last executing test programs: 2.114516526s ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) syz_pidfd_open(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$tipc(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x200000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.083572129s ago: executing program 0 (id=6): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x20801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feff", 0x49, 0x800, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x10}) fstat(r2, &(0x7f0000000700)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 2.009207135s ago: executing program 0 (id=7): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff9, 0x7, 0x40000, 0xa, 0x26, 0x2, 0x0, 0x400, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0xa4, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x9, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x1000000, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x1, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x0, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x1, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xc, 0x464b, 0x200006, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x140, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r2}, @increfs], 0x0, 0x0, 0x0}) 1.907181063s ago: executing program 3 (id=13): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = open$dir(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs/file0\x00', 0x1, 0x1e0) getdents(r2, &(0x7f0000000100)=""/135, 0x87) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) (async) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) open$dir(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs/file0\x00', 0x1, 0x1e0) (async) getdents(r2, &(0x7f0000000100)=""/135, 0x87) (async) 1.759107596s ago: executing program 3 (id=15): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0xffffffff90809082, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50) syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007080)="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", 0x2000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) fstat(r0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f0314206544a600000000000000010000000100080008fff4c01300ff00", 0x24) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) getgid() syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.225183939s ago: executing program 2 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x5}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.176980033s ago: executing program 0 (id=22): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0xffffffffffffffa0) 1.127413788s ago: executing program 2 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.127172038s ago: executing program 1 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1000000032) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x17, 0x6, 0x2, '\x00', 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7b) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1000000032) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x17, 0x6, 0x2, '\x00', 0x7}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7b) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.126964147s ago: executing program 1 (id=26): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000a31000/0x3000)=nil, 0x3000}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x100000000000015a) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000a31000/0x3000)=nil, 0x3000}}) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x100000000000015a) (async) 1.126783167s ago: executing program 2 (id=27): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) 1.126389257s ago: executing program 0 (id=28): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x8, 0x4]) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000180)=""/4087, 0xff2}], 0x100000000000026c) 1.065405342s ago: executing program 1 (id=29): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000f9e000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f0000000080), 0x10000000000001a7) 1.063044833s ago: executing program 1 (id=30): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) write$tun(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x233) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0xec, 0x0, &(0x7f0000000280)="625ed64111585cdf974518adaa118a38a0b0ecd366683de95b1fd08edac7d27377223c5da55eca6a6288384a517fc9ee862222bf818cb44f2dc8dd03cc65806674e3205ae238987ab35933d7b69284454d3de50840bd8667498c6b7ae178f1d4b9e2040e253872254ea5a098d1481296b5ea0389afaea64e0a2f21342a25afc99371754129bf8fbf08fa573be67b61f53988c636fc5c8cb958c871bfe1280a05292fb6cb1bcc06e4887af08aafb07469b394ac370bcf37ae5f3f6150954c1c5c44de8057b8338a205fd94c9acfdd7457dcf5d592608adc265711cb3680ebba5fe604ff3112da0843220b1830"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 1.048722194s ago: executing program 0 (id=31): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x9d881000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) madvise(&(0x7f00001b9000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 998.380598ms ago: executing program 0 (id=32): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8008801) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r2, &(0x7f0000000000), 0x12) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 945.171872ms ago: executing program 2 (id=33): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040), 0x8) listen(r2, 0x1) accept4(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_raw(r4, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r8, 0x1, 0x6, 0x0, &(0x7f0000000040)) recvfrom$unix(r7, &(0x7f0000000140)=""/238, 0xee, 0x10120, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000140), 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 891.654407ms ago: executing program 2 (id=34): sigaltstack(&(0x7f0000000000)={0x0}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000002340)=ANY=[@ANYBLOB="0100000000000000e006"]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) sendfile(r4, r0, 0x0, 0x80000000) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x8, 0x7, 0xb, 0x0, 0xeb, 0x9, 0x81, 0x9, 0x4, [0x48e7, 0x283, 0x7ffdffff, 0x8, 0x529, 0x7, 0x4d, 0xb9ac]}}) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000040)={0x4, 0xa, &(0x7f0000000000)="f1f5cfb418c183b646cc"}) sigaltstack(&(0x7f00000001c0)={&(0x7f0000000140)=""/81, 0x2, 0x51}, &(0x7f0000000200)={&(0x7f0000000280)=""/190, 0x0, 0xbe}) 864.344209ms ago: executing program 3 (id=35): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x68000, 0x0) dup(r1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0xfb, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000040000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x00') 741.081089ms ago: executing program 2 (id=36): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_clone(0x3a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000019c40)='environ\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) pread64(r5, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x9, 0x92, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x6, 0x90, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b3354c3fee"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb45, 0x7, 0xd}, {0x6, 0x24, 0x1a, 0x95f, 0x2}, [@acm={0x4}, @acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0xfff, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x5087, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x99bba2399a7f58da, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x7, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x228, 0x4, 0x2, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x12, 0xf7, 0x1}}}}}}}]}}, &(0x7f0000019640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x0, 0xfb, 0x9, 0x8, 0x8c}, 0x31, &(0x7f00000196c0)=ANY=[@ANYBLOB="050f3100040710020822030018100a00030000000f0f01000000000030bf1003020f00007f0300e4692be604c2a408fd090256286f45e09f7cd2ba7b67d162ab87d456abeeef1c194505b8db60bc4929fcf0d8f5d5c9a25e1ebdc399b29b7b504a4af955be21aa0c6ca1318da1d0be84fc423ec57172ed3f7f4236adab73348ef7aebd99bdfe9347d2e0a4d4e5b38f"], 0x5, [{0x7b, &(0x7f0000019240)=@string={0x7b, 0x3, "5a642fb7cecb5a7c9d0247dbf9d1784676299bb317926fbf6608e1f1d2898b7f560c110fd2879febd2636e679b8d3a3f4fc5ed14edb86fb340e8c681a7f46861c4452eafebf452102fcdc613f6be3b783c3d98f6739269a854a849a8c403871d65bdc6f4f0917bfb1171c2d0adbd93d8c5578fd29d4431a556"}}, {0x9b, &(0x7f00000192c0)=@string={0x9b, 0x3, "23e96f86840af361320df81b869a591482b9643878a3af0201f4c04f84149b576061a6eaf07429cda319e675f468571755f4578cd0a379429851abe748cd9f136fff3078eaab59cb42678db25127b04f6292463281d03916cf3365c0a7cb9a474b0e08600832c6b46fd5dd1748afd4c19ef869b15284014bd98747c5f04de73db92b990abe60aa1afa4d32a503a497e2566b78eaf9aaf907c1"}}, {0xbc, &(0x7f0000019380)=@string={0xbc, 0x3, "32d51ca13579159a4e709a43c460527f06aef753f1396a6959ea8a2bca539dfae388eb624d6c84f9d2cdf5acc121a0af63a2c7c865d664a4ff7fe0bfec3d69af64a10da9ec06f49dadb5fdb0ba0bf1c0d01a8756eedc378119b305e59b777f8f607c450d41888b3384077031058287a67bc039abd84084470748978264e8247e4597ada6bf31a01244bb5d298e39bcf1733e09040db07c13abd518403c6fa5bbe3e3f45b021bcd38dcd469e0492b1809bf35feb1cdacc199925f"}}, {0xc1, &(0x7f0000019440)=@string={0xc1, 0x3, "cd458729b7bf156174c6a4f2c10e715b571380605a4e00c5b6285ce951c6858be000fc72255d09c1a43751e50d2626ed5706972f183efc2335910fbda0f7061c2ae2035c3c3899beb37c58021a9100c2c9a6bcbe1af732f38b1b74b12e5932ee2507db9cab5ea11fd3cf321c4956811c82f1329fe638e6029265aa5df9a4fc3a5b2207e3212d958e336f59fb7ec234196281dce883d287ba0b301d7464b99bfdc44a5b99dd6200ec0a09b99fd74809df1b1d9bbc95d22e9c78ebf3bbb11acb"}}, {0xe5, &(0x7f0000019540)=@string={0xe5, 0x3, "fdf107ef703b5959c74f2bfb1a3c800fe9e4572714a5ad63b1d2d8e181f4fa5c6ec2d3a56da527d029b1fe40537976bbb9b292ed6a7c0e7ac0af0630b2fbe31e6d3852b6b5fbc56df87f569f1ce2c8408ef037b91176c899b3119285f6ae73e206453f74ef84cb76cfc6bbede3f755f0cab22dad3ae7cfa290f56ef48d6a75975f9029a87c00d4764b52492ecd794496a26eb96af7ca4b8b68da38cb5d11f2cac67bff65b9408b498f46a2e1c2e6a5d3055cb125211fa9ba630f47ce03c0ab5d39f1f746adac60f78f9ea8a1d23e78735c0c2740883a30bb2316753e4b389d7e1dfce7"}}]}) 