last executing test programs: 3.997589622s ago: executing program 1 (id=2): sync() sync() sync() sync() sync() sync() sync() sync() mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2001040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xe9d9c6edff956338, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 3.303201566s ago: executing program 1 (id=15): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x20800) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0xde, {0xde, 0x23, "0fd51ebe00b89b4ad33ba733fa1cb1670b19492e142b4426763c12aa58d8801744f3b8a0618444a2b8e6a64767f9c47c044014a7f37f60e7131849bc347c5208e2cbde0c957fa2f15a5a44693d8280941984a0136ee51de1f80bf8de39924c526aa9ce3fcebfde4885eb41b006e772bf663618391666918401b92cbe8f4a3f3870273a2f60bdf7234f3f1c537e5e5a0e343ef86f1adb09e9e8d2620c067fcc912b74590900e210c39c65c1d1125d7e5f850016bd953f84bc93eeeb0ecb7b9379b1f55f3a69db9cc8442004f59b33470d3321a6886edfb9a9549ec015"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f0000000180)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0xfb, 0x5}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0xf9, 0x2, "0835e911", "e98ecaf9"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x2, 0x4, 0x0, 0x0, 0x81, 0x2}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x14, 0xbd, "5d8a675956551f783801d0e565223e4b7ea7a3beefdfc89ed4d7ef51c8278738d28dcd1747d70c73fca85242130bc3bde0504d044883dfbab3453c914a3718595e01262b1d41cd0f9843b9e1e4f067089927cf57efc9f8b4ae83c1af0ec690bc9f2a2e317b36cfea10a7ab7c2ab721c56fc9576bb4513cadba6742957b1c33dd396388cb4063573eccfc97d1105cc32306f8613cbd0ab42e2ff2a752e92dbaede79eeb5cc41a89334df1f4820019829f51edd89b27d10146dadc817668"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x4, 0x10, [0xff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000500)={0x40, 0xb, 0x2, '\'.'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2ad}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "a384"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xd391}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x2f}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f0000000800)={0x0, 0x30, 0x84, {0x84, 0x22, "a097d6b4749ad9f31aabcb30b0b32c7a3cc5d9c32af955eb9178252e98b793f608acf0becd772e5f91654ab54c367b94a865a8e8476b04a8397fa5e3b2faa4deb682b2cf9a92384897c7c3af7d3348b5e56a341c6242f09824d696c70a963ff28e0d14bb3f186c4623eb7381b0c8b80a84e36d0ee4fd33cb9ecdfa613adce3a320a2"}}, &(0x7f00000008c0)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "049097d6e4095cf0d83580ab7839cfe3945a3f44202bc752aced43b061de0dd4e0ec6610363f9b768c964db4417c2d8d0c2808c3c16331bf2889cb2bbaef3e6b5dcc679cf2defe424e9c3ec2dd896ed539cdcb6ab4702c89a7ed430527167a8ca1e4f2d7122bbf05e74ee29d0f39cc304455202d3dc3942ed718a391ae76c27ba4911e6d35a7aa69a3c63975176ed224404d7001eba9e8b4fd60a2e7180fa8a0f9aa8158edcd6c8f8248d1d478f79f04fc76d83d562849deced7bc716ca628bc52ad8202859e6640e16f00b9ca28f9935e74b40891be16770297ca5b9b25fc6abfef13a08e7cb81a01a29dd3a577df42"}}}, &(0x7f0000000b80)={0x34, &(0x7f0000000a00)={0x0, 0x8, 0x12, "d353c68a36531f370ff54325399cbfaf3bcf"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ac0)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000b00)={0x40, 0xa0, 0x4, 0xffd}, &(0x7f0000000b40)={0xc0, 0xa2, 0x2f, "d6706a4fc5acbf3cb081996a8d8c6a0e966736e1cd1b66a84fdac5083e0e419ff2c62217e69ae08e270219290ddf23"}}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r2 = syz_usb_connect$cdc_ecm(0x3, 0x60, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x4, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "4e74da97bac1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xcb, 0x5, 0xff}, [@acm={0x4, 0x24, 0x2, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x5, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x51, 0xfc, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x13, 0x1}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x110, 0xc3, 0xd, 0x0, 0x10, 0x9}, 0x120, &(0x7f0000000cc0)={0x5, 0xf, 0x120, 0x6, [@ptm_cap={0x3}, @generic={0xf4, 0x10, 0x3, "4d48071391b083bb0cd0abaf3232622297114d7ba54b341499b933a3b115a1ebe12fe41a4f5c4cbdeb2a78640c0c751ae614a3e377fd97bfa71f329492eb89bd8eb8bda25268f42663d87cedfb0896850dabc7febad0e58bc640f7645e133e021fe70a13f31e294102d42caa49a7c083e32186e66b8ebc4a1464852ca56598bf0e35710f80c9ddbd7c227e68343c5940973100f6501930293844b638df8b9c11d4463dca120374285aa20cd7c57ec54e9ed11aee5d230089423b1e0b2b8fa1f9e8f156ae899d2e3574927d910310a5d591f7f4820a534021a2b5ac3d187eb858b62cd53a9c3e0ab62aa9820c62d5377194"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x2, 0x3175}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x6, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1b, 0x5, 0x46, 0x29, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x8, 0x8a, 0x1, 0xf3}]}, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2444}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xf, 0x52, {0x52, 0xf, "fa50bc7f6bb6e7a77ded68fad59a06134b96c3601f3dd1fe9743042c137662f6e826f24a0911ba786dc005b48e2b3ec088f3e938d4e603482fb8ad577446fb7ae6f2f09062ec49f31ca59539592846d1"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001100)={0x1c, &(0x7f0000000fc0)={0x0, 0x14, 0x9d, "692a208e349496d40e03221784de42f53d6bbdcb3e82437bd6afce995746c53b6b8648eb504d57ca04519bfba9ad44240c73dde0b90637fe0b0043fddf4f7aebf59a6e0c966ebcbf039f174b21e018d11a71938bbea120de905e3a71924ebb30e9882e333e97e77969b138ba241240e7cb52337c29da292c81c8f0ee9af4093b3a8e9ab44a009948470849a06ff8693076cdd51bf6a27963eaf9afa24e"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x9}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001140)='./binderfs2/binder1\x00', 0x800, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000011c0)={'system_u:object_r:var_auth_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x1}, 0x5a) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001240)={0x0, 0x1a, 0x1, [0x9, 0x5, 0x9, 0x7, 0x9], [0xd, 0x800, 0x5a, 0x9, 0x2, 0xa28, 0x4, 0xfffffffffffffff2, 0x81, 0x8, 0x9, 0x5, 0x7fffffff, 0x8, 0x3, 0x8000, 0xe1, 0x5, 0xb09, 0xc, 0x80a, 0x5, 0x2, 0x9, 0xe25f, 0x5, 0x6, 0xa, 0x3, 0xbcee, 0x8, 0x8, 0x100000001, 0x9, 0x7, 0x3, 0x8, 0x9, 0x1, 0x5, 0x8001, 0x401, 0x6, 0x3, 0x9, 0x6, 0x194, 0x1, 0x588a0512, 0x3, 0x6, 0x8, 0x9, 0x1, 0x7, 0x0, 0x6, 0x7, 0xffffffffffffffea, 0x0, 0x8, 0x1, 0x0, 0x1, 0xc, 0x8, 0x80000000, 0x7fffffff, 0x800, 0xffffffff, 0x3, 0x7, 0xd, 0x10000, 0x4, 0x6, 0x1, 0x2, 0x4, 0xe1a5, 0x7, 0x7, 0x9, 0x4, 0x4, 0x800, 0xec, 0x1, 0x4, 0x1, 0x100000000, 0x7, 0x8, 0x2f8000000000, 0x3, 0x200, 0x6, 0x8, 0x99, 0x6, 0x3ff, 0x101, 0x0, 0xb0d1, 0x4, 0x401, 0x86, 0x4, 0x0, 0xbae1, 0x4, 0x7f, 0x4, 0x0, 0x6, 0x5b15, 0xffffffffffffffff, 0x3, 0x50ce, 0x2, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001680)={r6, "9991e6eb41f5ac422044debb3abfd2ca"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002680)={0x73622a85, 0x201}) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000026c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x6004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x3, 