58bf2cab9886f1be16391d2e034f9ad37d9c88933ba97b33cbb8bc2b8320ebb1b27781e25504b979ebc6da237b2f94dc34e8e9d1d105c154798b3474c210df0643a15f14aaa58da3d8f5e0c880442aa8f44174d270f673387c35267a857a34043c266411abe1ff3a81b44eeccc16f68c1bce87e8fce4db5541a5a39f93cfd00bcfe0daf5011f43514f0a25638004b94126a16364270be2ce18ceb992e3996bcfb0d6b1cfc9f8318cadccc1ac96b44795aecc718c69e4c039337e4909e934b6af5ec78289a7822bef350631fc686917505ec265b69d3cb1c4b28fbbffa4d6e18a3aa6088d938d0fe525684dcc5e9716ba96722b35a3edba26376d7e6c0bd8e93f1e8119bb2eb30e906e522ae0c9ebefd072380a0dca55b68bc2b86e368ded83cd4fc4b86a8ae7bf040a38de96c5a445afb77a709d7f0e185ea536852096b463fa7df247cfe5c40bcfa154bcf51bce917198c80500227d7320486f979e611ec7f1a444f48ee47f3bd2718cdfc15e430deb43abac5d81605024d8700717386cbe6edfdcc69d277d94bf67bc090e32f165c5e7e8c864f1d90e9a90b53dbc37e58926023036ff0a56ec2bfeb452d1d72abaf7cfb7632cc583c4c40fc550580a05a758eedc1e5c6aa6f65845fb030db4bae501832543cba880986238b987f225d427e33aa384d49df97a29d987721c74c56de7a7aedb5ac0d8ad5f2f484fd20927c6ac00d0753d5ef86165c5dafa70d7682e136f5b59dcac595f88aaff833fd97c67aa8fe1b26b02916baa2537fe02e4585799fbd4566330212a5834ab5cd3f3dd5adcaaf48fae47e587a4e3605a4aac9c32e81b5931ffc46434ddd519bdc8b2b96ce931c4739e86133c895a659e9beefcf1448e2dd72f375fb3068b2db863e249f4bf63c58e02613ada3ceab3948347cd49f256c8ad98a2e8d20d4a9b30cb1f11f7a96747fd720a7e7de690717ebe00618d7d677603a6f57e8f6960242fd84b0b2ff71e34c80e0ec4bd46795db21c6f0192c22775c51a4146fb37fde89a96dd84c6b5e15e1b44eaecd2e86d5e1c08f7de164e859e08ace07fc792f8921a55b5e0941dbd597da552f1655a2bf1f5e58650bd7578715cde221f3295e30fe4e4a58e188ddaf2e5015fd749958edbfceca9f0ccc66df59850a8b3561e39e137a2d8c5e2913f0362eaf140064fc08277ba6b0a97f04ed629329b020bbf1161cd662296dc5069341560b3d3f4a23000f986b4a189de223bd13ef33d9ffe42c89b2b8972c9410947976117f763bd3f69c37d0727f9ac3ad3620d1079997f7370d32b37abc7c6e59e98925cadb8746106914c9ab0838f716c481ff07d9fc5562710e0dcc75332c15b05e726305100f540e68e1b59f773a3cb91496f5ee896b78074ea882d6f729fed13ec98d50562f307f6cc88424aae9da9c30c1ef887639dab1a54ee8005187fbb9d1302ccabc5474b63f18070d864d52185422916b674207c4a00eb2ea9ac5297cec78418787790e71c989f8b8f9bb21ebd8e82f73a824e16cd22c0d0d4076af1ca354a23dd2fa5abfdac6746ad8a3f1b5e22c29ea03697105480e232b798c1c414882bfc67d09a0cd2a5cf51a94bacc311c1ba125b9ea2b33fd2031c4c18c0d5a7d3d05fe7c53641cb7f83e00bc41560aac883415098699b3db75b6104a4a0c981a9f2981e7ce0ceba7fc86a93e21f179e5df7908b8d8d1fcf4305069ab454e50acf332c07fa2af4c2ffdcce0ce2"}) 26.040359961s ago: executing program 2 (id=26): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8010, r0, 0x147a5000) r1 = mmap$KVM_VCPU(&(0x7f000056e000/0x2000)=nil, 0x0, 0x2, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000080)="f62ec9798c80ceee23999924e60beed3e573d01e69c78cef2e8a9a1be212f9b238762856e872eb448b64ca9e645a2687808997549b91f9c3de8c4694a4e8b6b53faccb4ec2537176", 0x0, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000200"], &(0x7f0000000bc0)=0x2a) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) 25.976667842s ago: executing program 2 (id=27): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000200)) 25.946152232s ago: executing program 2 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x16c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0x2b}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x3b}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4048840}, 0x41) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) preadv2(r4, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 25.738465135s ago: executing program 2 (id=33): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000180), &(0x7f0000000200)=ANY=[@ANYBLOB="040719ea80f27a688eb1f03cf4729a4dd4863f"], 0x13, 0x3) (async) fsetxattr$security_ima(r1, &(0x7f0000000180), &(0x7f0000000200)=ANY=[@ANYBLOB="040719ea80f27a688eb1f03cf4729a4dd4863f"], 0x13, 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x10012, 0xffffffffffffffff, 0x20000000) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = syz_open_pts(r1, 0x42) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) r4 = dup3(r3, r1, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r6, &(0x7f0000000040)=""/141, 0x8d) (async) read(r6, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() (async) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) (async) fchdir(r7) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, &(0x7f0000000380)) sendfile(r6, r6, 0x0, 0x7ffff000) (async) sendfile(r6, r6, 0x0, 0x7ffff000) 24.851591779s ago: executing program 2 (id=42): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x1c, 0x56, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0x141}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x2000000, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x6958, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000) 9.686224878s ago: executing program 32 (id=42): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x1c, 0x56, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}, @nested={0x4, 0x141}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x2000000, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x6958, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000) 4.036957137s ago: executing program 3 (id=304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x81, &(0x7f0000000240)={0x2, 0x0, 0xfffc, 0x360}, 0x8, 0x5, 0xa6, 0x0, 0x4001, 0x9, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 3.966151878s ago: executing program 3 (id=307): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x0, 0x1}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9c7, 0x0, 0x1, 0x0, 0x0, 0x680}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000280)={r2, 0x80}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001280)=0x0) capset(&(0x7f00000012c0)={0x19980330, r3}, &(0x7f0000001300)={0x8f9, 0x9, 0x6, 0x0, 0x7, 0x5}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000001340)={0x10001, 0x5}) cachestat(r1, &(0x7f0000001380)={0xfffffffffffff56c}, &(0x7f00000013c0), 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x2, 0x20, 0x11}, 0x18) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000001440)='\x00', &(0x7f0000001480)='./file0\x00', r6) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000015c0)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000016c0)=0xe8) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x21, &(0x7f0000001700)={[{@uuid_on}, {@index_on}, {@uuid_null}], [{@smackfshat={'smackfshat', 0x3d, '.^'}}, {@obj_user}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r7}}]}) read$FUSE(r4, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f0000003800)='net/llc/socket\x00') ioctl$TUNSETGROUP(r10, 0x400454ce, r8) fstatfs(0xffffffffffffffff, &(0x7f0000003840)=""/4096) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000004840)={0x0, 0x9, 0xfffffffffffffffb}) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000004880)=""/12, &(0x7f00000048c0)=0xc) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000004900), 0x42, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000004940), r4) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004980), 0x200800, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f00000049c0)=@x86={0x2, 0x2, 0x4, 0x0, 0x6, 0x33, 0x2, 0xf7, 0x5, 0xff, 0x73, 0x4, 0x0, 0x4, 0x8, 0x5, 0x1, 0x7, 0x8, '\x00', 0xc6, 0x7}) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000004a40), r12) sendmsg$TIPC_CMD_GET_MAX_PORTS(r12, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x1c, r13, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20084}, 0x48800) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000004b40)={'nr0\x00', @local}) sendto$inet6(r4, &(0x7f0000004b80)="31bf8c6c2b28e3846f8b63abbbdc356cb63374a31539536e2e42ab267e3448e800ff9543ebcaf5473719f4836d96d886e067df27e2def2ba02c3f8310970e6ef60a2f7eb4f13265099ddb97d06101829da7879ca85", 0x55, 0x40800, &(0x7f0000004c00)={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7}, 0x1c) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) 3.150076591s ago: executing program 3 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000240)) (async) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) (async) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x1, 0x1) fchdir(r8) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) getsockopt$packet_buf(r3, 0x107, 0x6, 0x0, &(0x7f0000000080)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x20000401) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2020) 3.105166852s ago: executing program 3 (id=325): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0xea85, &(0x7f0000000300)={[{}], [{@fsmagic}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0xd4) fcntl$getflags(r1, 0x401) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000000380)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) r3 = userfaultfd(0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x3, 0x3, {0x3, 0x8, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 2.096719998s ago: executing program 4 (id=342): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4d0, 0x0, 0x16eb}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) lseek(r5, 0x10001, 0x0) 2.015096389s ago: executing program 4 (id=343): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000b40)=ANY=[], 0x118) (async) write$UHID_CREATE2(r6, &(0x7f0000000b40)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r5, 0x107, 