last executing test programs: 2.84019894s ago: executing program 0 (id=43): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) lremovexattr(0x0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010701000000000000006700e7ff070001"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = signalfd4(r3, &(0x7f0000000440)={[0x1c00]}, 0x8, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @private2, 0xfffff801}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x29}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60008000}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/248, 0xf8, 0x1, 0x39}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.83765128s ago: executing program 0 (id=44): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r2, 0x1, 0x50bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = fsmount(0xffffffffffffffff, 0x0, 0x32) ioctl$TIOCCBRK(r3, 0x5428) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x9, 0x1380, 0x4}) fcntl$setown(r4, 0x8, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='/dev/rnullb0\x00', &(0x7f0000000080)='/dev/rnullb0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffffc000) 2.669668396s ago: executing program 0 (id=45): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0xe82c, 0x0, 0x209}) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x18e881, 0x0) ioctl$RNDGETENTCNT(r0, 0x5207, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x4b6602, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff6) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\xe5,2\x14\x90*vS\x10\xb7\x9eM\xc7\x15\x86d\xe2/\r\x17\x0eH\xe5\n\x11p{\x1d\x17\x848\x8e\xc5w\x1d\x1a\xa9dJ\xda\x05\xc5\xef3_qa|,\x9c\x90lZ\xa0;\x89>Y\xde\xd4\x89r\x19\x05\xea\xcc|\xa7\xbf\xac\x04\x9d^\x94\xe88\xf5\x90\xa9\x90$]3\xfb>\xa5\xe3\xf7\xabE\x16I2\x0eu\x8a\xb5\xc7\x94yK\xbaU\xea\x88\x943@\xae\xfe\x8aJ]\xb7\x8b\xae\'\xdf\xd7\xcc\x04RZ\xea\x01\xc6\x13\xe6Y\x89:f\xa9B\x85\xd9\xa7\xd4\xb3Y\xfe\x84\x1d \xcd\x953\xd3%\xbe\x85\xb7g\xf6\xf6%\xaey;\xff.)\x82]e\\a\\0p<\x8dr\x19\xabY\xf2L/\xefG \x1a\xfalT\x12\rU\xceb\xa4\x9c\xe4\x9b\xcb\xa8oM_\xa2\xc3\x06~\\\xd5\'\xed*\xed-\xf0b\x12H\xac\x90\xd3\x00\xa4\x1fO\t&') mmap(&(0x7f0000878000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xffffc000) 2.655666678s ago: executing program 0 (id=46): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/136, 0x88, 0x0, 0x37}, @flat=@weak_handle={0x77682a85, 0x800, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 2.600204524s ago: executing program 0 (id=47): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000100000000000000000000000ac1414bb00000000000000000000000000080004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) readahead(r0, 0x4, 0x4058) 2.597549734s ago: executing program 0 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x7}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0x112}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000032c0)=""/246, 0x8f}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket(0x10, 0x3, 0x0) r5 = gettid() arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) r8 = socket(0x10, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xe) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x7c00000000000000, 0x4000, 0x7, 0x2, 0x16}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a"], 0x20}}, 0x0) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x13) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x74, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x10, 0x5, 0x0, 0x1, [@nested={0xc, 0xce, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @pid=r5}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="b1e3be0000c0c03235000100000f30c744240077490000c744240286000000c7442406000000000f011c24f30f09f08141fb6758e0c60f04da26650fab6e08660f386ec65cc4e37908f59d0f06", 0x62}], 0x1, 0x2b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f00000002c0)=ANY=[@ANYBLOB="64697273796e632c14db51d0d64dc3a4ff00500fa9dbcbfa16d2a0d0588e1512c8a0bc5a2f6883c98216ed7d593be3fb5670d4c7803c1ee18766d5948ec0f94d6c3f98569fe0c7d76adda167b58a416562054fbfd76bace9d3ccd085e1299e4b9ac5806e507f880d89ec1f479893289580eda96d59cc1e3866e5fbad2d6a2dab4fd304266cbbb9ae84a5cea1d47e2b87fa34a1bfe38cb576421463424fd93a8099004152c33f201023037452fbbfa0ecd77f18aef85308597c0527c52d7cea3d09ed99d2e68f2d9d95dc090108"]) 1.554530207s ago: executing program 2 (id=65): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$FITHAW(r0, 0xc0045878) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1.491013693s ago: executing program 2 (id=66): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r1, 0x7fffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close_range(r2, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xe0f01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) syz_open_pts(r1, 0x509800) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r4], 0x20}}, 0x40816) close(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.443141198s ago: executing program 2 (id=67): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) (async) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c60000000000000109022400010000000309040000010300010009210000080123070009058103"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r2, 0x1) (async) listen(r2, 0x1) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000002000020ff7fa1a440000000010109024400010100c07d090400fe1602020000052406000005240000000d240f01000001000000000000090581030000087f810905820220000400000905c802"], 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0xc00000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) getpgrp(0x0) (async) r4 = getpgrp(0x0) sched_getattr(r4, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r4) (async) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r4) sendfile(r0, r0, 0x0, 