0x1, 0x2, 0xe3, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x350}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd2, 0x4, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xa, 0x0, 0x8}}]}}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000002700)={0xa, 0x6, 0x200, 0x1, 0x7, 0x5, 0x10, 0xd1}, 0x5, &(0x7f0000002740)={0x5, 0xf, 0x5}, 0x2, [{0x13, &(0x7f0000002780)=@string={0x13, 0x3, "bb8078bad7a64344544b431d05b9b5f40f"}}, {0x54, &(0x7f00000027c0)=@string={0x54, 0x3, "b182593195b6058f6a9986829b06168e26c74b4b3261621abcbef8eb2b2ccbfa0830161c8a2a3e3c3cedc8c2f5902dc53de3ab232bbed9299df07fbfaa68274ae78a61b76bb7c14078b48e1a109446929cf8"}}]}) write(r4, &(0x7f0000002880)="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", 0xfe) r8 = openat(0xffffffffffffffff, &(0x7f0000002980)='./file0\x00', 0x500, 0x100) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x5a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4000804) syz_usb_control_io$hid(r7, &(0x7f0000002c40)={0x24, &(0x7f0000002ac0)={0x40, 0x9, 0x4d, {0x4d, 0x10, "16e3766069270935faf0d8e728730005964e8a5b3cd7e2d966d36b5ca0e43e6540fb1ed047d275e20ea2bc8e2c4f777ad25895df493cc62fa201f1d29a0519a14de20f54493908b16ce1fd"}}, &(0x7f0000002b40)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "ec1e1ee7ddefd120908cc0a8ef62d3d26c4578ff611bfa6d4aef7a8a7ec70684bdcb82d81b59eec21e4fa53f4bf252b160f8a0a5dddfe8c625b048e58492230fab5fb51e632288d6098c36dd90e9c86ad33b9a578dc0dd18d8999e11"}}, &(0x7f0000002bc0)={0x0, 0x22, 0x1c, {[@global=@item_012={0x2, 0x1, 0x1, "9230"}, @global, @main=@item_4={0x3, 0x0, 0x8, "c99cb2c1"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x2, 0x2, 0x2, ',J'}, @global=@item_4={0x3, 0x1, 0x5, "ffb68754"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_012={0x2, 0x0, 0xa, "938d"}, @global=@item_4={0x3, 0x1, 0xb, "d1c4e68b"}]}}, &(0x7f0000002c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xd51}}}}, &(0x7f0000002e80)={0x2c, &(0x7f0000002c80)={0x20, 0xf, 0x13, "7a2fb3f54646acd11da366ba65bd934ee24b82"}, &(0x7f0000002cc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002d40)={0x20, 0x1, 0xea, "f8478c44951f2fdb0b463b70c5f03837a5f5d6e12c3a092e8a7d0e7a65d44c6e9ba303da31bbab33e84fa646f1f1104b116b767479403c8702074c0875788b192a71a28b32c0569eded7d230bb651cc69321f8bd87603796a0c3d343814730b604fdcc14e651dcee71ed291a911be57340036d4a346cf892b3b0cf2f0a047312a5c30e6da16c461f1c0b0021c3af79b3c939bef228717ec701cdc866cdbcd95a4c23eee86118dd258f0c625aa49aecac58adb8d65cf5e72a5501c4f517dcaa0414187006701e9b7d854468179a9f3e5f30d44d3fa905135b915ed76a333e35908026ec2ba136a56c7d92"}, &(0x7f0000002e40)={0x20, 0x3, 0x1, 0x8}}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000002ec0)={0x2, 0x3, 0x4, 0xe5d, 0x3, 0x0, [{0xffff, 0xff, 0xff, '\x00', 0x1}, {0xf88, 0x8, 0xa, '\x00', 0x208c}, {0x10001, 0x2, 0xff, '\x00', 0x1001}]}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000003200)={0x14, &(0x7f0000002fc0)={0x20, 0x23, 0xff, {0xff, 0x23, "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"}}, &(0x7f0000003100)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "0f0ee1d476ca39c31ade6f9e003b556e4f3d481679783c708989fefbac9928052c286e1c5fe92b771dfaf44f6cc4bdd6f610706a67de1379e6b31734aa25407111a822776e37ae337b521fb45c748f49a14898280a28eaf679b0f5418f636f7e429bbb9ab7a3b7e8ed88eb8cd37ee3d8ede96395727123cc1ea93739bd63c2cebe42be20087d82f342f39e44001bed871a8f6db08ac16ce8f2cc05d2f3ccd58b6a09840b53cf112bf4c91e14540771ecfe61a0fa1c8bc342236e9005d7dcd89c8edf3bbc0649b48f9aa076049486de2acb94549c2cdbc5c0332e3e3145ccaccd1608408f5755efc7f8485e0c71c0a8f8c02ca6b57a477ab6"}}}, &(0x7f00000034c0)={0x34, &(0x7f0000003240)={0x0, 0x14, 0xac, "e9144d692bb077844bb4b910668416758980af3a6abcad1acee4492f96640dcc6f6d079a566235f3685869929de929512aed7c49cfcea95937a0aa0fd7d1952a9a34322413c0b5a43ebfd6c6ccf47b0ea61fcc4d7c7483379b086774f12fef6cbc2a12bdddbccb95510d50bca8f6a6f919da60014e83c12090e3d763e4103d3ba2226aebc0a0acaaff6a667d220b31c1ce5868cbd83307d228f886a68fd05cdc8e12ab5f6b599b7a0b42b46d"}, &(0x7f0000003300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003340)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000003380)={0x20, 0x0, 0xb7, {0xb5, "e77b6365134e789331d6f203b1823eb0aad3a0cef41b8a93621c4c8a0405ce591cee40bbd5238cb2aa91ad2f6603761c91dbe8b457a881409f1fd4b73d2c1a28b8ae66440a78dce0d06752f99a6cecf13394ef928d3635d91dee882a67518e76a513f393a3e1cb44e297a631d20d532d291530c858458e0ccd52c6eafba07c7e6d7d468889d02389c7b58bad0a496d875904a425604103920bc7d05a5fdacee4a8a16b46486939aabc1a74bf8d0957a5bd08a967a8"}}, &(0x7f0000003440)={0x20, 0x1, 0x1}, &(0x7f0000003480)={0x20, 0x0, 0x1, 0x2}}) setsockopt$inet6_int(r8, 0x29, 0x17, &(0x7f0000003500)=0xc1, 0x4) ioctl$HIDIOCGFIELDINFO(r8, 0xc038480a, &(0x7f0000003540)={0x2, 0x200, 0x7cd, 0x9, 0x2, 0x1, 0x9, 0x7f, 0x8, 0x5, 0x6, 0x0, 0x9, 0x2}) ioctl$HIDIOCGFLAG(r8, 0x8004480e, &(0x7f0000003580)) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = geteuid() quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000300, r10, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000003600), r8) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000003840)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003800)={&(0x7f0000003640)={0x184, r11, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000003940)={0x14, &(0x7f0000003880)={0x40, 0xd, 0x49, {0x49, 0x7157f848913a704a, "913b863b0d9b0850f70463043a922e5d63bc945ec5ddc87139a65655a8dda051a02ba17cb64c01719310d0b65d8ed95553154be4ae12f8635fa5e0ea6f62f08ac1e80c6ba42e52"}}, &(0x7f0000003900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003a40)={0x1c, &(0x7f0000003980)={0x40, 0x7, 0x6, "08ad0010cd22"}, &(0x7f00000039c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000003a00)={0x0, 0x8, 0x1, 0x80}}) 2.116173939s ago: executing program 0 (id=21): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012dbd7000fbdbdf25010000000000000001410000001c0017de00001afffffffb6574683a6970365f7674693000000000bdff34d298e1d14f27cfd2cd207daf8156a06e99ca3e0d5c6b34f407da408d9d37e862af136b35"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001400190100000000e4ae58460000"], 0x28}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x9, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 1.941215582s ago: executing program 0 (id=23): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000002c0)={0x0, 0xa, [@remote, @remote, @local, @dev, @link_local, @broadcast, @remote, @link_local, @random="db6576d74337", @random="bb8021e9da14"]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x40010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') close_range(r0, r0, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x8, 0x4e21, 0x4, 0xa, 0x30, 0x20, 0x3a, r4, r6}, {0x0, 0x6, 0x6, 0x6, 0xffffffffffffff55, 0x0, 0x3, 0x100000001}, {0x7, 0x100000001, 0x5, 0x28}, 0x2, 0x6e6bb8, 0x2, 0x0, 0x1, 0x2}, {{@in=@local, 0x4d4, 0x1}, 0x2, @in=@empty, 0x3500, 0x3, 0x0, 0x7f, 0x4, 0xfffffedf, 0x6}}, 0xe8) 1.873473513s ago: executing program 2 (id=26): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = accept(r1, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/204, 0xcc, 0x2, 0x18}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x2}], 0x2, 0x0, &(0x7f0000000440)="1c06"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x0, 0x0, 0x0}) 1.739506886s ago: executing program 2 (id=27): sync() socket$nl_generic(0x10, 0x3, 0x10) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 1.55245245s ago: executing program 0 (id=29): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x3000) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x40000000) (async) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 1.484548131s ago: executing program 0 (id=30): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x400}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7dc5fb1c8806388d", "521b54e59a83c991b2e7832c287c6e15", "4f203490", "12a75b52fb7b451a"}, 0x28) sendto$inet6(r1, &(0x7f0000000140)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x48010, 0x0, 0xfd4b) (async) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.469457751s ago: executing program 0 (id=31): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012dbd7000fbdbdf25010000000000000001410000001c0017de00001afffffffb6574683a6970365f7674693000000000bdff34d298e1d14f27cfd2cd207daf8156a06e99ca3e0d5c6b34f407da408d9d37e862af136b35"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001400190100000000e4ae58460000"], 0x28}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x9, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 1.433147132s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8000, &(0x7f00000002c0)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_auto}, {@nfs_export_on}], [{@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@fsname={'fsname', 0x3d, 'redirect_dir=on'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_gt={'fowner>', r0}}, {@smackfsroot={'smackfsroot', 0x3d, ']@(:^'}}, {@audit}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xeb) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1.356348803s ago: executing program 3 (id=33): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x1005, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) r6 = dup(0xffffffffffffffff) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000002580)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x10000007}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/bus/input/devices\x00', 0x0, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000002780)={0x1, 0x0, 0x7, 0xf}) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f0000000180)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="3895245c3cea0e01bc64cdd4c8eff585", @ANYBLOB="275df674677d4dec80b2c9ebe0e29ca20a2cba84a1a9dd55012133927e", @ANYRES32=r2], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c14f9a87266646e6f3d00"/28, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',directio,\x00']) r8 = getpid() syz_pidfd_open(r8, 0x0) r9 = syz_open_procfs(r8, &(0x7f00000002c0)='net/igmp\x00') read$FUSE(r9, &(0x7f00000029c0)={0x2020}, 0x2020) 1.355817573s ago: executing program 1 (id=34): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsync(0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c", 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) close(0x3) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) syz_usb_connect$uac1(0x5, 0xd7, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17b1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa995, 0x6bf1, 0x7f, "379ebd8fd28a4d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad51"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0xa, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)}}, @exit_looper], 0x0, 0x0, 0x0}) 1.303505085s ago: executing program 0 (id=35): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022010000009003ef5a2566c87a475f5a170dd37511ae1759f54c4fed645c6e016d1dc07956a97de56722ef461d10818d65a96aeb3e3d85badcdef4843e4d631e6d7c10ceeffa81a8d032c8f1be827c159540a86c230f80739cc986d87957f6ab"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.281666104s ago: executing program 3 (id=36): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="0f20c035000001000fc7348c0faef6b9060b00000f66b871008ee00f3266b80801f20f5f925a000000640ff8910000000066b804000f00d8b8fdc800000f23d80f21f835000000300f23f8f2ab", 0x4d}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) listen(r1, 0x9) (async, rerun: 64) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0xeeee0000, 0x8080000, 0x9, 0x7, 0x1}) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 1.216827306s ago: executing program 2 (id=37): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xf0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x4, &(0x7f0000000300)='])#{\xbd-.-\x00') r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r8, 0xa, 0x5, 0x0) lchown(&(0x7f00000000c0)='./cgroup\x00', r6, r7) 1.208863107s ago: executing program 2 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000740), 0x4900, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x5, 0x4) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @loopback}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000015c0)="7e825eca9378a4575bb91d96e4e4bc7fbdbaf453d5d62ca2d4f97c89b0ce5633ab84b8f45f3cffda010e9bb7f831c1cf236cd42c0a", 0x35) write$binfmt_aout(r7, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSETD(r9, 0x541b, &(0x7f0000000ec0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000000080), 0x2, 0x0) sendfile(r11, r11, &(0x7f0000000040)=0xa, 0xc) 1.178120326s ago: executing program 3 (id=39): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x8800000, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044001}, 0x44) r4 = dup(r1) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x2004, 0x0, 0x4, 0x0}) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0xc000, 0x1) openat$cgroup_procs(r7, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace(0x420e, r5) r8 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) close_range(r8, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 1.084340359s ago: executing program 2 (id=40): r0 = socket$inet(0x2, 0x4, 0x8001) fdatasync(r0) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x81, 0x5ed6207e}) (async) fcntl$addseals(r0, 0x409, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x5, 0x8, 0x6, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d5, 0x24, 0x6, 0x16, 0x2, 0xe0000000}]}, 0x30}}, 0x400c000) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0xfffff000, 0xfffffffff0000000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x2, 0x2, @empty, 0x8}, 0x1c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x404040, 0xc) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={{r5, r6/1000+10000}, {0x0, 0x2710}}, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)) fgetxattr(r1, &(0x7f0000000340)=@random={'user.', '-\x00'}, &(0x7f0000000380)=""/186, 