0xa, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800) close_range(r0, 0xffffffffffffffff, 0x0) 1.93448996s ago: executing program 4 (id=344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14, r3, 0x333, 0x0, 0x4}, 0x14}}, 0x40) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x1c1a82, 0x14) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000000), 0xa) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000040)=0x9) 1.93156546s ago: executing program 4 (id=345): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x8dcc, 0x4, 0x2, 0x186}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x24400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1, 0xff, 0x5, 0x5, 0xe01}, 0x20) 1.662751645s ago: executing program 0 (id=347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4001000010001307000000000000000000000000000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@remote, @multicast2, 0x1, "27cb3e14ac426a5eaaf2aa77ffcde2a207429b1180677631260d9e4bf2857849", 0x8001, 0x5, 0x8}, 0x3c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x8, 0x2081) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1.598744695s ago: executing program 0 (id=348): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1.086632533s ago: executing program 0 (id=355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="40c7319b624410c596399c0c85cb3faeecd37751ab6acfa52def2c69a8c9a5097ba2f510f20fa29e0eee8336306aa02344682c63f7ff279fb3af3319a7b01eb00da3992877e0a833f166b4d08b4d6ba76e574438151fc38dc5c9fcef8ed7bc4e72d935cf52b5a62f85f8d114", 0xfffffffffffffdc0, 0x20008054, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2f, 0x12, 0x1, {0x2, @ah_ip6_spec={@private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x5}, {0x0, @local, 0x2, 0x1ff, [0x7, 0x6]}, @tcp_ip4_spec={@empty, @loopback, 0x4e23, 0x4e24, 0x7f}, {0x0, @local, 0xb289, 0x3, [0x401]}, 0xfffffffffffff200, 0xe}}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000001c0)=0x558, 0x4) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x786d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat, @fda={0x66646185, 0x404, 0x0, 0x18}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 1.085492203s ago: executing program 4 (id=356): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) r2 = socket(0x8000000010, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) (async) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x31) (async) write(r2, &(0x7f00000002c0)="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", 0xfc) (async) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x8) write$selinux_load(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf9080000005345264c696e75789571f8823d640a88f1176fc0bcf62f5751eb1d26a09c901b8013a2c328c356aa30f271b3d13aad2ce6da228545244d4625b3832d5b0b4c72296a92b3872f52acd0ba0ab8238a15fd2760"], 0x50) 1.084620544s ago: executing program 4 (id=357): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4000000200000003) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) fsetxattr$security_selinux(r3, &(0x7f0000000c00), &(0x7f0000000c40)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) fadvise64(r0, 0x10000001003, 0x9, 0x5) r4 = syz_usb_connect$uac1(0x0, 0xf5, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x8, 0x170, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x9}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x5, "7caf53807e"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x2, 0x6, [0x2, 0xa, 0x8, 0x7, 0x6, 0x6], 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x4, 0x7, "1ae3bf3986"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x1, 0x4, "cca9"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x3, 0x3, 0xed, 0xe9, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0xd024, 0x2, "4eb3575c4f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x40, 0x10, 0x7, {0x7, 0x25, 0x1, 0x2, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x8, "f178bf9155a1a66fc1"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfe52, 0x1, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x0, 0x60, "c2b57f77"}, @as_header={0x7, 0x24, 0x1, 0xe9, 0x81, 0x1002}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0xf, "4f5ce3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x9, 0xa2, {0x7, 0x25, 0x1, 0x80, 0x60, 0x1}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0xf1, 0x8, 0x8, 0x3}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x3, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0xa2, &(0x7f0000000340)=@string={0xa2, 0x3, "a8469cec9c1316c698c25be7ab4396b45e5df62930b6b11165d9240fb25278f4c13473aca24a3e066719b1476701b24e6edb59eb62d9f5d6b742a6b0978fa0ea27397ec15c9bf5f46cbedc75925519e4512c514005a5e63a6f617f815b8feaf9db0d1153ecee044a80447df8a5fb17f29e7b0750595935ac5f79d18af77a2e1c6f7277ec9a54e8e5d08dd5c357e6f16f5f3c35bea902636bce7caf96293c41bd"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_control_io(r4, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0x5, {0x5, 0x21, "e03832"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f0000000500)={0x0, 0xf, 0xcb, {0x5, 0xf, 0xcb, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x17, 0x1, 0xc, 0x3db}, @generic={0x95, 0x10, 0xb, "3e24e079cbfd25a039c8b6ebb86722258bcdccd423998dfa81420decd9bca8c3ffe92a6dac0b33cb435866d4013a38ded5211f40c5d076f48eeba98d4167396e2f6ff072c7a7383ac0fbdad92eb492e435a9a92308b13a153052269fc66afcc073f2e37efe0e1552a8426911881ab7f94eed0fbe4658de858e2e16f151b069faabd8327271c6df96e7e8d1eb3b0bf67a50b6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0x8, 0xfffa}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x400, 0xf00f, 0x4, [0xf, 0x3f00, 0xc000, 0x3fc0, 0xf]}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x3e, 0x8, "133892b7", "4cfc0fd4"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x82, 0x7, 0x6, 0xd9, 0x7, 0x101}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x40, 0x0, 0x86, "9b63e51c387f6b9b212c184005c4f9345d4eadac4b05e7770f8f96f4083a010402e1ef6d0da51f13101e9d4e028233a30ca8c9bf926cd5369e15334b2d6be6067640241099a069ec68d407803818e7c79a9e82eaccae99d1aa0d0ba0442dea0461cd3884cf9b00d097864bbd7c19108ac71dd6ce0df058b1c95394591907bc92ddb10c7c0659"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x14}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0xb, 0x2, '*\n'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "f625"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x49a}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x81}}) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) 546.032812ms ago: executing program 1 (id=361): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x13, r0, 0x4d75d000) 545.659972ms ago: executing program 1 (id=362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregset(0x4205, r2, 0x202, &(0x7f00000004c0)={0x0}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') (async) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (async) fsopen(0x0, 0x0) 533.828612ms ago: executing program 1 (id=363): socketpair(0x1f, 0x3, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x306}, "cefb1c783316fbd6", "ccb6e328463fb1ade2d7956936b47e87", "ceb7a838", "83d15b4837ba7071"}, 0x28) (async, rerun: 32) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/99, 0x63}) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x50, {"660fc7b6006000000f20d835200000000f22d8c4c1b9d89100100000ec64400f0966420f388030360f01f8c4e201aaa70058000067430f07b9f00b00000f32"}}, @code={0x1, 0x5c, {"67660f38f84800b90d0400000f3266b81d000f00d0c443fd5c7b86ddd09c3c0900000066baf80cb878812a83ef66bafc0c66ed450f094e0fc76a3766baa100b8d1000000ef26650f38c8d3"}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0xffffffff}, @uexit={0x0, 0x18, 0x8001}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x4, 0x2282}}, @code={0x1, 0x86, {"c44329498a6c04edf3e4f26467420f01590c0f07b9800000c00f3235004000000f303e67662666460faef236430fc75aa2c7442400d9d40000c744240200000000c7442406000000000f011424b94c060000b8f858ecedba000000000f3066baf80cb8ee54c889ef66bafc0c66ed66b865000f00d0"}}, @uexit={0x0, 0x18}, @code={0x1, 0x78, {"b8010000000f01c1b97d0800000f32b93a1001c0b800000000ba000000000f30b95f0b0000b8292e0000ba000000000f3066b86f000f00d8c744240000100000c744240205000000c7442406000000000f011c24430f001fc4c37915dd45c4a27198ee460f01cf"}}, @uexit={0x0, 0x18, 0xec3793c}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xf6e8}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x200, 0xff}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0x1, 0x87, {"673e0fc7b574740000b805000000b9020000000f01c1c744240011000000c744240200900000ff2c24c4c1c75f837e75000066bad00466edc7442400fe000000c7442402f25d5deaff1c24c74424003f6d7db9c7442402e9000000c7442406000000000f0114243e42ffb05b62ccde0f0726670f01c3"}}, @cpuid={0x2, 0x18, {0x7fff, 0x7}}, @code={0x1, 0x5c, {"4b0f38f64f00660f380425c5000000430f0d0500000000c441635eb00301a7c766f30f0966ba210066ed660ff7e4660f381d1c70b9e0090000b800100000ba000000000f30c483457f3700"}}, @uexit={0x0, 0x18, 0xef98}, @uexit={0x0, 0x18, 0x8b90}, @uexit={0x0, 0x18, 0x1548}, @cpuid={0x2, 0x18, {0x7, 0x9}}, @code={0x1, 0x58, {"0f01c566ba400066ed3486b9400900000f32b961050000b802000000ba000000000f3066baf80cb800eb0c8eef66bafc0cedb8010000000f01d9440f20c4450fb3dd656680c79b"}}], 0x495}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000006c0)={0x1, 0x0, [{0x2, 0x6, 0x4, 0xa5b, 0x100, 0x8000, 0x3}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (rerun: 64) 521.906682ms