last executing test programs: 3.655084747s ago: executing program 0 (id=35): capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804c090) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 3.575143513s ago: executing program 0 (id=37): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 3.574032903s ago: executing program 2 (id=38): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106d0439c500000000000109022400010000200009040000020300010809210200000122050009058103ff03"], 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_usb_control_io(r1, 0x0, 0x0) unshare(0x2040400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="2bc4fad3987376b5c9274da9290ff6038f34efc4bb161078957ef2191ac743d3373cda1e059da7846ef53102b4b4e743ef4cb957e6d5ec395b4bd8dc2e6d19adc2d242d3904e6fe3b21ab50b5086dcc0b238ec0235cbf4e577e90c778f67993644cf38c69f5a9653e589cb6065fa4eeb3a26c4055018bb583f218e9f9e23f824559f374359d7ff13c2c3dd7e87c86474811f4d2887c4c796f0cd4264", 0x9c}, {&(0x7f0000000700)="8f1acdb3e31e683d73dbf3bd122adf8dc80d7088ba93d35fb37d7603cae4c9e6eddbe5d10025fd6628943206fc14e0b9f24b2e3d5efc7cd2be42ca118611798e150b5dc79e834e01002e06900600000096d43ffca024a17511cd714a2da85b39a98ccbb24f114811668167a5b3e946f698dd1228325fb4c27f2d943be6ba6eec30e7a55c0637319f332d0a0646fbf03499a1c2edbeb62dd1feb5adf058e7cf3c2efd12621d57d0653063e5ce52337bfff397cb33fcddc9c9", 0xb8}], 0x2}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/179, 0xb3, 0x1, &(0x7f00000002c0)=""/193, 0xc1}, &(0x7f0000000280)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x3) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x10203, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) 3.502024639s ago: executing program 0 (id=39): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000078000/0x4000)=nil, 0x4000}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}]}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) 3.258038858s ago: executing program 1 (id=45): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5f4, 0x8, 0x5, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0x5, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7f, '\x00', 0x5c}, {0x0, 0x4, 0x6, '\x00', 0x7}, {0x9, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x86, 0xb, '\x00', 0x9}, {0x2, 0x9, 0xf5, '\x00', 0x4a}, {0x8, 0x3, 0x0, '\x00', 0x6}, {0x3f, 0x4, 0x2, '\x00', 0x1}, {0x4, 0xd, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfb}, {0x5, 0x4f, 0x4, '\x00', 0x80}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xf, 0x0, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3, 0x4c, 0xb, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0xfd, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0xc7}]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) (async) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) 3.257638768s ago: executing program 1 (id=46): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) clock_gettime(0x0, &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)={0xf0, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0xdb, 0x0, 0x0, 