0xba) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x20000809) (async) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000580)=0x8) (async) mknodat(r4, &(0x7f00000005c0)='./file0\x00', 0x100, 0xa) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r8, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r9, &(0x7f0000002680)={0x18, 0x0, r10}, 0x18) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) (async) timer_create(0x0, &(0x7f00000026c0)={0x0, 0x37, 0x1, @tid=r11}, &(0x7f0000002700)=0x0) timer_settime(r12, 0x1, &(0x7f0000002740)={{0x77359400}, {0x77359400}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002800)={'tunl0\x00', &(0x7f0000002780)={'tunl0\x00', 0x0, 0x40, 0x8, 0x6, 0x8, {{0x18, 0x4, 0x3, 0x28, 0x60, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, {[@cipso={0x86, 0x1f, 0x2, [{0x1, 0x9, "1a16950b564a58"}, {0x2, 0xa, "624b9104be1fb2d1"}, {0x1, 0x2}, {0x5, 0x4, '3a'}]}, @ssrr={0x89, 0x2b, 0xc1, [@remote, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100, @private=0xa010101, @loopback, @loopback, @multicast1, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$can_raw(r13, &(0x7f0000002940)={&(0x7f0000002840)={0x1d, r14}, 0x10, &(0x7f0000002900)={&(0x7f0000002880)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x22, 0x3, 0x0, 0x0, "791e1aea1cae10931760b23454579759b0b9759e70e078589e0a6e4fba50839cb386e6850c8e6c1370f8a9682b19ac2c63191d344cff2a68369ef3fa91773bd7"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) flock(r8, 0x1) (async) pipe2(&(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$lock(r15, 0x7, &(0x7f00000029c0)={0x0, 0x3, 0x800, 0x1, r11}) 1.01293105s ago: executing program 2 (id=41): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_usb_connect(0x2, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e01020000000108000b020102082407"], 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x1014, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}, {@nodevmap}, {@access_uid}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) 329.748943ms ago: executing program 3 (id=42): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f0000000400)=0xfffffe6f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x14) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 240.427095ms ago: executing program 3 (id=43): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012dbd7000fbdbdf25010000000000000001410000001c0017de00001afffffffb6574683a6970365f7674693000000000bdff34d298e1d14f27cfd2cd207daf8156a06e99ca3e0d5c6b34f407da408d9d37e862af136b35"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001400190100000000e4ae58460000"], 0x28}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x9, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r6, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 156.504767ms ago: executing program 1 (id=44): r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000009a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000009b00)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2501000000000000000c41000000010014"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008004) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000001c0)=0x9, 0x4) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000080), 0x400000, &(0x7f0000000200)={[{@uuid_on}, {@volatile}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@uuid_null}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x8080000, 0x73, &(0x7f00000002c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x2001) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3337}) openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0) 74.272158ms ago: executing program 3 (id=45): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setpriority(0x1, 0x0, 0xb0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x4, 0x9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="bc5e32fcd59b15b02cac2b8f1b02ff7cf494acd2c945f0a3021c8a83b4caae701b8ad0cef05b224cce2602c4976e855dc8b4e7b7652e4507ee331027fb54d8740129462474fcefdc6142431ea73cd6a1"}) 0s ago: executing program 1 (id=46): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fstat(r0, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000004340), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000044c0)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003f00)=[{&(0x7f0000002500)={0x1188, 0x14, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@generic="6e2879baf2840fce780328cdd45c65560d964e05cf332a7bbcfed00c52ba98060507ea4aa00d2e7dd8b53241a3de6b7e7e147f66189cba95ea0657436c224a9af71b006d3f2860fd41ef3bcc129d9c9f8e443465cdf7dd94d9e7ee757a41ac7194", @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0xd4, 0x116, 0x0, 0x1, [@generic="d033f18b5379e5217f34eb0f6bf26a4485ddbebc1b0be421e99b96b3dc15544ab8be6c2185396fc43a947786bbf1da673925b36ceeb414e7906a02a45a0b443476380d1b73e260144054f38ae9094cd9db42d5476f2060ed703c2464d844396999", @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="2cbc82de5c8c2fb750174f803408ccbd10cb4aca94f396ba4ba80e83c793dae1366c426773afdddbe06a9d499247c4576eb24aac6cebd1d5d863f81354071b14a675c10d17afd6e06f0b26d26c00a1b7883f8758c6f63e", @typed={0x5, 0xf7, 0x0, 0x0, @str='\x8a'}, @typed={0x5, 0xc6, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x64, 0x0, 0x0, @u32=0xaee6}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1028, 0x83, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0x81}, @nested={0x4, 0xe8}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0xd, 0x0, 0x0, @fd=r0}, @generic="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"]}]}, 0x1188}, {&(0x7f00000036c0)={0x5c, 0x40, 0x20, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x64, 0x0, 0x0, @fd=r0}, @generic="39bf5fd6964007b7ea571ca0a0115d3c17d816e17b2593177d2b080895c26b3af2506ba6438ef4af4c9193ac6b3ba40b3597b653aa483ca0853f6c1d9f57921c4a"]}, 0x5c}, {&(0x7f0000004500)={0x398, 0x23, 0x2, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x57, 0x0, 0x0, @uid}, @nested={0x7b, 0x3a, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x103}, @nested={0x4, 0x35}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@empty}, @generic="46f7ab02550315379fe30ed112968b3f1b0908393ecba23cf6dafb42d3dd7ad7b678b91e842e5fe42a887526d528f828a974eb0b1c67c9bce744e56d76c7f35acee2401311857010782951b922847b31e25459a5ec224ff76e4042", @nested={0x4, 0xf1}]}, @nested={0x18, 0x122, 0x0, 0x1, [@typed={0x4, 0xf0}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="0770d4313709f77c3ce5b4e16b068a210f91eb181f9f103229802dbc46ef002b76a29a5cb9b00907956a4d704716945e496702edf3b87ce811733a22f1370c40c7269b21e67a911255c20963da4ef733c660a4c259587dcc6d075452abf1a4fca931b9fbda9110eb1f43866d539645e61459dc66799de853a687e62853fd86e0acda6e787f50938aed9ea7381aa8fc1033d4aadb895be2b138c1ca15101dd074b4a95beae7ce343cce26e42f2da5fe", @generic="9c3a7c14496e8073b520bcb5de229044e5c1c7b5dbac", @nested={0x221, 0xe3, 0x0, 0x1, [@nested={0x4, 