ago: executing program 1 (id=364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100)="6424f367a9f334520367e3e7ed4f05c4f74a921ea51110e5a96cbfded5ec756bb126ce2316b9d0e882eb260ac4113298214e9b9266f4c214294fe1fc5f", 0x3d, 0x1, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(0xffffffffffffffff, r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x101, 0x3, 0x3, 0xffff, 0x27}) close_range(r0, 0xffffffffffffffff, 0x0) 382.458864ms ago: executing program 1 (id=365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async) unshare(0x22020600) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') unshare(0x4020400) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x800) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x267482, 0x1ff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f0000000280)={0xf, 0x0, 0x100000}, 0x20) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r3, &(0x7f0000000300)=""/218, 0xda, 0x102, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) (async) shutdown(r3, 0x0) 381.973004ms ago: executing program 1 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0x12) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ustat(0x105, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic={0x8000000, 0x7f, 0xb, 0x1, 0x0, [{0x6d, 0x0, 0x3e, '\x00', 0x9}, {0x1, 0x1c, 0x3, '\x00', 0x5}, {0x7, 0x1, 0x9, '\x00', 0x9}, {0xff, 0x5, 0xa, '\x00', 0x81}, {0xff, 0x30, 0x5, '\x00', 0x7}, {0x9, 0x6, 0x2, '\x00', 0x5}, {0xd, 0xbc, 0x4, '\x00', 0x35}, {0x4, 0x7, 0x8, '\x00', 0x80}, {0x40, 0x6, 0x7}, {0x4, 0x3, 0x1, '\x00', 0x4}, {0x3, 0x87, 0x1, '\x00', 0xfe}, {0x6, 0x10, 0xf7, '\x00', 0xff}, {0x26, 0xc, 0x6, '\x00', 0x7}, {0x7, 0x40, 0x3, '\x00', 0x9}, {0x9, 0x42, 0x7, '\x00', 0x6}, {0x9, 0x4, 0xf, '\x00', 0x7}, {0x2, 0x5, 0x8, '\x00', 0x5}, {0x6, 0xf, 0x1a, '\x00', 0x4f}, {0x80, 0x6, 0x9, '\x00', 0x6}, {0x7f, 0x40, 0x10, '\x00', 0xf9}, {0xfd, 0x1, 0x9, '\x00', 0xce}, {0xff, 0x4, 0xa, '\x00', 0x3}, {0x5d, 0xfe, 0x3, '\x00', 0xf7}, {0x0, 0x8, 0x7, '\x00', 0x2}]}}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) userfaultfd(0x801) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="025985", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, r7, r8) (async, rerun: 32) getgroups(0x2, &(0x7f0000000280)=[0xee00, 0x0]) (rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r10, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) (async) mount$bpf(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r7}}, {@gid={'gid', 0x3d, r9}}], [{@subj_role={'subj_role', 0x3d, 'user_id'}}, {@euid_gt={'euid>', r11}}, {@smackfshat={'smackfshat', 0x3d, 'fuse\x00'}}, {@hash}, {@seclabel}]}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="400f78f98f697801be02000000c482ed3e08b8010000000f01d90f01bd00000100460f3567d766b81a010f00d866bad104b03bee48b83d000000000000000f23d80f21f835400000e00f23f8", 0x4c}], 0x1, 0x3, &(0x7f00000000c0)=[@cstype0={0x4, 0xe}], 0x1) (async) ioctl$FUSE_DEV_IOC_CLONE(r12, 0x8004e500, &(0x7f0000000080)=r5) write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000100)={0x14}, 0x14) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 272.398786ms ago: executing program 0 (id=367): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x705200, 0x0) fcntl$addseals(r0, 0x409, 0x8) 244.124757ms ago: executing program 0 (id=368): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) io_setup(0x200, &(0x7f0000000000)=0x0) io_destroy(r1) io_setup(0x2, &(0x7f00000003c0)) connect$netlink(0xffffffffffffffff, 0x0, 0x0) io_destroy(r1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_auto}], [{@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) io_setup(0x5fb3, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 23.85226ms ago: executing program 3 (id=369): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000)='\x00'/10, 0xa, 0xc840, &(0x7f00000000c0)={0x2, 0x4c20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffe) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r1, &(0x7f0000000000)='\x00'/10, 0xa, 0xc840, &(0x7f00000000c0)={0x2, 0x4c20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) (async) 21.71658ms ago: executing program 0 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf250c0000008c0001802c0004001400010002004e23e000000200000000000000001400020002004e21ac14143700000000000000001c000280080001000d00000008000400c100000008000400060000000d0001007564703a73797a31000000000c000280080001001f0000000d0001007564703a73797a30000000000c000280080004000400000008000300b50c0000880005801400028008000200b9bc23450800030007000000080001007564700024000280080001001800000008000200650600000800020008080000080001000400000014000280080002000100000008000400000000002400028008000300010000000800030003000000080001001700000008000300080000000c00028008000200fdffffff9c00028034000380080001000f00000008000100080000000800010005000000080001000500000008000200a0210000080001003f0d000024000380080002000080000008000200010000000800010003000000080001000200000008000200050000002c0003800800010008000000080001000400000008000200ff7f0000080002003ba8000008000200020000000c00038008000200c89500005c0007800c00030004000000000000000c00040008000000000000000c00040001000000000000000c00030005000000000000000800010018c5a64a08000200040000000c000300fcffffffffffffff0c0004000000000000000000340009800800010006000000080001000200000008000200010000000800010003000000080002000600000008000100090000002c0001800d0001007564703a73797a320000000008000300000000000f00010069623a70696d36726567000064000680040005004c00040067636d2861657329000000000000000000000000000000000000000000000000240000000b68494d745ce8aa836b09675cf65eb29ddaf8788f8aa04470a36df747053f423a1350b308000100090000000400050004000200"], 0x2e4}, 0x1, 0x0, 0x0, 0x4004041}, 0x24008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10940, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "e430df737690723a", "e6de32186ceede9acffead28a741810dee633346918a59312628d7018f30c3df", "45a0a62f", "d31f89a960b56015"}, 0x38) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r6 = socket$inet6(0xa, 0x1, 0x4) getsockopt$inet6_buf(r6, 0x29, 0xcd, &(0x7f0000000000), &(0x7f0000000040)) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) read$FUSE(r7, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=371): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) mount$incfs(&(0x7f0000000100)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x100c00b, &(0x7f0000000880)={[{@rlog_pages={'rlog_pages', 0x3d, 0x3c57}}]}) (async, rerun: 32) io_setup(0x9, &(0x7f0000000000)=0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x6, r2, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) (async, rerun: 64) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') (async, rerun: 64) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) (async) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) (rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fgetxattr(r7, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(r6) (async) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000802, 0xee01, &(0x7f0000000180)={0xc3c7, 0x80, 0x5, 0x800, 0x10000, 0x0, 0x2, 0x914}) (async, rerun: 64) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) (rerun: 64) ioctl$EVIOCRMFF(r6, 0xc0085504, &(0x7f0000000140)=0x1000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r8, &(0x7f0000000380)='./bus\x00') (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (rerun: 64) fcntl$lock(r9, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 25.873276][ T36] audit: type=1400 audit(1751464312.890:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.874826][ T281] cgroup: Unknown subsys name 'net' [ 25.896068][ T36] audit: type=1400 audit(1751464312.890:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.923359][ T36] audit: type=1400 audit(1751464312.920:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.923570][ T281] cgroup: Unknown subsys name 'devices' [ 26.068423][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.074180][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.189312][ T36] audit: type=1400 audit(1751464313.210:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.212695][ T36] audit: type=1400 audit(1751464313.210:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.225528][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.237633][ T36] audit: type=1400 audit(1751464313.210:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.269345][ T36] audit: type=1400 audit(1751464313.270:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.294867][ T36] audit: type=1400 audit(1751464313.270:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.296021][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.320450][ T36] audit: type=1400 audit(1751464313.310:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.354698][ T36] audit: type=1400 audit(1751464313.310:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.600828][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.607958][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.615097][ T288] bridge_slave_0: entered allmulticast mode [ 27.621486][ T288] bridge_slave_0: entered promiscuous mode [ 27.628011][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.635070][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.642185][ T288] bridge_slave_1: entered allmulticast mode [ 27.648571][ T288] bridge_slave_1: entered promiscuous mode [ 