last executing test programs: 1.545771706s ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120904006a0107010109090501024000800100090582020004020505000000000000000000000000000000000283d8e93b2be9b96818a0d02cc8efd4bc6403db44ac0b264a10324799f8858881cefd3c30f625fea8d53d8c3542"], &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x7, 0xb, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000004c0)=[@free_buffer, @release], 0x0, 0x0, 0x0}) 1.493115321s ago: executing program 2 (id=3): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x45d0f74176ac6a3d, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @private=0xa010101, r0}, 0xc) 1.491028271s ago: executing program 2 (id=8): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x4}}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfcc0, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/235, 0xeb, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.483918911s ago: executing program 0 (id=1): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x5f875000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.442874335s ago: executing program 2 (id=9): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) r1 = syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@directio}], [{@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, '\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9'}}]}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x24008800) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4040800) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) close(r2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYRES8=0x0, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES64=r0, @ANYRESDEC=r3]}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ec0)='\x00\x00\x00\x02\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat$cgroup_ro(r3, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) 597.903732ms ago: executing program 1 (id=11): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0xff, 0x3}) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2, 0xa000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 578.351443ms ago: executing program 1 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000beb7000040000080000100000000000000"]) close_range(r0, 0xffffffffffffffff, 0x0) 566.398044ms ago: executing program 1 (id=13): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x4, 0x4}, 0x6) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x17) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x1, 0x9, "bc533c", 0x7, 0x6}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 496.167181ms ago: executing program 1 (id=14): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x8001, 0x1c, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x66, 0x0, 0x80, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x8b, [@multicast2]}]}}}}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x16}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008011}, 0x80d0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/4096, 0x1000, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000016c0)=""/193, 0xc1, 0x1, 0x3e}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 495.190151ms ago: executing program 1 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@expire={0x104, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {{{@in6=@empty, @in=@broadcast, 0x4e22, 0x6, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0xd5}, {@in6=@remote, 0x4d5, 0x3c}, @in=@rand_addr=0x64010102, {0x515a9802, 0x7f, 0xffffffffffffffff, 0xd, 0x8000000000000000, 0xba, 0x7, 0xe}, {0x3f, 0xffffffffffffff4d, 0x6, 0x4}, {0x5, 0x10, 0x97}, 0x70bd25, 0x3500, 0xa, 0x7, 0x9, 0x8}, 0xd}, [@mark={0xc, 0x15, {0x35075a, 0x9}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1000}) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1d, 0x73, 0xf, 0x15, 0xa, 0x100, 0x0, 0xb1, 0xffffffffffffffff}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000640)={[{0xffffffff, 0x6, 0x3, 0x74, 0x5a, 0x1, 0x1, 0x6, 0xa, 0xf, 0x7, 0x1, 0xffffffffffffffff}, {0xffff0001, 0x7, 0x1, 0x2, 0x4, 0x2, 0x5, 0x4, 0x3, 0xad, 0xff, 0x4, 0x790}, {0x2, 0x5, 0x4, 0x4, 0x7c, 0xd8, 0xfa, 0x7, 0x81, 0x0, 0x4, 0x9, 0x4}], 0x10000}) (async) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 356.387902ms ago: executing program 1 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000300)={0x9, r0, 'id0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES8, @ANYRES16=r2, @ANYRES16=r3], 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0x7, 0x2, 0x4}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_fscache}, {@cache_loose}, {@posixacl}, {@directio}, {@noxattr}, {@noxattr}, {@cache_fscache}, {@access_uid={'access', 0x3d, r9}}, {@version_9p2000}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000280)=0x8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000009480)={'bridge_slave_1\x00', &(0x7f0000009440)=@ethtool_cmd={0x48, 0xeaa, 0x0, 0x34, 0xd2, 0x85, 0x3, 0x6, 0xed, 0x1, 0xfff, 0x3, 0x4, 0x67, 0x7, 0x4, [0x10000, 0x6]}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @loopback, 0x1ff}, 0x1c) listen(r12, 0x5) 106.373531ms ago: executing program 2 (id=17): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) 21.698698ms ago: executing program 2 (id=18): syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) (async) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) (async) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r0, &(0x7f0000001c00)="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", 0xfffffdbf) 21.260518ms ago: executing program 2 (id=19): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2800}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000000c0)) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r7, 0x1e380000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000000000009c000040"]) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x3}, 0x9}, {{&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f0000000980)=""/235, 0xeb}, {&(0x7f0000000a80)=""/192, 0xc0}, {&(0x7f0000000b40)=""/136, 0x88}, {&(0x7f00000008c0)=""/120, 0x78}], 0x5, &(0x7f0000000c80)=""/110, 0x6e}, 0x1}, {{&(0x7f0000000d00)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/135, 0x87}, {&(0x7f0000000e40)=""/108, 0x6c}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/104, 0x68}, {&(0x7f0000000f40)=""/111, 0x6f}], 0x5, &(0x7f0000001040)=""/246, 0xf6}, 0x8}], 0x3, 0x2100, 0x0) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x81, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/131, 0x0, 0x2, 0x27}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000001580)=""/4096, 0x0, 0x1, 0x37}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000400)}}, @clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x1}, @free_buffer={0x40086303, r3}, @register_looper, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x12}, @flat=@weak_handle={0x77682a85, 0x0, 0x100}, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 20.895881][ T36] audit: type=1400 audit(1756290497.239:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.897076][ T281] cgroup: Unknown subsys name 'net' [ 20.918624][ T36] audit: type=1400 audit(1756290497.239:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.945944][ T36] audit: type=1400 audit(1756290497.269:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.946142][ T281] cgroup: Unknown subsys name 'devices' [ 21.105925][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.111542][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.264045][ T36] audit: type=1400 audit(1756290497.609:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.287425][ T36] audit: type=1400 audit(1756290497.609:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.296397][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.312532][ T36] audit: type=1400 audit(1756290497.609:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.344125][ T36] audit: type=1400 audit(1756290497.669:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.369676][ T36] audit: type=1400 audit(1756290497.669:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.376325][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.395399][ T36] audit: type=1400 audit(1756290497.719:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.429710][ T36] audit: type=1400 audit(1756290497.719:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.680306][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.687386][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.694510][ T288] bridge_slave_0: entered allmulticast mode [ 22.700721][ T288] bridge_slave_0: entered promiscuous mode [ 22.707163][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.714246][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.721359][ T288] bridge_slave_1: entered allmulticast mode [ 22.727536][ T288] bridge_slave_1: entered promiscuous mode [ 22.812525][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.819641][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.826887][ T291] bridge_slave_0: entered allmulticast mode [ 22.833035][ T291] bridge_slave_0: entered promiscuous mode [ 22.850093][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.857295][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.864476][ T291] bridge_slave_1: entered allmulticast mode [ 22.870679][ T291] bridge_slave_1: entered promiscuous mode [ 22.880135][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.887256][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.894443][ T290] bridge_slave_0: entered allmulticast mode [ 22.900600][ T290] bridge_slave_0: entered promiscuous mode [ 22.916680][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.923773][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.930835][ T290] bridge_slave_1: entered allmulticast mode [ 22.937032][ T290] bridge_slave_1: entered promiscuous mode [ 22.947651][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.954711][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.961757][ T289] bridge_slave_0: entered allmulticast mode [ 22.968052][ T289] bridge_slave_0: entered promiscuous mode [ 22.974430][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.981461][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.988582][ T289] bridge_slave_1: entered allmulticast mode [ 22.994811][ T289] bridge_slave_1: entered promiscuous mode [ 