0x99}, @generic="3a961a0bc2ffd3951ea887840e236a9d37645f07e1573ce17b4f5416eddcc6dd44c5029112396549ccad594d76dbc1c22a9bc589ef7f8945a33c40db60d9f9718203e3805888ccde22b31e6ecf1b7fa19b94237bf1e25fe93db4a9c3350ec1d9762758fa7bfc36cb5fc5f1c33c3161d838199c3fc1fa1734be6f61c9f44672c7808532c20f6a74ef357737a4f0158a6673b4b8fdcaae8ff81a147f6c1a80a6312513240f607292eacaf6645c0fac596b6651d7eba13c734d5110852623100be5e58fcea50fcda2d528b4b7bafa81e33b4d6d188df98df34abf812a27d8a7547a354e3b1d8b", @nested={0x4, 0xfe}, @nested={0x4, 0x9a}, @nested={0x4, 0xe}, @generic="0032ec9d1d2eb0f4aff77d5ef030759a8879766ac52134f00d48dc88599b79c15dac32a86f92c8e92d3b3343d432aa41020d6d40f6872c91af1bbe204a16cee736bcdeacd9a3cf", @generic="1c73e0adb6f9f3221be647eedd340bb99a8997ff0b22e91ce8df474f7622568791ac696e3c587462c5b38dec38d1ad6a50a5363e36fce9a0db6854165503b299a5d1d24193f51cf1bd26a41c8b2d00d06e6906d144fa458a5b950178ca0e331206dd8b48840624ede89b6950747f068738517db3913556b4ead31e57d76b89a7e82623dc3aa92a7a5fa95ff62a15f44948aa9ee5ad36d12cd5c06dbebcad569cc8d806de8ce4eb3407ceb1a59bf75dab012b2f4de54d318c12ca804421cfada781cbc3136f9c1115430a6e92e3594f9ade4c922cff9c7eb8a6", @typed={0x8, 0x82, 0x0, 0x0, @pid}]}]}, 0x398}, {&(0x7f0000003740)={0x36c, 0x17, 0xc00, 0x70bd29, 0x25dfdbff, "", [@nested={0x76, 0xed, 0x0, 0x1, [@generic="3e33d5bc0d2dbae75818a4e6cfb70805cdaf3b8e4eae636d73f34024c083d938297c3b414d87d7069519fd5a9e20b5a83a5f8d4223be27c1234b604b66bb81aeef4e90a3c25140368c0c81dac113e3cc16b024ccca29ac98a2c6fa4c94e850a5b87edf19901e57f1bb69f89198cb7020611f"]}, @nested={0x107, 0xce, 0x0, 0x1, [@generic="ef4114efe1c07bab284b98c856da4f91167b0a1101493497a268a29b365eb6b336db8b29065f7b4d919965e99750c9d03e8b52cd30c66828d8d98677be1da8df7fc3bdb67899c8664fd72ecd27a147a92ed6a381568fa98bc6e1cd0a5fc3d091ba2ab2cdc13846e96b06feb11e0b16fd0b2fef5938001e02d510e84ecc4e17e56c4b3da2995c75f21a175a953f33a4e7a26885f65af61b9bec", @generic="ba15720ea6c3bbe05e7f2c933e56f2a78d3fa98d8776545882d5ac2b4d2ce921b1513f540c6b9cfd5ab001c337449b2c95c69c7d5fea62fd6ff24f30c95f497a74406435150038b7ed20b1d5e2d0b6cf289370f4d1818c8c3e2f40e721e17e21df5d5fe1a2d3420f39c8"]}, @nested={0x2c, 0x4c, 0x0, 0x1, [@typed={0x14, 0x20af, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x28, 0x0, 0x0, @pid}, @typed={0x8, 0x43, 0x0, 0x0, @fd}, @nested={0x4, 0x7}]}, @generic="9d272352a6e69b670b2323f4c6593771d09fec43c2ebfb67ef8a178882861455fad8f1eb4989d18eb2f7b3ad48a2716ed40e1412b0733034b667c27a0e12c6bd86bd48ebf2694d3e7f6a0c1561a16c2e6312b85ca8165ad4719bde0190d5ba14c71b3cebd69b11ff4b817a68ba12ac7e759bc2344e216b9d1249a9d2df6a95020f84cc84f5334ea88d882fe12167c5e232470cbd9d8b6e358b93c549f905ba6de35bbfc79dafc670b7fbb76688fbb8a775cbd11a831815ba681af7b695037cadeee6398e7fed2b590835f033a2d88eb841defbe3d06d8ca30cd5cc00e06c1f45a7201f", @generic="588cbf690a4a0a296dbebc5ccafb6cbd62207d469b660994e8da5bda3623c06ccae62a72d981ba9862b49e1ed613a0378a5db94c59b0014833f985b36b03f4e7b8c5909c23ba4f7cd2a93d4a7ea96928a362ad0ae86e174033093a442f753100321a9154316fc1216bf39b4e089984e2ab612e612b88c18aec05f6baed08eebf9164e573e51398333e5daffe79f29e0d769d2851e1f6b64cac12680ceb8c058cacbd6b431011fbb7431b7acda2756475f70c5e0522f747713ef3b05ae95367cc6212b6e1226fd4c0e68778431f"]}, 0x36c}, {&(0x7f0000003e40)={0xb4, 0x2c, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@generic="926626bcefe84d81129fca73d5129a67cbe89ccd44af56623692649a90136c1de836dd4880606577f2e2d1c19c73788ff7bf70043ff9726eb3fa4467e8ea3ef353362f9df8b93d43bc6de23617a543611422e977384b130df9fccc32f7be6267b30c034db5553a0f3affca3c1e12f77efa7ffc527b589722a60efef46d7d31efc269860f05091abea0ae7f204ab6845255f2e1f8fbbda4e3fdaff3e92681eefdfc"]}, 0xb4}], 0x5, &(0x7f0000004380)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x120, 0x8000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x80000, 0x80) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, r5}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.37' (ED25519) to the list of known hosts. [ 26.779905][ T36] audit: type=1400 audit(1757176640.510:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.781699][ T280] cgroup: Unknown subsys name 'net' [ 26.809947][ T36] audit: type=1400 audit(1757176640.520:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.841395][ T36] audit: type=1400 audit(1757176640.550:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.841596][ T280] cgroup: Unknown subsys name 'devices' [ 27.032533][ T280] cgroup: Unknown subsys name 'hugetlb' [ 27.039016][ T280] cgroup: Unknown subsys name 'rlimit' [ 27.204181][ T36] audit: type=1400 audit(1757176640.940:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.232777][ T36] audit: type=1400 audit(1757176640.940:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.244442][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.262245][ T36] audit: type=1400 audit(1757176640.940:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.301808][ T36] audit: type=1400 audit(1757176641.010:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 27.333350][ T36] audit: type=1400 audit(1757176641.010:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.369058][ T36] audit: type=1400 audit(1757176641.100:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.406867][ T36] audit: type=1400 audit(1757176641.100:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.406917][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.706197][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.714431][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.722203][ T290] bridge_slave_0: entered allmulticast mode [ 28.729477][ T290] bridge_slave_0: entered promiscuous mode [ 28.741039][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.749107][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.758671][ T289] bridge_slave_0: entered allmulticast mode [ 28.766555][ T289] bridge_slave_0: entered promiscuous mode [ 28.776341][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.784553][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.793322][ T289] bridge_slave_1: entered allmulticast mode [ 28.800452][ T289] bridge_slave_1: entered promiscuous mode [ 28.809207][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.817776][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.825819][ T290] bridge_slave_1: entered allmulticast mode [ 28.833734][ T290] bridge_slave_1: entered promiscuous mode [ 28.898797][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.907934][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.916719][ T288] bridge_slave_0: entered allmulticast mode [ 28.925783][ T288] bridge_slave_0: entered promiscuous mode [ 28.943594][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.953325][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.961126][ T288] bridge_slave_1: entered allmulticast mode [ 28.968417][ T288] bridge_slave_1: entered promiscuous mode [ 28.996973][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.006316][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.016091][ T287] bridge_slave_0: entered allmulticast mode [ 29.023697][ T287] bridge_slave_0: entered promiscuous mode [ 29.044217][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.053012][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.063219][ T287] bridge_slave_1: entered allmulticast mode [ 29.071026][ T287] bridge_slave_1: entered promiscuous mode [ 29.257253][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.264753][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.273352][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.282009][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.299269][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.307677][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.317569][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.325991][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.339287][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.350087][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.359362][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.368338][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.385609][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.393341][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.401947][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.410944][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.466886][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.475521][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.484301][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.493300][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.501871][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.510760][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.519371][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.528233][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.546174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.556150][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.567299][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.576261][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.587859][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.596936][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.608854][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.617735][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.636312][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.644439][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.653433][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.662011][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.693776][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.702109][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.712206][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.721403][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.762736][ T290] veth0_vlan: entered promiscuous mode [ 29.786538][ T288] veth0_vlan: entered promiscuous mode [ 29.810428][ T287] veth0_vlan: entered promiscuous mode [ 29.821459][ T288] veth1_macvtap: entered promiscuous mode [ 29.831932][ T290] veth1_macvtap: entered promiscuous mode [ 29.851167][ T289] veth0_vlan: entered promiscuous mode [ 29.880076][ T287] veth1_macvtap: entered promiscuous mode [ 29.911815][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.914881][ T289] veth1_macvtap: entered promiscuous mode [ 30.045764][ T343] rust_binder: 2: no such ref 0 [ 30.053665][ T343] rust_binder: 2: no such ref 1 [ 30.065655][ T345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.103240][ T345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=345 comm=syz.0.6 [ 30.107959][ T351] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 30.124224][ T351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 30.144511][ T351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:7 [ 30.249237][ T360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 30.290256][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.302228][ T365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.328012][ T367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11'. [ 30.344565][ T332] ======================================================= [ 30.344565][ T332] WARNING: The mand mount option has been deprecated and [ 30.344565][ T332] and is ignored by this kernel. Remove the mand [ 30.344565][ T332] option from the mount to silence this warning. [ 30.344565][ T332] ======================================================= [ 30.441363][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.456673][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.469594][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.486566][ T31] usb 3-1: config 0 descriptor?? [ 30.635811][ T375] 2N: renamed from vcan0 (while UP) [ 30.735496][ T375] kvm: emulating exchange as write [ 30.908664][ T31] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 30.931386][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.940835][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input4 [ 31.037330][ T31] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 31.109983][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 31.121724][ T45] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 31.141308][ T45] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.158280][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 31.172529][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.184108][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.193355][ T45] usb 2-1: Product: syz [ 31.198830][ T45] usb 2-1: Manufacturer: â‘„ [ 31.204581][ T45] usb 2-1: SerialNumber: syz [ 31.228548][ T377] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 Stopping sshd: stopped /usr/sbin/sshd (pid 199) OK [ 31.499057][ T31] usb 3-1: USB disconnect, device number 2 Stopping crond: stopped /usr/sbin/crond (pid 192) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 146) Stopping network: [ 31.673464][ T406] pim6reg1: entered promiscuous mode [ 31.689735][ T406] pim6reg1: entered allmulticast mode [ 31.697517][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.727111][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.758765][ T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 31.840885][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 31.840903][ T36] audit: type=1400 audit(1757176645.575:163): avc: denied { create } for pid=420 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.875713][ T425] rust_binder: Read failure Err(EAGAIN) in pid:30 [ 31.876561][ T425] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 31.896159][ T36] audit: type=1400 audit(1757176645.605:164): avc: denied { write } for pid=420 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.918473][ T425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 31.921824][ T425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.973814][ T36] audit: type=1400 audit(1757176645.605:165): avc: denied { ioctl } for pid=420 comm="syz.3.22" path="socket:[4970]" dev="sockfs" ino=4970 ioctlcmd=0x556a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.981717][ T9] usb 2-1: USB disconnect, device number 2 OK [ 32.016140][ T435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 32.026060][ T36] audit: type=1400 