221.695632ms ago: executing program 1 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x640, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x10000}) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f00000006c0)={0xce, 0x0, r4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x800455cc, 0x0) syz_clone(0x18000000, &(0x7f0000000740)="83b4f58bb5aee49a41997b4d969c456efbdb08bac28b7b800bcc84c0fe046e0d9504608a77c276f9248c9388463cf9be0dc99b8b2030ae1367271755570b5eb9e9bd926b26d04f455ac02f1649013a52074357fb4a653ff0fabc21e32618afb1cc82db55a5e80298a24241eb9f5a", 0x6e, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000840)='\x00', &(0x7f0000000080), 0xcd46e78987e8f8f8, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@ieee802154={0x24, @short={0x2, 0x2, 0xfffe}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)="6db91300245798bd9813b40b41a0db889f782444bab6033cac8c1b718d4ea83b40ac293348f31b55c202c185d761c3b9d19f93366fa722e5fdefa2df0d2cabda54e975678a3d719a1c276fd9ef56a29ceaea9c60ba4b022dec356a1b2a466c37eaff5faaeefe4d401be46ffd5aebdfc86f278f27560b919f0cc461962c289fc3813281dc33d555d42dce0b637067604883f34d2acb91caeafca9a74dd430fa1ecb5e6453b739feb8bddb1fd72e3329c46be3f1c39d9e9f1f7b59320d7f369558", 0xc0}, {&(0x7f0000000400)="bb3eb0a6220c09dc4b5313e9752a622b429c0df9d852cd045b83fd377e936a16bc2848846b69dbc12a9148fd023927a9ef6a2bd8f581e0b6c619296b335c0a023251f879ee9a3ebe8066a1fb804222b08fd81c599b11e091f8b07fcd2aadbf3df8ac50769bd09bfb46c13d97ffe615d7da961a631d86ff7b8c5ca4e5f24e42936774d5eb0ab72449fe", 0x89}, {&(0x7f0000000280)="b9b9b17737e6d51214b5544e3781211b85d90309cf03b282d25d146ad8d8941ac43013cbebfac662f0d4468a245b0c9d6d89fe5c90a5db5800283a9c89290787718f0b677cf6851ae4a4b74ea50efd64df6f2fcb9b2a347e68c2ef13081784ac5bb60f937e7772f3857e92", 0x6b}, {&(0x7f00000004c0)="3810d0e92a310ba91e12d109954eb0177b048b042a97a04bcebe26aee64e9760bbe94fb1a9caa75b8c34fec636dfc59197e38535eee1414edddf694e24acd590fe1f978e472fe521de8915da878429f51f8d7670694ee2e12430efe2c17587a2ab054ce7258b0a5c7eb890b48d3a9433a83de52f9e97e691dd985e90dcb10ffe482c17470b52f50b3096cffa0568b1e9728bf7956ff04871b0bf97bf074fea7480b0d872ccb19b8e7f93aa28695f8fd85daabafefe48c38606ef2f5e7885f72780d05a70594714de161c25f396cb62861ec56e0d1d34cb37c8c156efcb", 0xdd}], 0x4, &(0x7f00000005c0)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x512}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x6192}}, @txtime={{0x18, 0x1, 0x3d, 0xf4}}, @mark={{0x14, 0x1, 0x24, 0xf9e}}], 0xa8}, 0x40) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000880)={0x0, 0x6, 0x3b, 0x1ff, 0x4}) unshare(0x26020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) mount_setattr(r6, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f00000000c0)={0xd, 0xe, 0x20000}, 0x20) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) capset(&(0x7f0000000080)={0x20080522, r5}, &(0x7f0000000100)={0x224, 0x800, 0x7fff, 0x4, 0xfffffff9, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000480)) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) capget(&(0x7f0000000400)={0x20080522}, &(0x7f0000000340)={0x9, 0x2, 0x2, 0x6b, 0x3, 0xfffffffc}) r8 = open$dir(&(0x7f0000000b40)='./file0\x00', 0x2000, 0x10) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) getpgid(0x0) fcntl$setlease(r10, 0x400, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r11, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000900)) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x603f) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 26.043369][ T36] audit: type=1400 audit(1756343326.430:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.044442][ T281] cgroup: Unknown subsys name 'net' [ 26.066397][ T36] audit: type=1400 audit(1756343326.430:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.094320][ T36] audit: type=1400 audit(1756343326.460:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.094379][ T281] cgroup: Unknown subsys name 'devices' [ 26.281527][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.287369][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.419286][ T36] audit: type=1400 audit(1756343326.810:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.443128][ T36] audit: type=1400 audit(1756343326.810:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.468383][ T36] audit: type=1400 audit(1756343326.810:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.490473][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.501583][ T36] audit: type=1400 audit(1756343326.890:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.527894][ T36] audit: type=1400 audit(1756343326.890:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.533630][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.553777][ T36] audit: type=1400 audit(1756343326.920:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.588515][ T36] audit: type=1400 