23.100540][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.107620][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.114913][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.121927][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.164170][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.171221][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.178524][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.185673][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.208562][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.215981][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.223246][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.230286][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.239240][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.246306][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.253647][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.260692][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.297207][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.304586][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.311729][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.318996][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.326250][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.333451][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.340687][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.347966][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.381731][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.388815][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.396574][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.403621][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.411217][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.418272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.425875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.432940][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.440547][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.447611][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.455203][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.462249][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.484328][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.491432][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.506153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.513206][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.534302][ T289] veth0_vlan: entered promiscuous mode [ 23.554951][ T289] veth1_macvtap: entered promiscuous mode [ 23.578565][ T288] veth0_vlan: entered promiscuous mode [ 23.592065][ T291] veth0_vlan: entered promiscuous mode [ 23.610312][ T288] veth1_macvtap: entered promiscuous mode [ 23.620500][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.620623][ T291] veth1_macvtap: entered promiscuous mode [ 23.652282][ T290] veth0_vlan: entered promiscuous mode [ 23.689286][ T336] process 'syz.1.5' launched './file1' with NULL argv: empty string added [ 23.700691][ T290] veth1_macvtap: entered promiscuous mode [ 23.739522][ T343] binder: Unknown parameter 'fscontext?}' [ 23.770440][ T347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.783985][ T347] rust_binder: Fixups oob 164 166 363 196 [ 23.784011][ T347] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 23.789812][ T347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.798203][ T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 23.963902][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.033840][ T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.104028][ T45] usb 4-1: device descriptor read/64, error -71 [ 24.174011][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.183803][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 24.190279][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 24.198782][ T330] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 24.207019][ T330] usb 1-1: config 13 has no interface number 0 [ 24.213698][ T330] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 24.224401][ T330] usb 1-1: config 13 interface 50 has no altsetting 0 [ 24.232753][ T330] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 24.241854][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.250092][ T330] usb 1-1: Product: syz [ 24.254287][ T330] usb 1-1: Manufacturer: syz [ 24.258897][ T330] usb 1-1: SerialNumber: syz [ 24.265508][ T349] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 24.333785][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 24.340304][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.348795][ T9] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.353831][ T45] usb 4-1: device descriptor read/64, error -71 [ 24.361667][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 24.376294][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 24.385463][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.393466][ T9] usb 3-1: Product: syz [ 24.397855][ T9] usb 3-1: Manufacturer: syz [ 24.402485][ T9] usb 3-1: SerialNumber: syz [ 24.603806][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.621291][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 24.634700][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 24.650187][ T9] usb 3-1: USB disconnect, device number 2 [ 24.723208][ T330] usb 1-1: MIDIStreaming interface descriptor not found [ 24.736213][ T330] usb 1-1: USB disconnect, device number 2 [ 24.745951][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.758492][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.760242][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.771112][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.786643][ T45] usb 4-1: device descriptor read/64, error -71 [ 24.802445][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.817654][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.830073][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.842388][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.854796][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.867431][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.879712][ T371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=371 comm=syz.1.15 [ 24.903557][ T375] ======================================================= [ 24.903557][ T375] WARNING: The mand mount option has been deprecated and [ 24.903557][ T375] and is ignored by this kernel. Remove the mand [ 24.903557][ T375] option from the mount to silence this warning. [ 24.903557][ T375] ======================================================= [ 25.063815][ T45] usb 4-1: device descriptor read/64, error -71 [ 25.154213][ T378] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 25.163464][ T378] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 25.174189][ T45] usb usb4-port1: attempt power cycle [ 25.204235][ T385] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.245712][ T385] incfs: Unexpected inode type [ 25.372557][ T288] ------------[ cut here ]------------ [ 25.378267][ T288] WARNING: CPU: 0 PID: 288 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 25.386251][ T288] Modules linked in: [ 25.390166][ T288] CPU: 0 UID: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 25.401851][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 25.412038][ T288] RIP: 0010:drop_nlink+0xce/0x110 [ 25.417162][ T288] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 25.437234][ T288] RSP: 0018:ffffc9000b5ffc60 EFLAGS: 00010293 [ 25.443394][ T288] RAX: ffffffff81edc76e RBX: ffff88811304a958 RCX: ffff8881232a5f00 [ 25.451423][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.459446][ T288] RBP: ffffc9000b5ffc88 R08: 0000000000000003 R09: 0000000000000004 [ 25.467532][ T288] R10: dffffc0000000000 R11: fffff520016bff7c R12: dffffc0000000000 [ 25.475611][ T288] R13: 1ffff11022609534 R14: ffff88811304a9a0 R15: 0000000000000000 [ 25.483573][ T288] FS: 000055557c23b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.492540][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.499428][ T288] CR2: 000055557c25e4e8 CR3: 000000012325e000 CR4: 00000000003526b0 [ 25.507457][ T288] Call Trace: [ 25.510794][ T288] [ 25.513726][ T288] shmem_rmdir+0x5f/0x90 [ 25.518035][ T288] vfs_rmdir+0x3e0/0x560 [ 25.522558][ T288] incfs_kill_sb+0x109/0x230 [ 25.527199][ T288] deactivate_locked_super+0xd5/0x2a0 [ 25.532735][ T288] deactivate_super+0xb8/0xe0 [ 25.533816][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.537446][ T288] cleanup_mnt+0x3f1/0x480 [ 25.549412][ T288] __cleanup_mnt+0x1d/0x40 [ 25.553852][ T288] task_work_run+0x1e3/0x250 [ 25.558445][ T288] ? __cfi_task_work_run+0x10/0x10 [ 25.563546][ T288] ? __x64_sys_umount+0x126/0x170 [ 25.568657][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.574092][ T288] ? __kasan_check_read+0x15/0x20 [ 25.575028][ T45] usb 4-1: device descriptor read/8, error -71 [ 25.579126][ T288] resume_user_mode_work+0x36/0x50 [ 25.579155][ T288] syscall_exit_to_user_mode+0x64/0xb0 [ 25.579175][ T288] do_syscall_64+0x64/0xf0 [ 25.600371][ T288] ? clear_bhb_loop+0x50/0xa0 [ 25.605083][ T288] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.611074][ T288] RIP: 0033:0x7f1a4218ff17 [ 25.615641][ T288] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 25.635282][ T288] RSP: 002b:00007ffeacdb52f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.643688][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1a4218ff17 [ 25.651695][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeacdb53b0 [ 25.659777][ T288] RBP: 00007ffeacdb53b0 R08: 0000000000000000 R09: 0000000000000000 [ 25.667899][ T288] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeacdb6440 [ 25.675906][ T288] R13: 00007f1a42211c05 R14: 00000000000062f5 R15: 00007ffeacdb6480 [ 25.683998][ T288] [ 25.687016][ T288] ---[ end trace 0000000000000000 ]--- [ 25.692581][ T288] ================================================================== [ 25.700667][ T288] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 25.706902][ T288] Write of size 4 at addr 0000000000000168 by task syz-executor/288 [ 25.714871][ T288] [ 25.717194][ T288] CPU: 1 UID: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 25.717213][ T288] Tainted: [W]=WARN [ 25.717217][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 25.717224][ T288] Call Trace: [ 25.717228][ T288] [ 25.717233][ T288] __dump_stack+0x21/0x30 [ 25.717251][ T288] dump_stack_lvl+0x10c/0x190 [ 25.717264][ T288] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.717279][ T288] print_report+0x3d/0x70 [ 25.717291][ T288] kasan_report+0x163/0x1a0 [ 25.717303][ T288] ? ihold+0x24/0x70 [ 25.717314][ T288] ? _raw_spin_unlock+0x45/0x60 [ 25.717328][ T288] ? ihold+0x24/0x70 [ 25.717338][ T288] kasan_check_range+0x299/0x2a0 [ 25.717349][ T288] __kasan_check_write+0x18/0x20 [ 25.717364][ T288] ihold+0x24/0x70 [ 25.717374][ T288] vfs_rmdir+0x26a/0x560 [ 25.717387][ T288] incfs_kill_sb+0x109/0x230 [ 25.717412][ T288] deactivate_locked_super+0xd5/0x2a0 [ 25.717425][ T288] deactivate_super+0xb8/0xe0 [ 25.717443][ T288] cleanup_mnt+0x3f1/0x480 [ 25.717454][ T288] __cleanup_mnt+0x1d/0x40 [ 25.717478][ T288] task_work_run+0x1e3/0x250 [ 25.717491][ T288] ? __cfi_task_work_run+0x10/0x10 [ 25.717506][ T288] ? __x64_sys_umount+0x126/0x170 [ 25.717525][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.717539][ T288] ? __kasan_check_read+0x15/0x20 [ 25.717557][ T288] resume_user_mode_work+0x36/0x50 [ 25.717570][ T288] syscall_exit_to_user_mode+0x64/0xb0 [ 25.717581][ T288] do_syscall_64+0x64/0xf0 [ 25.717594][ T288] ? clear_bhb_loop+0x50/0xa0 [ 25.717605][ T288] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.717622][ T288] RIP: 0033:0x7f1a4218ff17 [ 25.717632][ T288] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 25.717641][ T288] RSP: 002b:00007ffeacdb52f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.717653][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1a4218ff17 [ 25.717661][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeacdb53b0 [ 25.717668][ T288] RBP: 00007ffeacdb53b0 R08: 0000000000000000 R09: 0000000000000000 [ 25.717675][ T288] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeacdb6440 [ 25.717682][ T288] R13: 00007f1a42211c05 R14: 00000000000062f5 R15: 00007ffeacdb6480 [ 25.717691][ T288] [ 25.717695][ T288] ================================================================== [ 25.962967][ T288] Disabling lock debugging due to kernel taint [ 25.969261][ T288] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 25.977053][ T288] #PF: supervisor write access in kernel mode [ 25.983096][ T288] #PF: error_code(0x0002) - not-present page [ 25.989165][ T288] PGD 800000010ef23067 P4D 800000010ef23067 PUD 0 [ 25.995657][ T288] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 26.001729][ T288] CPU: 1 UID: 0 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 a29bcd2d578c4b9493db917853c72486663e8fa1 [ 26.014822][ T288] Tainted: [B]=BAD_PAGE, [W]=WARN [ 26.019822][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 26.029859][ T288] RIP: 0010:ihold+0x2a/0x70 [ 26.034363][ T288] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 26.053972][ T288] RSP: 0018:ffffc9000b5ffca0 EFLAGS: 00010246 [ 26.060026][ T288] RAX: ffff8881232a5f00 RBX: 0000000000000000 RCX: ffff8881232a5f00 [ 26.067980][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.075938][ T288] RBP: ffffc9000b5ffcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 26.083895][ T288] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88811304a964 [ 26.091849][ T288] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.099809][ T288] FS: 000055557c23b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.108743][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.115334][ T288] CR2: 0000000000000168 CR3: 000000012325e000 CR4: 00000000003526b0 [ 26.123484][ T288] Call Trace: [ 26.126753][ T288] [ 26.129668][ T288] vfs_rmdir+0x26a/0x560 [ 26.133902][ T288] incfs_kill_sb+0x109/0x230 [ 26.138484][ T288] deactivate_locked_super+0xd5/0x2a0 [ 26.143842][ T288] deactivate_super+0xb8/0xe0 [ 26.148502][ T288] cleanup_mnt+0x3f1/0x480 [ 26.152901][ T288] __cleanup_mnt+0x1d/0x40 [ 26.157296][ T288] task_work_run+0x1e3/0x250 [ 26.161865][ T288] ? __cfi_task_work_run+0x10/0x10 [ 26.167048][ T288] ? __x64_sys_umount+0x126/0x170 [ 26.172116][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.177587][ T288] ? __kasan_check_read+0x15/0x20 [ 26.182602][ T288] resume_user_mode_work+0x36/0x50 [ 26.187702][ T288] syscall_exit_to_user_mode+0x64/0xb0 [ 26.193150][ T288] do_syscall_64+0x64/0xf0 [ 26.197561][ T288] ? clear_bhb_loop+0x50/0xa0 [ 26.202220][ T288] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.208119][ T288] RIP: 0033:0x7f1a4218ff17 [ 26.212517][ T288] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.232113][ T288] RSP: 002b:00007ffeacdb52f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.240708][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1a4218ff17 [ 26.248673][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeacdb53b0 [ 26.256670][ T288] RBP: 00007ffeacdb53b0 R08: 0000000000000000 R09: 0000000000000000 [ 26.264649][ T288] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeacdb6440 [ 26.272608][ T288] R13: 00007f1a42211c05 R14: 00000000000062f5 R15: 00007ffeacdb6480 [ 26.280570][ T288] [ 26.283581][ T288] Modules linked in: [ 26.287480][ T288] CR2: 0000000000000168 [ 26.291712][ T288] ---[ end trace 0000000000000000 ]--- [ 26.297252][ T288] RIP: 0010:ihold+0x2a/0x70 [ 26.301749][ T288] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 26.321364][ T288] RSP: 0018:ffffc9000b5ffca0 EFLAGS: 00010246 [ 26.327439][ T288] RAX: ffff8881232a5f00 RBX: 0000000000000000 RCX: ffff8881232a5f00 [ 26.335410][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.343549][ T288] RBP: ffffc9000b5ffcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 26.351520][ T288] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88811304a964 [ 26.359489][ T288] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.367454][ T288] FS: 000055557c23b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.376376][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.383007][ T288] CR2: 0000000000000168 CR3: 000000012325e000 CR4: 00000000003526b0 [ 26.390987][ T288] Kernel panic - not syncing: Fatal exception [ 26.397358][ T288] Kernel Offset: disabled [ 26.401685][ T288] Rebooting in 86400 seconds..