last executing test programs: 2.270892157s ago: executing program 0 (id=157): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async, rerun: 64) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2.270542417s ago: executing program 0 (id=158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000100)) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000680)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 959.989152ms ago: executing program 0 (id=176): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) execveat$binfmt(r0, 0x0, &(0x7f00000000c0)={[&(0x7f0000000040)='W[#{-}+##\x00', &(0x7f0000000080)='blkio.throttle.io_serviced\x00']}, &(0x7f0000000180)={[&(0x7f0000000100)=':)(,\x00', &(0x7f0000000140)='blkio.throttle.io_serviced\x00']}, 0x1000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000090) syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = signalfd(r0, &(0x7f00000004c0)={[0xfff]}, 0x8) openat$cgroup_procs(r4, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000540)='./file0\x00', 0x9) r5 = syz_create_resource$binfmt(&(0x7f0000000580)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f00000005c0)={'ipvs\x00'}, &(0x7f0000000600)=0x1e) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000a40)={0x10002, 0x180, 0x340, &(0x7f0000000640)=[0x1, 0x4, 0x80000001, 0x5, 0x2, 0x8, 0x10, 0x2, 0x3, 0x100000001, 0x0, 0xd9, 0x6, 0x8000000000000001, 0x8, 0x8000, 0x2, 0x3, 0x4, 0x7fffffffffffffff, 0x28a, 0x1, 0x8, 0x9, 0x800000000, 0x0, 0x195, 0x5, 0xa0, 0x4, 0x5, 0x2, 0x1, 0xf7, 0x3, 0xa, 0x7, 0x8, 0x6, 0x2, 0x4, 0x4, 0x0, 0x3, 0xd, 0xff, 0x0, 0x70cb, 0x69f, 0xd7, 0x3, 0x1, 0xba, 0x4, 0x8a6c, 0x100000001, 0x5, 0x2, 0x40, 0x9, 0x8, 0x2, 0x6, 0x3, 0x7, 0x0, 0x7, 0x5, 0x0, 0x6, 0x2, 0x4, 0x5, 0x3, 0x6d, 0x60a, 0x4ae7, 0x1, 0xfffffffffffffeff, 0x5, 0xc8e, 0x6bb, 0x6, 0x1, 0x5, 0x6, 0x5, 0x5, 0x4, 0xe7a, 0x9, 0x7, 0xd, 0x1, 0xfff, 0x35, 0x5, 0x7, 0x9c6a, 0x9, 0xbd36, 0x101, 0x6, 0x2, 0x2, 0x0, 0x40, 0x9, 0x2, 0x1, 0x800, 0x6, 0xe, 0x0, 0x8000000000000001, 0xffffffff, 0x5, 0x0, 0x1, 0x3632, 0x0, 0x1, 0x0, 0x7fff, 0x4, 0x3, 0x9, 0x401]}) r7 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) inotify_add_watch(r7, &(0x7f0000000a80)='./file0\x00', 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000ac0)={@private2, @multicast1, 0x2, 0x18}}) sendmsg$sock(r0, &(0x7f0000001c00)={&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x1, @local, 'veth1_vlan\x00'}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)="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", 0x1000}], 0x1}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001cc0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001d00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001d80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x54, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048015}, 0x4040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ec0), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xb0, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xb0}}, 0x4000010) 959.847312ms ago: executing program 0 (id=177): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 956.741702ms ago: executing program 0 (id=178): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 64) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 747.458166ms ago: executing program 0 (id=183): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000002200)=""/43, 0x2b, 0x10002, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x814) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002dc0)=[{{&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/120, 0x78}], 0x2, &(0x7f0000000380)=""/189, 0xbd}, 0x8}, {{&(0x7f0000000440)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/88, 0x58}, {&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/47, 0x2f}, {&(0x7f0000000880)=""/54, 0x36}], 0x8, &(0x7f0000000940)=""/15, 0xf}, 0x6}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/136, 0x88}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000bc0)=""/170, 0xaa}, {&(0x7f0000000c80)=""/118, 0x76}], 0x4, &(0x7f0000000d40)=""/56, 0x38}, 0x4}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/107, 0x6b}], 0x1, &(0x7f0000000e40)=""/183, 0xb7}, 0x2}, {{&(0x7f0000000f00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000f80)=""/69, 0x45}, {&(0x7f0000001000)=""/171, 0xab}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/241, 0xf1}], 0x4, &(0x7f0000002200)}, 0x2}, {{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)=""/48, 0x30}, {&(0x7f0000002300)=""/239, 0xef}, {&(0x7f0000002400)=""/21, 0x15}], 0x3, &(0x7f0000002480)=""/44, 0x2c}, 0x4f}, {{&(0x7f00000024c0)=@un=@abs, 0x80, &(0x7f0000002800)=[{&(0x7f0000002540)=""/158, 0x9e}, {&(0x7f0000002600)=""/115, 0x73}, {&(0x7f0000002680)=""/88, 0x58}, {&(0x7f0000002700)=""/248, 0xf8}], 0x4, &(0x7f0000002840)=""/235, 0xeb}, 0x7}, {{&(0x7f0000002940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000029c0)=""/33, 0x21}], 0x1, &(0x7f0000002a40)=""/251, 0xfb}, 0x3c7}, {{&(0x7f0000002b40)=@phonet, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/140, 0x8c}, {&(0x7f0000002c80)=""/141, 0x8d}, {&(0x7f0000002d40)=""/56, 0x38}], 0x3}, 0x101}], 0x9, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x112, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNGETIFF(r3, 0x800454d2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 522.26664ms ago: executing program 2 (id=189): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x20) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'pim6reg1\x00', @ifru_names='veth1_to_bond\x00'}}) r2 = socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x4a9) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x1100001c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) listen(r4, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb84103140876a397}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x813}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x71e7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x67a1}]}]}, 0x9c}}, 0x40040) 501.213731ms ago: executing program 2 (id=190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000180)={r0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 428.026822ms ago: executing program 2 (id=193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x6aa311e8d828ef5f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) lseek(r2, 0x5, 0x2) r3 = socket(0x10, 0x803, 0x0) setreuid(0xee00, 