0x1000007fd) socket$nl_route(0x10, 0x3, 0x0) 1.199545032s ago: executing program 1 (id=75): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 1.169968525s ago: executing program 1 (id=76): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x2003, 0x1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d07}]}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) r8 = socket$key(0xf, 0x3, 0x2) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r7, 0x1800000, r8}, 0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.01192275s ago: executing program 1 (id=77): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.010947801s ago: executing program 1 (id=78): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000b80)=""/240, 0xf0}, {&(0x7f0000003500)=""/4089, 0xff9}, {&(0x7f0000001040)=""/164, 0xa4}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000001100)=""/144, 0x90}, {&(0x7f0000000c80)=""/271, 0x10f}, {&(0x7f0000000540)=""/88, 0x58}], 0x9}, 0x11}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}], 0x7, 0x2102, 0x0) 1.010275591s ago: executing program 1 (id=79): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.009867501s ago: executing program 1 (id=80): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e1f}, 0x10) (async) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280), 0x4) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2b27, 0x33, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x3, "fc50b63b"}, @main=@item_012={0x2, 0x0, 0x8, "fecb"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xa44}}}}, 0x0) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (rerun: 64) 302.446661ms ago: executing program 3 (id=86): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x169042, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x24}}, {@smackfsroot={'smackfsroot', 0x3d, 'broadcast-link\x00'}}]}}) listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x200, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x68}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x139}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3cc000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x756}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8000}, 0x90) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/183, 0xb7) 240.179957ms ago: executing program 3 (id=87): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8881f6e0f000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000"], 0xe4}}, 0x4000005) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0xc, 0x1, 0x3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f00000001c0)=0x7, 0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='0000000007,\x00'/27]) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000000)={0x6, 0x5, 0x800000000000102}) pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 227.799588ms ago: executing program 3 (id=88): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000b80)=""/240, 0xf0}, {&(0x7f0000003500)=""/4089, 0xff9}, {&(0x7f0000001040)=""/164, 0xa4}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000001100)=""/144, 0x90}, {&(0x7f0000000c80)=""/271, 0x10f}, {&(0x7f0000000540)=""/88, 0x58}], 0x9}, 0x11}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}], 0x7, 0x2102, 0x0) 207.88833ms ago: executing program 2 (id=89): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)=[@increfs, @dead_binder_done], 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000400)=0x20) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 150.178095ms ago: executing program 2 (id=90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x800) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000380)=0x3, 0x4) arch_prctl$ARCH_GET_FS(0x1003, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30d001, 0x0) setrlimit(0x7, &(0x7f0000000400)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) write$FUSE_DIRENT(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x200001d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4800) ioctl$BLKRASET(r6, 0x1262, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180209050000002abd7000fcdbdf25030006003c80000002004e23ac1e010100000000f2000000"], 0x28}}, 0x24000040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310d2dbd7000ffdbdf252500000008000300", @ANYRES32=r10, @ANYBLOB="0a00340001010101010000007a2f4768d3263d3ed2a6b5efaecf000800260d000900cce7d11545af000a00060050"], 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf213500000008000300", @ANYRES32=r10, @ANYBLOB="1400fe00d10917b06ddccfd951f6c1bf4f71482c0600fd0003000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008011}, 0x40) 148.720256ms ago: executing program 3 (id=91): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = syz_io_uring_setup(0x5853, &(0x7f00000000c0)={0x0, 0xe084, 0x40, 0x4, 0x33a}, &(0x7f0000000040), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000266000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r4, 0x8000000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 145.875466ms ago: executing program 2 (id=92): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000001dc0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) ptrace$poke(0x4, r2, &(0x7f0000000000), 0x8) 2.09398ms ago: executing program 3 (id=93): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) socket$netlink(0x10, 0x3, 0x15) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/226, 0xe2}, {&(0x7f00000001c0)=""/143, 0x8f}, {&(0x7f0000000000)=""/41, 0x29}], 0x3, 0x83f, 0x7, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 0s ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1529682432,\x00']) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="09234acc0efb3ebc4d194ebac23639b6524c720b4d00297761a35487d2def562d417697cabb2de3121cc133655f2216419493a144aafb4718569bbbb671ea8e02a048a0ef2f70b67b1c687c74a8d707ffee57bee3c468f363c2f3d3f300c5c70f05b86553ad1b83965a91849e5b77d98ef6aa2682757d4b97d65a1ea68df8cd2193ef759feaad7f00d07595954e3e7c179c584", 