last executing test programs: 4.471106279s ago: executing program 3 (id=66): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r1, 0xf6dbc000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x154, 0x10, 0x613, 0x70bd28, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x39}, {@in=@rand_addr=0x64010102, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffc, 0x0, 0xb, 0x5, 0xfffffffffffffffc, 0x13a0000, 0x1, 0xc}, {0x0, 0x7fff, 0x0, 0xadb8}, {0x5, 0x0, 0x1}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'chacha20\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd27, 0x70bd29, 0x70bd25, 0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) (async) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) write(r3, &(0x7f0000001c00)="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", 0xfffffdbf) 4.431841862s ago: executing program 3 (id=68): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "aef54561"}]}}, 0x0}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000000), 0x10) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(r5, r0, 0x0, 0x7ffff000) 2.730156089s ago: executing program 3 (id=89): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x800004, 0x4) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffe) 2.59927793s ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) chroot(&(0x7f0000000240)='./file0\x00') 2.553844043s ago: executing program 3 (id=95): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) (async) getsockopt$inet_opts(r3, 0x0, 0x400000000000009, &(0x7f00000000c0)=""/19, &(0x7f0000000040)=0x13) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3801000210000100fdfafffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000df0b000000000000ffffff7f030000000b00000027bd7000fc3f00000a0000004400000000000000480003006c"], 0x138}}, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) getsockname$tipc(r5, 0x0, &(0x7f0000000100)) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz0\x00', {0x1, 0x9, 0x5b6, 0x37a}, 0x1b, [0x7, 0x99, 0x3, 0x3, 0x0, 0xfffffffe, 0x5, 0x3, 0x7c4800, 0x8000, 0x1, 0x4, 0x0, 0x8, 0x5, 0x1, 0xa00000, 0x8, 0x3, 0x8001, 0xfff, 0x7ff, 0x4, 0x1, 0x0, 0x2, 0x2, 0xfff, 0xfffffc3b, 0x0, 0x0, 0xd, 0x8000, 0x1, 0x81, 0x0, 0x40, 0x6, 0x9, 0x4, 0x0, 0x5, 0xe2c, 0x2, 0xfffffffd, 0x7fffffff, 0xec, 0xfffffff7, 0xc, 0x1, 0x6, 0x7ff, 0xa0, 0x8, 0x7fffffff, 0x2, 0x4, 0x0, 0x7fffffff, 0x1, 0x7, 0x40, 0x1, 0xfffff801], [0x7fff, 0x2, 0xfffffffa, 0x1, 0x7, 0x334b22e, 0x9045, 0x5, 0xd07, 0x5, 0x7, 0x4, 0x2, 0x3, 0x1, 0x38, 0x10000, 0x7b37, 0xfffffffa, 0xfffffffe, 0x4, 0x81, 0x7, 0x9, 0x1, 0x1, 0xfffffffa, 0x0, 0x9, 0x1, 0x2, 0x3, 0x2, 0x77f, 0x5d8, 0xfffffffa, 0x0, 0x1, 0x6, 0x3, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x8, 0x9, 0x8, 0x3ff, 0x5, 0x5, 0xb1fe, 0x4, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x10, 0xfffff557, 0x7, 0x7], [0x309c, 0x0, 0x9, 0x5, 0x6, 0x4, 0x5, 0x8, 0x4, 0x3, 0xed3, 0x40, 0x8872, 0x544275f5, 0x6, 0x0, 0xe22b, 0xc7, 0x7, 0x9, 0x3ff, 0x514, 0x5, 0x3ff, 0x3, 0xae, 0x4, 0x1, 0x16, 0x7, 0x4, 0x6, 0x0, 0xfffffff9, 0x2, 0x2, 0x4, 0x3, 0xf3f4, 0x80000001, 0x10, 0x9, 0x5, 0x5, 0x5, 0x3, 0x8001, 0x7, 0x5, 0x7ff, 0x20000, 0xffffffff, 0x3, 0x7, 0x1c96, 0x0, 0x2, 0x7, 0x200, 0x3, 0x60, 0x7ff, 0x8, 0x4], [0x0, 0x5, 0x1, 0x80000000, 0x2, 0x5, 0x134, 0x80000000, 0x5, 0x9, 0xff, 0x5, 0x8, 0x3, 0x400, 0x2, 0x4, 0x67, 0x6, 0x3, 0x401, 0x8, 0xe4, 0xfff, 0xfffffbff, 0x3, 0x5, 0x2, 0x2, 0x4, 0xf8, 0x7, 0x8, 0xe, 0xa0f, 0x0, 0x9, 0x41fa, 0xfffffffa, 0x7fff, 0x0, 0x1, 0x5, 0x200, 0x301, 0x80000000, 0x8001, 0x4, 0xb, 0x8, 0x9, 0x2, 0xb6, 0x3, 0xf, 0x0, 0x80000000, 0x4, 0x9, 0x81, 0x5, 0x3, 0x7fff, 0x37ca]}, 0x45c) close_range(r0, 0xffffffffffffffff, 0x0) 2.378082178s ago: executing program 3 (id=96): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000003a02000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) 1.266383027s ago: executing program 1 (id=107): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) unshare(0x62040200) open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) prlimit64(0x0, 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/cgroup.procs/file0\x00', &(0x7f0000000140)={0x80000, 0x1, 0x20}, 0x18) mkdirat(r6, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0x40) 1.221177931s ago: executing program 0 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)=0x100000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) 508.690259ms ago: executing program 0 (id=115): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x24001804) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000040)='schedstat\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async, rerun: 64) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0xa8ca3411d2c26006, 0x110013, r0, 0xe9dba000) (rerun: 64) 469.284342ms ago: executing program 1 (id=116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000040), 0x4) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:public_content_rw_t:s0\x00', 0x29) write$selinux_context(r2, &(0x7f0000000080)='system_u:object_r:run_init_exec_t:s0\x00', 0x25) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 409.929197ms ago: executing program 1 (id=117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 407.995677ms ago: executing program 1 (id=118): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x44) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4008af25, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendfile(r5, r3, 0x0, 0x80000000) 406.876577ms ago: executing program 1 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) 401.321137ms ago: executing program 1 (id=120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100010000009662803740225132f52af71a3129824bb642216c0c9a350df12cd9bd874be3934a4a055d21855aad45d386a0"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000010301010000000000000000000000000c000200fffffffe"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wg0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000440), 0x7, 0x5a0a0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000480)=0x2) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x0, 0x0, 0x3}}, 0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) pread64(r3, &(0x7f00000005c0)=""/226, 0xe2, 0x7e1) connect$inet6(r5, &(0x7f00000000c0), 0x1c) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x4, 0x3}) clock_nanosleep(0x3, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000400)) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000280)=0x1, 0x4) 395.953838ms ago: executing program 0 (id=121): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f0000000200)) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55", 0x38}) r4 = syz_open_procfs(r0, &(0x7f0000000000)='mounts\x00') r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30cf220ca09ce03095826fc99cb890b2000000", @ANYRES16=r6, @ANYBLOB="01030000faffffffffff3300"], 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) read$FUSE(r4, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x160e) syz_open_procfs(r7, 0x0) 326.162844ms ago: executing program 0 (id=122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000440)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0xa, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r4, 0x5435, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 325.681514ms ago: executing program 0 (id=123): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001fe"], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @multicast2}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0x0, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x2a) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f23165", 0x99}, {&(0x7f0000001b00)="860b3f72ffb4467e90bbeb425fef673dc14fe035407394b834db8c9ac212605367943653b4584e4f25f60fc49198d1ba82d52edbf89a805e2e39158bb8a8e6b845", 0x41}], 0x2}}], 0x1, 0x80d0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000500)='\x00', 0xfffffffffffffdb7, 0x10008095, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 323.054543ms ago: executing program 0 (id=124): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x12) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002e001f0300000000000000000c00d6000100000000000700330f14104c1d9b8a5b9c0943f7ab4b17e850364035589f843fa25341c8780dbe80707af9f7cd4a446fe5b27505d626d86d9567e829662bab640e9d9dcd5303c45ec8ff9157438f2395a7f95d37f29edb"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27) r7 = eventfd2(0x8001, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r7, 0xc}) r8 = socket(0x10, 0x80002, 0x0) sendmsg(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[@ANYRESHEX=r6], 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r10 = openat$incfs(r9, &(0x7f00000000c0)='.log\x00', 0x0, 0x70) read$FUSE(r10, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r11 = syz_open_pts(0xffffffffffffffff, 0xc081) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x527c, 0xfff, 0x194, 0x8, 0xf}}) io_setup(0x8, &(0x7f0000000100)=0x0) io_cancel(r12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="18565fd059836a45d012d306dcaac413579ea9a6aab1d31a57f73907301370266c53a80745dab0f19aae16aff16c6d46782b07d1268ea42322bb9fa443d8237944b3a1a921d33cb770b93c56c37b853140b67c1b5cf5525e90000c81d06a9b443f7bcfadd1b638138548640b97a2d135af3a8a125feb7715857f9eceb44b5416682bea17de5a7f0706fb8fdda828907c391b90089b5d2a43d019ebc126227074cd4b9433efb50851e94c06ef97d1582b110d198dba7e706da519680facdd281c503471caa0baf25ee25a6e0c45c794c88d02809aa228a958a8c13eaafc7ed40a2d9e9c", 0xe3, 0x3ff}, &(0x7f0000000280)) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 113.051231ms ago: executing program 2 (id=126): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e001f0700001a00000000000c00d60001"], 0x24}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000300)=""/96, 0x0, 0x0, 0x0, 0x3}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) r7 = socket$key(0xf, 0x3, 0x2) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x1800000, r7}, 0x15) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000240)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x1000, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') write$P9_RVERSION(r11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f00000024c0)={0x50, 0x0, r12, {0x7, 0x2b, 0x5, 0x4000, 0x4, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x2, 0x4}}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r10}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 64.645314ms ago: executing program 2 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 63.249075ms ago: executing program 2 (id=128): r0 = socket(0x10, 0x803, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r1, &(0x7f0000000280)="240000001e005f0214ffffffffff08001f000000000000000800"/36, 0x24) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2800043, &(0x7f0000000080)=ANY=[]) 932.42µs ago: executing program 2 (id=129): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) 662.24µs ago: executing program 2 (id=130): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x14, 0x21, 0x205, 0x70bd2b, 0x24dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cc, 0x201) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000282000/0x400000)=nil) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=131): ftruncate(0xffffffffffffffff, 0x398a0bdb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000dfffffffff0e478ef8ed"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00106003ffffffffffffaaaaaaaaaa0208004535f3871d3a1f91b0e2907800001fe1e0000001a000655f52259542c6e1cc4158000c907801090000"], 