last executing test programs: 2.517142381s ago: executing program 0 (id=71): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x0, 0x40) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) io_setup(0x2, &(0x7f0000000200)=0x0) r3 = eventfd2(0xfffffff7, 0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) (async) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) (async) io_submit(r2, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) (rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d00060905e515acb0"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x600000000000000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000240)={0x8000000000000, 0x314000, 0x2000000}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r9 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r4, &(0x7f0000000440)=""/181, 0xb5) (async, rerun: 32) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) 2.386640593s ago: executing program 0 (id=75): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000008705000000000000ff00000000000100856031fc6b9beace8d1c0ee2839001090f7a006bb5dc158685b52b16b2379beb75fd422968927e0188a66f3407fd89d189793cec5729fed6d612106b58186e6af211ede0b6a83d0ebdf186b6"]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) pselect6(0x40, &(0x7f0000000100)={0x9, 0x9, 0x3, 0x8, 0x3, 0xe3c, 0x1, 0x7}, &(0x7f0000000140)={0x3, 0x85a1, 0x101, 0x1, 0x2, 0x4, 0x2, 0x8}, &(0x7f0000000180)={0x8c3, 0xffff, 0x3, 0xf5, 0x8, 0x80, 0xe50, 0x8000000000000000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8000000000000000]}, 0x8}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000ade000/0x1000)=nil, 0x1000, 0xd, 0x30, r6, 0x2b38a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000280)={0x1, 0x2, 0x7f, 0x0, 0x6, "3d11ad18fa0ce2c290d7631fd6f18c0e4f93d3"}) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a000, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x8000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xe) 2.334971604s ago: executing program 2 (id=78): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008001) 2.238203665s ago: executing program 2 (id=79): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000006100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000088}, 0x20000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) close(0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0xffffff6c) 2.235746685s ago: executing program 2 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000c00000000100c0"]) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.178423136s ago: executing program 0 (id=81): readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/16, 0x10}], 0x6) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x5, 0x0) read$msr(r0, &(0x7f0000000480)=""/113, 0x71) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x60, 0x80800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000600)={0x3, &(0x7f00000005c0)=[{0x7, 0x1, 0xf, 0x7}, {0x7e, 0x0, 0x1, 0x9}, {0x5, 0xc0, 0x7f, 0x28}]}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000640)={0xa, 0x4e23, 0x4, @mcast1, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000680)="ec40159c2c9d5e6d35918b5ee40aa691dba75e4f6a6e19e69d3a4e4765f13e6b42000297ae49b0acbc665f4af00b8191c0898ff1715ee8685ee783ff8d48682f6c", 0x41}, {&(0x7f0000000700)="45cf446f85922fe4827803110ebd23099b0443bd2c7624f2fea0d90120b47de7862f0af9b2dd9ec4425baf85746f425c6fa8c244e6658fdf229c6e170ba5268b06bc0dafcd191e27c22aee97e5db8fac2d317e61019cacfb44933148ef106165cd1513a9956e357773e5ff32100ce851928fc87ccc2b5705724017b44916584a2c934e6cd81f0e75e4ac03e2d607f81b00192d", 0x93}], 0x2}}], 0x1, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x230, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3) connect$inet6(r2, &(0x7f0000000980)={0xa, 0x4e24, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000009c0)) r6 = socket(0x9, 0x4, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000c00)) syz_usb_connect(0x0, 0x505, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0x11, 0xe4, 0x8e, 0x20, 0x17cc, 0x1000, 0x6604, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f3, 0x4, 0x8, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0xc1, 0x0, 0x9, 0xa3, 0x69, 0xc2, 0x88, [@hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xf69}}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x3, 0x7}, [@acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x39}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x4, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x101}]}], [{{0x9, 0x5, 0x8, 0xc, 0x8, 0x5, 0x0, 0x1, [@generic={0xcb, 0x10, "23665803a4bf0215f287f17dab5e678cd13357d0084bbfd344a8b7c5118623c98355cc18b894278c9b3f23ae6bdc4cb47695ab3d7ac6f7dfdbaedbb6855bde1c97a496f004596bf916063552ce89eee0a07506a5c574e07ddf60b199248a764084a17a256f021489798279c1e27ad287ebfd6820dcdeccf77be3739fa1fc4414eb638920c5c61c4c6fc691993248745e29244e2cb0466f740c01680ba088328a1d88cca946bdea01cd35a78b0c01adb7bf673ad9a577d1b031993b145e0e9edc6347b43f169f32f204"}, @generic={0x66, 0x23, "85ea032f0eb590f59fc780e3d2acbfa55aa8eb716ff6177189599e27098218020c98d927d2c4b7623ccc44ca5c9487fa52274bacb03df5ed1ad989821de8640e58299e6d458440bdd5336ce058f830564feddb98a0c04dd12eaa0b8997828bacf814272d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0xa42}, @generic={0xd2, 0xc, "068acc7f55f1dfdfcf6ac06757a8e58804c183b0b0751d09fd9671382d2510514770f5ac3b8ee26c095f3bfb928a22d6354a2421733a3d98bde273b6fd63ae9c7b7ef4e2a789b7b22a10e174d20a729079cf845db55581c0c16307f69fbcd657d64d0621f0da316d53ad93b7895dada4d72e78211436fd62973366667278d4e64299301a0e8ab28b5ce4e1926947ef73bfba746f2faf2dd4d00b42f25c6c09ec238742e88ecae639654c9b07315b59d910f3b75fd5fc74872d40555fb2dff7540ab6a38bb3c1b68cf9f3b5527cba1584"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0xfffe}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x10, 0x3, 0x9}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x40, 0xfc, 0x40}}]}}, {{0x9, 0x4, 0x25, 0xfe, 0x0, 0x3, 0xab, 0x2, 0x81, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x3, 0x7, "f32e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9a, 0x2, 0x3, "9dea869431"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xc9, 0x7, '=', "2d73b1"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfffa, 0x6, 0x9, "0f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xe, 0x1, 0x7, 0x3, "e030f6fef20c107990"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf7, 0x4, '='}]}, @uac_control={{0xa, 0x24, 0x1, 0xc38, 0x5}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0xa, 0x5, 0x3], 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xf9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x81, 0x1, 0x8370, 0x3d, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0xe, 0x401, 0x3c, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x6}]}]}}, {{0x9, 0x4, 0xe0, 0x50, 0x6, 0x86, 0x8a, 0xee, 0xd, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xff1, 0x6, 0xab88}, @obex={0x5, 0x24, 0x15, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x6e2, 0x6}}], [{{0x9, 0x5, 0xd, 0xb34e9e9fc12738eb, 0x8, 0xb8, 0x6, 0x8, [@generic={0x4, 0x9, "d31a"}, @generic={0xb8, 0x22, "7bddc3da8db01753572a82d96f2962aea7070b0e8941d302f3c381dafb4d2338ff75b8682dfdd6523a431cd483ca056a797ad1b5d8f07e17df542913d58ad8fec1b04b381d119fc578af030330c0b1f0729b1e8ecde612646273d7698a648a5bea2f87fcc6df5ace9a1de079450683c8d62e0832f69ddaa293a2775441c0d2a4e738ffa6296785dcda38fc6108b14df32092d40536ee717a31029b2712366a2008c6437bba81ef7efdce097d374e8aec8e4ae67589be"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x1b7, 0x1, 0xce, 0x5}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x60, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xc8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1c, 0x7703}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xa, 0x21, 0x7, [@generic={0x3, 0xac685c50043ef25a, "b9"}, @generic={0x47, 0x30, "7b57dc5412431e6dc0798ad667c83cf8e6b27ffa2c73527f1cda42d6d43e380a34a30a982fcc02342cb94d8247fed094da762157a834f17659de555a2995efde3c1a708059"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xc, 0x8, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x9, 0xa, 0x81}}]}}, {{0x9, 0x4, 0xb9, 0x6, 0x0, 0xff, 0x0, 0x0, 0x4, [@hid_hid={0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x9c1}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x200, 0xc, 0xff, 0x1, 0xff, 0x40}, 0x10, &(0x7f00000011c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xfd, 0x8, 0x3309, 0xd}]}, 0x9, [{0x20, &(0x7f0000001200)=@string={0x20, 0x3, "0757aa885fd479f5dd52aa16972e17a238c6e30451397d15e865c95e4e55"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x404}}, {0xa3, &(0x7f0000001280)=@string={0xa3, 0x3, "4832d033f4deaabf1e668c9d7aecdb84ca809e7cdae33a4089b191b6bd96e80a9e39d565e790dbe9d0634a31e395f7c8a6ae55491b977a6ce757a89856c61e2a49115d68a9d81ec5d445db1d19962462cd2965187b33c2f2380b601dc05b2664ed0833b56e4c467ade240c02980ea49f358b6f4c339fbd88e419d10ea67df94711d67a6f3d7bd0cf77198caa6ffdf7af9a05718261f58154181350d5ff2a60a4bf"}}, {0x53, &(0x7f0000001340)=@string={0x53, 0x3, "5484e04d048fedfc78f262cf2c08c6b8f66250917a88015c11cf3898341666e954da08e5d8c927e0dcce6da00dc6628821da729e6b7485e729c59b8d5544125389bbc09829fbe5f7a0d1c42286afdba6f1"}}, {0x34, &(0x7f00000013c0)=@string={0x34, 0x3, "5109c84bc688a82907f971a54cd4fb504da7f4a880c2bab5d5806836752a3aef82ca25f2dfb239d3ee63cd565052910d0e9a"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x807}}, {0xe8, &(0x7f0000001480)=@string={0xe8, 