0x93}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x1c, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000140)='gfs2meta\x00', 0x1101c0, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x8080, 0x43) accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000300)=0x8, 0x4) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa13ca8e5839881ae, 0x4}) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000280)=0x7a, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.782828][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 17.782847][ T36] audit: type=1400 audit(1760803843.470:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.787666][ T36] audit: type=1400 audit(1760803843.470:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.791029][ T36] audit: type=1400 audit(1760803843.480:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[1681]" dev="pipefs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.794673][ T36] audit: type=1400 audit(1760803843.480:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.798059][ T36] audit: type=1400 audit(1760803843.480:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. [ 26.042126][ T36] audit: type=1400 audit(1760803851.730:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.043557][ T282] cgroup: Unknown subsys name 'net' [ 26.065069][ T36] audit: type=1400 audit(1760803851.730:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.092432][ T36] audit: type=1400 audit(1760803851.760:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.092676][ T282] cgroup: Unknown subsys name 'devices' [ 26.277419][ T282] cgroup: Unknown subsys name 'hugetlb' [ 26.283104][ T282] cgroup: Unknown subsys name 'rlimit' [ 26.459464][ T36] audit: type=1400 audit(1760803852.150:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.483068][ T36] audit: type=1400 audit(1760803852.150:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.508151][ T36] audit: type=1400 audit(1760803852.150:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.522107][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.543856][ T36] audit: type=1400 audit(1760803852.230:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.569495][ T36] audit: type=1400 audit(1760803852.230:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.606682][ T36] audit: type=1400 audit(1760803852.300:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.632571][ T36] audit: type=1400 audit(1760803852.300:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.632897][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.497574][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.504706][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.512187][ T289] bridge_slave_0: entered allmulticast mode [ 27.518868][ T289] bridge_slave_0: entered promiscuous mode [ 27.526668][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.534278][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.541626][ T289] bridge_slave_1: entered allmulticast mode [ 27.548437][ T289] bridge_slave_1: entered promiscuous mode [ 27.601439][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.608597][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.615730][ T290] bridge_slave_0: entered allmulticast mode [ 27.622359][ T290] bridge_slave_0: entered promiscuous mode [ 27.640331][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.647432][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.655427][ T290] bridge_slave_1: entered allmulticast mode [ 27.661814][ T290] bridge_slave_1: entered promiscuous mode [ 27.675920][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.683022][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.690286][ T291] bridge_slave_0: entered allmulticast mode [ 27.696624][ T291] bridge_slave_0: entered promiscuous mode [ 27.713506][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.720608][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.728263][ T291] bridge_slave_1: entered allmulticast mode [ 27.734567][ T291] bridge_slave_1: entered promiscuous mode [ 27.831015][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.838188][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.845912][ T292] bridge_slave_0: entered allmulticast mode [ 27.852545][ T292] bridge_slave_0: entered promiscuous mode [ 27.861511][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.870040][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.877496][ T292] bridge_slave_1: entered allmulticast mode [ 27.883872][ T292] bridge_slave_1: entered promiscuous mode [ 27.972413][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.981352][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.989120][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.996998][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.008897][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.016019][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.023404][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.030675][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.057416][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.064506][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.072262][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.079341][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.120066][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.127158][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.134439][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.141591][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.160569][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.168460][