0x0, @binary="81ce7bd58615b1899f8c369b5ca631ff3c13a972c48ccc1c1d62d1a1ba2e7403f5cd5aa32e8ee36d437dac134a982204fc90abd3e8288eb009cb6d30be3b13fcac215f75936b47bc2f81080ddbdde7c36d5b86651955fc084c1e026f39f432e04a390ff2b9848204828bb671e6549ae555dfd1fa4c3d993979ef63294136c483accec3bccdc084f00bcd754c59f03a40fffdbb98fc7676ab37d78210485f14e4164e36540cb569b0e58edf1d2c28be86a924fabb8ebfecd8ca232705e7602993630543f8142d9b2995677a2050c7caee813ad52f362149"}, @nested={0x4, 0xd}]}, 0xf0}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 3.215893971s ago: executing program 1 (id=47): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000008f40)={0x100000, 0xc, 0x100000, {r2}}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r0, &(0x7f0000002400)="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", 0x1000) 3.194920494s ago: executing program 1 (id=48): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) kcmp(r3, r2, 0x0, r1, r1) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000080)={0x0, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) finit_module(r7, &(0x7f00000000c0)='.\x85~\x00', 0x0) close(r0) 3.131651079s ago: executing program 3 (id=49): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/17, 0x11}, 0x8}], 0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xffff, 0x4) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x8) 3.066326513s ago: executing program 1 (id=50): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000008341a020800000000000109022400010000000a0944000002030001000921fe0000012205000905810360060e0100"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400705000000d6f4"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r2, 0x62bc, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x44200, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x3, 0x6, 0x8, 0x0, 0x200, 0xb89}]}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x14) pipe(0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x149) inotify_init() sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="172d6d998dd8853939c82bb23a873f16e1142e3ae2726730226e3bd89b04043da42bf918524c3cbd156d6b9b301e352070f48306d6474ec0d6d64b71e99cba10e3c8d493193d26ef8cd417eb09e55264ddb4d3fe2790836415efdb9b8c8d14ff5521bee3366f2338b85f0af7fd3400d32b21a76f4277e516dfe7838ae504ce75986a616b2d2f42cfaf163c19c6807d8d9c1ebd1f753030f037d8480cf20872cce27a7a6563d7c768994b44dd7371ca32a4932bf05f5989851c566012ba701f6917b8d7a4af35ffbfd1102ff4542dc8048703655d4447377eafe6b876190ae70cbfd12fe0b28281c2d43ecea173b43b045d7da44e8a07d43138adbbbb9ab5e994c1f7cb555bd5d734795968519feec2bce9f278af04d1b65b835ee7542ff6d8285f902a531b16fd6214f9bc20cb2edd835f28442b75c0adb57e77e4110a04949f72f552150d1feea4af07bb378bc9a5a112eb0112d2fb67762091dd611b87ebba5ae655af095d3cce07f6315822afa2ed6e5a2ad40557efac1662ca09033166bcc52ddb674c49173c11d3bc507138053e3609b0cee181129060c112f82e765e2e7a9294909bdb874f4f59c890937b22d79119cdefab94b51bf414fd5dd99bfd205dd7e775dcbdc33cbe5051f34e453cefb4b7ef9b650414093fa1b0c7574910aaecd386baaf3933cff7d5d36c6be146cce5ce5adb63ba8efc48f40254ebf0085b23a43fda974e9e2391edc923e52c24e0663fe6d1dfc9dabefaa9302181793ec0f45c4dc38d32cf46feaa2134a5183c6bf75fd891863fd9520f7affcaef9eb69