27.669276][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.676393][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.683629][ T289] bridge_slave_0: entered allmulticast mode [ 27.689907][ T289] bridge_slave_0: entered promiscuous mode [ 27.697507][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.704561][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.711654][ T289] bridge_slave_1: entered allmulticast mode [ 27.718039][ T289] bridge_slave_1: entered promiscuous mode [ 27.812289][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.819402][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.826586][ T290] bridge_slave_0: entered allmulticast mode [ 27.832850][ T290] bridge_slave_0: entered promiscuous mode [ 27.849946][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.857039][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.864110][ T290] bridge_slave_1: entered allmulticast mode [ 27.870482][ T290] bridge_slave_1: entered promiscuous mode [ 27.880291][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.887430][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.894510][ T291] bridge_slave_0: entered allmulticast mode [ 27.900862][ T291] bridge_slave_0: entered promiscuous mode [ 27.907236][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.914272][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.921394][ T291] bridge_slave_1: entered allmulticast mode [ 27.927745][ T291] bridge_slave_1: entered promiscuous mode [ 28.020101][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.027195][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.034500][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.041557][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.077333][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.084400][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.091719][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.098773][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.134773][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.141851][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.149180][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.156331][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.176624][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.183968][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.191369][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.198956][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.206649][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.213885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.239426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.246598][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.254361][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.261463][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.276071][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.283133][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.290794][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.297853][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.334298][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.341527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.349245][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.356405][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.390550][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.397633][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.405353][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.412486][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.430632][ T288] veth0_vlan: entered promiscuous mode [ 28.451555][ T289] veth0_vlan: entered promiscuous mode [ 28.460044][ T288] veth1_macvtap: entered promiscuous mode [ 28.472145][ T291] veth0_vlan: entered promiscuous mode [ 28.490976][ T289] veth1_macvtap: entered promiscuous mode [ 28.517786][ T291] veth1_macvtap: entered promiscuous mode [ 28.527241][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.542376][ T290] veth0_vlan: entered promiscuous mode [ 28.579331][ T290] veth1_macvtap: entered promiscuous mode [ 28.633919][ T316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.638679][ T316] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 77) [ 28.648071][ T316] rust_binder: Error while translating object. [ 28.662847][ T316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.671011][ T316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 28.847028][ T45] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.886579][ T336] rust_binder: Failed copying remainder into alloc: EFAULT [ 28.886605][ T336] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 28.893881][ T336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.926078][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.936235][ T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15 [ 29.019404][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.047712][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 29.067143][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 29.081828][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.101369][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.112254][ T313] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 29.126035][ T45] usb 1-1: Product: syz [ 29.132682][ T313] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 514 [ 29.142830][ T45] usb 1-1: Manufacturer: syz [ 29.152955][ T45] usb 1-1: SerialNumber: syz [ 29.164332][ T313] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.174538][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.193832][ T313] usb 4-1: Product: syz [ 29.198302][ T313] usb 4-1: Manufacturer: syz [ 29.202962][ T313] usb 4-1: SerialNumber: syz [ 29.207203][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 29.391741][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.402836][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 29.420615][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 29.426290][ T313] cdc_ncm 4-1:1.0: bind() failure [ 29.428097][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.458075][ T313] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 29.470886][ T313] cdc_ncm 4-1:1.1: bind() failure [ 29.478730][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.492763][ T313] usb 4-1: USB disconnect, device number 2 [ 29.496723][ T10] usb 3-1: Product: syz [ 29.502959][ T10] usb 3-1: Manufacturer: syz [ 29.513067][ T10] usb 3-1: SerialNumber: syz [ 29.524299][ T336] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 29.618855][ T306] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.643325][ T306] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.717614][ T344] fido_id[344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.044579][ T359] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.245092][ T373] overlayfs: failed to clone upperpath [ 30.546835][ T10] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 30.553335][ T10] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 30.606074][ T306] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.776055][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 30.786105][ T306] usb 4-1: too many configurations: 240, using maximum allowed: 8 [ 30.806398][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.820857][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.833434][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.845357][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.857066][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.868885][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.880559][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.892353][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.903320][ T306] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 30.912921][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.921878][ T306] usb 4-1: config 0 descriptor?? [ 30.953435][ T10] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 30.967392][ T10] usb 3-1: USB disconnect, device number 2 [ 30.973739][ T10] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 30.985912][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 30.985931][ T36] audit: type=1400 audit(1751464318.010:152): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.271333][ T36] audit: type=1400 audit(1751464318.290:153): avc: denied { mounton } for pid=392 comm="syz.1.25" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.271439][ T393] 9pnet_fd: p9_fd_create_unix (393): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 31.323320][ T36] audit: type=1400 audit(1751464318.340:154): avc: denied { write } for pid=392 comm="syz.1.25" path="socket:[4130]" dev="sockfs" ino=4130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.359854][ T306] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 31.366762][ T36] audit: type=1400 audit(1751464318.370:155): avc: denied { connect } for pid=392 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.393584][ T36] audit: type=1400 audit(1751464318.370:156): avc: denied { setopt } for pid=392 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.532664][ T36] audit: type=1400 audit(1751464318.550:157): avc: denied { map } for pid=395 comm="syz.2.26" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.555624][ T36] audit: type=1400 audit(1751464318.550:158): avc: denied { execute } for pid=395 comm="syz.2.26" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.563065][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.590681][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.605200][ T10] usb 4-1: USB disconnect, device number 3 [ 31.616032][ T36] audit: type=1400 audit(1751464318.550:159): avc: denied { setopt } for pid=395 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.651240][ T36] audit: type=1400 audit(1751464318.660:160): avc: denied { write } for pid=402 comm="syz.2.28" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.675874][ T36] audit: type=1400 audit(1751464318.670:161): avc: denied { read } for pid=404 comm="syz.3.29" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.678892][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.707867][ T407] rust_binder: Error while translating object. [ 31.707902][ T407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.714216][ T407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 31.737351][ T45] usb 1-1: USB disconnect, device number 2 [ 31.763176][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.871758][ T428] rust_binder: 428: no such ref 7 [ 31.923864][ T429] cgroup: noprefix used incorrectly [ 31.932523][ T429] tipc: Started in network mode [ 31.937529][ T429] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 31.955121][ T429] tipc: Enabling of bearer rejected, failed to enable media [ 32.012683][ T434] binder: Unknown parameter 'fscontext?