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.176386][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.183695][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.191255][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.198562][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.206318][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.213931][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.227546][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.234632][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.248607][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.255702][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.265628][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.273140][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.296695][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.304028][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.313079][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.320182][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.336550][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.343803][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.351485][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.358545][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.376590][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.383658][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.429487][ T289] veth0_vlan: entered promiscuous mode [ 28.441894][ T291] veth0_vlan: entered promiscuous mode [ 28.462326][ T290] veth0_vlan: entered promiscuous mode [ 28.471148][ T292] veth0_vlan: entered promiscuous mode [ 28.485864][ T289] veth1_macvtap: entered promiscuous mode [ 28.494014][ T291] veth1_macvtap: entered promiscuous mode [ 28.508285][ T292] veth1_macvtap: entered promiscuous mode [ 28.522857][ T290] veth1_macvtap: entered promiscuous mode [ 28.586530][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.626739][ T335] 9p: Unknown uid 00000000004294967295 [ 28.634398][ T337] rust_binder: Write failure EFAULT in pid:2 [ 28.687949][ T347] /dev/rnullb0: Can't open blockdev [ 28.688240][ T350] Zero length message leads to an empty skb [ 28.767525][ T367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.767549][ T365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.775416][ T367] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 28.818782][ T378] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.839942][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.847632][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.854038][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.861820][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.868965][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.876708][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.883871][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.891695][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.898566][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.906264][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.912961][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.919820][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.927693][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.935000][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.941807][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.949512][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.956977][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.963614][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.971627][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 28.979289][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 28.986083][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.993309][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.005108][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.011626][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.019744][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.026789][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.033226][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.040523][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.050089][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.057328][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.063762][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.071147][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.078172][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.084576][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.092034][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.099059][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.105942][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.113183][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.120329][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.127112][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.134276][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.141298][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.148129][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.155453][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.162157][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.168957][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.176416][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.183093][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.190591][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.197480][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 29.203644][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.210685][ T45] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 29.219247][ T45] usb 1-1: config 179 has no interface number 0 [ 29.226228][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.232678][ T45] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 29.242885][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.250450][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.257375][ T45] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 29.271709][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.278374][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.285244][ T45] usb 1-1: config 179 interface 65 has no altsetting 0 [ 29.292318][ T45] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 29.301953][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.308659][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.315454][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.323916][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.335473][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.342202][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.350438][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.357602][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.364313][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.370721][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.377903][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.385311][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.402100][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.409650][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.416582][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.423035][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.431202][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.438035][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.444388][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.451535][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.458208][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.464655][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.471805][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.478454][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.484802][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.491975][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.498625][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.505532][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.512809][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.520069][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.526615][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.533800][ T45] usb 1-1: USB disconnect, device number 2 [ 29.553883][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.562051][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.569047][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.591519][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.598219][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.607233][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.615509][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.622147][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.629306][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.636753][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 29.637175][ T379] exFAT-fs (rnullb0): invalid boot record signature [ 29.652351][ T379] exFAT-fs (rnullb0): failed to read boot sector [ 29.655840][ T388] netlink: 'syz.3.19': attribute type 27 has an invalid length. [ 29.659010][ T379] exFAT-fs (rnullb0): failed to recognize exfat type [ 29.703079][ T392] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 29.706775][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 29.719998][ T392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 29.721831][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 29.742346][ T391] rust_binder: Error while translating object. [ 29.742396][ T391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.755254][ T391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 30.010766][ T409] rust_binder: Error while translating object. [ 30.020183][ T409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.026564][ T409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 30.055202][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.103862][ T414] rust_binder: Write failure EFAULT in pid:9 [ 30.104143][ T414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 30.236565][ T10] usb 3-1: config 1 has an invalid interface number: 64 but max is 0 [ 30.255127][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.274280][ T10] usb 3-1: config 1 has no interface number 0 [ 30.282480][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 30.291800][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.300449][ T10] usb 3-1: Product: syz [ 30.304785][ T10] usb 3-1: Manufacturer: syz [ 30.309949][ T10] usb 3-1: SerialNumber: syz [ 30.405145][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.516785][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.525441][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.533588][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.542205][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.551134][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.559602][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 30.559907][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.566162][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.573492][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.585127][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.593520][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.605801][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.614400][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.622397][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.633200][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.641682][ T9] usb 1-1: config 0 descriptor?? [ 30.654626][ T31] usb 3-1: USB disconnect, device number 2 [ 30.668576][ T423] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 30.707921][ T426] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.737384][ T426] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.787566][ T426] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 30.794747][ T426] rust_binder: 26: no such ref 2 [ 30.799908][ T426] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 30.906736][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 30.920869][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 30.930273][ T9] usb 1-1: USB disconnect, device number 3 [ 31.035122][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 31.187002][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.190310][ T431] netlink: 51 bytes leftover after parsing attributes in process `syz.2.32'. [ 31.197753][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 31.217858][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 31.233693][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=0008, bcdDevice= 0.40 [ 31.244292][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.252461][ T10] usb 4-1: SerialNumber: syz [ 31.395568][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 31.395588][ T36] audit: type=1400 audit(1760803857.090:159): avc: denied { read write } for pid=446 comm="syz.1.38" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.426041][ T36] audit: type=1400 audit(1760803857.090:160): avc: denied { open } for pid=446 comm="syz.1.38" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.460463][ T36] audit: type=1400 audit(1760803857.150:161): avc: denied { write } for pid=448 comm="syz.2.39" name="raw6" dev="proc" ino=4026532440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.488233][ T31] usb 4-1: USB disconnect, device number 2 [ 31.498065][ T36] audit: type=1400 audit(1760803857.180:162): avc: denied { read } for pid=427 comm="syz.3.31" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.499438][ T452] netlink: 312 bytes leftover after parsing attributes in process `syz.2.40'. [ 31.528201][ T36] audit: type=1400 audit(1760803857.180:163): avc: denied { open } for pid=427 comm="syz.3.31" path="net:[4026532550]" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.552159][ T36] audit: type=1400 audit(1760803857.180:164): avc: denied { create } for pid=427 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.572668][ T36] audit: type=1400 audit(1760803857.220:165): avc: denied { write } for pid=446 comm="syz.1.38" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.592476][ T454] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.595878][ T36] audit: type=1400 audit(1760803857.280:166): avc: denied { ioctl } for pid=453 comm="syz.0.41" path="socket:[3559]" dev="sockfs" ino=3559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.608075][ T454] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.627738][ T36] audit: type=1400 audit(1760803857.280:167): avc: denied { write } for pid=453 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.655683][ T36] audit: type=1400 audit(1760803857.280:168): avc: denied { getattr } for pid=453 comm="syz.0.41" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.710027][ T459] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 31.718310][ T459] rust_binder: Error while translating object. [ 31.718348][ T459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.724552][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 31.785183][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.933676][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 31.946228][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.965441][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.978824][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.989268][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.998619][ T10] usb 3-1: config 0 descriptor?? [ 32.004663][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 32.115116][ T481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.115149][ T481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 32.129001][ T483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.154407][ T486] tipc: Enabling not permitted [ 32.166663][ T486] tipc: Enabling of bearer rejected, failed to enable media [ 32.207410][ T452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.40'. [ 32.219899][ T10] usb 3-1: USB disconnect, device number 3 [ 32.543384][ T505] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 32.554107][ T505] ======================================================= [ 32.554107][ T505] WARNING: The mand mount option has been deprecated and [ 32.554107][ T505] and is ignored by this kernel. Remove the mand [ 32.554107][ T505] option from the mount to silence this warning. [ 32.554107][ T505] ======================================================= [ 32.589110][ T505] SELinux: security_context_str_to_sid (sytem_uÝGйÇÀ) failed with errno=-22 [ 32.844113][ T518] binder: Bad value for 'max' [ 32.844791][ T519] binder: Bad value for 'max' [ 32.995100][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.083293][ T528] netlink: 'syz.2.66': attribute type 11 has an invalid length. [ 33.091642][ T528] rust_binder: Error in use_page_slow: ESRCH [ 33.091666][ T528] rust_binder: use_range failure ESRCH [ 33.097806][ T528] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 33.103475][ T528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.111605][ T528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:54 [ 33.155091][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 33.170805][ T31] usb 4-1: config 4 has an invalid interface number: 215 but max is 0 [ 33.179228][ T31] usb 4-1: config 