e1dc4978891d546f75bc6c87111a4c6ddbbb1e996e974531be420f2d69dd01cbccf7f848fea5734a03e4b4318e85b9dcccf89203722708d5f3c42cecd5c27ed471867737d214215041a77fdfb283852d6b04934b1ae9b09ee135c44a5ed2b48e9060b9dc90c08719e6577ad1cdd80da3be24d90bb201e409d3f2bf5541ea77b78f850fc045e0700000000000000da6e2841054729edc1d4a32342db37f71cbbd45916231ccba7d4c3207cba7648d5d6acc9a9f3fcebdf2a6ba740e2c675ddad29465f34bdb32b2327488cd276c5b623acee4e959f3321d3bb7af2ff849405953b993de49606df88abce299d844e4a7ec5c459b9920bc5b07f2db7203b3e8d25fb3c26408b130801ae91de1b737e2ba3141cc112228f65067ea417816326fb3887d58606456cc0a8cd754c7191c45f8d05ae472f8960a1b3b8ff25a0730ec183fd5df9dc3c4d1fd2a259f9639afb39ab4c6f5c92e93dcff8937cfe9307ffbcd7c4cb035f42d19c3fb9f5ce93d06f92cd5ad4081d6fc4737e922f43d9c8a3c93b352238fd9a195ced479371831804c095e9d32224025b4d7be4d045080f2bf79634561d6c947204fee576df934c6ffd5bf2dd0ae4059edd3734843374e8eca603513e5d398ed8732f79c56fd0754197b43e42144fdf526847183b45eaac11c3d68084d5c4715cf65d920ccce64ecad0f44af388d9499a1be9c84d7ef1f5cd5ff56a994b1468cc3e94a85500238b1c85590aca9702a345a10449a2943307638686c6b95b9caa702e89986b6e3b678f4bdb9fc7bc57e60e467ea276a56ef30b03208261fc0abcbb30e7b163205a458b4b2d7a5c358a627b2772e21c58c35338b2d8c91007e523be83c653594570a5abc59a9375b49a48b625b823d9e8a431a08b4f9cda599708c7f914bdde725bc22340960abe426f1f0aa6bb298a623ee040f108ae5046a0454471529666cd4031477dce477e8bce1b2f7cf31142bb848078b8e662fd7bd3f00d0f7b9dac324f5169c7e2e69ecf195aad18106ea4bac4ef1cbd10ad8e3f18aeae1fd6c217473f7c867fec1886ccffb133309a80d4e803dd6a85a44e6016a5a4f06fde094408f539caa40cbf148c47ff48f6aa3ce837c79869c9ae9f6afe54b5cf68c94cd6740af8bd873375144efbcfcb44e9038a6bf2cf6c258775ddac525ec697f24dcc142abd3d8ac9e4dc1b8f15826baf1468835c99d2b1476aa19dc09e6a7dd604c138cb427edcc6f48b23297489c5026b6bdba897a0e44c6f197cf906095ff22d704a7a69902e90fee309e2f7a97ab213e27ee56a83a73ef3039b7ebd3fdd481422edfc3919eb3e780be330dd143c04ce94fad540ed1f419a4addcd9fb76e35e8e0d58bf3134513bb6b1beb98638ba2aae085fbf21ba4fd051e9c6932b69a5fa3df28d2c8afb1a6e3cfb34274fc2a03a6081f576b731db44335f26071b53116105f683573dbc6778258441b448128a3633cb8f1e1e0cef54a1d4e1b207277706facb8ac09301d08f1b4b9dea61e16810591c1201bbc9308b84bd8c057c628d6f6cf70b9bc9f606f7afeb6f5ed79af603fccbe0af81c33f56230f0845b54171304158b0f781e2cbb1101a34006406ec77899f43f2fc905a27f5027cd99a3125d6ed9a64237e27c83142c7163084c880269d2de3e866db1b0f2faeec69d28912c15343dc471b6b1229a288efdfae4b2bf646de64035ecf2b44f7ff007ee61db905e1305a0800588b2b74fe42684c470920ed184072b7e62e1ed150223b2927848801d3c471f33b1aebc478dbb74d972c3ea061e0812bab85ff72a6ff886e54fc06a7449509ee8426532ce040e8feea84358cbe4e8ad2cc22875fd2c352954fcc650958b0a5aa9c3b4941a36a8c93883e6152a70a7c9c640ca9731cc688dc5f5d9984dd03da79ba8ac8e844a89f38861a9abded34e244144afd091a35ae65c58b8a448c1f8d59c28f20aef77f0cc52ff53fc3cdd247842cdcc261055590f6f09bb9eeda3edfcb6fd7ab6ce4bf799de8c16e7d9cc76ae5c69f260c07ecf29a03ed6cf7dfc9b7b1036968c0d8a044808d7a6949990d69722fd1cc337e92d6878bbb6809d3929bf11b3e63f72a96590b36346fb39bc9c406552f8cb3449ea2fe4b79d02594bee985a0f60c5f6f7facc2d458b2bfe03a6cbc671a4b257c64afa512187e6d7035822fef8306ada5a4d0cc3ea1d