0x0) sendmmsg$unix(r3, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="f6496d", 0x3}], 0x1, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20, 0x8}}], 0x1, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 426.519382ms ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400030c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000010000800b803000067"], 0x100}, 0x1, 0x7}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400030c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000010000800b803000067"], 0x100}, 0x1, 0x7}, 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) 331.093554ms ago: executing program 3 (id=197): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x3}, {0xd}, 0x40, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="45504555714b5bd8fbddf62bfee8e94ff78021f1383b9343b196744a69a87589eea179a8655825d4c543b338159a85136776e0dbe3be0cace5d9f280cc98a309f0486460b1ca047808bea0bcdb8d46df06f5e39fd5476ffc23e044f5d1ffd12f8621", 0x62, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8], 0x189}) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 32) close(r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000641000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r3, 0x5dd29000) (async, rerun: 32) capset(0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x47, 0xb4, 0xfe, 0x40, 0x2cb7, 0x10b, 0xe2db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0xf0, 0x8, [{{0x9, 0x4, 0x91, 0x10, 0x0, 0xff, 0xff, 0x30, 0x4f}}]}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f0000000080)) (async) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\v\xebI\xaa\x89\xec\x9dB\x98\xfb2\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7V\x8d\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\x03P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async) setuid(0xee01) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000380)="2e6726f30fc7ffba6100b072ee6766c7442400000001006766c7442402000000006766c744240600000000670f011c2466b92d0300000f323e0f01fc0f01c90f01c566b8f2a97e630f23d00f21f86635300000050f23f8ba2100b000ee6766c7442400530000006766c7442402050000006766c744240600000000670f011c24", 0x80}], 0x1, 0x43, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e00000000402000"], 0x38) (async) close(r5) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) close_range(r0, r0, 0x0) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x12002, 0x4) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 325.977864ms ago: executing program 3 (id=198): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x992a5b85840e016c, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r2 = fsopen(&(0x7f0000000540)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000200)=0x403) r4 = fsopen(&(0x7f0000000140)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c) r5 = socket$can_raw(0x1d, 0x3, 0x1) ppoll(&(0x7f0000000340)=[{r2, 0xa141}, {r5, 0xe166}, {r3, 0x181}, {r4, 0x4000}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x2410}, {0xffffffffffffffff, 0x4e0}, {r1, 0xa0b0}, {0xffffffffffffffff, 0x1104}, {r5, 0x208}], 0xa, &(0x7f00000002c0), &(0x7f0000000300)={[0xb64e]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0xfdef) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f00000001c0)='1\x00', 0x1) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0080ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x148}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000001040108000000000000000002ff01000000010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 292.822515ms ago: executing program 3 (id=199): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x78}}, 0x5014) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000002180), &(0x7f00000021c0)='./file0\x00', 0x8, 0x0) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3f8, 0x1, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x900}, 0x0) (async) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000002300)) read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000004380), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f00000043c0)='highspeed\x00', 0xa) read$FUSE(r0, &(0x7f0000004400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000006440)=""/46) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000006480)={0x80}) (async) ioprio_get$pid(0x0, r3) read$FUSE(r2, &(0x7f0000006580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$AUDIT_SET(r0, &(0x7f0000008640)={&(0x7f0000006540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000008600)={&(0x7f00000085c0)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbff, {0x5f3bf44d3a75fb5a, 0x1, 0x2, r4, 0xbad, 0x8, 0x4, 0xfff, 0x0, 0x1, 0x10000}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = openat$cgroup_devices(r0, &(0x7f0000008680)='devices.deny\x00', 0x2, 0x0) close(r5) (async) io_setup(0x26f2af21, &(0x7f00000086c0)) (async) close_range(r0, r5, 0x2) (async) fadvise64(r2, 0x6, 0xb, 0x3) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000008700)={0x0, 0x0}) syz_open_procfs$pagemap(r6, &(0x7f0000008780)) (async) flistxattr(r5, &(0x7f00000087c0)=""/65, 0x41) (async) mount(&(0x7f0000008840)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000008880)='./file0\x00', &(0x7f00000088c0)='fuse\x00', 0x100000, &(0x7f0000008900)='^#\x00') (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000008940)={0x0, 0x8000}) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) (async) close_range(r0, r0, 0x0) (async) getresgid(&(0x7f0000008a40), &(0x7f0000008a80)=0x0, &(0x7f0000008ac0)) mount$fuseblk(&(0x7f0000008980), &(0x7f00000089c0)='./file1\x00', &(0x7f0000008a00), 0xd804, &(0x7f0000008b00)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='sync'}, {@appraise_type}, {@audit}, {@fsname={'fsname', 0x3d, '\'-+--+/-^'}}]}}) dup2(r2, r2) 269.833925ms ago: executing program 3 (id=200): mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binder\x00', 0x2200892, 0x0) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binder\x00', 0x2200892, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffa}]}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffa}]}) r4 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) (async) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r6, 0x0, 0x0, 0x40008c1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) listen(r7, 0x64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a0088a80180c2000002aaaaaaaaaabb88a82000810008"], 