}' [ 32.755446][ T449] netlink: 104 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.946837][ T455] netlink: 1 bytes leftover after parsing attributes in process `syz.1.46'. [ 33.025890][ T466] incfs: Options parsing error. -22 [ 33.031346][ T466] incfs: mount failed -22 [ 33.071430][ T468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 33.080321][ T468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 33.182886][ T477] 9p: Unknown access argument Z"X?5;;6T!QIg*KӰՍ5@|iTnN!J*frO: -22 [ 33.469423][ T504] tipc: Enabling of bearer rejected, failed to enable media [ 34.826025][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.843273][ T541] netlink: 1 bytes leftover after parsing attributes in process `syz.1.78'. [ 34.892316][ T549] overlayfs: failed to clone upperpath [ 35.426919][ T573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 36.080771][ T305] tipc: Subscription rejected, illegal request [ 36.087189][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 36.087207][ T36] audit: type=1400 audit(1751464323.110:206): avc: denied { read } for pid=595 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.116070][ T36] audit: type=1400 audit(1751464323.110:207): avc: denied { block_suspend } for pid=595 comm="syz.0.94" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.187778][ T36] audit: type=1400 audit(1751464323.210:208): avc: denied { ioctl } for pid=597 comm="syz.0.95" path="socket:[4674]" dev="sockfs" ino=4674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.214138][ T36] audit: type=1400 audit(1751464323.230:209): avc: denied { connect } for pid=597 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.279875][ T603] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.468321][ T608] Zero length message leads to an empty skb [ 36.866039][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.016031][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 37.028478][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.044978][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 37.065012][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.082772][ T45] usb 4-1: config 0 descriptor?? [ 37.350954][ T631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=86 sclass=netlink_audit_socket pid=631 comm=syz.0.105 [ 37.370639][ T631] /dev/loop0: Can't lookup blockdev [ 37.375988][ T36] audit: type=1400 audit(1751464324.390:210): avc: denied { mounton } for pid=630 comm="syz.0.105" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 37.508890][ T45] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 37.518306][ T45] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 37.525646][ T45] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 37.533265][ T45] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 37.540670][ T45] logitech 0003:046D:CA03.0003: unknown main item tag 0x0 [ 37.552954][ T45] logitech 0003:046D:CA03.0003: hidraw0: USB HID v0.05 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 37.564661][ T45] logitech 0003:046D:CA03.0003: no inputs found [ 37.720850][ T10] usb 4-1: USB disconnect, device number 4 [ 38.038280][ T36] audit: type=1400 audit(1751464325.060:211): avc: denied { append } for pid=638 comm="syz.0.108" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.260875][ T36] audit: type=1400 audit(1751464325.280:212): avc: denied { map } for pid=645 comm="syz.0.110" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.286016][ T36] audit: type=1400 audit(1751464325.280:213): avc: denied { execute } for pid=645 comm="syz.0.110" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.317086][ T36] audit: type=1400 audit(1751464325.340:214): avc: denied { write } for pid=647 comm="syz.3.111" name="route" dev="proc" ino=4026532483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.341439][ T648] exFAT-fs (rnullb0): invalid boot record signature [ 38.348405][ T648] exFAT-fs (rnullb0): failed to read boot sector [ 38.355280][ T648] exFAT-fs (rnullb0): failed to recognize exfat type [ 38.400807][ T651] binder: Bad value for 'max' [ 38.510714][ T656] netlink: 5 bytes leftover after parsing attributes in process `syz.3.114'. [ 38.523357][ T656] 0{X: renamed from gretap0 [ 38.532062][ T656] 0{X: entered allmulticast mode [ 38.537860][ T656] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 38.574837][ T36] audit: type=1400 audit(1751464325.590:215): avc: denied { accept } for pid=667 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 38.796058][ T343] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.947198][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.958276][ T343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.971666][ T343] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.980959][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.991558][ T343] usb 4-1: config 0 descriptor?? [ 39.246251][ T695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 39.404026][ T343] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.406078][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.418793][ T343] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 39.458177][ T343] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 39.500447][ T701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.556030][ T65] usb 1-1: device descriptor read/64, error -71 [ 39.688330][ T656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.689234][ T45] usb 4-1: USB disconnect, device number 5 [ 39.796070][ T65] usb 1-1: device descriptor read/64, error -71 [ 40.036074][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.175305][ T711] tipc: Can't bind to reserved service type 1 [ 40.186099][ T65] usb 1-1: device descriptor read/64, error -71 [ 40.253221][ T716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=716 comm=syz.3.133 [ 40.426065][ T65] usb 1-1: device descriptor read/64, error -71 [ 40.536671][ T65] usb usb1-port1: attempt power cycle [ 40.850112][ T729] input: syz1 as /devices/virtual/input/input6 [ 40.896039][ T65] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.927071][ T65] usb 1-1: device descriptor read/8, error -71 [ 41.057010][ T65] usb 1-1: device descriptor read/8, error -71 [ 41.164894][ T755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.141'. [ 41.298672][ T764] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 41.316048][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.347048][ T65] usb 1-1: device descriptor read/8, error -71 [ 41.355116][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 41.355134][ T36] audit: type=1400 audit(1751464328.370:228): avc: denied { unlink } for pid=763 comm="syz.3.145" name="#1" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.396015][ T36] audit: type=1400 audit(1751464328.370:229): avc: denied { mount } for pid=763 comm="syz.3.145" name="/" dev="overlay" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.439891][ T36] audit: type=1400 audit(1751464328.380:230): avc: denied { remount } for pid=763 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.479778][ T36] audit: type=1400 audit(1751464328.420:231): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.516188][ T65] usb 1-1: device descriptor read/8, error -71 [ 41.559204][ T36] audit: type=1400 audit(1751464328.580:232): avc: denied { read write } for pid=775 comm="syz.3.150" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.586479][ T36] audit: type=1400 audit(1751464328.580:233): avc: denied { open } for pid=775 comm="syz.3.150" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.587173][ T766] /dev/rnullb0: Can't lookup blockdev [ 41.609983][ T36] audit: type=1400 audit(1751464328.580:234): avc: denied { ioctl } for pid=775 comm="syz.3.150" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.646216][ T65] usb usb1-port1: unable to enumerate USB device [ 41.796038][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.948370][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 41.955118][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.968308][ T10] usb 