556549893ebd2adcaf109ca4c5fe2391232e57d8fbf3407e9390e8c499b4f6a7a6d5917d25fea6c8d23084695f649827c63dfd39577a6c239a4a744064b8c89be1b7a43bb0c550ece181e4bc3f259f710913144729ebb9c60814ace7db0f00bbf55d39e3d8a392730f590b986344c26fffb4e8e654954bbf80dfeefc7826f00f4c5f0ebfa990beb5c58f8ea3bdc1b483e6589388150fcce4f016b66b49d9007ea28d88f5b8af0698c67d92e659601cdcbb20a809f4c3de0f1e6778ef6dd73f335075dc68f2c4b4323666404308a311d120a27bf37fbde866243d975137b8e62070e197d15b490a025bb4bd95225d595bc068c3755c7de80ccc4154c12fad1186f5cd18394414b247af5be148aee85448315b05ca8fc770e12b9436206935903262a83582575ed52d9396b39b5711fd76c5e31cb0b1d6ac621060ecf943d228822de54510f30fda634d0a43fb26b37933102a084224f32a82bae58f74aae869f83dedfcc273ec132ec4344ad53bd8d650518068934c9c58278d4601d4d1e62bd899705cb1ac9460e2f04c487bc16dff885c1d9cb65b523d4c391018822c1e6a6062b9a6b8ca5abe9c7594719dc8a191a5c664865d91e0a110883e6d5e3858b318189844204bc190041f74c1885e7792de21f362d91eef3e6a01825dd92195b9f8abec182950e8af4927a30cc0f1758eb69e6d7d13e291df9710e5b9059efa04eef4513f5b985a99ac44b66ebd39ea6491232ef6d74bf7fbf1ba58c071fc112e4f81edf7462fe1bf3b15747e650420d3938cae97cddd67bf9b248b9180c99c9d2975c889e876227a5eb9d7abe74a64590e5a303d680eec40453ea75750be10d1ce9859b447004ecfd99257895573ce7a8c2694c5f8b5b36aa7bfadf9e38a32807c26e2fe8d91f2652a5712b06138690df21597a9b42c19b7fb2d658dac348a09e04000584d7bab3e1ecd1ecc58a7cb9074747601d0a38420c7b1227c4cadc95d8602ff075f012454b06993d6d0a3fbc7b3cd017f98b6978110e40d7039ae4f86df3d2fb20c6adca504fa8f251b9bd618a0513e742e391dcc9f60de0f559af1f43144266235c2e92aa614a2cc1265bbd6c00e9d5b331f7769b814bca5db95791eb4070096e99cff2a3158fb9cc8150de34ef2fce176031848e478ad20b3de22f75d92383ee6655f2e47a00e98db945beb4edb726a817cc133efa11ff006381259032a9d24430f7030fa6dc878f28b0300dd355b171c568be1fd3d724850f488a8455f4393af643e54758b440bf33360ec3bd75ba79dc4077d05067060b460adbd190b49437d40a52ef9045c93764011c3ce61703874bcb6b3e5fbfbf7b825831aaf076a9254fb594be2f76b68a7b7ced361242ab32b2c1779725c2c8932a6aed7e2fcd9e60d5ea729de141311523a06367b59f7f63f88f8b94134d17bd7f72b96ba95ca84f41664f9b3e48201056b19d3ef5953bea7f5af7c882cd5450452285740a769d9b4d9da6a2bb4b6d5bd5dcf068e3b0a26325fb3627087856eb72baca1dfb0f1376285f67f7a0009e7bfaee210ebafd194d640ff0c72fe0eccd2c6f8ed0f7cd24ab57977b3ee486191ec186762daf021e45425ceac466fec2e7c135e968c8bcc29f48415260689cff312ec92b21d0ee92b09d2df9d0e4d362b56578c6f476c14c3b689044dbbac5dc01fc4327c5673bf9144cc0f7fc0508eb20645bb9eea622769ee28265e7292f4df82eaa500409206f824466084a3f4a7cda111c5c1e9f8cedee044e413a6d7ead9bdbcaf8e18e3552661b99dc6f6fde06bb91ecb7aabf25ac799c3a9bf6b63b01e28a154b299ba9d2985186a156347bb53a50033cda1f1d8eb743e76bf60969c0ef454d90795705a7644917edf64badad27193766f57cdaf38604f2c53c24e96db08a91fdde6061226fa4baf9d941dcc1c4d7a84a21f890a05b34daab7202fa3e9614ce5acf40f13bbe6b4a3a90beae42aa6fafbb555d7d198e86c6eb225f335a24c6853a10bb10bbf40dced3077e7a982d134e3f044564cd0916900273d1ce512c0b243db4bbad6964077bdf4efdb9d64f9321d35a6f39703a0b4fd0aed89c8813d0a4598d3467a44c07a0a249ce5db44d40b92eb5f8325b55d629bd60fe7009a0002fe019844a06ba3e8c2e91917379e3a6a7ac99a6127d26707e796ca539157accae29adc1c2bcf8450768eba