0x5e) (async) write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a0088a80180c2000002aaaaaaaaaabb88a82000810008"], 0x5e) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) (async) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)=@random={'system.', '\',&*\x00'}, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x61004, &(0x7f0000000140)={[{@userxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x31, 0x34, 0x62, 0x38, 0x62, 0x36], 0x2d, [0x64, 0x39, 0x34, 0x32], 0x2d, [0x1, 0x31, 0x38, 0x31], 0x2d, [0x36, 0x30, 0x34, 0x5], 0x2d, [0x65, 0x65, 0x65, 0x62, 0x33, 0x38, 0x30, 0x4]}}}]}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) 155.148177ms ago: executing program 2 (id=201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffc) r5 = eventfd2(0x6, 0x80800) r6 = dup(0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000002c0)={0x100, r5}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f0000000000)={0x5, &(0x7f00000001c0)="6218a5dac3d767873144c52acacc2e530c135b4b9890fc251d75e8c81f388b0dd9a8d234f214889a0c312408b829ecc8a3908116eefb449cc577b601850281d65498bf559c2b62f85db31894b101221c1f451501e035292fc7dec9fa4136744294bcdb91f0d9b13ac9a1994b1a7e23ccb2593e542d636297db8d9b56955a813c73648e2a72b24c61c082337ead43ba2d188a2a41fec83c7eb3068441a9bfa4f4e381d5de71206ffdc10c777fb0eb02434dd60cf088bd2eecec02376c5aee8f9e404d6614a557c755b7d9bf7e9604f8707396d4d6032a40"}) 154.776557ms ago: executing program 2 (id=202): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) r2 = dup3(r0, r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x1000020) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x1}, {0x8dd33d2}, 0x30, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="ec92c143465df369", 0x8, 0x0, &(0x7f0000000180)={0x2, 0x1bb, {0x1, 0xc, 0xfa, "fde7cfe398ebe4e348daee23db7056833a593aca014fe292bfd710d174a2437e88c58e4db79e27ea9aecbb377d7041184a59e8d49485e76d1147c4fa018b34c8533a8ea3e0bc59a73de0adda063a8a58ccef2504e2582f3bc21b8c73164463a325dfbd2a82e4663f83ef20b25665f05bf3388bd5939e0cd540bc45d95757d9bdd9a1da6927fb121103363455b83974b27ffbc8757895e4acacb562bb3d105833af7f8b3a016dd84a27b47b185c233ef1aea2d6fdddfcb6a1ac7ef02cae324f86f88246f0213b7c72db8afaba39b1687f09ed8ff4ee33dc0e553fc5305be4c66feb0e566727b367c8fec557b37137d0fbb14393157001c379a3af", 0xb4, "d9b569a9890e57351bd35cc0a64efdfb46f720586631bc6baeda3794179703723f265536768d2a4531c9e58bbbd1627e683029e5edf4dad38c95a1818702541e4960922b6e5d2ad0d6944299f154437cb8c04788816b8c1ce1b6a77dbc7da614399092b3fd37312029603c45bca023d406ad0235e87af7c082a4bf04aa64a4ffc3fe53e2398eba082fab025ecdd9398c20a1231f6f19a72f4f2113503d60cf62889278424b3cc31f157e782aedcd5ded06f3f875"}, 0xd8, "a1e54100bb3ff713f194e3fbc5e7878214ce7a17c730c270ed5e49eeb8764ff4549765dd4cd1b5c78f670e98b5b236602bc87da6c6b51ca519ecc43a0ddadb543aae95f967a9ee83181a48af44c48a6cce42607cf8389ac258e98289f204d74588521e94503350b7b3053e8b247f122b961e3665e8d6af678710be1bfaae8c2f50a5ab00545cf6a600e543b42240efd622fa8f762e0e2a014bb0be4e7a1d17001f6e163388ac5241db34eebaba4470514e2408c59af057aba081848f14cd0c370133700cf2fb1dcc719777492c8bfb76c7af5faa8e59f066"}, 0x29f}) rt_sigtimedwait(&(0x7f00000004c0)={[0xfffffffffffffbff]}, 0x0, &(0x7f0000000500)={0x0, 0x989680}, 0x8) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10010, r0, 0x5fe3d000) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000780)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) mount$cgroup(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x48000, &(0x7f0000000900)={[{@clone_children}, {}], [{@uid_lt={'uid<', r4}}, {@obj_role={'obj_role', 0x3d, '['}}, {@hash}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_measure}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '&-'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r7}}]}) r8 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x7fff, 0x80041) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, r8) mkdir(&(0x7f0000000a40)='./file0\x00', 0x7b) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000a80)=0x10, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r5, 0x2f, 0x4, 0x6, 0xc, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}, @private2, 0x0, 0x10, 0x9, 0xfffffffa}}) rt_sigaction(0x12, &(0x7f0000000c40)={&(0x7f0000000b80)="c481fd2ebe71c70000f347a5f3470f5f244667f20f105e002626470fd86ac7c42255038bbf450000f3420f1ef93e66420ff9a78a1b00002e66450f134c6fbec4c179116302", 0x4000001, &(0x7f0000000c00)="6543a6c4411f7dff660fede0c46165c29b4cee0fc30ac462199ae366660f383c38c4e27933b009000000676665420fafdac4e10d72d550c46149fed5", {[0x3]}}, 0x0, 0x8, &(0x7f0000000c80)) r10 = openat$incfs(r2, &(0x7f0000000cc0)='.log\x00', 0x48000, 0xa4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000d00)) poll(&(0x7f0000000d40)=[{r3, 0x400}, {r9, 0x5}, {0xffffffffffffffff, 0x8400}, {r8, 0x8}, {r10, 0x1000}], 0x5, 0x3d5eca3e) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000d80)) r11 = accept4$unix(r3, &(0x7f0000000dc0)=@abs, &(0x7f0000000e40)=0x6e, 0x0) sendto$unix(r11, &(0x7f0000000e80)="1a7af82f0a63bd890cd94c4f005dc905570a9db193570ea67b278d27c967bf673f7041b43f995d6c3ee2d624768bbee2e858a7e40e794f75eb7359415c0c9a3b3481340685da7ceac6d0165e14187eaddb5b9a1e1c4abc53ec3c0ac85dd37062ab34dc20e6a02565b9ae6cf1dc45085904695654760c4f6aee5c7cc7d0799dbe121ee2eaf5eedba1da4cf1b56f6cca68147861505e9d8dbdcbfa79aad1520db656b31b996e8446f1f06920f121aa97ecc9bdca8ec10bab0dade5febb14d0511e2290a01be4285c92b1b141d820787bfb0e912f0bbbb4cc", 0xd7, 0x4000, &(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e24}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/key-users\x00', 0x0, 0x0) close(r9) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001040)={0x6, 0x0, [{0xbaa, 0x0, 0xffffffff}, {0x8e5, 0x0, 0xe}, {0xb1e, 0x0, 0x80ab}, {0x302, 0x0, 0x8}, {0x3c4, 0x0, 0x8}, {0x332, 0x0, 0x1}]}) 135.765058ms ago: executing program 1 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90) syz_usb_connect(0x3, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x89, 0x25, 0x63, 0x8, 0x56e, 0x5004, 0xdbd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x4, 0x3, 0x34, 0xe9, 0x5f, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0xc, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xb7, 0x1, 0x4, 0xb2, 0x63, 0x20, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90) (async) syz_usb_connect(0x3, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x89, 0x25, 0x63, 0x8, 0x56e, 0x5004, 0xdbd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x4, 0x3, 0x34, 0xe9, 