4-1: config 9 has an invalid interface number: 63 but max is 1 [ 41.986033][ T10] usb 4-1: config 9 has an invalid interface number: 159 but max is 1 [ 41.994288][ T10] usb 4-1: config 9 has no interface number 0 [ 42.006021][ T10] usb 4-1: config 9 has no interface number 1 [ 42.012145][ T10] usb 4-1: config 9 interface 63 has no altsetting 0 [ 42.027109][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 42.046017][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.054053][ T10] usb 4-1: Product: syz [ 42.058288][ T10] usb 4-1: Manufacturer: syz [ 42.062919][ T10] usb 4-1: SerialNumber: syz [ 42.256004][ T36] audit: type=1400 audit(1751464329.270:235): avc: denied { getopt } for pid=781 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.316224][ T785] tmpfs: Unsupported parameter 'mpol' [ 42.367447][ T789] netlink: 288 bytes leftover after parsing attributes in process `syz.1.154'. [ 42.471312][ T36] audit: type=1400 audit(1751464329.490:236): avc: denied { wake_alarm } for pid=792 comm="syz.1.156" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.596041][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.708771][ T10] usb 4-1: USB disconnect, device number 6 [ 42.723715][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.762703][ T802] netlink: 68 bytes leftover after parsing attributes in process `syz.1.159'. [ 42.771731][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 42.777197][ T802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1536 sclass=netlink_route_socket pid=802 comm=syz.1.159 [ 42.790594][ T65] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.801643][ T65] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.824751][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.834861][ T65] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 42.846448][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.856457][ T65] usb 1-1: config 0 descriptor?? [ 43.069136][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 43.075251][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.086114][ T65] usb 1-1: USB disconnect, device number 7 [ 43.387032][ T36] audit: type=1400 audit(1751464330.410:237): avc: denied { ioctl } for pid=805 comm="syz.1.160" path="socket:[6410]" dev="sockfs" ino=6410 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.516529][ T812] tmpfs: Bad value for 'uid' [ 43.521175][ T812] tmpfs: Bad value for 'uid' [ 43.585469][ T814] rust_binder: 814: no such ref 5 [ 43.591175][ T814] mmap: syz.0.164 (814) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.596042][ T65] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.759613][ T65] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 44.772246][ T65] usb 4-1: config 0 has no interface number 0 [ 44.785326][ T65] usb 4-1: config 0 interface 41 has no altsetting 0 [ 44.800278][ T65] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 44.811865][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.825681][ T65] usb 4-1: Product: syz [ 44.830198][ T65] usb 4-1: Manufacturer: syz [ 44.834942][ T65] usb 4-1: SerialNumber: syz [ 44.843848][ T65] usb 4-1: config 0 descriptor?? [ 45.031795][ T852] 9pnet_fd: Insufficient options for proto=fd [ 45.134034][ T865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.183'. [ 45.652769][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 45.867349][ T826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.878603][ T826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.906212][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 45.919944][ T65] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 45.938091][ T65] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 45.957998][ T65] usb 4-1: USB disconnect, device number 7 [ 45.996071][ T306] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.001335][ T904] incfs: Options parsing error. -22 [ 46.008924][ T904] incfs: mount failed -22 [ 46.036705][ T907] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=907 comm=syz.3.194 [ 46.156012][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 46.167304][ T306] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.184486][ T306] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 46.208421][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.223238][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.236007][ T306] usb 1-1: SerialNumber: syz [ 46.247376][ T306] cdc_ether 1-1:1.0: skipping garbage [ 46.252891][ T306] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 46.395536][ T930] FAT-fs (rnullb0): bogus number of reserved sectors [ 46.402377][ T930] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 46.448715][ T10] usb 1-1: USB disconnect, device number 8 [ 46.656044][ T306] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.826019][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 46.836430][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.863801][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.883854][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.903095][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.919798][ T306] usb 4-1: config 0 descriptor?? [ 46.938261][ T306] hub 4-1:0.0: USB hub found [ 46.997883][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 46.997901][ T36] audit: type=1400 audit(1751464335.021:252): avc: denied { write } for pid=937 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.046018][ T36] audit: type=1400 audit(1751464335.021:253): avc: denied { read } for pid=937 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.146845][ T306] hub 4-1:0.0: 2 ports detected [ 47.297171][ T941] netlink: 5 bytes leftover after parsing attributes in process `syz.1.208'. [ 47.336061][ T65] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.496033][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 47.502906][ T65] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 47.511413][ T65] usb 1-1: config 0 has no interface number 0 [ 47.517752][ T65] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 47.529153][ T65] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 47.543174][ T65] usb 1-1: config 0 interface 255 has no altsetting 0 [ 47.551742][ T65] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 47.561087][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.569356][ T65] usb 1-1: Product: syz [ 47.573607][ T65] usb 1-1: Manufacturer: syz [ 47.578435][ T65] usb 1-1: SerialNumber: syz [ 47.584678][ T65] usb 1-1: config 0 descriptor?? [ 47.973674][ T36] audit: type=1400 audit(1751464335.991:254): avc: denied { mounton } for pid=956 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.042289][ T964] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 48.063793][ T305] bridge_slave_1: left allmulticast mode [ 48.069700][ T36] audit: type=1400 audit(1751464336.081:255): avc: denied { bind } for pid=961 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.088950][ T305] bridge_slave_1: left promiscuous mode [ 48.094640][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.102655][ T305] bridge_slave_0: left allmulticast mode [ 48.108477][ T305] bridge_slave_0: left promiscuous mode [ 48.114152][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.187027][ T306] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 48.193419][ T306] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 48.203169][ T306] usbhid 4-1:0.0: can't add hid device: -32 [ 48.209195][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 48.217847][ T956] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.224996][ T956] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.232149][ T956] bridge_slave_0: entered allmulticast mode [ 48.238595][ T956] bridge_slave_0: entered promiscuous mode [ 48.244877][ T964] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 48.254628][ T966] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 48.263759][ T956] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.270981][ T956] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.285791][ T956] bridge_slave_1: entered allmulticast mode [ 48.292621][ T956] bridge_slave_1: entered promiscuous mode [ 48.299543][ T305] veth1_macvtap: left promiscuous mode [ 48.305299][ T305] veth0_vlan: left promiscuous mode [ 48.442118][ T956] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.449226][ T956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.456558][ T956] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.463609][ T956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.487348][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.494675][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.504693][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.511809][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.522323][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.529437][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.559464][ T956] veth0_vlan: entered promiscuous mode [ 48.572108][ T956] veth1_macvtap: entered promiscuous mode [ 48.594279][ T36] audit: type=1400 audit(1751464336.611:256): avc: denied { mounton } for pid=956 comm="syz-executor" path="/root/syzkaller.0GcO5c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.653019][ T982] capability: warning: `syz.4.221' uses deprecated v2 capabilities in a way that may be insecure [ 48.916078][ T343] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.952870][ T36] audit: type=1400 