0x32) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208080, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x9f, 0x0, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000010801010000000000000000050000093c0004800800014000000008080001400000031b08000140000020000800014000000004080001401cdb4436080001400001000108000140000000043400048008000640000000060800034000000101080009400000000908000740000000020800054000000101080001400029b98290d13b86b6026b0c99b1a400"], 0x90}}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x4, 0x2c, 0x10003, 0x41, 0x400200cc0, 0x100ffd, 0x4, 0x0, 0x3, 0x3, 0x4, 0x7, 0x68, 0x5], 0xeeee8000, 0x2031c2}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000002c0)={[{0xa, 0x0, 0x5, 0x8, 0x9, 0x9, 0x53, 0xe, 0xde, 0x1, 0x10, 0x7, 0x100000000}, {0x3, 0xcb1, 0x8, 0xff, 0x5, 0x7, 0xa5, 0xa4, 0x2, 0x3, 0x10, 0x7, 0x4}, {0x9, 0x7, 0x1, 0x3, 0x5, 0xfa, 0x2, 0x80, 0xfc, 0x8, 0xbc, 0xbb, 0x6}], 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 21.759011][ T36] audit: type=1400 audit(1756415685.380:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.760032][ T281] cgroup: Unknown subsys name 'net' [ 21.781767][ T36] audit: type=1400 audit(1756415685.380:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.809196][ T36] audit: type=1400 audit(1756415685.410:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.809387][ T281] cgroup: Unknown subsys name 'devices' [ 21.974148][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.979860][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.132649][ T36] audit: type=1400 audit(1756415685.760:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.156216][ T36] audit: type=1400 audit(1756415685.760:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.164870][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.181329][ T36] audit: type=1400 audit(1756415685.760:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.213301][ T36] audit: type=1400 audit(1756415685.810:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.239185][ T36] audit: type=1400 audit(1756415685.810:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.268590][ T36] audit: type=1400 audit(1756415685.890:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.269105][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.294323][ T36] audit: type=1400 audit(1756415685.890:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.139632][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.146769][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.153951][ T290] bridge_slave_0: entered allmulticast mode [ 23.160298][ T290] bridge_slave_0: entered promiscuous mode [ 23.166693][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.174056][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.181230][ T289] bridge_slave_0: entered allmulticast mode [ 23.187570][ T289] bridge_slave_0: entered promiscuous mode [ 23.195499][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.206336][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.213667][ T289] bridge_slave_1: entered allmulticast mode [ 23.220152][ T289] bridge_slave_1: entered promiscuous mode [ 23.230089][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.237543][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.244957][ T290] bridge_slave_1: entered allmulticast mode [ 23.251257][ T290] bridge_slave_1: entered promiscuous mode [ 23.301786][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.309058][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.316277][ T288] bridge_slave_0: entered allmulticast mode [ 23.322603][ T288] bridge_slave_0: entered promiscuous mode [ 23.330706][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.337971][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.345158][ T288] bridge_slave_1: entered allmulticast mode [ 23.351858][ T288] bridge_slave_1: entered promiscuous mode [ 23.390666][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.397931][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.405169][ T291] bridge_slave_0: entered allmulticast mode [ 23.411607][ T291] bridge_slave_0: entered promiscuous mode [ 23.425790][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.432922][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.440164][ T291] bridge_slave_1: entered allmulticast mode [ 23.446531][ T291] bridge_slave_1: entered promiscuous mode [ 23.571127][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.578300][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.585809][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.593286][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.609893][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.617153][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.624692][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.631777][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.645030][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.652238][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.659609][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.667022][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.705482][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.712757][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.720078][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.727271][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.750775][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.758585][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.766057][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.773883][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.781414][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.788832][