0x5f, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0xc, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xb7, 0x1, 0x4, 0xb2, 0x63, 0x20, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) 126.989418ms ago: executing program 1 (id=204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x1}, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)="aa25b1f508353f0408e877c46b16e688d62ebe4a452f4c7b13e39de289340b3bbee602554312f26873c76dd9a000c133c8dca4f64394652d3974bb90f3b4a555d0832d447622c8145fe05693629fa601c8562d878cec35882d8e4056ebbf4065bd68930cf068ab43ce325a1cac4816add66fbca1e624402971d0a88e47c12f174f6a3bc35afa1731902a1335ad3227c9663aeef7cec06ba98a307b6ed2acd2601625164d3c5effa46f3d56c261d366f28673bcc4940310ed1388912078fac0779f4821de0e6ad7fb003a0165d0487707c3380abacd686911b606659c7444084ffdf026e8", 0xe4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1123}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_create(0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = eventfd2(0x6, 0x80800) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x1) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r5}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 75.171359ms ago: executing program 1 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xaab4a000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffdae, &(0x7f0000000400)={@flat=@handle={0x73682a85, 0xa}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x84, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x34, 0x3, 0x0, {0x0, 0x13, 0x0, './binderfs/binder1\x00'}}, 0x34) (async) fcntl$getflags(r0, 0x40a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x14, 0x1, 0x2}) 75.002859ms ago: executing program 1 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 74.813969ms ago: executing program 1 (id=207): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x74}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') read$FUSE(r5, &(0x7f0000004640)={0x2020}, 0x2020) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000000000/0x1000)=nil, 0x1000}, 0x1}) write(r0, &(0x7f0000000400)="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", 0x1f000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="0dcb36c5dcd5418239ab4f33bc65aadc", 0x10) 73.065069ms ago: executing program 1 (id=208): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x8, "2313"}, @global=@item_4={0x3, 0x1, 0x9, "7dde249d"}, @global=@item_4={0x3, 0x1, 0x0, "0c1f0400"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0xb, "3428dcb4"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40004) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r2, &(0x7f0000000040)='.\x00', 0x26e1, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000200)={0x0, 0x22, 0x64, {0x64, 0xf, "02665fb71db31152344b4e42c2145c2732c69450327a203414d07c82acd2dd9e4bbfdf93b2b06d84a87bb37c045f188576fca51fb430c5bb63a937fea02b533a9d2aa9a11912dd914c21371eb2a839d0eb662380430c699d6c23e770612da739381d"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x20, 0x15, 0x40, "c04440350fcd233272a934add0848ef1a1f9a81a585b4791fa63ea63933c247d115b9e77c2ba4ed7c3d3d7e09b76b604162aaed6ff6f988375ae13f55281e0d1"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x9, 0xf4, 0x63, 0x88a, 0x200, 0x6, 0x8, 0x0, 0x4, 0x0, 0x400, 0xa01}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0xe22}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000300)='^-\x00', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r5 = socket(0x2e, 0x5, 0x4) listen(r5, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000000140)={r3}) 63.075009ms ago: executing program 3 (id=209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000003100)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=210): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000002c0)={0xd8, "3d3a0f254b7027dd975afc068a88a50e05ab5a69b9d8e25c3872fe0b85f3385ce8104346f38d0f64b861eda9355937e85133a327c62191486dc982061172ae2f"}) bind$inet(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 12.908099][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 12.908117][ T36] audit: type=1400 audit(1756910565.740:59): avc: denied { transition } for pid=230 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.912964][ T36] audit: type=1400 audit(1756910565.740:60): avc: denied { noatsecure } for pid=230 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.915842][ T36] audit: type=1400 audit(1756910565.750:61): avc: denied { write } for pid=230 comm="sh" path="pipe:[2376]" dev="pipefs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.919702][ T36] audit: type=1400 audit(1756910565.750:62): avc: denied { rlimitinh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.922627][ T36] audit: type=1400 audit(1756910565.750:63): avc: denied { siginh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 20.393691][ T36] audit: type=1400 audit(1756910573.230:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.394777][ T281] cgroup: Unknown subsys name 'net' [ 20.416433][ T36] audit: type=1400 audit(1756910573.230:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.443682][ T36] audit: type=1400 audit(1756910573.270:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.443894][ T281] cgroup: Unknown subsys name 'devices' [ 20.630889][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.636537][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.808951][ T36] audit: type=1400 audit(1756910573.650:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.827013][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.832168][ T36] audit: type=1400 audit(1756910573.650:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.865405][ T36] audit: type=1400 audit(1756910573.650:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.887614][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.888631][ T36] audit: type=1400 audit(1756910573.680:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.922928][ T36] audit: type=1400 audit(1756910573.680:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.948558][ T36] audit: type=1400 audit(1756910573.730:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.974150][ T36] audit: type=1400 audit(1756910573.730:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.744837][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.751964][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.759229][ T288] bridge_slave_0: entered allmulticast mode [ 21.765430][ T288] bridge_slave_0: entered