audit(1751464336.971:257): avc: denied { listen } for pid=988 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.979972][ T991] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 48.989139][ T991] overlayfs: missing 'lowerdir' [ 49.066061][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 49.071811][ T343] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 49.081087][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 49.088874][ T343] usb 5-1: can't read configurations, error -61 [ 49.216050][ T343] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.366024][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 49.371716][ T343] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 49.380789][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 49.388461][ T343] usb 5-1: can't read configurations, error -61 [ 49.394896][ T343] usb usb5-port1: attempt power cycle [ 49.437759][ T997] rust_binder: 997: no such ref 2 [ 49.442879][ T997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 49.686262][ T31] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 49.703510][ T31] usb 4-1: device reset changed ep0 maxpacket size! [ 49.710555][ T31] usb 4-1: USB disconnect, device number 8 [ 49.736369][ T343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.757954][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 49.763513][ T343] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 49.772611][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 49.780247][ T343] usb 5-1: can't read configurations, error -61 [ 49.916062][ T343] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.936619][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 49.943311][ T343] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 49.956785][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 49.964404][ T343] usb 5-1: can't read configurations, error -61 [ 49.986906][ T343] usb usb5-port1: unable to enumerate USB device [ 50.004288][ T65] hub 1-1:0.255: bad descriptor, ignoring hub [ 50.012976][ T65] hub 1-1:0.255: probe with driver hub failed with error -5 [ 50.026165][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.057974][ T65] usb 1-1: USB disconnect, device number 9 [ 50.196475][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 50.207562][ T31] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 50.217902][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 50.226235][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 50.243445][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.256467][ T31] usb 4-1: Product: ᬶꔖ姥ᴄ톄ᠺ뇪奍뮴Ԯ㛔 [ 50.263843][ T31] usb 4-1: Manufacturer: 멇櫴툫谩㢠쪒列摞⽛ゝ只哺怬쵈亐蒻ᨫ厦觊媃鍐⸠짩갊笲光垻瑺㦢ᦅ覃脨븣푂ヂ魰䁚䬉뼄ጫ꠾సБᶴိ⓾ᓓ鿉轢햑㣝構秽可闘Ⅲ螮㰿ꉳﻙ嚼㚓몫ಅꓛꃓ렸瀗濴㕿㭈䎼ᆢ騯ᥝ﫮㾳衞〬䙏쾅ᵫᝍ帒沗㥞⮢ቖ농㑵뤥듯呾쌋쇯걛祉遭㢇큠 [ 50.299633][ T31] usb 4-1: SerialNumber: ␉ [ 50.306649][ T1034] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 50.309424][ T1001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.508799][ T36] audit: type=1400 audit(1751464338.531:258): avc: denied { node_bind } for pid=1046 comm="syz.1.245" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.532923][ T1048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.245'. [ 50.676209][ T343] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.698619][ T1059] /dev/rnullb0: Can't lookup blockdev [ 50.827114][ T343] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 50.846035][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.856964][ T343] usb 1-1: config 0 descriptor?? [ 51.403857][ T36] audit: type=1400 audit(1751464595.421:259): avc: denied { create } for pid=1084 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.520167][ T1092] tmpfs: Unknown parameter '8lU5ΓxT{֬AЛ2E3y-d/%u++M9/4#Vc[U\o:Xo_W#{PЎgi5Hr-߻W|D7[䁄' [ 51.908602][ T36] audit: type=1400 audit(1751464595.931:260): avc: denied { map } for pid=1101 comm="syz.4.264" path="/newroot/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.944228][ T1104] tmpfs: Bad value for 'huge' [ 51.997207][ T36] audit: type=1400 audit(1751464596.021:261): avc: denied { append } for pid=1107 comm="syz.4.267" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 52.023041][ T36] audit: type=1400 audit(1751464596.041:262): avc: denied { execmod } for pid=1107 comm="syz.4.267" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 52.067130][ T36] audit: type=1400 audit(1751464596.081:263): avc: denied { bind } for pid=1040 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.091118][ T36] audit: type=1400 audit(1751464596.081:264): avc: denied { setopt } for pid=1040 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.296034][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.367979][ T1112] /dev/rnullb0: Can't lookup blockdev [ 52.446048][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 52.452446][ T45] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 52.460773][ T45] usb 5-1: config 0 has no interface number 0 [ 52.468751][ T45] usb 5-1: New USB device found, idVendor=0403, idProduct=7c90, bcdDevice=fe.71 [ 52.479947][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.490686][ T45] usb 5-1: Product: syz [ 52.495811][ T31] usb 4-1: USB disconnect, device number 9 [ 52.506124][ T45] usb 5-1: Manufacturer: syz [ 52.510779][ T45] usb 5-1: SerialNumber: syz [ 52.524499][ T45] usb 5-1: config 0 descriptor?? [ 52.536913][ T45] ftdi_sio 5-1:0.244: FTDI USB Serial Device converter detected [ 52.545440][ T45] ftdi_sio ttyUSB0: unknown device type: 0xfe71 [ 52.587460][ T36] audit: type=1400 audit(1751464596.601:265): avc: denied { read write } for pid=1134 comm="syz.3.276" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.616122][ T36] audit: type=1400 audit(1751464596.611:266): avc: denied { open } for pid=1134 comm="syz.3.276" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.639964][ T36] audit: type=1400 audit(1751464596.611:267): avc: denied { execmem } for pid=1141 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.659474][ T36] audit: type=1400 audit(1751464596.651:268): avc: denied { create } for pid=1146 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.680050][ T36] audit: type=1400 audit(1751464596.651:269): avc: denied { create } for pid=1146 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.701866][ T36] audit: type=1400 audit(1751464596.651:270): avc: denied { setopt } for pid=1146 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.722305][ T36] audit: type=1400 audit(1751464596.651:271): avc: denied { write } for pid=1146 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.746179][ T1110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.757908][ T1110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.767260][ T1110] random: crng reseeded on system resumption [ 52.809408][ T45] usb 5-1: USB disconnect, device number 6 [ 52.822553][ T45] ftdi_sio 5-1:0.244: device disconnected [ 52.859242][ T1175] overlayfs: failed to clone lowerpath [ 52.867166][ T1175] overlayfs: failed to clone lowerpath [ 52.889208][ T1177] overlayfs: failed to clone upperpath [ 53.338773][ T1185] rust_binder: 1185: no such ref 0 [ 53.344242][ T1185] rust_binder: 1185: no such ref 2 [ 53.375020][ T343] usb 1-1: Cannot set autoneg [ 53.381965][ T343] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 53.387793][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.393899][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 53.407296][ T343] usb 1-1: USB disconnect, device number 10 [ 53.456201][ T1199] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 53.468567][ T1199] SELinux: failed to load policy [ 53.572591][ T1219] capability: warning: `syz.3.307' uses 32-bit capabilities (legacy support in use) [ 53.785508][ T1232] syz.4.310 (1232): attempted to duplicate a private mapping with mremap. This is not supported. [ 53.799043][ T1232] netlink: 'syz.4.310': attribute type 12 has an invalid length. [ 53.807637][ T1232] __vm_enough_memory: pid: 1232, comm: syz.4.310, bytes: 70373039144960 not enough memory for the allocation [ 54.182753][ T1255] random: crng reseeded on system resumption [ 54.294380][ T1264] rust_binder: Error while translating object. [ 54.294414][ T1264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.301030][ T1264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 54.752218][ T1290] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2435776582 (2435776582 ns) > initial count (1085743 ns). Using initial count to start timer. [ 54.816024][ T306] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 54.977163][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.988310][ T306] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 54.997419][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.006423][ T306] usb 4-1: config 0 descriptor?? [ 55.413448][ T1278] tipc: Started in network mode [ 55.418522][ T1278] tipc: Node identity e0000001, cluster identity 4711 [ 55.425352][ T1278] tipc: Enabling of bearer rejected, failed to enable media [ 55.436515][ T306] pyra 0003:1E7D:2C24.0005: item fetching failed at offset 0/3 [ 55.444307][ T306] pyra 0003:1E7D:2C24.0005: parse failed [ 55.450386][ T306] pyra 0003:1E7D:2C24.0005: probe with driver pyra failed with error -22 [ 55.902688][ T1341] netlink: 80 bytes leftover after parsing attributes in process `syz.0.347'. [ 55.912322][ T1341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.541421][ T1369] rust_binder: Error while translating object. [ 56.548004][ T1369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 56.554333][ T1369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:178 [ 56.706057][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.866030][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 56.872485][ T45] usb 5-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 56.883248][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.892364][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 56.907092][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.916617][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.924729][ T45] usb 5-1: Product: syz [ 56.929317][ T45] usb 5-1: Manufacturer: ఌ [ 56.934017][ T45] usb 5-1: SerialNumber: syz [ 57.143500][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 57.143518][ T36] audit: type=1400 audit(1751464601.161:368): avc: denied { setopt } for pid=1395 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.185239][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.191890][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.198763][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.205444][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.212124][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.218756][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.225284][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.231956][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.238734][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.250396][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.257123][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.263854][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.273899][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.284039][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.290844][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.297842][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.304470][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.311817][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.319248][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.327917][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.335285][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.342675][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.343948][ T45] usb 5-1: 0:2 : does not exist [ 57.349424][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.361619][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.366577][ T45] usb 5-1: USB disconnect, device number 7 [ 57.368234][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.380627][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.387387][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.388916][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.394007][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.417733][ T1408] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.426168][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.432815][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.439606][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.446426][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.453041][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.459784][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.466484][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.473015][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.474538][ T313] usb 4-1: USB disconnect, device number 10 [ 57.479605][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.512760][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.519859][ T1412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.519892][ T1412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 57.529627][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.530500][ T1412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.556083][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.570561][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.576780][ T1418] ------------[ cut here ]------------ [ 57.582730][ T1418] WARNING: CPU: 1 PID: 1418 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 57.584985][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.592195][ T1418] Modules linked in: [ 57.592239][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: syz.3.371 Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 d09897295957ba49fce5d3909215422667ca3e4a [ 57.609021][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.615946][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.630730][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.632553][ T1418] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 57.639308][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.644802][ T1418] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e4 33 ee 05 00 0f 85 c4 00 00 00 c6 05 d7 33 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 57.644826][ T1418] RSP: 0018:ffffc9000d49f880 EFLAGS: 00010246 [ 57.652783][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.670906][ T1418] [ 57.670915][ T1418] RAX: 0000000000000000 RBX: 1ffff92001a93f14 RCX: 0000000000000000 [ 57.670933][ T1418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d49f928 [ 57.670948][ T1418] RBP: ffffc9000d49f9b0 R08: ffffc9000d49f927 R09: 0000000000000000 [ 57.670964][ T1418] R10: ffffc9000d49f910 R11: fffff52001a93f25 R12: ffffc9000d49f8c0 [ 57.670980][ T1418] R13: 000000000000000d R14: dffffc0000000000 R15: 0000000000000000 [ 57.670995][ T1418] FS: 00007ff0cc95d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.671014][ T1418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.671031][ T1418] CR2: 00007ff0cc95cf98 CR3: 0000000118266000 CR4: 00000000003526b0 [ 57.678041][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.683531][ T1418] Call Trace: [ 57.683541][ T1418] [ 57.683550][ T1418] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.686402][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.693897][ T1418] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.702305][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.710015][ T1418] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 57.718745][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.726060][ T1418] ___kmalloc_large_node+0x9c/0x1d0 [ 57.735650][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.741809][ T1418] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 57.750314][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.756278][ T1418] __kmalloc_large_node_noprof+0x1e/0xe0 [ 57.759864][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.762500][ T1418] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 57.762537][ T1418] __kmalloc_noprof+0x26d/0x450 [ 57.769162][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.775049][ T1418] incfs_realloc_mount_info+0xa7/0x4d0 [ 57.781293][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.787253][ T1418] ? incfs_add_sysfs_node+0x118/0x240 [ 57.787285][ T1418] incfs_alloc_mount_info+0x479/0x600 [ 57.794415][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.799469][ T1418] incfs_mount_fs+0x3ca/0x960 [ 57.805290][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.811053][ T1418] ? __cfi_incfs_mount_fs+0x10/0x10 [ 57.817200][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.823122][ T1418] ? vfs_parse_fs_string+0x102/0x170 [ 57.829246][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.835227][ T1418] ? selinux_capable+0x38/0x50 [ 57.841307][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.845758][ T1418] legacy_get_tree+0x106/0x1b0 [ 57.852629][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.857805][ T1418] ? __cfi_incfs_mount_fs+0x10/0x10 [ 57.857838][ T1418] vfs_get_tree+0x9e/0x290 [ 57.864778][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.869669][ T1418] do_new_mount+0x251/0xb40 [ 57.875440][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.881479][ T1418] ? security_capable+0xcf/0xf0 [ 57.886594][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.892592][ T1418] path_mount+0x688/0x1050 [ 57.898207][ T1401] fuse: Unknown parameter 'Y0xffffffffffffffff' [ 57.904251][ T1418] ? putname+0x113/0x150 [ 57.992718][ T1418] __se_sys_mount+0x2bd/0x480 [ 57.997445][ T1418] ? __x64_sys_mount+0xf0/0xf0 [ 58.002675][ T1418] ? __kasan_check_read+0x15/0x20 [ 58.007758][ T1418] __x64_sys_mount+0xc3/0xf0 [ 58.012381][ T1418] x64_sys_call+0x2021/0x2ee0 [ 58.017115][ T1418] do_syscall_64+0x58/0xf0 [ 58.021553][ T1418] ? clear_bhb_loop+0x50/0xa0 [ 58.026276][ T1418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.032280][ T1418] RIP: 0033:0x7ff0cbb8e929 [ 58.036741][ T1418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.056412][ T1418] RSP: 002b:00007ff0cc95d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.064842][ T1418] RAX: ffffffffffffffda RBX: 00007ff0cbdb6080 RCX: 00007ff0cbb8e929 [ 58.072857][ T1418] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 0000200000000100 [ 58.080891][ T1418] RBP: 00007ff0cbc10b39 R08: 0000200000000880 R09: 0000000000000000 [ 58.088954][ T1418] R10: 000000000100c00b R11: 0000000000000246 R12: 0000000000000000 [ 58.096997][ T1418] R13: 0000000000000001 R14: 00007ff0cbdb6080 R15: 00007ffc523ed4d8 [ 58.104990][ T1418] [ 58.108053][ T1418] ---[ end trace 0000000000000000 ]--- [ 58.113626][ T1418] incfs: Error allocating mount info. -12 [ 58.120313][ T1418] incfs: mount failed -12