audit(1757176645.675:166): avc: denied { write } for pid=147 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping iptables: [ 32.081146][ T36] audit: type=1400 audit(1757176645.675:167): avc: denied { remove_name } for pid=147 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.103068][ T441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 32.105684][ T441] rust_binder: Failure when writing BR_NOOP at beginning of buffer. OK [ 32.127279][ T441] rust_binder: Read failure Err(EFAULT) in pid:7 [ 32.145679][ T36] audit: type=1400 audit(1757176645.675:168): avc: denied { unlink } for pid=147 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 32.185767][ T36] audit: type=1400 audit(1757176645.675:169): avc: denied { unlink } for pid=147 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Stopping system [ 32.212518][ T36] audit: type=1400 audit(1757176645.825:170): avc: denied { append } for pid=438 comm="syz.3.25" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 message bus: [ 32.241447][ T36] audit: type=1400 audit(1757176645.825:171): avc: denied { shutdown } for pid=438 comm="syz.3.25" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.270334][ T36] audit: type=1400 audit(1757176645.835:172): avc: denied { accept } for pid=440 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 done Stopping klogd: OK Stopping acpid: [ 32.579527][ T479] 9pnet_fd: Insufficient options for proto=fd [ 32.689476][ T491] exFAT-fs (rnullb0): invalid boot record signature [ 32.697077][ T491] exFAT-fs (rnullb0): failed to read boot sector [ 32.705843][ T491] exFAT-fs (rnullb0): failed to recognize exfat type [ 32.719060][ T491] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.799950][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.899897][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.959875][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 32.968943][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.979443][ T9] usb 2-1: config 1 has no interface number 1 [ 32.987868][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 33.005409][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 33.023733][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.037322][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.047142][ T9] usb 2-1: Product: syz [ 33.051714][ T9] usb 2-1: Manufacturer: syz [ 33.057047][ T9] usb 2-1: SerialNumber: syz [ 33.080181][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.095917][ T45] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.107493][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.120738][ T45] usb 1-1: config 0 descriptor?? [ 33.200127][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.273614][ T9] usb 2-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 33.287155][ T9] usb 2-1: USB disconnect, device number 3 [ 33.361106][ T31] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 33.371806][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.385886][ T31] usb 3-1: config 0 has no interface number 0 [ 33.396689][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 33.408740][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.418503][ T31] usb 3-1: Product: syz [ 33.424151][ T31] usb 3-1: Manufacturer: syz [ 33.429414][ T31] usb 3-1: SerialNumber: syz [ 33.436749][ T31] usb 3-1: config 0 descriptor?? [ 33.547622][ T45] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 33.559999][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input5 OK Stopping syslogd[ 33.637053][ T45] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 : [ 33.654856][ T10] usb 3-1: USB disconnect, device number 3 stopped /sbin/syslogd (pid 90) OK [ 33.822083][ T520] netlink: 5 bytes leftover after parsing attributes in process `syz.1.44'. [ 33.832812][ T520] 0ªö»ôM: renamed from gretap0 (while UP) [ 33.847457][ T520] 0ªö»ôM: entered allmulticast mode [ 33.855038][ T520] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. umount: can't remount debugfs read-only [ 33.975940][ T528] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 34.022787][ T528] SELinux: Context ϧ® is not valid (left unmapped). umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.10.37 closed by remote host. [ 34.100092][ T45] usb 1-1: USB disconnect, device number 2 Sent SIGTERM to all processes [ 34.222281][ T526] ------------[ cut here ]------------ [ 34.229594][ T526] WARNING: CPU: 0 PID: 526 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 34.240151][ T526] Modules linked in: [ 34.244475][ T526] CPU: 0 UID: 0 PID: 526 Comm: syz.1.46 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 34.257640][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.269728][ T526] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 34.276484][ T526] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 be 54 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c d7 4b 03 cc e8 e6 1f 43 ff <0f> 0b e9 3e ff ff ff e8 da 1f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 34.299361][ T526] RSP: 0018:ffffc9000cff7768 EFLAGS: 00010293 [ 34.307181][ T526] RAX: ffffffff8242c42a RBX: 0000000000000000 RCX: ffff888114279300 [ 34.316886][ T526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.326210][ T526] RBP: ffffc9000cff7790 R08: ffff88813247b71f R09: 1ffff1102648f6e3 [ 34.335770][ T526] R10: dffffc0000000000 R11: ffffed102648f6e4 R12: 0000000000000000 [ 34.345803][ T526] R13: dffffc0000000000 R14: ffff88813247b680 R15: ffff888112e35000 [ 34.355265][ T526] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.366149][ T526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.374332][ T526] CR2: 000055556ca6a4a8 CR3: 000000010a340000 CR4: 00000000003526b0 [ 34.385734][ T526] Call Trace: [ 34.390004][ T526] [ 34.393859][ T526] ovl_do_remove+0x7b8/0xcf0 [ 34.401182][ T526] ? ovl_set_redirect+0x780/0x780 [ 34.407092][ T526] ? down_write+0xe9/0x2a0 [ 34.413039][ T526] ? __cfi_down_write+0x10/0x10 [ 34.420148][ T526] ovl_rmdir+0x1e/0x30 [ 34.424936][ T526] vfs_rmdir+0x3dd/0x560 [ 34.430807][ T526] incfs_kill_sb+0x109/0x230 [ 34.435870][ T526] deactivate_locked_super+0xd8/0x2a0 [ 34.442707][ T526] deactivate_super+0xb8/0xe0 [ 34.450308][ T526] cleanup_mnt+0x3f1/0x480 [ 34.456108][ T526] __cleanup_mnt+0x1d/0x40 [ 34.461884][ T526] task_work_run+0x1e3/0x250 [ 34.470968][ T526] ? __cfi_task_work_run+0x10/0x10 [ 34.477558][ T526] ? free_nsproxy+0x223/0x290 [ 34.484655][ T526] do_exit+0x9bc/0x2630 [ 34.490930][ T526] ? __kasan_check_write+0x18/0x20 [ 34.498098][ T526] ? __cfi_do_exit+0x10/0x10 [ 34.505999][ T526] ? futex_wake+0x63a/0x900 [ 34.513047][ T526] ? __count_memcg_events+0xdf/0x3b0 [ 34.521382][ T526] ? __kasan_check_write+0x18/0x20 [ 34.527608][ T526] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.534930][ T526] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.545153][ T526] do_group_exit+0x22a/0x300 [ 34.551702][ T526] ? __kasan_check_write+0x18/0x20 [ 34.558328][ T526] get_signal+0x139d/0x14f0 [ 34.563035][ T526] arch_do_signal_or_restart+0x96/0x720 [ 34.571711][ T526] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.580078][ T526] ? __kasan_check_read+0x15/0x20 [ 34.586724][ T526] syscall_exit_to_user_mode+0x58/0xb0 [ 34.595166][ T526] do_syscall_64+0x64/0xf0 [ 34.600222][ T526] ? clear_bhb_loop+0x50/0xa0 [ 34.606900][ T526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.615827][ T526] RIP: 0033:0x7fc7c7d8ebe9 [ 34.627540][ T526] Code: Unable to access opcode bytes at 0x7fc7c7d8ebbf. [ 34.636686][ T526] RSP: 002b:00007fffc5fab798 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 34.648099][ T526] RAX: 0000000000000001 RBX: 00007fc7c7fc5fa8 RCX: 00007fc7c7d8ebe9 [ 34.658921][ T526] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc7c7fc5fa8 [ 34.668557][ T526] RBP: 0000000000000000 R08: 000000000000000f R09: 0000001ac5faba8f [ 34.679562][ T526] R10: 00007fc7c7fc5fa0 R11: 0000000000000246 R12: 00007fc7c7fc5fac [ 34.688980][ T526] R13: 00007fc7c7fc5fa0 R14: 00000000000010a4 R15: 0000000000000005 [ 34.701003][ T526] [ 34.704511][ T526] ---[ end trace 0000000000000000 ]--- [ 34.712660][ T526] ------------[ cut here ]------------ [ 34.719681][ T526] WARNING: CPU: 0 PID: 526 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 34.732598][ T526] Modules linked in: [ 34.736868][ T526] CPU: 0 UID: 0 PID: 526 Comm: syz.1.46 Tainted: G W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 34.754922][ T526] Tainted: [W]=WARN [ 34.759346][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.771110][ T526] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 34.780061][ T526] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 be 54 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c d7 4b 03 cc e8 e6 1f 43 ff <0f> 0b e9 3e ff ff ff e8 da 1f 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 34.804676][ T526] RSP: 0018:ffffc9000cff7768 EFLAGS: 00010293 [ 34.811624][ T526] RAX: ffffffff8242c42a RBX: 0000000000000000 RCX: ffff888114279300 [ 34.822576][ T526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.836143][ T526] RBP: ffffc9000cff7790 R08: ffff88813247b71f R09: 1ffff1102648f6e3 [ 34.852037][ T526] R10: dffffc0000000000 R11: ffffed102648f6e4 R12: 0000000000000000 [ 34.868652][ T526] R13: dffffc0000000000 R14: ffff88813247b680 R15: ffff888112e35000 [ 34.884364][ T526] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.897891][ T526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.905757][ T526] CR2: 000055556ca6a4a8 CR3: 000000010a340000 CR4: 00000000003526b0 [ 34.915992][ T526] Call Trace: [ 34.919620][ T526] [ 34.926610][ T526] ovl_do_remove+0x7b8/0xcf0 [ 34.933740][ T526] ? ovl_set_redirect+0x780/0x780 [ 34.940897][ T526] ? down_write+0xe9/0x2a0 [ 34.947839][ T526] ? __cfi_down_write+0x10/0x10 [ 34.955371][ T526] ovl_rmdir+0x1e/0x30 [ 34.963556][ T526] vfs_rmdir+0x3dd/0x560 [ 34.969144][ T526] incfs_kill_sb+0x1a0/0x230 [ 34.975878][ T526] deactivate_locked_super+0xd8/0x2a0 [ 34.982280][ T526] deactivate_super+0xb8/0xe0 [ 34.987825][ T526] cleanup_mnt+0x3f1/0x480 [ 34.993866][ T526] __cleanup_mnt+0x1d/0x40 [ 34.998915][ T526] task_work_run+0x1e3/0x250 [ 35.005442][ T526] ? __cfi_task_work_run+0x10/0x10 [ 35.012803][ T526] ? free_nsproxy+0x223/0x290 [ 35.017967][ T526] do_exit+0x9bc/0x2630 [ 35.023363][ T526] ? __kasan_check_write+0x18/0x20 [ 35.029254][ T526] ? __cfi_do_exit+0x10/0x10 [ 35.034663][ T526] ? futex_wake+0x63a/0x900 [ 35.041375][ T526] ? __count_memcg_events+0xdf/0x3b0 [ 35.048402][ T526] ? __kasan_check_write+0x18/0x20 [ 35.055579][ T526] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.061760][ T526] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.067886][ T526] do_group_exit+0x22a/0x300 [ 35.073564][ T526] ? __kasan_check_write+0x18/0x20 [ 35.080297][ T526] get_signal+0x139d/0x14f0 [ 35.085694][ T526] arch_do_signal_or_restart+0x96/0x720 [ 35.092463][ T526] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 35.100326][ T526] ? __kasan_check_read+0x15/0x20 [ 35.107033][ T526] syscall_exit_to_user_mode+0x58/0xb0 [ 35.113203][ T526] do_syscall_64+0x64/0xf0 [ 35.119941][ T526] ? clear_bhb_loop+0x50/0xa0 [ 35.125209][ T526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.132787][ T526] RIP: 0033:0x7fc7c7d8ebe9 [ 35.138376][ T526] Code: Unable to access opcode bytes at 0x7fc7c7d8ebbf. [ 35.146634][ T526] RSP: 002b:00007fffc5fab798 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 35.157571][ T526] RAX: 0000000000000001 RBX: 00007fc7c7fc5fa8 RCX: 00007fc7c7d8ebe9 [ 35.168619][ T526] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc7c7fc5fa8 [ 35.178992][ T526] RBP: 0000000000000000 R08: 000000000000000f R09: 0000001ac5faba8f [ 35.188286][ T526] R10: 00007fc7c7fc5fa0 R11: 0000000000000246 R12: 00007fc7c7fc5fac [ 35.198166][ T526] R13: 00007fc7c7fc5fa0 R14: 00000000000010a4 R15: 0000000000000005 [ 35.208331][ T526] [ 35.213502][ T526] ---[ end trace 0000000000000000 ]--- [ 35.261950][ T12] bridge_slave_1: left allmulticast mode [ 35.268004][ T12] bridge_slave_1: left promiscuous mode [ 35.274823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.283210][ T12] bridge_slave_0: left allmulticast mode [ 35.290134][ T12] bridge_slave_0: left promiscuous mode [ 35.296657][ T12] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 35.452475][ T12] veth1_macvtap: left promiscuous mode [ 35.458527][ T12] veth0_vlan: left promiscuous mode [ 35.722728][ T12] bridge_slave_1: left allmulticast mode [ 35.729195][ T12] bridge_slave_1: left promiscuous mode [ 35.735303][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.743909][ T12] bridge_slave_0: left allmulticast mode [ 35.751224][ T12] bridge_slave_0: left promiscuous mode [ 35.758186][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.767425][ T12] bridge_slave_1: left allmulticast mode [ 35.775630][ T12] bridge_slave_1: left promiscuous mode [ 35.783422][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.793569][ T12] bridge_slave_0: left allmulticast mode [ 35.801556][ T12] bridge_slave_0: left promiscuous mode [ 35.809219][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.820647][ T12] bridge_slave_1: left allmulticast mode [ 35.827272][ T12] bridge_slave_1: left promiscuous mode [ 35.834675][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.844397][ T12] bridge_slave_0: left allmulticast mode [ 35.855075][ T12] bridge_slave_0: left promiscuous mode [ 35.863122][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.116246][ T12] veth1_macvtap: left promiscuous mode [ 36.122591][ T12] veth0_vlan: left promiscuous mode [ 36.130874][ T12] veth1_macvtap: left promiscuous mode [ 36.136781][ T12] veth0_vlan: left promiscuous mode [ 36.143501][ T12] veth1_macvtap: left promiscuous mode [ 36.150220][ T12] veth0_vlan: left promiscuous mode [ 36.320424][ T529] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 36.327994][ T529] ACPI: PM: Preparing to enter system sleep state S5 [ 36.337665][ T529] kvm: exiting hardware virtualization [ 36.344026][ T529] reboot: Power down serialport: VM disconnected.