promiscuous mode [ 21.780191][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.787264][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.794389][ T288] bridge_slave_1: entered allmulticast mode [ 21.800650][ T288] bridge_slave_1: entered promiscuous mode [ 21.806797][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.813956][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.821086][ T290] bridge_slave_0: entered allmulticast mode [ 21.827249][ T290] bridge_slave_0: entered promiscuous mode [ 21.839223][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.846277][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.853383][ T289] bridge_slave_0: entered allmulticast mode [ 21.859695][ T289] bridge_slave_0: entered promiscuous mode [ 21.869251][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.876329][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.883529][ T290] bridge_slave_1: entered allmulticast mode [ 21.889728][ T290] bridge_slave_1: entered promiscuous mode [ 21.897253][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.904335][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.911417][ T289] bridge_slave_1: entered allmulticast mode [ 21.917607][ T289] bridge_slave_1: entered promiscuous mode [ 21.938996][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.946165][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.953560][ T291] bridge_slave_0: entered allmulticast mode [ 21.959945][ T291] bridge_slave_0: entered promiscuous mode [ 21.975806][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.982903][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.990126][ T291] bridge_slave_1: entered allmulticast mode [ 21.996317][ T291] bridge_slave_1: entered promiscuous mode [ 22.154510][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.161578][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.168881][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.175915][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.188606][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.195685][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.202990][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.210040][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.230429][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.237503][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.244809][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.251882][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.261242][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.268296][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.275587][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.282630][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.330524][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.337899][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.345364][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.353226][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.360656][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.367810][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.375135][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.382358][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.392283][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.399362][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.411450][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.418518][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.427206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.434300][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.445856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.452932][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.470874][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.478003][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.485602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.492665][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.523404][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.530474][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.538013][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.545087][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.579930][ T289] veth0_vlan: entered promiscuous mode [ 22.593845][ T290] veth0_vlan: entered promiscuous mode [ 22.610447][ T288] veth0_vlan: entered promiscuous mode [ 22.621297][ T289] veth1_macvtap: entered promiscuous mode [ 22.633262][ T290] veth1_macvtap: entered promiscuous mode [ 22.645213][ T291] veth0_vlan: entered promiscuous mode [ 22.678425][ T288] veth1_macvtap: entered promiscuous mode [ 22.691629][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.693218][ T291] veth1_macvtap: entered promiscuous mode [ 22.741223][ T333] SELinux: security_context_str_to_sid () failed with errno=-22 [ 22.808331][ T342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 22.877370][ T356] Zero length message leads to an empty skb [ 22.946561][ T371] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.310892][ T436] 9pnet_fd: Insufficient options for proto=fd [ 23.320437][ T432] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=568208745 (2272834980 ns) > initial count (932309172 ns). Using initial count to start timer. [ 23.878877][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.899345][ T446] pim6reg1: entered promiscuous mode [ 23.904661][ T446] pim6reg1: entered allmulticast mode [ 24.017228][ T450] rust_binder: 33: no such ref 2 [ 24.022292][ T450] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 24.030808][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 24.031394][ T450] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.036051][ T450] rust_binder: Read failure Err(EFAULT) in pid:33 [ 24.037681][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 24.059263][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 24.067931][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 24.078296][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 24.088978][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 24.096902][ T454] rust_binder: Write failure EFAULT in pid:37 [ 24.099051][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.118197][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 24.127333][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.136419][ T31] usb 1-1: config 0 descriptor?? [ 24.172990][ T458] bridge0: entered allmulticast mode [ 