audit(1756343326.920:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.388125][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.395838][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.403071][ T288] bridge_slave_0: entered allmulticast mode [ 27.409655][ T288] bridge_slave_0: entered promiscuous mode [ 27.416227][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.424063][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.431428][ T288] bridge_slave_1: entered allmulticast mode [ 27.437705][ T288] bridge_slave_1: entered promiscuous mode [ 27.487789][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.495113][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.502432][ T289] bridge_slave_0: entered allmulticast mode [ 27.508738][ T289] bridge_slave_0: entered promiscuous mode [ 27.525822][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.532910][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.540004][ T289] bridge_slave_1: entered allmulticast mode [ 27.546442][ T289] bridge_slave_1: entered promiscuous mode [ 27.552717][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.560073][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.567251][ T290] bridge_slave_0: entered allmulticast mode [ 27.574278][ T290] bridge_slave_0: entered promiscuous mode [ 27.594439][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.601879][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.609070][ T290] bridge_slave_1: entered allmulticast mode [ 27.615637][ T290] bridge_slave_1: entered promiscuous mode [ 27.625378][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.632593][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.639713][ T291] bridge_slave_0: entered allmulticast mode [ 27.645874][ T291] bridge_slave_0: entered promiscuous mode [ 27.652252][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.659418][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.666651][ T291] bridge_slave_1: entered allmulticast mode [ 27.673044][ T291] bridge_slave_1: entered promiscuous mode [ 27.839363][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.846978][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.854556][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.861702][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.875233][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.882393][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.889883][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.897189][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.917971][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.925215][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.932536][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.939891][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.962659][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.969759][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.977307][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.984410][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.009630][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.017113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.024511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.032135][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.039533][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.046817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.054591][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.062272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.081073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.088204][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.095914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.103143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.124806][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.132088][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.142982][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.150191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.171393][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.178624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.187083][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.194595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.225032][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.232403][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.240597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.247842][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.276771][ T288] veth0_vlan: entered promiscuous mode [ 28.291022][ T289] veth0_vlan: entered promiscuous mode [ 28.296866][ T291] veth0_vlan: entered promiscuous mode [ 28.308688][ T290] veth0_vlan: entered promiscuous mode [ 28.323566][ T288] veth1_macvtap: entered promiscuous mode [ 28.338515][ T291] veth1_macvtap: entered promiscuous mode [ 28.353345][ T290] veth1_macvtap: entered promiscuous mode [ 28.364682][ T289] veth1_macvtap: entered promiscuous mode [ 28.407992][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.455307][ T332] FAT-fs (rnullb0): bogus number of reserved sectors [ 28.462405][ T332] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 28.517042][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.528625][ T348] Zero length message leads to an empty skb [ 28.588746][ T358] binder: Bad value for 'max' [ 28.605355][ T359] rust_binder: Write failure EFAULT in pid:2 [ 28.616639][ T362] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 28.667239][ T351] rust_binder: Write failure EINVAL in pid:6 [ 28.748974][ T12] bridge_slave_1: left allmulticast mode [ 28.761266][ T12] bridge_slave_1: left promiscuous mode [ 28.766964][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.775372][ T12] bridge_slave_0: left allmulticast mode [ 28.781400][ T12] bridge_slave_0: left promiscuous mode [ 28.787413][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.841236][ T373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 28.907512][ T12] veth1_macvtap: left promiscuous mode [ 28.913301][ T12] veth0_vlan: left promiscuous mode [ 28.993306][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.000648][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.007840][ T374] bridge_slave_0: entered allmulticast mode [ 29.014832][ T374] bridge_slave_0: entered promiscuous mode [ 29.021497][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.028670][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.035933][ T374] bridge_slave_1: entered allmulticast mode [ 29.042351][ T374] bridge_slave_1: entered promiscuous mode [ 29.090172][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.097263][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.104610][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.111868][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.131843][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.139784][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.150652][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.157801][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.167392][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.174573][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.201702][ T374] veth0_vlan: entered promiscuous mode [ 29.213373][ T374] veth1_macvtap: entered promiscuous mode [ 29.384254][ T403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.431123][ T413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.431157][ T413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13 [ 29.560649][ T434] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 29.578705][ T434] rust_binder: Write failure EINVAL in pid:26 [ 30.009159][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.089150][ T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.190219][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.209143][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.229243][ T62] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.259430][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 30.264727][ T62] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 30.279920][ T330] usb 3-1: config 0 has no interfaces? [ 30.289157][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.297622][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.310622][ T62] usb 4-1: config 0 descriptor?? [ 30.315709][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.326042][ T330] usb 3-1: config 0 descriptor?? [ 30.554771][ T330] usb 3-1: USB disconnect, device number 2 [ 30.628085][ T453] ------------[ cut here ]------------ [ 30.633649][ T453] WARNING: CPU: 1 PID: 453 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 30.643068][ T453] Modules linked in: [ 30.647351][ T453] CPU: 1 UID: 0 PID: 453 Comm: syz.1.38 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 30.658725][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.669168][ T453] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 30.675118][ T453] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f1 25 ee 05 00 0f 85 be 00 00 00 c6 05 e4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 30.694902][ T453] RSP: 0018:ffffc9000e4175a0 EFLAGS: 00010246 [ 30.701233][ T453] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 30.709611][ T453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e417658 [ 30.718058][ T453] RBP: ffffc9000e4176c8 R08: ffffc9000e417657 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 30.726471][ T453] R10: ffffc9000e417640 R11: fffff52001c82ecb R12: ffffc9000e4175e0 [ 30.734729][ T453] R13: dffffc0000000000 R14: 1ffff92001c82eb8 R15: 0000000000000000 [ 30.743375][ T453] FS: 00007fbd24fe36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.752762][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.759420][ T453] CR2: 0000200000006000 CR3: 0000000116ea0000 CR4: 00000000003526b0 [ 30.767649][ T453] Call Trace: [ 30.771070][ T453] [ 30.774049][ T453] ? do_syscall_64+0x58/0xf0 [ 30.778780][ T453] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.785195][ T453] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.791015][ T453] ? hashtab_init+0xdb/0x1f0 [ 30.795650][ T453] ___kmalloc_large_node+0x9c/0x1d0 [ 30.801023][ T453] ? hashtab_init+0xdb/0x1f0 [ 30.805835][ T453] __kmalloc_large_node_noprof+0x1e/0xe0 [ 30.811648][ T453] ? hashtab_init+0xdb/0x1f0 [ 30.816629][ T453] __kmalloc_noprof+0x26d/0x450 [ 30.821678][ T453] hashtab_init+0xdb/0x1f0 [ 30.826227][ T453] ? common_read+0x16d/0x480 [ 30.831099][ T453] symtab_init+0x44/0x70 [ 30.835493][ T453] common_read+0x1de/0x480 [ 30.840167][ T453] ? __cfi_common_read+0x10/0x10 [ 30.845218][ T453] ? hashtab_init+0x105/0x1f0 [ 30.849936][ T453] policydb_read+0xaab/0x28c0 [ 30.854756][ T453] ? kasan_save_alloc_info+0x40/0x50 [ 30.860104][ T453] ? __cfi_policydb_read+0x10/0x10 [ 30.865398][ T453] ? security_load_policy+0x128/0x12f0 [ 30.871075][ T453] security_load_policy+0x162/0x12f0 [ 30.876479][ T453] ? irqentry_exit+0x4a/0x60 [ 30.881104][ T453] ? exc_page_fault+0x66/0xc0 [ 30.885810][ T453] ? asm_exc_page_fault+0x2b/0x30 [ 30.890977][ T453] ? __cfi_security_load_policy+0x10/0x10 [ 30.896926][ T453] ? rep_movs_alternative+0x4a/0xa0 [ 30.902393][ T453] sel_write_load+0x298/0x5e0 [ 30.907102][ T453] ? futex_wait+0x29a/0x7a0 [ 30.911655][ T453] ? __cfi_sel_write_load+0x10/0x10 [ 30.917166][ T453] ? __cfi_futex_wait+0x10/0x10 [ 30.922233][ T453] ? bpf_lsm_file_permission+0xd/0x20 [ 30.927834][ T453] ? __cfi_sel_write_load+0x10/0x10 [ 30.933278][ T453] vfs_write+0x3c0/0xe80 [ 30.937848][ T453] ? __f_setown+0x26f/0x380 [ 30.942511][ T453] ? __cfi_vfs_write+0x10/0x10 [ 30.947410][ T453] ? __kasan_check_write+0x18/0x20 [ 30.952798][ T453] ? mutex_lock+0x92/0x1c0 [ 30.957271][ T453] ? __cfi_mutex_lock+0x10/0x10 [ 30.962184][ T453] ? __fget_files+0x2c5/0x340 [ 30.966908][ T453] ksys_write+0x141/0x250 [ 30.971458][ T453] ? xfd_validate_state+0x68/0x150 [ 30.976697][ T453] ? __cfi_ksys_write+0x10/0x10 [ 30.981611][ T453] ? __kasan_check_write+0x18/0x20 [ 30.986765][ T453] ? fpregs_restore_userregs+0x11d/0x260 [ 30.992550][ T453] __x64_sys_write+0x7f/0x90 [ 30.997211][ T453] x64_sys_call+0x271c/0x2ee0 [ 31.002153][ T453] do_syscall_64+0x58/0xf0 [ 31.006967][ T453] ? clear_bhb_loop+0x50/0xa0 [ 31.011880][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.017826][ T453] RIP: 0033:0x7fbd2418ebe9 [ 31.022330][ T453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.042667][ T453] RSP: 002b:00007fbd24fe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 31.051154][ T453] RAX: ffffffffffffffda RBX: 00007fbd243b5fa0 RCX: 00007fbd2418ebe9 [ 31.059300][ T453] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000007 [ 31.067568][ T453] RBP: 00007fbd24211e19 R08: 0000000000000000 R09: 0000000000000000 [ 31.075675][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.084026][ T453] R13: 00007fbd243b6038 R14: 00007fbd243b5fa0 R15: 00007fff987e2738 [ 31.092186][ T453] [ 31.095362][ T453] ---[ end trace 0000000000000000 ]--- [ 31.110692][ T453] SELinux: failed to load policy [ 31.241405][ T329] bridge_slave_1: left allmulticast mode [ 31.247273][ T329] bridge_slave_1: left promiscuous mode [ 31.253186][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.261368][ T329] bridge_slave_0: left allmulticast mode [ 31.267122][ T329] bridge_slave_0: left promiscuous mode [ 31.273138][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.294033][ T62] usbhid 4-1:0.0: can't add hid device: -71 [ 31.309244][ T62] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.330340][ T62] usb 4-1: USB disconnect, device number 2 [ 31.461760][ T329] veth1_macvtap: left promiscuous mode [ 31.467827][ T329] veth0_vlan: left promiscuous mode [ 31.752253][ T329] bridge_slave_1: left allmulticast mode [ 31.758142][ T329] bridge_slave_1: left promiscuous mode [ 31.763812][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.771785][ T329] bridge_slave_0: left allmulticast mode [ 31.777627][ T329] bridge_slave_0: left promiscuous mode [ 31.783360][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.791037][ T329] bridge_slave_1: left allmulticast mode [ 31.796700][ T329] bridge_slave_1: left promiscuous mode [ 31.802627][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.810222][ T329] bridge_slave_0: left allmulticast mode [ 31.816233][ T329] bridge_slave_0: left promiscuous mode [ 31.822050][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.830344][ T329] bridge_slave_1: left allmulticast mode [ 31.836083][ T329] bridge_slave_1: left promiscuous mode [ 31.842117][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.849703][ T329] bridge_slave_0: left allmulticast mode [ 31.855355][ T329] bridge_slave_0: left promiscuous mode [ 31.861219][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.143474][ T329] veth1_macvtap: left promiscuous mode [ 32.149151][ T329] veth0_vlan: left promiscuous mode [ 32.154764][ T329] veth1_macvtap: left promiscuous mode [ 32.160467][ T329] veth0_vlan: left promiscuous mode [ 32.166057][ T329] veth1_macvtap: left promiscuous mode [ 32.171695][ T329] veth0_vlan: left promiscuous mode