4 has no interface number 0 [ 33.188208][ T31] usb 4-1: New USB device found, idVendor=76da, idProduct=6a4e, bcdDevice=8c.0b [ 33.197575][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.205620][ T31] usb 4-1: Product: syz [ 33.209883][ T31] usb 4-1: Manufacturer: syz [ 33.214509][ T31] usb 4-1: SerialNumber: syz [ 33.338934][ T544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60 [ 33.385075][ T332] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 33.428812][ T552] rust_binder: Failed copying remainder into alloc: EFAULT [ 33.428831][ T552] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 33.436470][ T552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.444816][ T552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:66 [ 33.474749][ T31] hub 4-1:4.215: bad descriptor, ignoring hub [ 33.490080][ T31] hub 4-1:4.215: probe with driver hub failed with error -5 [ 33.497764][ T31] usb 4-1: bad CDC descriptors [ 33.525492][ T31] usb 4-1: USB disconnect, device number 3 [ 33.551479][ T561] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 33.551507][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.572200][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.583000][ T332] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 33.583022][ T564] /dev/rnullb0: Can't open blockdev [ 33.583232][ T564] /dev/rnullb0: Can't open blockdev [ 33.592500][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.593388][ T332] usb 3-1: config 0 descriptor?? [ 33.601590][ T564] /dev/rnullb0: Can't open blockdev [ 33.606282][ T332] usbhid 3-1:0.0: can't add hid device: -22 [ 33.614282][ T564] /dev/rnullb0: Can't open blockdev [ 33.617088][ T332] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 33.622129][ T564] /dev/rnullb0: Can't open blockdev [ 33.646009][ T564] /dev/rnullb0: Can't open blockdev [ 33.651405][ T564] /dev/rnullb0: Can't open blockdev [ 33.657188][ T564] /dev/rnullb0: Can't open blockdev [ 33.662689][ T564] /dev/rnullb0: Can't open blockdev [ 33.668781][ T564] /dev/rnullb0: Can't open blockdev [ 33.674263][ T564] /dev/rnullb0: Can't open blockdev [ 33.679797][ T564] /dev/rnullb0: Can't open blockdev [ 33.685356][ T564] /dev/rnullb0: Can't open blockdev [ 33.690866][ T564] /dev/rnullb0: Can't open blockdev [ 33.696388][ T564] /dev/rnullb0: Can't open blockdev [ 33.701786][ T564] /dev/rnullb0: Can't open blockdev [ 33.707243][ T564] /dev/rnullb0: Can't open blockdev [ 33.712799][ T564] /dev/rnullb0: Can't open blockdev [ 33.718290][ T564] /dev/rnullb0: Can't open blockdev [ 33.723725][ T564] /dev/rnullb0: Can't open blockdev [ 33.729237][ T564] /dev/rnullb0: Can't open blockdev [ 33.734620][ T564] /dev/rnullb0: Can't open blockdev [ 33.740109][ T564] /dev/rnullb0: Can't open blockdev [ 33.746208][ T564] /dev/rnullb0: Can't open blockdev [ 33.751775][ T564] /dev/rnullb0: Can't open blockdev [ 33.757414][ T564] /dev/rnullb0: Can't open blockdev [ 33.762930][ T564] /dev/rnullb0: Can't open blockdev [ 33.768823][ T564] /dev/rnullb0: Can't open blockdev [ 33.774953][ T564] /dev/rnullb0: Can't open blockdev [ 33.780490][ T564] /dev/rnullb0: Can't open blockdev [ 33.786143][ T564] /dev/rnullb0: Can't open blockdev [ 33.791585][ T564] /dev/rnullb0: Can't open blockdev [ 33.797424][ T564] /dev/rnullb0: Can't open blockdev [ 33.802893][ T564] /dev/rnullb0: Can't open blockdev [ 33.808680][ T564] /dev/rnullb0: Can't open blockdev [ 33.814234][ T564] /dev/rnullb0: Can't open blockdev [ 33.818264][ T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.819810][ T564] /dev/rnullb0: Can't open blockdev [ 33.831527][ T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.835403][ T564] /dev/rnullb0: Can't open blockdev [ 33.846450][ T332] usb 3-1: USB disconnect, device number 4 [ 33.847956][ T564] /dev/rnullb0: Can't open blockdev [ 33.859579][ T564] /dev/rnullb0: Can't open blockdev [ 33.865237][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.872013][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.879415][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.886166][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.893307][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.900037][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.907823][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.914715][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.922023][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.928841][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.936090][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.942800][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.950377][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.957119][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.964239][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.970975][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.978612][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.985965][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 33.993099][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 33.999840][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.007121][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.014046][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.021456][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.028300][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.035841][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.042559][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.050379][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.057503][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.064872][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.072245][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.079582][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.086619][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.094058][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.094281][ T568] netlink: 'syz.3.81': attribute type 46 has an invalid length. [ 34.101058][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.109127][ T568] netlink: 'syz.3.81': attribute type 28 has an invalid length. [ 34.116228][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.130723][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.138257][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.146178][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.154059][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.161016][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.170440][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.177604][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.185746][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.188791][ T573] rust_binder: Write failure EFAULT in pid:59 [ 34.199899][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.214358][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.221778][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.229801][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.236618][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.243933][ T564] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.251480][ T564] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 34.289616][ T581] fuse: Unknown parameter 'pcr' [ 34.312631][ T583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.87'. [ 34.321782][ T583] netlink: 59 bytes leftover after parsing attributes in process `syz.3.87'. [ 34.330755][ T583] netlink: 59 bytes leftover after parsing attributes in process `syz.3.87'. [ 34.421400][ T592] rust_binder: Write failure EFAULT in pid:62 [ 34.504654][ T596] syz.2.92 (596): attempted to duplicate a private mapping with mremap. This is not supported. [ 34.549686][ T601] ------------[ cut here ]------------ [ 34.555284][ T601] WARNING: CPU: 1 PID: 601 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 34.564622][ T601] Modules linked in: [ 34.568611][ T601] CPU: 1 UID: 0 PID: 601 Comm: syz.3.94 Not tainted syzkaller #0 ab9e215a8d79cd87c3adea34e0b2794648952c95 [ 34.580091][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.590373][ T601] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 34.596692][ T601] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f2 0e ee 05 00 0f 85 be 00 00 00 c6 05 e5 0e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 34.616833][ T601] RSP: 0018:ffffc9000d9df860 EFLAGS: 00010246 [ 34.622944][ T601] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 34.631471][ T601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d9df918 [ 34.639775][ T601] RBP: ffffc9000d9df988 R08: ffffc9000d9df917 R09: 0000000000000000 [ 34.647811][ T601] R10: ffffc9000d9df900 R11: fffff52001b3bf23 R12: ffffc9000d9df8a0 [ 34.655953][ T601] R13: dffffc0000000000 R14: 1ffff92001b3bf10 R15: 0000000000000000 [ 34.663958][ T601] FS: 00007f2228f9f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.672969][ T601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.679718][ T601] CR2: 0000200000001000 CR3: 00000001180ec000 CR4: 00000000003526b0 [ 34.687770][ T601] Call Trace: [ 34.691160][ T601] [ 34.694105][ T601] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.700345][ T601] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.706412][ T601] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 34.712131][ T601] ___kmalloc_large_node+0x81/0x220 [ 34.717513][ T601] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 34.723204][ T601] __kmalloc_large_node_noprof+0x1e/0xe0 [ 34.728896][ T601] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 34.734560][ T601] __kmalloc_noprof+0x336/0x530 [ 34.739693][ T601] ? __cfi_lockref_get+0x10/0x10 [ 34.744712][ T601] incfs_realloc_mount_info+0xa7/0x4d0 [ 34.750239][ T601] ? incfs_add_sysfs_node+0x118/0x240 [ 34.755732][ T601] incfs_alloc_mount_info+0x479/0x600 [ 34.761303][ T601] incfs_mount_fs+0x3ca/0x960 [ 34.766168][ T601] ? __cfi_incfs_mount_fs+0x10/0x10 [ 34.771588][ T601] ? vfs_parse_fs_string+0x102/0x170 [ 34.777009][ T601] ? selinux_capable+0x38/0x50 [ 34.781840][ T601] legacy_get_tree+0x106/0x1b0 [ 34.786877][ T601] ? __cfi_incfs_mount_fs+0x10/0x10 [ 34.792226][ T601] vfs_get_tree+0x9e/0x290 [ 34.796744][ T601] do_new_mount+0x251/0xb40 [ 34.801286][ T601] ? security_capable+0xcf/0xf0 [ 34.806202][ T601] path_mount+0x688/0x1050 [ 34.810641][ T601] ? putname+0x113/0x150 [ 34.814893][ T601] __se_sys_mount+0x2bd/0x480 [ 34.819641][ T601] ? __x64_sys_mount+0xf0/0xf0 [ 34.824609][ T601] ? __kasan_check_write+0x18/0x20 [ 34.829795][ T601] ? fpregs_restore_userregs+0x11d/0x260 [ 34.835590][ T601] __x64_sys_mount+0xc3/0xf0 [ 34.840256][ T601] x64_sys_call+0x2021/0x2ee0 [ 34.844975][ T601] do_syscall_64+0x58/0xf0 [ 34.849488][ T601] ? clear_bhb_loop+0x50/0xa0 [ 34.854214][ T601] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.860191][ T601] RIP: 0033:0x7f222818efc9 [ 34.864650][ T601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.884599][ T601] RSP: 002b:00007f2228f9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.893088][ T601] RAX: ffffffffffffffda RBX: 00007f22283e5fa0 RCX: 00007f222818efc9 [ 34.901131][ T601] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 34.909161][ T601] RBP: 00007f2228211f91 R08: 0000200000000280 R09: 0000000000000000 [ 34.917425][ T601] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 34.925518][ T601] R13: 00007f22283e6038 R14: 00007f22283e5fa0 R15: 00007fffffa1da88 [ 34.933522][ T601] [ 34.936847][ T601] ---[ end trace 0000000000000000 ]--- [ 34.942494][ T601] incfs: Error allocating mount info. -12 [ 34.949095][ T601] incfs: mount failed -12