24.178733][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 24.187514][ T458] bridge_slave_1: left allmulticast mode [ 24.193245][ T458] bridge_slave_1: left promiscuous mode [ 24.198960][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.206474][ T458] bridge_slave_0: left allmulticast mode [ 24.212307][ T458] bridge_slave_0: left promiscuous mode [ 24.217954][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.226832][ T458] bridge0 (unregistering): left allmulticast mode [ 24.344991][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 24.357562][ T31] usb 1-1: USB disconnect, device number 2 [ 24.364762][ T31] usblp0: removed [ 24.778885][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.928888][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 24.935676][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 24.944205][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 24.953472][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 24.963241][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 24.973542][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 24.979197][ T467] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 24.991611][ T467] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.45'. [ 24.991957][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.000824][ T466] netlink: 7 bytes leftover after parsing attributes in process `syz.1.45'. [ 25.013969][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 25.031724][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.041309][ T10] usb 1-1: config 0 descriptor?? [ 25.247738][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 25.623380][ T474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.623380][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 25.623521][ T474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.653577][ T474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.666480][ T474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.704135][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 25.704153][ T36] audit: type=1400 audit(1756910578.540:177): avc: denied { read } for pid=484 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.696945][ T10] usb 1-1: USB disconnect, device number 3 [ 26.709337][ T10] usblp0: removed [ 31.029986][ T499] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 31.068583][ T516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.091466][ T36] audit: type=1400 audit(1756910583.920:178): avc: denied { read } for pid=519 comm="syz.0.61" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.136311][ T524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58 [ 31.142261][ T36] audit: type=1400 audit(1756910583.920:179): avc: denied { open } for pid=519 comm="syz.0.61" path="net:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.174547][ T36] audit: type=1400 audit(1756910583.930:180): avc: denied { getopt } for pid=519 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.195035][ T36] audit: type=1400 audit(1756910583.930:181): avc: denied { unlink } for pid=518 comm="syz.3.60" name="#1" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.216910][ T36] audit: type=1400 audit(1756910583.930:182): avc: denied { mount } for pid=518 comm="syz.3.60" name="/" dev="overlay" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.238602][ T36] audit: type=1400 audit(1756910583.970:183): avc: denied { map } for pid=512 comm="syz.2.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.262557][ T36] audit: type=1400 audit(1756910583.970:184): avc: denied { read write } for pid=512 comm="syz.2.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.297678][ T528] rust_binder: 18: no such ref 5 [ 31.302832][ T528] rust_binder: Write failure EINVAL in pid:18 [ 31.303363][ T528] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 31.311072][ T530] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 31.329064][ T36] audit: type=1400 audit(1756910584.160:185): avc: denied { relabelto } for pid=529 comm="syz.3.64" name="file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_cache_t:s0" [ 31.355237][ T36] audit: type=1400 audit(1756910584.170:186): avc: denied { associate } for pid=529 comm="syz.3.64" name="file0" dev="tmpfs" ino=124 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_cache_t:s0" [ 31.396347][ T36] audit: type=1400 audit(1756910584.230:187): avc: denied { create } for pid=536 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.423025][ T537] serio: Serial port ttyS3 [ 31.597108][ T541] overlayfs: empty lowerdir [ 31.664765][ T544] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.251869][ T548] loop2: detected capacity change from 0 to 7 [ 32.258329][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.267522][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.275623][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.284982][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.293169][ T548] loop2: unable to read partition table [ 32.299247][ T548] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 32.300146][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.321906][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.330903][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.340117][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.348276][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.357432][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.365567][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.374718][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.382814][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.392033][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 32.568825][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.720093][ T45] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 32.728402][ T45] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 32.738694][ T45] usb 1-1: config 220 has no interface number 2 [ 32.745016][ T45] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 32.758162][ T45] usb 1-1: config 220 interface 0 has no altsetting 0 [ 32.765042][ T45] usb 1-1: config 220 interface 76 has no altsetting 0 [ 32.771904][ T45] usb 1-1: config 220 interface 1 has no altsetting 0 [ 32.780093][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 32.789317][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.797481][ T45] usb 1-1: Product: syz [ 32.801669][ T45] usb 1-1: Manufacturer: syz [ 