0x3, "243bf82d71245e6d4eaa1f61dc3c605e4df64c458922f65a66c3a5d9b5943bedcd96bf9fbff7d08dec8728ea9c3730db7fc00ee93fc881efa092196ac757cc11dba03ee63422b84e148a53081250f68e0e4371ce059ae2be41a55e45b154a0c885eda04a3a244b6649397c52bc7d66495f593d35f96263a1921b5928b8fa12c59dbec9c66ce75f25af6a7cbce9f41340a073a25af61b489ad832b30b0940f05c63585b81ae86c3f8db7faa82a1b015b4e791f7e6d82895f714cac08b33cdf0cad80fcd38eb150b1f1030589440c6a814f6f187189cbba364cc356eae8640988b3f6a57ac6bfd"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_open_dev$MSR(&(0x7f0000001680), 0x510d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4000000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000001840)={0xc0ff, 0x1c, [{0x4}, {0x3}, {0x2, 0x1}, {0xe}, {0x5, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0xc}, {0x7}, {0x4, 0x1}, {0x8}, {0xd, 0x1}, {0xb, 0x1}, {0x7, 0x1}, {0xe, 0x1}, {0x8, 0x1}, {0xc, 0x1}, {0x2}, {0x7}, {0xf}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {0xe, 0x1}, {0xe}, {0xa, 0x1}, {0x1, 0x1}, {0x2}]}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000001880)) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f00000018c0)={0x0, 0x0, @ioapic}) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendto$inet(r6, &(0x7f0000001c00)="a5e769f27f6ddb21ba239d5f90f44d4ee56f4c0222900349c1112dd5d69025a54a31264a79cc1b409dbdd06423c3b23dec96b92c1e666de0507872eb6ca9a6ea2854a4a1b34ed7a0a5d7070b9d08c55c8d4b4eea3ff10dcf0c68b46147d5851478c2fac3032eeed801808fa3e032da6f7e381eb066b9e9893345c9aceaffe9504f9da76f16623488a0f29ffe56642beebdcab8d9015d80d619dc4035b41602949ba97d0493aee311aeff44b84a0356e5544e57cfc2a9c62fd9259b9a7a91650a15ac90b45dd798ce0ea65de717766306f1de0487306a45f402cfc5d8d01d6d", 0xdf, 0x4040, 0x0, 0x0) syz_usb_connect(0x1, 0x2ff, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0x4d, 0xe2, 0x98, 0x8, 0x1bc7, 0x1101, 0x704c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ed, 0x2, 0x8, 0x2, 0xa0, 0x6, [{{0x9, 0x4, 0x88, 0x3, 0xb, 0x4d, 0xcc, 0x30, 0x4, [@hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x88}}], [{{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xce, 0x8, [@generic={0xc7, 0x31, "ba335762541bf0bfa2f134caadfbc0d09da211e03154ee6ef3519d8e3674d4fc3b8d2adc4d86bedf2915674a03b2280c8b96b5760957aebca253ef7fd73b0af18d03622870525a7c7e9dcc2e66c864a0fb2314fdcc15195081fe28567df88994fa6181e574087eeb1d782d8790e2e9b036e4b48f84fd3560caae228f2c156b39bad781e6df7c505ac20cb2cd28c7b64a238d70b614ea204cd3bf5d1ed571c8309eb5b94a636e018ad0af58e30a7d71c41a342c408d381d2752f6397bd72422c3abf7ae4f03"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x10, 0xc0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x563e}]}}, {{0x9, 0x5, 0xc, 0xe, 0x10, 0x5, 0x3, 0x71}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x10, 0x8, 0x5}}, {{0x9, 0x5, 0xf, 0x18, 0x3ff, 0x4, 0x1, 0xb1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x3, 0x6, 0xa, [@generic={0xb5, 0x9, "95a8cb66da18cbd9239fbefe40f295e72821260b441568876d47f80840b0f43f31b0a9103e08c9913770070ec92463a58ee2f942aedc5c9783bcc9897c62319f0d604bb79aef5e8838215e082cd04abffcd218a9f711fa1fabdbae5bb3de073af24eba9c76d1b8eef7248c59a1c7dd97863315f179e7a626ab5b4e291ea395af80954f8adb89d12a1098c8a3246fe113ed8846b0161ab478a1e0371c3b8f635ed3b83365d9eb5928cae7a5a57342533e12ce04"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x74}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x4, 0x6, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x2, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x10, 0x9, 0x44, [@generic={0x11, 0x21, "fe990e2dcf282f56e1db9efa4592cf"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xf, 0x9, 0x0, [@generic={0x9f, 0x1, "42ddc8c104bb5b0dcba8d5a2c304b71705c165e2939e91578e6ed5cfcddb0991bc5e68015d20c736e532135ec844c6ed9b8ac371ca44cb26a8eddf597b12b0c5412b21806eac0992609f6d96e414462955d7bfb9cbfa00c29b16d347cce43b58be2c230dfd777f02222c50fa6f3bfaa879415ecb81306c361b248d39238e6b714ede1a797ef06d5df807070c57d4fe90a788e82d25fe89dcfa6d9c8ea1"}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x5, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x1, 0x8}]}}]}}, {{0x9, 0x4, 0xf8, 0x2, 0x0, 0xb3, 0x53, 0x75, 0x6}}]}}]}}, &(0x7f0000002140)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x210, 0x9, 0x6, 0x80, 0x40, 0x3}, 0xf, &(0x7f0000002040)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x6, 0x2}]}, 0x2, [{0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x3633}}, {0x75, &(0x7f00000020c0)=@string={0x75, 0x3, "c01f47d5638b6c687de129576adb67e8d52faa7d89439e7ade5e108c1834ef21a8f228f59dcb81dc40b2c3766c59b9ce2a2bac607a17c594f417c596c391ce280963758c06e0d812cc5a3f06619cdecadac8eef546706ffee6509a38c43ed1317dd2376b340b4321242c86f9653e6b29e43af7"}}]}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000002180)=0xb3, 0x4) 1.620084335s ago: executing program 3 (id=94): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x5433, 0x0) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 1.510079447s ago: executing program 3 (id=96): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x40, 0x9, 0x27, {0x27, 0x5, "f21c1503f7ddce07b6164c21f593b6a81c54fd63625eeb30ce2c13f73f4a2b222d6533d1dc"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f00000001c0)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x0, 0xf, 0x9, [0x3f00, 0xffffcf, 0xff0000, 0xc0]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x8, 0x40, 0x0, "2340aab5", "8235b9ae"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0xff, 0x20, 0x7, 0x200, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0x10}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf087]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000540)={0x40, 0xb, 0x2, "a3d2"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xb}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "a033"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7}}) syz_usb_ep_write(r1, 0x82, 0x3f, &(0x7f0000000100)="e5b6f7f2ff985fabf5fd323bdce9322fc1c98804df8a23227f7b0bddeae8cb32bbfe3e935251f723fa86989683727e2d6b99ed35d66e5dbe48e7af9501f8ff") (async, rerun: 64) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x4d75d000) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0, r4}, 0x14) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000001640)=[@free_buffer], 0x0, 0x0, 0x0}) 1.378875058s ago: executing program 2 (id=97): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) getpid() r2 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0xc, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffd) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000140)=0xad7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.332666619s ago: executing program 2 (id=98): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000006100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000088}, 0x20000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) close(0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0xffffff6c) 1.318292169s ago: executing program 2 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x2, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000400)=""/171) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000006c0)={0x14, 0x0, 0x0}, &(0x7f0000000a40)={0x44, &(0x7f0000000780)={0x20, 0x17, 0x7c, "a3bf443d9e494af2d98e523070df8175848cfa83be518f3189b62328a6d9354ead37b215fcfaf2a77de5822f348ebc259e7fa01ad9035136f2527e863b137bea18f398c8f02cd111c78517842d4f4cf028f18ade282bd36c944bc874d95f287a6576d30ca32a5a737fcd66b5587a925ace8f7c9caf0b4ff3c63edb54"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xef}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x89, 0xfffffffffffffd89, 0x1}}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x69, 0x2) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) setresgid(r2, r2, 0x0) setregid(0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000002880)=0x1, 0x4) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getrandom(0x0, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000480)={[0x0, 0x8, 0x5, 0x8, 0x9, 0xfff, 0x4ae, 0x1, 0xdf4, 0x5, 0x1, 0x10000, 0x6, 0xed3d, 0x3ff, 0x1ff, 0x2, 0x9, 0xcc89, 0xa1000000, 0xd3, 0x0, 0x88, 0x1, 0xda, 0x101, 0x3, 0xe, 0x4, 0x2, 0x6, 0xff, 0x3, 0x508, 0x6, 0x378, 0x80000000, 0x8, 0x4f, 0x1, 0x80, 0x81, 0xeed8, 0x7ff, 0xfff, 0x1, 0x7, 0xd, 0x0, 0x0, 0xd53, 0x8000, 0x44d, 0x2, 0x401, 0x1, 0x7, 0x5, 0x2, 0x1, 0x5, 0x5, 0x2, 0x2, 0xf32, 0x80, 0x3, 0x6, 0x3, 0xb15, 0xffffffff, 0xd0, 0xffffffff, 0x8, 0x7, 0x3, 0x0, 0x3, 0x0, 0xfffffff3, 0x80000001, 0x4, 0x6, 0x1, 0x2, 0x5, 0x7, 0xfff, 0x0, 0x1, 0x2, 0x7bc, 0x80000000, 0x9, 0x58fc80dc, 0x1, 0x271, 0x0, 0x6fc7, 0x70d, 0x2, 0x9, 0xffff000, 0x7fff, 0x1, 0x3, 0x4, 0x4040, 0x7f, 0x1, 0x9, 0x7fff, 0xffff, 0xfffffffb, 0x68ab, 0x8001, 0x200, 0x7ff, 0x59, 0x1ff, 0x10000, 0x80000001, 0xf, 0x7, 0x7, 0x5, 0x0, 0x8c10, 0x2, 0x6, 0x3, 0xfffffffa, 0x7, 0x5, 0x0, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1ff, 0x7fffffff, 0xffff0000, 0x3ff, 0x2, 0x8, 0x4, 0x6, 0xfffff5c1, 0x4, 0xb1b, 0x7f, 0xfffffffc, 0xffffffff, 0x5, 0x1, 0xfff, 0x2, 0x0, 0x4, 0x80000001, 0x7ff, 0xf, 0x1, 0xf13, 0x1e, 0x7, 0x0, 0x100, 0x4, 0x9, 0x10001, 0x3, 0x0, 0x6ebc, 0x5, 0x92, 0x5, 0x10000, 0x7ff, 0x2, 0x1, 0x6, 0x8, 0x4, 0x2, 0xfffffff7, 0x9, 0xb0d4, 0x6, 0x6, 0x6, 0xfff, 0x7ff, 0x0, 0x9, 0x9d60, 0x6, 0xfffffff9, 0x10001, 0x636, 0x4, 0x4e, 0x4, 0xffffffff, 0x6, 0x1, 0x6, 0x2, 0x3, 0x400, 0x100, 0xfffffffb, 0x81, 0x200, 0x1, 0x3, 0x7, 0xc, 0x6f7c, 0x0, 0x9, 0x1, 0x1000, 0xfffffff7, 0x4, 0x6, 