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.796203][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.803450][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.821347][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.828628][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.844318][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.851619][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.875143][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.882317][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.889840][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.896928][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.923292][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.930371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.938481][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.945644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.953294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.960401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.968324][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.975657][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.005647][ T288] veth0_vlan: entered promiscuous mode [ 24.025516][ T289] veth0_vlan: entered promiscuous mode [ 24.045400][ T288] veth1_macvtap: entered promiscuous mode [ 24.056308][ T291] veth0_vlan: entered promiscuous mode [ 24.073529][ T290] veth0_vlan: entered promiscuous mode [ 24.085607][ T289] veth1_macvtap: entered promiscuous mode [ 24.097375][ T291] veth1_macvtap: entered promiscuous mode [ 24.121972][ T290] veth1_macvtap: entered promiscuous mode [ 24.158211][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.224985][ T337] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 24.231180][ T339] devpts: called with bogus options [ 24.267260][ T345] exFAT-fs (rnullb0): invalid boot record signature [ 24.278456][ T345] exFAT-fs (rnullb0): failed to read boot sector [ 24.286877][ T345] exFAT-fs (rnullb0): failed to recognize exfat type [ 24.288782][ T348] rust_binder: Error while translating object. [ 24.301714][ T348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 24.315313][ T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2 [ 24.440125][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.473183][ T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 24.473297][ T352] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967294 [ 24.520892][ T356] ======================================================= [ 24.520892][ T356] WARNING: The mand mount option has been deprecated and [ 24.520892][ T356] and is ignored by this kernel. Remove the mand [ 24.520892][ T356] option from the mount to silence this warning. [ 24.520892][ T356] ======================================================= [ 24.557424][ T356] binder: Unknown parameter 'context' [ 24.563282][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.612125][ T358] __vm_enough_memory: pid: 358, comm: syz.2.9, bytes: 18014402804453376 not enough memory for the allocation [ 24.625486][ T359] __vm_enough_memory: pid: 359, comm: syz.2.9, bytes: 18014402804453376 not enough memory for the allocation [ 24.668663][ T364] SELinux: security_context_str_to_sid () failed with errno=-22 [ 24.733063][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.745008][ T9] usb 4-1: config 0 has no interfaces? [ 24.752265][ T374] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 24.752273][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 24.769708][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 24.772626][ T374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.778054][ T9] usb 4-1: Product: syz [ 24.794033][ T9] usb 4-1: Manufacturer: syz [ 24.798685][ T9] usb 4-1: SerialNumber: syz [ 24.805139][ T9] usb 4-1: config 0 descriptor?? [ 25.016908][ T64] usb 4-1: USB disconnect, device number 2 [ 25.151732][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.281898][ T9] usb 2-1: device descriptor read/64, error -71 [ 25.311755][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.441754][ T31] usb 1-1: device descriptor read/64, error -71 [ 25.521731][ T9] usb 2-1: device descriptor read/64, error -71 [ 25.691727][ T31] usb 1-1: device descriptor read/64, error -71 [ 25.761976][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.891709][ T9] usb 2-1: device descriptor read/64, error -71 [ 25.931692][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.061735][ T31] usb 1-1: device descriptor read/64, error -71 [ 26.141789][ T9] usb 2-1: device descriptor read/64, error -71 [ 26.251840][ T9] usb usb2-port1: attempt power cycle [ 26.269476][ T410] rust_binder: Write failure EFAULT in pid:35 [ 26.302682][ T31] usb 1-1: device descriptor read/64, error -71 [ 26.346656][ T422] __vm_enough_memory: pid: 422, comm: syz.3.31, bytes: 18014402804453376 not enough memory for the allocation [ 26.422359][ T31] usb usb1-port1: attempt power cycle [ 26.551896][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.601730][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.623051][ T9] usb 2-1: device descriptor read/8, error -71 [ 26.723671][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.732381][ T45] usb 3-1: config 204 has an invalid interface number: 221 but max is 0 [ 26.741023][ T45] usb 3-1: config 204 has no interface number 0 [ 26.747970][ T45] usb 3-1: config 204 interface 221 altsetting 4 endpoint 0xD has invalid maxpacket 50176, setting to 1024 [ 26.759762][ T45] usb 3-1: config 204 interface 221 altsetting 4 bulk endpoint 0xD has invalid maxpacket 1024 [ 26.762544][ T9] usb 2-1: device descriptor read/8, error -71 [ 26.770423][ T45] usb 3-1: config 204 interface 221 has no altsetting 0 [ 26.783957][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.793313][ T45] usb 3-1: New USB device found, idVendor=0b57, idProduct=5942, bcdDevice=38.7a [ 26.802888][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.811103][ T45] usb 3-1: Product: syz [ 26.815987][ T45] usb 3-1: Manufacturer: syz [ 26.820769][ T45] usb 3-1: SerialNumber: syz [ 26.826082][ T31] usb 1-1: device descriptor read/8, error -71 [ 26.834468][ T418] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 26.962837][ T31] usb 1-1: device descriptor read/8, error -71 [ 27.021733][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.043625][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.044009][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 27.044023][ T36] audit: type=1400 audit(1756415690.670:166): avc: denied { create } for pid=417 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.076254][ T36] audit: type=1400 audit(1756415690.670:167): avc: denied { connect } for pid=417 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.095815][ T36] audit: type=1400 audit(1756415690.680:168): avc: denied { getopt } for pid=417 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.096135][ T45] usbhid 3-1:204.221: couldn't find an input interrupt endpoint [ 27.115731][ T36] audit: type=1400 audit(1756415690.690:169): avc: denied { create } for pid=417 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.143883][ T36] audit: type=1400 audit(1756415690.690:170): avc: denied { connect } for pid=417 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.146615][ T45] usb 3-1: USB disconnect, device number 2 [ 27.184882][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.201777][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.234103][ T31] usb 1-1: device descriptor read/8, error -71 [ 27.291816][ T9] usb usb2-port1: unable to enumerate USB device [ 27.362989][ T31] usb 1-1: device descriptor read/8, error -71 [ 27.471907][ T31] usb usb1-port1: unable to enumerate USB device [ 27.493749][ T443] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 27.605690][ T36] audit: type=1400 audit(1756415691.230:171): avc: denied { mount } for pid=445 comm="syz.2.38" name="/" dev="ramfs" ino=3723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.639315][ T36] audit: type=1400 audit(1756415691.260:172): avc: denied { mount } for pid=447 comm="syz.2.39" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 27.871705][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.944636][ T36] audit: type=1400 audit(1756415691.570:173): avc: denied { setattr } for pid=450 comm="syz.1.40" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.022988][ T9] usb 3-1: config 1 has an invalid interface number: 146 but max is 0 [ 28.031368][ T9] usb 3-1: config 1 has no interface number 0 [ 28.037528][ T9] usb 3-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 28.050328][ T9] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 28.059495][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.067669][ T9] usb 3-1: Product: syz [ 28.072753][ T9] usb 3-1: Manufacturer: syz [ 28.077577][ T9] usb 3-1: SerialNumber: syz [ 28.089634][ T9] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 28.101201][ T9] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 28.112536][ T9] usbserial_generic 3-1:1.146: generic converter detected [ 28.121022][ T9] usb 3-1: generic converter now attached to ttyUSB0 [ 28.286175][ T45] usb 3-1: USB disconnect, device number 3 [ 28.292993][ T45] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 28.301257][ T45] usbserial_generic 3-1:1.146: device disconnected [ 28.608342][ T36] audit: type=1400 audit(1756415692.230:174): avc: denied { read } for pid=94 comm="acpid" name="event7" dev="devtmpfs" ino=449 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 28.630829][ T36] audit: type=1400 audit(1756415692.230:175): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=449 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 28.991752][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 29.041759][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.143449][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.153865][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 29.165074][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8 [ 29.177183][ T9] usb 3-1: device descriptor read/64, error -71 [ 29.187156][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 29.197148][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 29.212060][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 29.221299][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.229867][ T10] usb 1-1: Product: syz [ 29.234435][ T10] usb 1-1: Manufacturer: syz [ 29.239141][ T10] usb 1-1: SerialNumber: syz [ 29.244513][ T10] usb 1-1: config 0 descriptor?? [ 29.421723][ T9] usb 3-1: device descriptor read/64, error -71 [ 29.457120][ T471] 8021q: VLANs not supported on ip_vti0 [ 29.468895][ T10] usb 1-1: USB disconnect, device number 6 [ 29.661739][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.760625][ T481] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 29.760656][ T481] rust_binder: Error in use_page_slow: EBUSY [ 29.771451][ T481] rust_binder: use_range failure EBUSY [ 29.777594][ T481] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 29.783497][ T481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 29.791511][ T481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:52 [ 29.801168][ T9] usb 3-1: device descriptor read/64, error -71 [ 29.874458][ T483] capability: warning: `syz.1.51' uses 32-bit capabilities (legacy support in use) [ 29.998709][ T495] binder: Bad value for 'max' [ 30.036792][ T497] fuse: Unknown parameter 'grou00000000000000000000' [ 30.051701][ T9] usb 3-1: device descriptor read/64, error -71 [ 30.057964][ T500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.161824][ T9] usb usb3-port1: attempt power cycle [ 30.511751][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.532850][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.621423][ T526] fuse: Unknown parameter 'grou00000000000000000000' [ 30.648660][ T530] mmap: syz.3.66 (530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.664309][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.679046][ T10] rust_binder: 498: removing orphan mapping 0:24 [ 30.819296][ T550] /dev/rnullb0: Can't open blockdev [ 30.897690][ T554] overlayfs: lower data-only dirs require metacopy support. [ 30.921723][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 30.942331][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 30.942714][ T9] usb 3-1: device descriptor read/8, error -71 [ 31.092778][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.097855][ T9] usb 3-1: device descriptor read/8, error -71 [ 31.103923][ T45] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 31.119232][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.131582][ T45] usb 4-1: config 0 descriptor?? [ 31.221810][ T9] usb usb3-port1: unable to enumerate USB device [ 31.541352][ T45] uclogic 0003:5543:0522.0001: No inputs registered, leaving [ 31.549449][ T45] uclogic 0003:5543:0522.0001: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 31.746026][ T10] usb 4-1: USB disconnect, device number 3 [ 31.944419][ T46] bridge_slave_1: left allmulticast mode [ 31.957252][ T46] bridge_slave_1: left promiscuous mode [ 31.967024][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.982245][ T46] bridge_slave_0: left allmulticast mode [ 31.998311][ T46] bridge_slave_0: left promiscuous mode [ 32.008494][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.105578][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 32.105597][ T36] audit: type=1400 audit(1756415695.730:204): avc: denied { mounton } for pid=591 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 32.192829][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.199927][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.207992][ T591] bridge_slave_0: entered allmulticast mode [ 32.214755][ T591] bridge_slave_0: entered promiscuous mode [ 32.222407][ T46] veth1_macvtap: left promiscuous mode [ 32.227955][ T46] veth0_vlan: left promiscuous mode [ 32.295336][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.302708][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.309939][ T591] bridge_slave_1: entered allmulticast mode [ 32.318184][ T591] bridge_slave_1: entered promiscuous mode [ 32.354097][ T36] audit: type=1400 audit(1756415695.970:205): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 32.374801][ T600] binder: Unknown parameter 'context' [ 32.423196][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.430396][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.437852][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.444937][ T591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.473624][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.481215][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.493003][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.500237][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.509224][ T617] netlink: 188 bytes leftover after parsing attributes in process `syz.1.93'. [ 32.531890][ T619] fuse: Unknown parameter 'group_i00000000000000000000' [ 32.544465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.551577][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.559078][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.599452][ T36] audit: type=1400 audit(1756415696.220:206): avc: denied { setcurrent } for pid=621 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.600257][ T623] netlink: 'syz.3.95': attribute type 16 has an invalid length. [ 32.622717][ T591] veth0_vlan: entered promiscuous mode [ 32.640260][ T36] audit: type=1401 audit(1756415696.220:207): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 32.658087][ T623] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 32.659662][ T591] veth1_macvtap: entered promiscuous mode [ 32.673053][ T623] netlink: 64054 bytes leftover after parsing attributes in process `syz.3.95'. [ 32.711720][ T36] audit: type=1400 audit(1756415696.330:208): avc: denied { unmount } for pid=591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.761679][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 32.768090][ T9] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 32.778668][ T9] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.800582][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.809716][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 32.819316][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.838336][ T9] usb 1-1: Product: 趠ボ첣ᛤ⛢℟ꋷ쯲붳滪嚧뫂⟾ጯ滛붼ɝﾺ麤쫷겅䄞뾜⺓妗曌쮫䮔긕Ԫ縡ꤶ췠瑄趚媔Ꜵ큥筩榐㍢馨癮뚆仇⤑䈕罠ꋉ恞蕋￁㏼种뎑橮꼟⑶듂„횻㼢쫀閹찆㖎偢熫₽餆탁 [ 32.881717][ T9] usb 1-1: SerialNumber: 倰滁덀⛻飅랙玆䠁儍⬤㍹씪彖걃좍髑ꚾن筥⿿䫈谏▘悩䱄ᄺ욮㜢킃莱ﻏ魇ポ좋윑૽䇬缪郸曌ﮓ휻ⴼ꒡䍸錤謾擯ẍ达鹌쨯䍺ɽ㐼ㅹ쫥딩ᩆ刭鄿閶毌홄鲺᧕Ӻ鱶㌋乵ȅ䧕ꍽⅶ顅귯㏇둞㞟凑呐碧ⴐ喾鱙춭 [ 32.928572][ T589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.939037][ T589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.981694][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.131196][ T636] fuse: Unknown parameter 'gzoup_id00000000000000000000' [ 33.132070][ T10] usb 4-1: no configurations [ 33.140455][ T636] fuse: Unknown parameter 'r000000000000000400y000' [ 33.143745][ T10] usb 4-1: can't read configurations, error -22 [ 33.163282][ T9] usb 1-1: USB disconnect, device number 7 [ 33.170334][ T36] audit: type=1400 audit(1756415696.790:209): avc: denied { setopt } for pid=638 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.199888][ T36] audit: type=1400 audit(1756415696.820:210): avc: denied { map } for pid=640 comm="syz.1.101" path="socket:[6519]" dev="sockfs" ino=6519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 33.281780][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.432197][ T10] usb 4-1: no configurations [ 33.436905][ T10] usb 4-1: can't read configurations, error -22 [ 33.443372][ T10] usb usb4-port1: attempt power cycle [ 33.771841][ T36] audit: type=1400 audit(1756415697.400:211): avc: denied { create } for pid=651 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.782683][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.791691][ T36] audit: type=1400 audit(1756415697.400:212): avc: denied { bind } for pid=651 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.813171][ T654] syzkaller0: entered allmulticast mode [ 33.818927][ T36] audit: type=1400 audit(1756415697.400:213): avc: denied { connect } for pid=651 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.826234][ T654] syzkaller0: entered promiscuous mode [ 33.849918][ T10] usb 4-1: no configurations [ 33.855755][ T654] syzkaller0 (unregistering): left promiscuous mode [ 33.855828][ T10] usb 4-1: can't read configurations, error -22 [ 33.862862][ T654] syzkaller0 (unregistering): left allmulticast mode [ 33.938009][ T661] capability: warning: `syz.2.110' uses deprecated v2 capabilities in a way that may be insecure [ 33.991722][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.015339][ T10] usb 4-1: no configurations [ 34.020122][ T10] usb 4-1: can't read configurations, error -22 [ 34.026913][ T10] usb usb4-port1: unable to enumerate USB device [ 34.108169][ T658] rust_binder: Write failure EFAULT in pid:42 [ 34.687540][ T686] overlayfs: failed to clone upperpath [ 34.729481][ T691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 34.991327][ T704] overlay: Unknown parameter 'subj_user' [ 35.063383][ T712] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 35.084363][ T714] rust_binder: Write failure EFAULT in pid:34 [ 35.113945][ T591] ------------[ cut here ]------------ [ 35.126153][ T591] WARNING: CPU: 0 PID: 591 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 35.134390][ T591] Modules linked in: [ 35.138297][ T591] CPU: 0 UID: 0 PID: 591 Comm: syz-executor Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 35.150371][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 35.160593][ T591] RIP: 0010:drop_nlink+0xce/0x110 [ 35.165869][ T591] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 35.185689][ T591] RSP: 0018:ffffc90010127c60 EFLAGS: 00010293 [ 35.192001][ T591] RAX: ffffffff81edc76e RBX: ffff88811c404b98 RCX: ffff888119729300 [ 35.200297][ T591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.208448][ T591] RBP: ffffc90010127c88 R08: 0000000000000003 R09: 0000000000000004 [ 35.216613][ T591] R10: dffffc0000000000 R11: fffff52002024f7c R12: dffffc0000000000 [ 35.224837][ T591] R13: 1ffff1102388097c R14: ffff88811c404be0 R15: 0000000000000000 [ 35.233043][ T591] FS: 0000555560099500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.242101][ T591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.249173][ T591] CR2: 00005555600bc4e8 CR3: 00000001186d6000 CR4: 00000000003526b0 [ 35.257568][ T591] Call Trace: [ 35.260877][ T591] [ 35.263963][ T591] shmem_rmdir+0x5f/0x90 [ 35.268241][ T591] vfs_rmdir+0x3e0/0x560 [ 35.272830][ T591] incfs_kill_sb+0x109/0x230 [ 35.277434][ T591] deactivate_locked_super+0xd5/0x2a0 [ 35.283100][ T591] deactivate_super+0xb8/0xe0 [ 35.287965][ T591] cleanup_mnt+0x3f1/0x480 [ 35.292508][ T591] __cleanup_mnt+0x1d/0x40 [ 35.297071][ T591] task_work_run+0x1e3/0x250 [ 35.301697][ T591] ? __cfi_task_work_run+0x10/0x10 [ 35.307082][ T591] ? __x64_sys_umount+0x126/0x170 [ 35.312406][ T591] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.318428][ T591] ? __kasan_check_read+0x15/0x20 [ 35.323490][ T591] resume_user_mode_work+0x36/0x50 [ 35.328705][ T591] syscall_exit_to_user_mode+0x64/0xb0 [ 35.334292][ T591] do_syscall_64+0x64/0xf0 [ 35.338722][ T591] ? clear_bhb_loop+0x50/0xa0 [ 35.343628][ T591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.349619][ T591] RIP: 0033:0x7fc7fb18ff17 [ 35.354077][ T591] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 35.374545][ T591] RSP: 002b:00007ffdd95a3ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.383064][ T591] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7fb18ff17 [ 35.391129][ T591] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd95a3b70 [ 35.399303][ T591] RBP: 00007ffdd95a3b70 R08: 0000000000000000 R09: 0000000000000000 [ 35.407393][ T591] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd95a4c00 [ 35.415531][ T591] R13: 00007fc7fb211c05 R14: 0000000000008906 R15: 00007ffdd95a4c40 [ 35.423749][ T591] [ 35.426791][ T591] ---[ end trace 0000000000000000 ]--- [ 35.432574][ T591] ================================================================== [ 35.440750][ T591] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 35.447212][ T591] Write of size 4 at addr 0000000000000168 by task syz-executor/591 [ 35.455200][ T591] [ 35.457532][ T591] CPU: 1 UID: 0 PID: 591 Comm: syz-executor Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 35.457559][ T591] Tainted: [W]=WARN [ 35.457565][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.457575][ T591] Call Trace: [ 35.457582][ T591] [ 35.457590][ T591] __dump_stack+0x21/0x30 [ 35.457614][ T591] dump_stack_lvl+0x10c/0x190 [ 35.457635][ T591] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.457656][ T591] print_report+0x3d/0x70 [ 35.457673][ T591] kasan_report+0x163/0x1a0 [ 35.457691][ T591] ? ihold+0x24/0x70 [ 35.457707][ T591] ? _raw_spin_unlock+0x45/0x60 [ 35.457727][ T591] ? ihold+0x24/0x70 [ 35.457744][ T591] kasan_check_range+0x299/0x2a0 [ 35.457762][ T591] __kasan_check_write+0x18/0x20 [ 35.457783][ T591] ihold+0x24/0x70 [ 35.457798][ T591] vfs_rmdir+0x26a/0x560 [ 35.457818][ T591] incfs_kill_sb+0x109/0x230 [ 35.457842][ T591] deactivate_locked_super+0xd5/0x2a0 [ 35.457863][ T591] deactivate_super+0xb8/0xe0 [ 35.457882][ T591] cleanup_mnt+0x3f1/0x480 [ 35.457900][ T591] __cleanup_mnt+0x1d/0x40 [ 35.457916][ T591] task_work_run+0x1e3/0x250 [ 35.457935][ T591] ? __cfi_task_work_run+0x10/0x10 [ 35.457953][ T591] ? __x64_sys_umount+0x126/0x170 [ 35.457973][ T591] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.457995][ T591] ? __kasan_check_read+0x15/0x20 [ 35.458016][ T591] resume_user_mode_work+0x36/0x50 [ 35.458035][ T591] syscall_exit_to_user_mode+0x64/0xb0 [ 35.458053][ T591] do_syscall_64+0x64/0xf0 [ 35.458072][ T591] ? clear_bhb_loop+0x50/0xa0 [ 35.458090][ T591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.458106][ T591] RIP: 0033:0x7fc7fb18ff17 [ 35.458120][ T591] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 35.458133][ T591] RSP: 002b:00007ffdd95a3ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.458151][ T591] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7fb18ff17 [ 35.458162][ T591] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd95a3b70 [ 35.458173][ T591] RBP: 00007ffdd95a3b70 R08: 0000000000000000 R09: 0000000000000000 [ 35.458184][ T591] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd95a4c00 [ 35.458195][ T591] R13: 00007fc7fb211c05 R14: 0000000000008906 R15: 00007ffdd95a4c40 [ 35.458208][ T591] [ 35.458214][ T591] ================================================================== [ 35.777908][ T591] Disabling lock debugging due to kernel taint [ 35.784628][ T591] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 35.792640][ T591] #PF: supervisor write access in kernel mode [ 35.798896][ T591] #PF: error_code(0x0002) - not-present page [ 35.804899][ T591] PGD 800000011b0b6067 P4D 800000011b0b6067 PUD 0 [ 35.811446][ T591] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 35.817550][ T591] CPU: 0 UID: 0 PID: 591 Comm: syz-executor Tainted: G B W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 35.830961][ T591] Tainted: [B]=BAD_PAGE, [W]=WARN [ 35.836092][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.846350][ T591] RIP: 0010:ihold+0x2a/0x70 [ 35.850995][ T591] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 35.871163][ T591] RSP: 0018:ffffc90010127ca0 EFLAGS: 00010246 [ 35.877436][ T591] RAX: ffff888119729300 RBX: 0000000000000000 RCX: ffff888119729300 [ 35.885542][ T591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.893626][ T591] RBP: ffffc90010127cb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 35.901993][ T591] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88811c404ba4 [ 35.910255][ T591] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 35.918348][ T591] FS: 0000555560099500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.927312][ T591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.934005][ T591] CR2: 0000000000000168 CR3: 00000001186d6000 CR4: 00000000003526b0 [ 35.942006][ T591] Call Trace: [ 35.945291][ T591] [ 35.948264][ T591] vfs_rmdir+0x26a/0x560 [ 35.952520][ T591] incfs_kill_sb+0x109/0x230 [ 35.957127][ T591] deactivate_locked_super+0xd5/0x2a0 [ 35.962505][ T591] deactivate_super+0xb8/0xe0 [ 35.967192][ T591] cleanup_mnt+0x3f1/0x480 [ 35.971612][ T591] __cleanup_mnt+0x1d/0x40 [ 35.976121][ T591] task_work_run+0x1e3/0x250 [ 35.980735][ T591] ? __cfi_task_work_run+0x10/0x10 [ 35.986117][ T591] ? __x64_sys_umount+0x126/0x170 [ 35.991324][ T591] ? __cfi___x64_sys_umount+0x10/0x10 [ 35.997046][ T591] ? __kasan_check_read+0x15/0x20 [ 36.002080][ T591] resume_user_mode_work+0x36/0x50 [ 36.007224][ T591] syscall_exit_to_user_mode+0x64/0xb0 [ 36.012793][ T591] do_syscall_64+0x64/0xf0 [ 36.017271][ T591] ? clear_bhb_loop+0x50/0xa0 [ 36.022034][ T591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.027935][ T591] RIP: 0033:0x7fc7fb18ff17 [ 36.032530][ T591] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 36.052582][ T591] RSP: 002b:00007ffdd95a3ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 36.061458][ T591] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7fb18ff17 [ 36.069438][ T591] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd95a3b70 [ 36.077510][ T591] RBP: 00007ffdd95a3b70 R08: 0000000000000000 R09: 0000000000000000 [ 36.085574][ T591] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd95a4c00 [ 36.093726][ T591] R13: 00007fc7fb211c05 R14: 0000000000008906 R15: 00007ffdd95a4c40 [ 36.101700][ T591] [ 36.104719][ T591] Modules linked in: [ 36.108612][ T591] CR2: 0000000000000168 [ 36.112765][ T591] ---[ end trace 0000000000000000 ]--- [ 36.118213][ T591] RIP: 0010:ihold+0x2a/0x70 [ 36.122815][ T591] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 36.142536][ T591] RSP: 0018:ffffc90010127ca0 EFLAGS: 00010246 [ 36.148619][ T591] RAX: ffff888119729300 RBX: 0000000000000000 RCX: ffff888119729300 [ 36.156596][ T591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.164653][ T591] RBP: ffffc90010127cb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 36.172737][ T591] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88811c404ba4 [ 36.180794][ T591] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 36.189025][ T591] FS: 0000555560099500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.197955][ T591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.204549][ T591] CR2: 0000000000000168 CR3: 00000001186d6000 CR4: 00000000003526b0 [ 36.213237][ T591] Kernel panic - not syncing: Fatal exception [ 36.219954][ T591] Kernel Offset: disabled [ 36.224480][ T591] Rebooting in 86400 seconds..