32.806280][ T45] usb 1-1: SerialNumber: syz [ 33.015272][ T45] usb 1-1: selecting invalid altsetting 0 [ 33.021405][ T45] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 33.027790][ T45] usb 1-1: No valid video chain found. [ 33.038946][ T45] usb 1-1: USB disconnect, device number 4 [ 33.045087][ T569] overlayfs: failed to clone upperpath [ 33.525930][ T573] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 33.600729][ T584] process 'syz.1.87' launched '' with NULL argv: empty string added [ 33.746032][ T597] netlink: 'syz.1.92': attribute type 27 has an invalid length. [ 33.796282][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.803370][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.816483][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.823521][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.830524][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.837369][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.848168][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.855097][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.863388][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 33.879514][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 34.064640][ T610] netlink: 'syz.1.98': attribute type 11 has an invalid length. [ 34.109552][ T612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.109976][ T612] ======================================================= [ 34.109976][ T612] WARNING: The mand mount option has been deprecated and [ 34.109976][ T612] and is ignored by this kernel. Remove the mand [ 34.109976][ T612] option from the mount to silence this warning. [ 34.109976][ T612] ======================================================= [ 34.216218][ T620] overlayfs: failed to clone upperpath [ 34.870251][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 34.923217][ T667] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 34.931982][ T667] rust_binder: Write failure EINVAL in pid:43 [ 35.135619][ T682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.217171][ T690] rust_binder: 108: no such ref 2 [ 35.229001][ T690] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 35.236231][ T690] rust_binder: 108: no such ref 3 [ 35.241377][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108 [ 35.260183][ T692] syz.0.126 (692): /proc/691/oom_adj is deprecated, please use /proc/691/oom_score_adj instead. [ 35.871552][ T702] capability: warning: `syz.0.129' uses 32-bit capabilities (legacy support in use) [ 35.881395][ T703] incfs: Error accessing: ./file0. [ 35.886571][ T703] incfs: mount failed -20 [ 36.048248][ T727] binder: Unknown parameter 's' [ 36.113370][ T725] /dev/rnullb0: Can't open blockdev [ 36.118744][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 36.126873][ T36] audit: type=1400 audit(1756910588.950:235): avc: denied { mounton } for pid=724 comm="syz.0.137" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 36.156256][ T735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.408128][ T36] audit: type=1400 audit(1756910589.240:236): avc: denied { watch_reads } for pid=740 comm="syz.3.143" path="/24" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.498823][ T442] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.577054][ T36] audit: type=1400 audit(1756910589.410:237): avc: denied { unlink } for pid=751 comm="syz.3.145" name="#3" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.607338][ T754] capability: warning: `syz.3.146' uses deprecated v2 capabilities in a way that may be insecure [ 36.659979][ T442] usb 1-1: config index 0 descriptor too short (expected 60731, got 59) [ 36.668416][ T442] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 18 [ 36.677444][ T442] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.691614][ T442] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.700754][ T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.709430][ T442] usb 1-1: SerialNumber: syz [ 36.865886][ T36] audit: type=1400 audit(1756910589.700:238): avc: denied { create } for pid=762 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.868820][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.885251][ T36] audit: type=1400 audit(1756910589.700:239): avc: denied { setopt } for pid=762 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.038821][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 37.045046][ T45] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 37.053541][ T45] usb 4-1: config 0 has no interface number 0 [ 37.061489][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 37.070740][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.078838][ T45] usb 4-1: Product: syz [ 37.083052][ T45] usb 4-1: Manufacturer: syz [ 37.087683][ T45] usb 4-1: SerialNumber: syz [ 37.093044][ T45] usb 4-1: config 0 descriptor?? [ 37.299673][ T45] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 37.306350][ T45] usb 4-1: Failed to initialize entity for entity 6 [ 37.313206][ T45] usb 4-1: Failed to register entities (-22). [ 37.323653][ T442] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 37.336176][ T442] usb 1-1: USB disconnect, device number 5 [ 37.342701][ T442] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 37.361553][ T36] audit: type=1400 audit(1756910590.200:240): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.504236][ T36] audit: type=1400 audit(1756910590.340:241): avc: denied { write } for pid=774 comm="syz.0.153" name="anycast6" dev="proc" ino=4026532344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.533819][ T36] audit: type=1400 audit(1756910590.360:242): avc: denied { ioctl } for pid=774 comm="syz.0.153" path="socket:[6153]" dev="sockfs" ino=6153 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.559375][ T36] audit: type=1400 audit(1756910590.370:243): avc: denied { setopt } for pid=774 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.680608][ T442] usb 4-1: USB disconnect, device number 2 [ 37.719121][ T790] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.750893][ T36] audit: type=1400 audit(1756910590.590:244): avc: denied { ioctl } for pid=786 comm="syz.0.158" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 37.998915][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.148858][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 38.155137][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 38.163863][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 