0x3, 0x5, 0x5, 0x5, 0x7f, 0x7, 0x8000, 0x200, 0x8, 0x0, 0xffffffff, 0x3, 0x200, 0x1ff, 0x2db, 0x9, 0x7f, 0x7fff, 0x4, 0x3, 0xf, 0xfff, 0x7ff, 0x7, 0xbab, 0x6, 0x4, 0xfffffffd, 0x800, 0x3, 0x4ed8c092, 0x6, 0xd4000000, 0x6, 0x9, 0xf, 0x80000000, 0xef5a, 0x1, 0x5, 0x9, 0x1000, 0xfffffffa, 0x2996, 0x0, 0x9, 0x4, 0xfffffff9, 0x656, 0x3, 0x4, 0xfd, 0x6e47, 0x98c, 0x101, 0x8, 0x8f, 0x5, 0x4, 0x5, 0xffffffff, 0xdf1, 0x4, 0x100, 0xffffffff, 0x200, 0x80000001, 0x1ff, 0x0, 0x81, 0x8, 0x9, 0x5, 0x9, 0x7d8, 0xffffffff, 0x0, 0x8001, 0x1f, 0x9, 0x8, 0xe, 0xfffffffd, 0x4, 0x8, 0x1, 0xff, 0x0, 0x913c, 0x4, 0x4, 0x4, 0x6, 0x7, 0xfffffff3, 0x9, 0xf, 0x0, 0xe8, 0xfffffffe, 0x3, 0x7, 0xe90, 0x6, 0x3, 0x4, 0x2, 0x6, 0x1, 0x6, 0x6, 0x9a300000, 0x100, 0xff, 0x4, 0x5, 0x4, 0x1ff, 0xeb, 0x2, 0x1, 0x5, 0x1, 0x1, 0xe51, 0xe8b6, 0xfffffffd, 0x5, 0x2, 0x8, 0x0, 0x1, 0xe, 0x10000, 0x0, 0x22c, 0x5, 0x9, 0x3, 0x8, 0xfffffff9, 0x4, 0x3, 0x9fae, 0x6, 0x1, 0x1, 0x1, 0x4, 0x2400, 0x1, 0xffff, 0x4, 0x1, 0xd, 0x7fffffff, 0x990, 0x5, 0x7, 0x5, 0x7fff, 0x8, 0x7f, 0x1, 0x5, 0x80000001, 0x9, 0x4, 0x95b, 0xcf3a, 0xfffff000, 0x0, 0x8, 0x4, 0x0, 0x0, 0xfffffff2, 0x0, 0x7a6, 0x2, 0x969, 0x8, 0x1, 0x80e, 0x3, 0x3, 0x7fffffff, 0x7, 0x3, 0x68, 0xaf, 0x7ff, 0x100, 0x2, 0xa, 0x4, 0x8dc, 0x3, 0x40, 0x1, 0x6, 0x7, 0x5, 0x1, 0xfffffffb, 0x800, 0x80, 0x40, 0x0, 0x3, 0xff, 0x88, 0xe8, 0x10000, 0x1000, 0x5, 0x7, 0x6, 0x6, 0x4, 0xffffff1d, 0xff, 0xf89a, 0x7, 0x0, 0x0, 0x9, 0x6, 0xffffff3c, 0x19, 0x7f, 0x3, 0x1, 0x5, 0x8, 0x8, 0xe299, 0x3, 0xff, 0x8d8, 0x101, 0xfffffff9, 0xffffffff, 0x0, 0x80, 0x96, 0x10000, 0x401, 0x7, 0x0, 0x7, 0x3, 0x1, 0x38553e78, 0x1d, 0x0, 0x3, 0x3c000000, 0xe21b, 0x80, 0x7, 0x3ff, 0x6, 0x6, 0x1, 0x9, 0x8001, 0x1, 0x3, 0x4, 0x9, 0x5, 0xac04, 0x8, 0x8, 0x4, 0x2, 0xfffffffc, 0x2, 0x2, 0xff31, 0x3, 0x0, 0x7, 0x8, 0x3, 0x94d1, 0x1ff, 0x3, 0x80, 0xd75, 0x10, 0x9, 0x2, 0x101, 0x5, 0x5, 0x7a6, 0x2, 0x0, 0x9, 0xb, 0x91, 0x7, 0xffffffff, 0x1, 0x3, 0x4, 0xe3f0, 0x9, 0x9, 0x2, 0x1, 0x9, 0x5, 0x2, 0x0, 0x7, 0x7, 0x4, 0x4, 0x3, 0xffffffff, 0x1d6, 0x0, 0x2, 0x8, 0x100, 0xaa, 0x8, 0x1000, 0x800, 0x9, 0xffffffff, 0x8, 0x9, 0x4, 0x18000, 0x40, 0xf, 0x1, 0xffff, 0x9, 0x6, 0x8, 0x4, 0xa97, 0x9, 0x3, 0x6286, 0x7fffffff, 0x9, 0x401, 0x3, 0x81, 0x401, 0xfffffffc, 0x5, 0xb51c, 0x0, 0x0, 0x8000, 0x1, 0x401, 0xffff, 0x1e, 0x3, 0x3594, 0xffff, 0x9, 0x80, 0xfffffffd, 0x2, 0x9aae, 0x8, 0x400, 0xffffffff, 0x5, 0x5, 0x6, 0x7f, 0x5, 0xfad, 0x1f, 0x4, 0x6, 0x7, 0x9, 0x0, 0x6, 0x8, 0xffffffff, 0x1, 0xfffffff5, 0x9, 0x2, 0x0, 0x9, 0x80000000, 0x1, 0x1, 0xfffffff0, 0xfffffffc, 0x8, 0x4a4c, 0x2, 0x7, 0x5, 0x7, 0x4, 0x5, 0x1, 0x10001, 0x1, 0x6, 0x0, 0x8, 0x80000001, 0x6, 0x0, 0x7f, 0x9, 0x5, 0x4, 0x3, 0x63b, 0x5, 0x7, 0x7fff, 0xd5, 0x2, 0x4, 0x19c, 0xfffffffe, 0x800, 0x100, 0x7, 0x2, 0x200, 0x2, 0x9, 0x1, 0x4, 0x4, 0x75ed9461, 0x7fffffff, 0x1, 0x7, 0x8, 0x7ff, 0x3, 0x7fffffff, 0x5, 0x3ff, 0x55, 0x60, 0xd850, 0xca8, 0xb8c, 0x3, 0x80, 0x7fff, 0x3540000, 0x9, 0x5, 0xb, 0x0, 0xfffffffd, 0x0, 0x9, 0x6, 0x89, 0x7fff, 0x4, 0x2, 0xfffffffc, 0x0, 0x4, 0x3, 0x4, 0xff, 0x11, 0x0, 0x8, 0x8, 0xc, 0x9, 0x0, 0x4, 0x6, 0x6, 0x6, 0x6, 0x9, 0x9, 0xbed6, 0x18, 0xe5e7, 0x0, 0x19a6, 0xda5, 0x1b, 0x1, 0x4, 0x6, 0x0, 0xf6e, 0x80000000, 0x4, 0x0, 0x6, 0x1c0, 0x6, 0xffffffd8, 0x1, 0xc, 0x0, 0x927c, 0x4, 0x1, 0x1, 0xfffffffb, 0x3ff, 0x5c4, 0x8d2, 0x89, 0xec65, 0x3, 0xce78, 0x6, 0x9, 0x6c1, 0x8, 0x8, 0xfffffff7, 0x44, 0x7, 0xa95d, 0x3, 0x7, 0x0, 0x8000, 0x80000000, 0x70, 0x8, 0x9, 0x9, 0xa, 0x0, 0x7, 0x1, 0x6, 0xfffffffe, 0x4b, 0x7, 0x2, 0x6, 0x9, 0x4, 0xfffffe00, 0x4, 0x1, 0x3, 0x1ff, 0xfffffffb, 0x100, 0x800000, 0x7, 0x7, 0x4, 0x2, 0x10000, 0x101, 0x5, 0x5, 0xffff, 0x800, 0x85f37a, 0x10, 0x3, 0x7f, 0x3, 0xa9ea, 0x9, 0x0, 0xfffffff8, 0x8, 0x5, 0x5, 0x7fffffff, 0x5, 0x3, 0x5, 0x80000001, 0x5, 0x0, 0x1000, 0x7, 0x0, 0x5, 0x9, 0x0, 0x4, 0x4, 0x2, 0xd, 0xf, 0x2, 0x2, 0x5, 0x0, 0xd, 0x6, 0xffffff01, 0x4, 0xbc1, 0xcd, 0x5b0, 0xa4, 0xfffffff9, 0x3, 0x5, 0xb491, 0x9, 0x7, 0x8, 0x7, 0xe, 0x8, 0x7, 0x6, 0x7, 0x6, 0x7, 0xffffffff, 0x60e, 0x3, 0x6, 0x0, 0x0, 0xffffffff, 0x8456, 0x4, 0x3f0, 0x707eabb9, 0x9, 0x1, 0x0, 0x3, 0x1, 0xffc00000, 0xfffffff1, 0x4000, 0x4, 0x7ff, 0x401, 0xfff, 0x70, 0x0, 0x319, 0x1, 0x2, 0x7, 0x6, 0x90, 0xd38, 0x2, 0x3ff, 0xf, 0x5, 0x4, 0x9, 0x9, 0x7, 0x3, 0x3, 0x5, 0xaf2d, 0x40, 0x7, 0x5, 0xffffff00, 0x7fff, 0x81, 0x5, 0x1, 0x2, 0x8, 0x5, 0x700000, 0x7, 0x4, 0x7, 0x8, 0xfd9c, 0xffffffff, 0x5, 0x7ff, 0xbcc, 0x8, 0x0, 0x6, 0x0, 0xe, 0x5bc, 0x8, 0x9, 0x1, 0x0, 0xa7, 0x9, 0x6, 0x4, 0x7, 0xad, 0x5, 0x8, 0xee, 0x3, 0x2, 0x6, 0x904, 0x3, 0x3, 0x4, 0x8, 0x2, 0x17, 0x1, 0x800, 0x7f, 0x4, 0x2, 0x8, 0x4, 0x7ff, 0x5, 0x1, 0x0, 0xedc3, 0x9, 0x100, 0x9, 0x3b0, 0x800, 0xf951, 0x4, 0x0, 0x80000000, 0xfffffcf5, 0x8, 0x7fffffff, 0x5, 0xfff, 0x8, 0x8, 0x7, 0x1, 0x7, 0x7, 0xafa, 0x9, 0x7, 0x7, 0x1, 0x4, 0x34f51182, 0x7, 0x2, 0x9, 0xfd, 0x6, 0x5, 0x7, 0x7, 0x0, 0x6, 0x8, 0x1, 0x4, 0x0, 0xd789, 0x3, 0x7, 0x1, 0x9, 0x6, 0xfff, 0xaee, 0xb, 0x10, 0x7, 0x0, 0xe0, 0xa72, 0x200, 0x6]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000050000000040110001000000010000080000000000facfb626ed0d44502ddebacd25e57b9477e73d7274ad534105d3b62f2dba4a086c481bed6cd8d5"]) getresgid(&(0x7f0000002e00), 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 1.120173993s ago: executing program 1 (id=103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000046c0)=""/4096, 0x1000) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 1.088250633s ago: executing program 1 (id=104): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) (async) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8001}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0xf2, 0x80, 0x140000}, 0x20) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\a\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r7 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0xfffffffd, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x1, 0x2}, 0x10) (async) close_range(r7, r8, 0x2) (async) sendmsg$tipc(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804) (async) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) (async) r10 = dup2(r7, 0xffffffffffffffff) dup3(r10, 0xffffffffffffffff, 0x80000) (async) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 968.033385ms ago: executing program 1 (id=105): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x104800, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext']) 967.553855ms ago: executing program 1 (id=106): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x7) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/92, 0x0, 0x1800, 0x80, 0x3}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x80040) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x14, 0x200, 0x70bd28, 0x25dfdbfc, {0x27, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x60, 0x1, "32a8696774fd39ede827f0fa43e50dce6efeb74780d2720ad099e5d254f9d51afa7c29a445ae835e1d7cf65b642f48c7fc81e914714b9f1a94e932556e91c9b22d95ccbd72e27182e3ebc432799fcded4d2a5498c26d49482addbc9c"}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)=0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8801) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000004c0)='\xbf]\x00') r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x80000) r7 = getpid() fcntl$lock(r6, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1, 0xf227, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x101100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x4, 0xfc, 0x0, 0x10ab, 0x4, @local, @local, 0x8000, 0x1, 0x3}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000800)={0x9, 0xfffffff7, 0x4, 0x9, 0x17, "f3abc0df90eb273d73444cc6a340f1560bc996"}) syz_clone3(&(0x7f0000000b00)={0x2000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x24}, &(0x7f0000000900)=""/221, 0xdd, &(0x7f0000000a00)=""/141, &(0x7f0000000ac0)=[r7, r7, r7, r7, r7, r7, 0xffffffffffffffff, r7, r7], 0x9, {r10}}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000bc0)={0x6, &(0x7f0000000b80)=[{0x4, 0x4, 0x2, 0x2}, {0x4, 0xe, 0x4, 0x7}, {0x2, 0x10, 0x20, 0x7}, {0xb4f0, 0x4, 0xc, 0x4}, {0x5, 0x40, 0x7, 0x7}, {0xd, 0x8, 0x8, 0x4}]}) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000c00)={0x4, 0x1}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000cc0)={0x20, 0x0, 0x75dd, 0x1, 0x17, 0x6, &(0x7f0000000c80)="eec93d8e2fd2c7fe992d392945cda1c06a339168b8bb15"}) 553.614901ms ago: executing program 0 (id=107): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000006100)={0x0, 0x0, &(0x7f00000060c0)={0x0}, 0x1, 0x0, 0x0, 0x4000088}, 0x20000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) close(0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0xffffff6c) 535.872502ms ago: executing program 0 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) write$tcp_congestion(r5, 0x0, 0xee00) getxattr(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x4000, 0xfffe, 0x8004, 0xa, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x32}, @in=@broadcast, {0x326, 0x0, 0x0, 0x0, 0x1000, 0xfffffffffffffff9}, {0x40}, {0x1, 0x800000, 0xfffffffc}, 0x70bd25, 0x3503, 0xa, 0x4, 0xf7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x48014) preadv2(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0xd) 338.642825ms ago: executing program 3 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94001f00ea2fa72631ee9c913fa33ec5f1e601d9d3668fbf086ccb05c6c639b685c297aba647a196ff67b0c9be328e3d650b1b9cf4a4a69fa11a2caa45522208acd81eaeaa03832dc22bd5465ac109fa04c9f80f8025e430c3eafbc3a5cdf977752a1036de15021499babdad2f0ec1602f97c16e1609e97a520061f0690499e842f966a8c2e879c445de34da7bfd245dd1fa8c24b8ce3ad2a100f7bc041ee338e05c2fcd5f4b25462cf46d94b67214597d32aef5b9c8d1a82c715a2890", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x8008) sendmsg$key(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x2, 0x18, 0x72, 0xc, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4004002) fcntl$setsig(r1, 0xa, 0x11) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x3ff, 0xbe7b08ba13744609) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000040)) 337.340945ms ago: executing program 3 (id=110): futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0xea60}}) (async) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0xea60}}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x8001, 0x487}) fcntl$lock(r3, 0x26, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x7}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x7}) fcntl$lock(r3, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x6f, 0x9}) (async) fcntl$lock(r3, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x6f, 0x9}) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x4, 0x70bd26, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x8005) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800}) write$cgroup_devices(r2, 0x0, 0xffdd) (async) write$cgroup_devices(r2, 0x0, 0xffdd) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 325.949395ms ago: executing program 3 (id=111): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket(0x8000000010, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xfffffffc, 0x7}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) 295.110125ms ago: executing program 3 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'sit0\x00'}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000001c40)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)="365b27c957fffd5b60361464b46db546d8cfb0abfee0ae001658572ac4b47bbb1c7f2701", 0x24}, {&(0x7f0000000480)="08c15e84a497e8a0b883005f7963c4068de0e70c16dd5f786a83f4edc524edda6555cf219b7b6dd352443d0cb3b96bf22b72af4a6aac7268648b93", 0x3b}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r7]}}], 0x40}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000640)="e0168c4d7cc8543231e6ed84053d4008542f61fe41b51f2f106df8d33d09b96ddde49906af6a6626", 0x28}], 0x1, &(0x7f00000015c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x4800}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000007c0)="804e893ad60a05103b3c9fa96d999a3b56a74d8df5a4a2be84550a51c92eaec6bb50f07fbc29a8da46c20acb3b9a9bbaa9794c3c1dfae1aab70a5083089923669211215dcc740dfb8baecffcd5813c34b34eeae84e9dc5a7bab2cef6bc26bc20710c190d83699b607ab18d83f164547e526148d1c91f8f5c732c7b905badf8b7e28879c77660beeebac0d6c91782a130b316986a7770bed778a5b55e1dc043706be36089c208c91ba3c4132769b7d8374da40213ed3bf620da3e4c4bc24d371cc33539c6ce18a7feb6bfc79e", 0xcc}, {&(0x7f00000008c0)="32f769bc59e6442fe76abe56ecef9c22e268fa16e3e6927a9fc9d65e02005c5a1ba098d617ec2fdfdefcc9833680f6d4889245c306b3ece0204f577ad47116d00a3cb047b9de9d008d13f8", 0x4b}, {&(0x7f0000000940)="8b8382d41b280bacefbb2c8d84265c2b68756d5d036594c4bb9d5a31afe0157470dba2f7d0643cf180c14e393935359333ea0806a3cb15ece4003367647ec094b08da64092630d6b8dace5b211c0979c6f76e98dcf28da946128f0435e2e19a9c02a3bd4105a0788bdb027e2d83727a207f8edb9cfd683e4d6b855afee3c8ac8d2873c08eaa221a16f8854333cf7da5066a0a5cb77a401330b438ac65fe20b3bfc9f37db74d660eb737eaeca4ea7de122034bf5968f94d0dac64ade8a6f2927ad674d243d20b9849061897b9294788bac8300dc6eb481c0c7b1f75c47f621b9d298bf28622755cc78345a1cd497c8942a158c1ce59fa2bfaaf310e", 0xfb}], 0x3, &(0x7f0000000ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x98, 0x40}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c00)="c6928a84cdade89188c85fa436fb", 0xe}, {&(0x7f0000000c40)="ea3e221e254fcdc7d995832f9b32a885e4e89e114804dbdd4483ea2ca60e47211db3c8a8ec458229fd93c1baabb60c3f591036e61ae63262b15a994c33", 0x3d}, {&(0x7f0000000c80)="ae69865fd9b39384aedc3738ea9ffcef4a477afd49adb937ad33d23bc5d384267761b220e1ba1533340189204f972ef05a8b2056475d6fea212534efa7750cdff6d3a36f96f83381ffe978b323ffbb71396a84bf7383915efb63c01fcbfca9e666555b8404303c6d42c3e402e6b4a9b62219bc45e1bc4be9b38c991eb5586f8770eb12607cd02e66929ac51cb091c9b69d5064ca42cad635936c3a5f72dbf7", 0x9f}, {&(0x7f0000000d40)="72c13cdd90293c67248b561e6b15a7eb44afaae13aee8a994ea4f599eebc490c1a2de8e1e82a896a913c94bf6b537aad49761d490c408a379d842c19470934b85744ebe62eaf4713fcc82827fa6d0e0f87c35179e2a96641067dd0669f4c60269c8ff4ffae5c3d0c4fc2f7c5356c8879347873977f0082c3f1ecdc3052b7e8718a54e8fda21a1ece57b44c33338a4f0cbf4cdd10552abc9884f28ca04500341de0756cdc194dabdbb6fb8301b3a373cac4897e0ba0a8dbaeb9437998247615fa01c4a920f1d4c2d1b83f3ba5a85836e2806f24", 0xd3}, {&(0x7f0000000e40)="543619c07a656edeaf7ad994e7ab6eca1b2d8c3ad5bf58f349ad5c5e3c42a387f51159d6a3a4f95deed96ca25727f7f591a3c0492f4dd0f2a08699237389faae5cf2cc81c82097d53974bdb2ab2369b9afe456456a81886e5fa2616224cc62d5a08a171ec8d381b9a2a160ed", 0x6c}, {&(0x7f0000000ec0)="ff8ac9c0974193d3e082f0eed19f1657faaa497440725afe285bc7453e83794b3a66c6bdf3e7de2d31d6e4f44977868876bbe1424a6138031fabab", 0x3b}, {0xfffffffffffffffe}], 0x7, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40, 0x40000c4}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001040)="7399e026e886f35851c28b46d8343647fc0a9d54aff63d7240f4b23571d6baeef5b99f6ef60d1d4548030c9dda09f9597203de325333f46f65a6c7b092891e09076ba3b86a61ce6bc5293272393b5eb3f4b22aaf303f9362cfd5ca5ede6fa6139f76ef1fbd68d5d4b56bb38cd69b773ef012dc2a60b011e14d1ed70acc8c7dcdf421b5a3d481e990328a1fa6668fe9eff7cb6fb9877322f99ad22326bd01635fc5db06257409a094c4fb239647e540c4adfaf8fa09fc7cd7f6071faf337c2adb41729d35bc1213", 0xc7}, {&(0x7f0000001140)="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", 0xfe}, {&(0x7f0000001240)="57b35227d5739b3ade9416a71905031d49896ccef7641b3da524fa1a7f685d0bed06968833e126c841acd220ea5822777cea3bbaf6e946a1dd3dd54c85939049b0d7c5920c4429b3ad8f469cb137ce94b49d6994bb2514aaa657b7c5dcd28ea3bdfd0eeb541c2a95", 0x68}], 0x3, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x40000}}, {{&(0x7f0000001340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000013c0)="e1860fc1b0a29fd370bf1820a5bc5fbd3798b03e0e9e6d1d7e8689db82a5b642c01c7934aa8f358bd09a2143ad3fd1dd833c05edd8fb058d08789bc5a4e5ee41393823edcaf9fba094221ce8478325d10544b89e3bb7ad379421d22e9461057cf24c34e430201cf7283e0f607ea6daa424aa83d8735bc6c2d4d5", 0x7a}, {&(0x7f0000000500)="f4b4528c83c9ee6af64e0ee84b3d4b4c66e5e57bb9bf622bff68f0e141abd9baad438cb33f7d2d01a0d37fe15e70bfa25913b0fba2c9e20d4bdda0065dbe23ce2424252c3fea", 0x46}, {&(0x7f00000014c0)="658bfe9d14cb37fd7bf7affef6c1f851059b43e7879c20d858c4093d953f7d5f1fb65fa71ec784ca7647085b0c80ad098124d456e8689868c9d432", 0x3b}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000001500)="1456cd1d5102c00a6770838c5a0d2465b611056a88d2100fdfafa339406e54570b1fb883e053fbb2edd1f8b57a3ff6427e4b1535cb3e3dc2ac46518f5b5b589376cace768f2c2318df8d19a3ef9b0d2dc89f29f02ab999c324293d10bbc0fe1cda0380df94111f16d8c641a9efb34aa05caba36a981bcf31f1ccdd145010402ac2688ecfe98bb6a466bf281b1b7c9d1b2a7b", 0x92}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000e9542e68fe8323ca94a000000002100008000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x44840}}, {{&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f00000017c0)="069477a7e314fb1a0c87cf1732250f36d7b1c1f8c8f5f9c9b83fb831d3e6abdd9afd26dcd9ec2aa02db909e868ca3c415c38907ea6d2c9d7f21b38575a18fd0a94aad41f1e838d66c66c89856bc8326cb2db9397a5f27830c5363c2d479af8e244f7a9a33499cad938dd2813b88d391c4fd312de9cf7290e60cfeec1dc26f96f01b0d9a5fa2404218f1f52933a7df3b023c6f382dadae6139a3f8c75117c2a3051b806184c85c7622aafc7f8d142c513f624cfe5e335fc47f44e80ba", 0xbc}, {&(0x7f0000001880)="6928a10a1afc923ac427b662f1d21d8da265d2596f2006ac5b4999b36dde50f60d29a20f3c0262923c6ad997f9168921a37b0187335d9cd3bf467e6955d173f2907b2bd46f9fcba07513494839aef5fb4de8b47cb705f5a1263633da194b092517d455fed79b001237da97aff66c6117a69b31f91817fd3029951f4b4e599312f46cef4fde53acac54927adc6e", 0x8d}, {&(0x7f0000001940)="cb28e5ac952986f411f3217aaeeb22da38d73bada3a784a11c6a05a4908453bab066254ba455226bc28fb31c1e5536d94f521b1250a0493e7b9ebc2b465553f1c7e691dcfcbed9b21dc57fbb5fc0031c1ca04e7f8c45ff04242355008a92ec80ab10e5c9262f254c090c1a621199", 0x6e}, {&(0x7f00000019c0)="7d8e3f9f16d502d95c455fc0e59aa21b39112dc0bf635162df4333ff0dfd9992a3245e8c470b661481a6e19a451f43c10f1cdc5e172b51178ad2c0eba651bf8a3eefb690478f9fe46b02a640d2e3b0ad1f2a409b0e6ee93cd0421cf481608b81fab0678199ab0e91cd", 0x69}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f0000001a40)="d602074687d64fef88ff29397f89", 0xe}, {&(0x7f0000001a80)="1b11e118d905eb5ce3cf5eba484352bff4d7dbc5b9d0977f66bfcaa1927cbd6352be0627c09e66259b7d2330093c73627a114099719d37e42e554b8293a869c1c63930f51bb6e40ac7d4d920b20f0a88e88286ac9043bb706094ee70b7a15e050defbfd8e2a6ad305da1533a054ac76326c28172a776cdbab8980ddc9f7777f68d15573c00986b204525", 0x8a}, {&(0x7f0000001b40)="b9656be3706f9b908873bbe59710a256243e63378909b918f34768ed4e85f383656564c0ecd8e5bf2cdc94a5c0d5571f9f", 0x31}], 0x8, &(0x7f0000001c00)=[@cred={{0x1c}}], 0x20, 0x20040c0}}], 0x7, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x800, 0xfffffffd) (async) r9 = socket$inet6(0xa, 0x800, 0xfffffffd) connect$inet6(r9, &(0x7f0000000a80)={0xa, 0x4ea7, 0x100, @loopback, 0x9}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000a80)={0xa, 0x4ea7, 0x100, @loopback, 