38.172584][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 38.181610][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.191285][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 38.207072][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.220563][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 38.230159][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.239183][ T10] usb 1-1: config 0 descriptor?? [ 38.445507][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.456081][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.466460][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 38.479907][ T10] usb 1-1: USB disconnect, device number 6 [ 38.487583][ T10] usblp0: removed [ 38.886901][ T831] overlayfs: failed to clone upperpath [ 38.968400][ T835] mmap: syz.1.174 (835): VmData 29208576 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 39.279345][ T862] rust_binder: Read failure Err(EAGAIN) in pid:97 [ 39.304820][ T865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.315255][ T865] rust_binder: Write failure EFAULT in pid:127 [ 39.324620][ T865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.402347][ T870] mmap: syz.3.186 (870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.420003][ T876] rust_binder: Error while translating object. [ 39.420666][ T876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.427146][ T876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 39.449400][ T878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=878 comm=syz.2.189 [ 39.483202][ T880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.483740][ T880] rust_binder: Error while translating object. [ 39.490289][ T880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 39.496547][ T880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 39.659122][ T905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 39.746697][ T916] binder: Unknown parameter 'contextr1' [ 39.748073][ T914] binder: Unknown parameter 'contextr1' [ 39.987045][ T947] ------------[ cut here ]------------ [ 39.992666][ T947] WARNING: CPU: 0 PID: 947 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 40.002025][ T947] Modules linked in: [ 40.005965][ T947] CPU: 0 UID: 0 PID: 947 Comm: syz.3.210 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 40.017373][ T947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.027508][ T947] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 40.033474][ T947] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 19 40 ee 05 00 0f 85 be 00 00 00 c6 05 0c 40 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 40.039511][ T948] rust_binder: Write failure EFAULT in pid:126 [ 40.053353][ T947] RSP: 0018:ffffc9000e127560 EFLAGS: 00010246 [ 40.065756][ T947] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 40.073803][ T947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e127618 [ 40.081851][ T947] RBP: ffffc9000e1276a0 R08: ffffc9000e127617 R09: 0000000000000000 [ 40.090073][ T947] R10: ffffc9000e127600 R11: fffff52001c24ec3 R12: ffffc9000e1275a0 [ 40.098091][ T947] R13: dffffc0000000000 R14: 1ffff92001c24eb0 R15: 0000000000000000 [ 40.106116][ T947] FS: 00007f8d336476c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.115163][ T947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.121812][ T947] CR2: 000000110c2b017e CR3: 00000001016f4000 CR4: 00000000003526b0 [ 40.129849][ T947] Call Trace: [ 40.133330][ T947] [ 40.136318][ T947] ? vfs_write+0x3c0/0xe80 [ 40.140802][ T947] ? ksys_write+0x141/0x250 [ 40.145326][ T947] ? x64_sys_call+0x271c/0x2ee0 [ 40.150259][ T947] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.156026][ T947] ? hashtab_init+0xdb/0x1f0 [ 40.160671][ T947] ___kmalloc_large_node+0xb5/0x250 [ 40.165935][ T947] ? hashtab_init+0xdb/0x1f0 [ 40.170579][ T947] __kmalloc_large_node_noprof+0x1e/0xe0 [ 40.176250][ T947] ? hashtab_init+0xdb/0x1f0 [ 40.180915][ T947] __kmalloc_noprof+0x26d/0x450 [ 40.185807][ T947] hashtab_init+0xdb/0x1f0 [ 40.190260][ T947] ? class_read+0x162/0x8a0 [ 40.194911][ T947] symtab_init+0x44/0x70 [ 40.199194][ T947] class_read+0x1df/0x8a0 [ 40.203544][ T947] ? __cfi_class_read+0x10/0x10 [ 40.208405][ T947] ? hashtab_init+0x105/0x1f0 [ 40.213154][ T947] policydb_read+0xaa8/0x28c0 [ 40.217884][ T947] ? kasan_save_alloc_info+0x40/0x50 [ 40.223219][ T947] ? __cfi_policydb_read+0x10/0x10 [ 40.228368][ T947] ? security_load_policy+0x128/0x12f0 [ 40.233880][ T947] security_load_policy+0x162/0x12f0 [ 40.239223][ T947] ? _raw_spin_unlock+0x45/0x60 [ 40.244090][ T947] ? __check_object_size+0x50a/0x810 [ 40.249406][ T947] ? __cfi_security_load_policy+0x10/0x10 [ 40.255151][ T947] ? __kasan_check_write+0x18/0x20 [ 40.260335][ T947] sel_write_load+0x298/0x5e0 [ 40.265047][ T947] ? futex_wait+0x29a/0x7a0 [ 40.269771][ T947] ? __cfi_sel_write_load+0x10/0x10 [ 40.275009][ T947] ? __cfi_futex_wait+0x10/0x10 [ 40.279901][ T947] ? bpf_lsm_file_permission+0xd/0x20 [ 40.285340][ T947] ? __cfi_sel_write_load+0x10/0x10 [ 40.290585][ T947] vfs_write+0x3c0/0xe80 [ 40.294846][ T947] ? __cfi_vfs_write+0x10/0x10 [ 40.299639][ T947] ? do_futex+0x309/0x500 [ 40.304027][ T947] ? __cfi_do_futex+0x10/0x10 [ 40.308718][ T947] ? __kasan_check_read+0x15/0x20 [ 40.313861][ T947] ksys_write+0x141/0x250 [ 40.318202][ T947] ? xfd_validate_state+0x68/0x150 [ 40.323455][ T947] ? __cfi_ksys_write+0x10/0x10 [ 40.328355][ T947] ? __kasan_check_write+0x18/0x20 [ 40.333547][ T947] ? fpregs_restore_userregs+0x11d/0x260 [ 40.339226][ T947] __x64_sys_write+0x7f/0x90 [ 40.343839][ T947] x64_sys_call+0x271c/0x2ee0 [ 40.348528][ T947] do_syscall_64+0x58/0xf0 [ 40.353015][ T947] ? clear_bhb_loop+0x50/0xa0 [ 40.357909][ T947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.364175][ T947] RIP: 0033:0x7f8d3278ebe9 [ 40.368648][ T947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.388336][ T947] RSP: 002b:00007f8d33647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.396798][ T947] RAX: ffffffffffffffda RBX: 00007f8d329c5fa0 RCX: 00007f8d3278ebe9 [ 40.404842][ T947] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000005 [ 40.412854][ T947] RBP: 00007f8d32811e19 R08: 0000000000000000 R09: 0000000000000000 [ 40.420879][ T947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.428946][ T947] R13: 00007f8d329c6038 R14: 00007f8d329c5fa0 R15: 00007ffe23ef7568 [ 40.436944][ T947] [ 40.440015][ T947] ---[ end trace 0000000000000000 ]--- [ 40.445623][ T947] SELinux: failed to load policy