0x9}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x211c001, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x810c39, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@uuid_null}, {@userxattr}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x810c39, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@uuid_null}, {@userxattr}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) 106.722539ms ago: executing program 1 (id=113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x1, 0x2, 0x34}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}, 0x1000}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 106.157209ms ago: executing program 1 (id=114): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x13d002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r7, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xf000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x65, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x0, 0x8, 0x8, 0xff, 0x4, 0x81, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x80a0000, 0xd, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x78, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x8, 0x0, 0xfc, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x45}, {0xf000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x101b8, 0x8000000000b, 0xf801, 0x10000, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 0s ago: executing program 0 (id=115): prctl$PR_CAPBSET_DROP(0x18, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x24) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 23.902681][ T36] audit: type=1400 audit(1750720465.969:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.903835][ T282] cgroup: Unknown subsys name 'net' [ 23.926677][ T36] audit: type=1400 audit(1750720465.969:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.956366][ T36] audit: type=1400 audit(1750720466.009:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.956602][ T282] cgroup: Unknown subsys name 'devices' [ 24.120290][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.126032][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.289346][ T36] audit: type=1400 audit(1750720466.359:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.314608][ T36] audit: type=1400 audit(1750720466.359:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.333936][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.342071][ T36] audit: type=1400 audit(1750720466.359:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.377216][ T36] audit: type=1400 audit(1750720466.429:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.407128][ T36] audit: type=1400 audit(1750720466.429:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.408097][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.435589][ T36] audit: type=1400 audit(1750720466.469:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.475038][ T36] audit: type=1400 audit(1750720466.469:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.258608][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.266304][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.274802][ T289] bridge_slave_0: entered allmulticast mode [ 25.281844][ T289] bridge_slave_0: entered promiscuous mode [ 25.289952][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.298096][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.305593][ T289] bridge_slave_1: entered allmulticast mode [ 25.312069][ T289] bridge_slave_1: entered promiscuous mode [ 25.439244][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.446911][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.454884][ T293] bridge_slave_0: entered allmulticast mode [ 25.461554][ T293] bridge_slave_0: entered promiscuous mode [ 25.473736][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.482963][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.491369][ T293] bridge_slave_1: entered allmulticast mode [ 25.499159][ T293] bridge_slave_1: entered promiscuous mode [ 25.511738][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.519405][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.526742][ T292] bridge_slave_0: entered allmulticast mode [ 25.533564][ T292] bridge_slave_0: entered promiscuous mode [ 25.549170][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.556548][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.564194][ T292] bridge_slave_1: entered allmulticast mode [ 25.570978][ T292] bridge_slave_1: entered promiscuous mode [ 25.588617][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.596900][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.605005][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.612238][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.668885][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.676123][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.683349][ T294] bridge_slave_0: entered allmulticast mode [ 25.689730][ T294] bridge_slave_0: entered promiscuous mode [ 25.698269][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.705569][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.712949][ T294] bridge_slave_1: entered allmulticast mode [ 25.719272][ T294] bridge_slave_1: entered promiscuous mode [ 25.805622][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.813605][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.825434][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.832625][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.853123][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.861648][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.919582][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.927703][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.936430][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.944050][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.957918][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.965805][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.974866][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.982915][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.029240][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.036558][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.046062][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.054209][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.075663][ T292] veth0_vlan: entered promiscuous mode [ 26.087849][ T289] veth0_vlan: entered promiscuous mode [ 26.097332][ T293] veth0_vlan: entered promiscuous mode [ 26.107686][ T292] veth1_macvtap: entered promiscuous mode [ 26.131066][ T294] veth0_vlan: entered promiscuous mode [ 26.141672][ T293] veth1_macvtap: entered promiscuous mode [ 26.163430][ T289] veth1_macvtap: entered promiscuous mode [ 26.174658][ T294] veth1_macvtap: entered promiscuous mode [ 26.187596][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.230418][ T308] ======================================================= [ 26.230418][ T308] WARNING: The mand mount option has been deprecated and [ 26.230418][ T308] and is ignored by this kernel. Remove the mand [ 26.230418][ T308] option from the mount to silence this warning. [ 26.230418][ T308] ======================================================= [ 26.300664][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.337838][ T312] rust_binder: Got transaction with invalid offset. [ 26.337912][ T312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.347049][ T312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 26.355633][ T314] rust_binder: Error while translating object. [ 26.367911][ T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.375122][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 26.484390][ T332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.518743][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.593640][ T348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.608874][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.690237][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.702834][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.713204][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 26.722946][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.733272][ T9] usb 1-1: config 0 descriptor?? [ 26.748510][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.768378][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 26.776909][ T31] usb 2-1: config 8 has an invalid interface number: 193 but max is 3 [ 26.785670][ T31] usb 2-1: config 8 has an invalid interface number: 37 but max is 3 [ 26.794032][ T31] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 26.803887][ T31] usb 2-1: config 8 has an invalid interface number: 224 but max is 3 [ 26.813703][ T31] usb 2-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config [ 26.824871][ T31] usb 2-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 26.834214][ T31] usb 2-1: config 8 has no interface number 0 [ 26.840618][ T31] usb 2-1: config 8 has no interface number 1 [ 26.846960][ T31] usb 2-1: config 8 has no interface number 2 [ 26.853742][ T31] usb 2-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 26.865667][ T31] usb 2-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 26.878059][ T31] usb 2-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 26.889837][ T31] usb 2-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 26.902677][ T31] usb 2-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 26.914860][ T31] usb 2-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 26.926321][ T31] usb 2-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 26.929952][ T330] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 26.940732][ T31] usb 2-1: config 8 interface 37 has no altsetting 0 [ 26.940759][ T31] usb 2-1: config 8 interface 224 has no altsetting 0 [ 26.952069][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.962128][ T31] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04 [ 26.967622][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.977557][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.987528][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 26.998170][ T31] usb 2-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ [ 27.008518][ T330] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 27.020751][ T31] usb 2-1: Manufacturer: Є [ 27.047100][ T330] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 27.059205][ T31] usb 2-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ [ 27.061852][ T330] usb 4-1: Manufacturer: syz [ 27.092263][ T316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 27.093450][ T330] usb 4-1: config 0 descriptor?? [ 27.304581][ T316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.315004][ T316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.347901][ T31] snd-usb-audio 2-1:8.193: probe with driver snd-usb-audio failed with error -71 [ 27.370680][ T31] usbhid 2-1:8.37: couldn't find an input interrupt endpoint [ 27.379358][ T31] snd-usb-audio 2-1:8.37: probe with driver snd-usb-audio failed with error -71 [ 27.390947][ T31] snd-usb-audio 2-1:8.224: probe with driver snd-usb-audio failed with error -71 [ 27.407862][ T31] usb 2-1: USB disconnect, device number 2 [ 27.584395][ T362] rust_binder: Read failure Err(EFAULT) in pid:41 [ 27.641690][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 27.659055][ T330] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 27.666857][ T330] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 27.675390][ T9] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 27.686885][ T9] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 27.700936][ T330] appleir 0003:05AC:8243.0002: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 27.833489][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 27.833889][ T373] SELinux: Context system_u:object_r:sysfs_t:s0 is not valid (left unmapped). [ 27.931970][ T381] rust_binder: Write failure EFAULT in pid:9 [ 27.949438][ T65] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 27.966461][ T65] hid-generic 0000:0000:0000.0003: hidraw2: HID v0.00 Device [syz1] on syz0 [ 28.088365][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.093160][ T388] netlink: 144 bytes leftover after parsing attributes in process `syz.1.19'. [ 28.116194][ T393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 28.200333][ T410] kvm: user requested TSC rate below hardware speed [ 28.219100][ T410] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 266) [ 28.219130][ T410] rust_binder: Error while translating object. [ 28.230317][ T410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.236912][ T410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 28.250867][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.271367][ T31] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 28.280868][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.291678][ T31] usb 3-1: config 0 descriptor?? [ 28.423554][ T413] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 28.475811][ T416] exFAT-fs (rnullb0): invalid boot record signature [ 28.483515][ T416] exFAT-fs (rnullb0): failed to read boot sector [ 28.490882][ T416] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.562032][ T418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.562069][ T418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44 [ 28.572179][ T418] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.581671][ T418] rust_binder: Read failure Err(EFAULT) in pid:44 [ 28.591103][ T418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.599711][ T418] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=418 comm=syz.1.28 [ 28.701549][ T31] elecom 0003:056E:00FF.0004: hidraw2: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.2-1/input0 [ 28.852108][ T423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 28.902599][ T373] rust_binder: Read failure Err(EFAULT) in pid:47 [ 28.913050][ T330] usb 3-1: USB disconnect, device number 2 [ 29.224550][ T330] usb 1-1: USB disconnect, device number 2 [ 29.250421][ T426] rust_binder: Write failure EFAULT in pid:6 [ 29.319263][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 29.319281][ T36] audit: type=1400 audit(1750720471.389:177): avc: denied { read } for pid=427 comm="syz.0.32" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 29.367060][ T36] audit: type=1400 audit(1750720471.389:178): avc: denied { open } for pid=427 comm="syz.0.32" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 29.379806][ T430] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 29.403555][ T431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'. [ 29.412181][ T430] Zero length message leads to an empty skb [ 29.414867][ T431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 29.445752][ T36] audit: type=1400 audit(1750720471.509:179): avc: denied { write } for pid=427 comm="syz.0.32" name="pfkey" dev="proc" ino=4026532612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.471334][ T431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.471397][ T431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8 [ 29.483420][ T36] audit: type=1400 audit(1750720471.539:180): avc: denied { bind } for pid=437 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.515788][ T330] usb 4-1: USB disconnect, device number 2 [ 29.593363][ T36] audit: type=1400 audit(1750720471.649:181): avc: denied { unlink } for pid=293 comm="syz-executor" name="memory.events" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sysfs_t:s0" [ 29.750122][ T36] audit: type=1400 audit(1750720471.819:182): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.810275][ T36] audit: type=1400 audit(1750720471.879:183): avc: denied { create } for pid=464 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.831464][ T469] random: crng reseeded on system resumption [ 29.836718][ T36] audit: type=1400 audit(1750720471.879:184): avc: denied { setopt } for pid=464 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.864542][ T36] audit: type=1400 audit(1750720471.879:185): avc: denied { unlink } for pid=464 comm="syz.3.45" name="#1" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 29.869698][ T469] rust_binder: Write failure EFAULT in pid:70 [ 29.890668][ T36] audit: type=1400 audit(1750720471.879:186): avc: denied { mount } for pid=464 comm="syz.3.45" name="/" dev="overlay" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.911995][ T473] rust_binder: Write failure EINVAL in pid:72 [ 29.921581][ T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.936448][ T471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.993065][ T483] overlayfs: failed to resolve './file0': -2 [ 30.086838][ T488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.086871][ T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 30.108363][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 30.129429][ T306] usb 3-1: config 8 has an invalid interface number: 193 but max is 3 [ 30.139316][ T306] usb 3-1: config 8 has an invalid interface number: 37 but max is 3 [ 30.151669][ T306] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 30.164808][ T306] usb 3-1: config 8 has an invalid interface number: 224 but max is 3 [ 30.175785][ T306] usb 3-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config [ 30.187278][ T503] rust_binder: Write failure EFAULT in pid:76 [ 30.187710][ T306] usb 3-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 30.205610][ T500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=500 comm=syz.3.60 [ 30.219918][ T306] usb 3-1: config 8 has no interface number 0 [ 30.226248][ T306] usb 3-1: config 8 has no interface number 1 [ 30.233009][ T306] usb 3-1: config 8 has no interface number 2 [ 30.234061][ T500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=500 comm=syz.3.60 [ 30.241214][ T306] usb 3-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 30.267097][ T306] usb 3-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 30.279344][ T306] usb 3-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 30.298655][ T306] usb 3-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.312657][ T306] usb 3-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 30.325872][ T306] usb 3-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.338552][ T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 30.339633][ T306] usb 3-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 30.366690][ T306] usb 3-1: config 8 interface 37 has no altsetting 0 [ 30.373872][ T306] usb 3-1: config 8 interface 224 has no altsetting 0 [ 30.387584][ T306] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04 [ 30.399904][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.408348][ T306] usb 3-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ [ 30.433940][ T306] usb 3-1: Manufacturer: Є [ 30.439933][ T306] usb 3-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ [ 30.458181][ T449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 30.558483][ T65] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 30.628506][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.670911][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.680239][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.692161][ T306] snd-usb-audio 3-1:8.193: probe with driver snd-usb-audio failed with error -71 [ 30.709552][ T306] usbhid 3-1:8.37: couldn't find an input interrupt endpoint [ 30.719668][ T306] snd-usb-audio 3-1:8.37: probe with driver snd-usb-audio failed with error -71 [ 30.730044][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.730686][ T306] snd-usb-audio 3-1:8.224: probe with driver snd-usb-audio failed with error -71 [ 30.749138][ T65] usb 4-1: not running at top speed; connect to a high speed hub [ 30.752255][ T306] usb 3-1: USB disconnect, device number 3 [ 30.763855][ T65] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 30.783612][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 30.795738][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 30.808467][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.818070][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.826970][ T65] usb 4-1: Product: syz [ 30.832216][ T65] usb 4-1: Manufacturer: syz [ 30.838202][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.848124][ T65] usb 4-1: SerialNumber: syz [ 30.853384][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.862274][ T31] usb 2-1: Product: 《 [ 30.867301][ T31] usb 2-1: Manufacturer: ∽ᵜ㿥䨤鍶啜粽䊓咓滧曝䱮꺄㬧ֳ蟠쓜燥覀册蓜 [ 30.878942][ T31] usb 2-1: SerialNumber: 鵲₊ꗤ렷㙇宩쌙搜ዒ嚗꫉錱虑債㠁ﻋ誌쀔邤⾽櫱浽ࣇȆ鋟⦾ꕈ➁楐旌珉䚾悎뼴繟飦黗ࢌ逭몷赮◉砬폔Ἀ鶢仂䦭蜞턖瓶䌬䜧樼懚⪑ꋀ䍢橯὚饬踏퓵㏠껉셫᡺ሇ캂⹊ぞ栣鋨砉鱔䧙蹭㟬ꡂ᰻壻임筐ګ頰콚ꆉ篓罘孢厊˽珀䛯䓊響ꐾ昑์䐑鎁댈㜚 [ 30.916495][ T515] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.020096][ T369] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 31.029657][ T369] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.129394][ T31] cdc_ncm 2-1:1.0: bind() failure [ 31.137190][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 31.146715][ T31] cdc_ncm 2-1:1.1: bind() failure [ 31.155263][ T31] usb 2-1: USB disconnect, device number 3 [ 31.326681][ T539] rust_binder: Error in use_page_slow: ESRCH [ 31.326699][ T539] rust_binder: use_range failure ESRCH [ 31.333268][ T539] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 31.340013][ T539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.348778][ T539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:58 [ 31.415228][ T541] can0: slcan on ttyS3. [ 31.479735][ T540] can0 (unregistered): slcan off ttyS3. [ 31.586153][ T65] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.599597][ T65] usb 4-1: USB disconnect, device number 3 [ 31.612616][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.720288][ T584] binder: Bad value for 'stats' [ 31.771063][ T592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.774765][ T592] rust_binder: Error while translating object. [ 31.782061][ T592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.789562][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 31.818633][ T594] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 31.864127][ T602] rust_binder: Error while translating object. [ 31.864163][ T602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.868472][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.871563][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 31.891405][ T603] rust_binder: Error while translating object. [ 31.909420][ T603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.916822][ T603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 32.028333][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 32.058964][ T9] usb 1-1: config 8 has an invalid interface number: 193 but max is 3 [ 32.072552][ T9] usb 1-1: config 8 has an invalid interface number: 37 but max is 3 [ 32.090317][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 32.101671][ T9] usb 1-1: config 8 has an invalid interface number: 224 but max is 3 [ 32.110949][ T9] usb 1-1: config 8 has an invalid descriptor of length 236, skipping remainder of the config [ 32.122607][ T9] usb 1-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 32.132462][ T9] usb 1-1: config 8 has no interface number 0 [ 32.145359][ T9] usb 1-1: config 8 has no interface number 1 [ 32.173347][ T9] usb 1-1: config 8 has no interface number 2 [ 32.179820][ T9] usb 1-1: config 8 interface 193 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 32.191498][ T9] usb 1-1: config 8 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 32.204720][ T9] usb 1-1: config 8 interface 193 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 32.217479][ T9] usb 1-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 32.230364][ T620] binder: Binderfs stats mode cannot be changed during a remount [ 32.250141][ T9] usb 1-1: config 8 interface 193 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 32.278670][ T9] usb 1-1: config 8 interface 193 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 32.291802][ T9] usb 1-1: config 8 interface 224 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.306544][ T9] usb 1-1: config 8 interface 37 has no altsetting 0 [ 32.313974][ T9] usb 1-1: config 8 interface 224 has no altsetting 0 [ 32.324543][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=66.04 [ 32.334379][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.343938][ T9] usb 1-1: Product: ㉈㏐뾪昞鶌蓛胊粞䀺놉뚑隽૨㦞旕郧提ㅊ闣죷꺦䥕霛決埧風왖⨞ᅉ桝씞䗔ᷛ阙戤⧍ᡥ㍻ସᵠ寀搦࣭딳䱮穆ⓞȌຘ龤謵䱯鼳袽᧤໑綦䟹협潺笽쿐᥷ꪌﵯ꿷֚艱咁ጘ핐⫿ꑠ [ 32.371004][ T9] usb 1-1: Manufacturer: Є [ 32.376119][ T9] usb 1-1: SerialNumber: 葔䷠輄ﳭ콢ࠬ룆拶酐衺封켑頸ᘴ짘컜ꁭ옍衢鹲瑫씩趛䑕匒뮉飀﬩토⋄꾆ꛛ [ 32.393964][ T566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.439413][ T628] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 32.444372][ T628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 32.528377][ T306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.561848][ T635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.564221][ T635] rust_binder: Error in use_page_slow: ESRCH [ 32.571610][ T635] rust_binder: use_range failure ESRCH [ 32.577787][ T635] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 32.584163][ T635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.593690][ T635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:125 [ 32.615610][ T566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.629192][ T639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.637342][ T639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.637410][ T566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.645257][ T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 32.668882][ T9] snd-usb-audio 1-1:8.193: probe with driver snd-usb-audio failed with error -71 [ 32.681918][ T641] binder: Unknown parameter 'defcontext01777777777777777777777' [ 32.692110][ T9] usbhid 1-1:8.37: couldn't find an input interrupt endpoint [ 32.708908][ T9] snd-usb-audio 1-1:8.37: probe with driver snd-usb-audio failed with error -71 [ 32.720177][ T9] snd-usb-audio 1-1:8.224: probe with driver snd-usb-audio failed with error -71 [ 32.729867][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.740769][ T306] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.757357][ T9] usb 1-1: USB disconnect, device number 3 [ 32.766134][ T306] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.776296][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.785507][ T306] usb 4-1: SerialNumber: syz [ 32.811688][ T650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=650 comm=syz.1.106 [ 32.888471][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 32.895900][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 32.908692][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.924146][ T10] usb 3-1: config 0 descriptor?? [ 33.002664][ T306] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 33.269525][ T672] capability: warning: `syz.0.108' uses 32-bit capabilities (legacy support in use) [ 33.406152][ T31] usb 4-1: USB disconnect, device number 4 [ 33.413487][ T31] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 33.420208][ T675] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 33.433242][ T675] rust_binder: Write failure EINVAL in pid:47 [ 33.657987][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.665094][ T710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 33.799445][ T292] ------------[ cut here ]------------ [ 33.814730][ T292] WARNING: CPU: 1 PID: 292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 33.822687][ T292] Modules linked in: [ 33.826675][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 33.840601][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.851763][ T292] RIP: 0010:drop_nlink+0xce/0x110 [ 33.857101][ T292] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 5f 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 33.878728][ T292] RSP: 0018:ffffc9000b68fa80 EFLAGS: 00010293 [ 33.885480][ T292] RAX: ffffffff81ed3d2e RBX: ffff88811b3cd6c0 RCX: ffff88812ab12600 [ 33.893847][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.902709][ T292] RBP: ffffc9000b68faa8 R08: 0000000000000003 R09: 0000000000000004 [ 33.911705][ T292] R10: dffffc0000000000 R11: fffff520016d1f40 R12: dffffc0000000000 [ 33.919899][ T292] R13: 1ffff11023679ae1 R14: ffff88811b3cd708 R15: 0000000000000000 [ 33.928441][ T292] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.938252][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.944872][ T292] CR2: 00007f40700e8710 CR3: 000000011da12000 CR4: 00000000003526b0 [ 33.952887][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.961172][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.969619][ T292] Call Trace: [ 33.973087][ T292] [ 33.976152][ T292] shmem_rmdir+0x5f/0x90 [ 33.980563][ T292] vfs_rmdir+0x3e0/0x560 [ 33.985446][ T292] incfs_kill_sb+0x109/0x230 [ 33.990192][ T292] deactivate_locked_super+0xd5/0x2a0 [ 33.995930][ T292] deactivate_super+0xb8/0xe0 [ 34.000926][ T292] cleanup_mnt+0x3f1/0x480 [ 34.005948][ T292] __cleanup_mnt+0x1d/0x40 [ 34.010885][ T292] task_work_run+0x1e0/0x250 [ 34.016026][ T292] ? __cfi_task_work_run+0x10/0x10 [ 34.021975][ T292] ? free_nsproxy+0x223/0x290 [ 34.027171][ T292] do_exit+0x9b4/0x2630 [ 34.031539][ T292] ? __cfi_do_exit+0x10/0x10 [ 34.036404][ T292] ? __kasan_check_write+0x18/0x20 [ 34.041870][ T292] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.047351][ T292] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.053367][ T292] ? __cfi_ksys_write+0x10/0x10 [ 34.059286][ T292] ? zap_other_threads+0x334/0x370 [ 34.064771][ T292] do_group_exit+0x22a/0x300 [ 34.070031][ T292] __x64_sys_exit_group+0x43/0x50 [ 34.075549][ T292] x64_sys_call+0x2ed2/0x2ee0 [ 34.080501][ T292] do_syscall_64+0x58/0xf0 [ 34.085021][ T292] ? clear_bhb_loop+0x50/0xa0 [ 34.090081][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.096597][ T292] RIP: 0033:0x7f406f38e929 [ 34.101090][ T292] Code: Unable to access opcode bytes at 0x7f406f38e8ff. [ 34.108397][ T292] RSP: 002b:00007ffe0fc08358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.117091][ T292] RAX: ffffffffffffffda RBX: 00007f406f410997 RCX: 00007f406f38e929 [ 34.125630][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 34.134502][ T292] RBP: 0000000000000016 R08: 00007ffe0fc060f6 R09: 00007ffe0fc09610 [ 34.142905][ T292] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe0fc09610 [ 34.151645][ T292] R13: 00007f406f410925 R14: 000055557ac574a8 R15: 00007ffe0fc0c8c0 [ 34.159967][ T292] [ 34.163414][ T292] ---[ end trace 0000000000000000 ]--- [ 34.169399][ T292] ================================================================== [ 34.178593][ T292] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 34.185354][ T292] Write of size 4 at addr 0000000000000168 by task syz-executor/292 [ 34.193860][ T292] [ 34.196307][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 34.196331][ T292] Tainted: [W]=WARN [ 34.196335][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.196342][ T292] Call Trace: [ 34.196347][ T292] [ 34.196353][ T292] __dump_stack+0x21/0x30 [ 34.196370][ T292] dump_stack_lvl+0x10c/0x190 [ 34.196381][ T292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.196401][ T292] print_report+0x3d/0x70 [ 34.196410][ T292] kasan_report+0x163/0x1a0 [ 34.196431][ T292] ? ihold+0x24/0x70 [ 34.196445][ T292] ? _raw_spin_unlock+0x45/0x60 [ 34.196460][ T292] ? ihold+0x24/0x70 [ 34.196473][ T292] kasan_check_range+0x299/0x2a0 [ 34.196487][ T292] __kasan_check_write+0x18/0x20 [ 34.196498][ T292] ihold+0x24/0x70 [ 34.196511][ T292] vfs_rmdir+0x26a/0x560 [ 34.196521][ T292] incfs_kill_sb+0x109/0x230 [ 34.196533][ T292] deactivate_locked_super+0xd5/0x2a0 [ 34.196543][ T292] deactivate_super+0xb8/0xe0 [ 34.196553][ T292] cleanup_mnt+0x3f1/0x480 [ 34.196567][ T292] __cleanup_mnt+0x1d/0x40 [ 34.196580][ T292] task_work_run+0x1e0/0x250 [ 34.196590][ T292] ? __cfi_task_work_run+0x10/0x10 [ 34.196600][ T292] ? free_nsproxy+0x223/0x290 [ 34.196613][ T292] do_exit+0x9b4/0x2630 [ 34.196624][ T292] ? __cfi_do_exit+0x10/0x10 [ 34.196634][ T292] ? __kasan_check_write+0x18/0x20 [ 34.196645][ T292] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.196659][ T292] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.196677][ T292] ? __cfi_ksys_write+0x10/0x10 [ 34.196689][ T292] ? zap_other_threads+0x334/0x370 [ 34.196698][ T292] do_group_exit+0x22a/0x300 [ 34.196709][ T292] __x64_sys_exit_group+0x43/0x50 [ 34.196719][ T292] x64_sys_call+0x2ed2/0x2ee0 [ 34.196732][ T292] do_syscall_64+0x58/0xf0 [ 34.196745][ T292] ? clear_bhb_loop+0x50/0xa0 [ 34.196756][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.196766][ T292] RIP: 0033:0x7f406f38e929 [ 34.196775][ T292] Code: Unable to access opcode bytes at 0x7f406f38e8ff. [ 34.196781][ T292] RSP: 002b:00007ffe0fc08358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.196792][ T292] RAX: ffffffffffffffda RBX: 00007f406f410997 RCX: 00007f406f38e929 [ 34.196800][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 34.196806][ T292] RBP: 0000000000000016 R08: 00007ffe0fc060f6 R09: 00007ffe0fc09610 [ 34.196813][ T292] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe0fc09610 [ 34.196820][ T292] R13: 00007f406f410925 R14: 000055557ac574a8 R15: 00007ffe0fc0c8c0 [ 34.196828][ T292] [ 34.196832][ T292] ================================================================== [ 34.482969][ T292] Disabling lock debugging due to kernel taint [ 34.489466][ T292] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 34.497829][ T292] #PF: supervisor write access in kernel mode [ 34.504150][ T292] #PF: error_code(0x0002) - not-present page [ 34.510464][ T292] PGD 8000000116a48067 P4D 8000000116a48067 PUD 0 [ 34.518264][ T292] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 34.524328][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G B W 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 34.542749][ T292] Tainted: [B]=BAD_PAGE, [W]=WARN [ 34.547969][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.559452][ T292] RIP: 0010:ihold+0x2a/0x70 [ 34.564480][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 34.585921][ T292] RSP: 0018:ffffc9000b68fac0 EFLAGS: 00010246 [ 34.591983][ T292] RAX: ffff88812ab12600 RBX: 0000000000000000 RCX: ffff88812ab12600 [ 34.600328][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.608780][ T292] RBP: ffffc9000b68fad0 R08: ffffffff88957947 R09: 1ffffffff112af28 [ 34.617094][ T292] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff88811b3cd6cc [ 34.625318][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.633880][ T292] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.643969][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.650815][ T292] CR2: 0000000000000168 CR3: 000000011da12000 CR4: 00000000003526b0 [ 34.658960][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.668024][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.676274][ T292] Call Trace: [ 34.679580][ T292] [ 34.682679][ T292] vfs_rmdir+0x26a/0x560 [ 34.686949][ T292] incfs_kill_sb+0x109/0x230 [ 34.692105][ T292] deactivate_locked_super+0xd5/0x2a0 [ 34.697963][ T292] deactivate_super+0xb8/0xe0 [ 34.702838][ T292] cleanup_mnt+0x3f1/0x480 [ 34.707389][ T292] __cleanup_mnt+0x1d/0x40 [ 34.711824][ T292] task_work_run+0x1e0/0x250 [ 34.716508][ T292] ? __cfi_task_work_run+0x10/0x10 [ 34.721847][ T292] ? free_nsproxy+0x223/0x290 [ 34.727064][ T292] do_exit+0x9b4/0x2630 [ 34.731332][ T292] ? __cfi_do_exit+0x10/0x10 [ 34.736034][ T292] ? __kasan_check_write+0x18/0x20 [ 34.741155][ T292] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.746374][ T292] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.752182][ T292] ? __cfi_ksys_write+0x10/0x10 [ 34.757680][ T292] ? zap_other_threads+0x334/0x370 [ 34.763344][ T292] do_group_exit+0x22a/0x300 [ 34.768130][ T292] __x64_sys_exit_group+0x43/0x50 [ 34.774043][ T292] x64_sys_call+0x2ed2/0x2ee0 [ 34.778851][ T292] do_syscall_64+0x58/0xf0 [ 34.783276][ T292] ? clear_bhb_loop+0x50/0xa0 [ 34.788054][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.794099][ T292] RIP: 0033:0x7f406f38e929 [ 34.798687][ T292] Code: Unable to access opcode bytes at 0x7f406f38e8ff. [ 34.806306][ T292] RSP: 002b:00007ffe0fc08358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.815078][ T292] RAX: ffffffffffffffda RBX: 00007f406f410997 RCX: 00007f406f38e929 [ 34.823257][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 34.831553][ T292] RBP: 0000000000000016 R08: 00007ffe0fc060f6 R09: 00007ffe0fc09610 [ 34.840578][ T292] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe0fc09610 [ 34.849615][ T292] R13: 00007f406f410925 R14: 000055557ac574a8 R15: 00007ffe0fc0c8c0 [ 34.858210][ T292] [ 34.861605][ T292] Modules linked in: [ 34.865941][ T292] CR2: 0000000000000168 [ 34.870489][ T292] ---[ end trace 0000000000000000 ]--- [ 34.876486][ T292] RIP: 0010:ihold+0x2a/0x70 [ 34.881413][ T292] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 56 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 34.903001][ T292] RSP: 0018:ffffc9000b68fac0 EFLAGS: 00010246 [ 34.909846][ T292] RAX: ffff88812ab12600 RBX: 0000000000000000 RCX: ffff88812ab12600 [ 34.918604][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.927101][ T292] RBP: ffffc9000b68fad0 R08: ffffffff88957947 R09: 1ffffffff112af28 [ 34.936250][ T292] R10: dffffc0000000000 R11: fffffbfff112af29 R12: ffff88811b3cd6cc [ 34.945057][ T292] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.953628][ T292] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.963054][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.969993][ T292] CR2: 0000000000000168 CR3: 000000011da12000 CR4: 00000000003526b0 [ 34.978754][ T292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.987526][ T292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.998932][ T292] Kernel panic - not syncing: Fatal exception [ 35.008368][ T292] Kernel Offset: disabled [ 35.012873][ T292] Rebooting in 86400 seconds..