665b6843acbb03ba044df224df634c0ccfaf630a74d495f1cba503188cb7e81c8d20ceb5a22cbb036e5668d4ebba5df377cc2c0d77caf2c84fc4eec058086d8793ca6ed23440da73b08a063c5e456382161ed287664d74fb7247b1fa62c932e3f675a83c8aa325545ee9c794c11ecf5ec2bfa28876008af15ffe04f89bcedf3aaa61eccef90a3351fce86e44375c673180cf6830b345cf9f15eb2211907673254be8b8d8b89f52581d048b0fb82aac3d506c897c6094f825c8d8eb296e614379dab845949ba1d223a06f6fc8d6a110ae6bd8ed3166bdb0f949af2f873dffaa23461256f28d72456dad0856f5a7367d9577d856636ce6d03c5af26b9e7686a8e75905979d6768ccfd04851af8abaee820af46de52e9acfb96c0fd713885640740b39d5174d035bd8ebfaa8648fc9f5ebf0667dd8b6431449f5995b72272b1b15ad4e3864ad9f275e423175db26a1774d137b2f30f27e6da9410da101ea773a9aa3d69c3d3bb33ef66d35ebcef71212ac9800469fd15913895afd42d5913a1838a38", @ANYRES16=r0, @ANYBLOB="fd9d1ce3b5556559aa1b9e6fbb4797a3c9344a04bd6594616bd9eb40b3623696227b13847816e9d0f760c05897218637ae7d05aee83cac832f60af4cb60618f857eea92215560107461a409988643cc70958d2083569bdff434349cdb39c255832dbd18881a18dc4d45d93209c807432afda43a1e2003c127748459403d04bcdfcf41ae9", @ANYBLOB="c5a75876a9707c42841f994250b0c64b39f1ab8b6962103ec0b169be86f86bd4cbafe3a456a5d13f1f24238b02850398a80caa24932ad69dbc08e181849466ab247ce3ce4108aedcf24f941024e5f53b9b52467696be095e2232d32f248cbfe0374a301ef7551172f9f968dded511ef7dc00"], 0x1c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4040040) mkdir(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x404202, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/261, 0x105}, {&(0x7f0000002d00)=""/118, 0x76}], 0x9}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x0, 0x0) 1.443727174s ago: executing program 0 (id=51): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x1800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x1800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) 1.376003779s ago: executing program 0 (id=52): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1}, 0x0) (async) waitid(0x0, r0, 0x0, 0x8, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 1.24435914s ago: executing program 0 (id=53): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000380)=""/211) write$cgroup_pid(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x20040000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x20, 0x0, 0x2, "f6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, 'Qe'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_gettime(r2, &(0x7f0000002180)) sendfile(r0, r0, 0x0, 0x7ffff000) 537.666157ms ago: executing program 2 (id=54): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x20000000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 459.811663ms ago: executing program 2 (id=55): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x109102, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x88) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x2, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) pipe2$9p(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') ioctl$UDMABUF_CREATE_LIST(r8, 0xc0686611, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000140)) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f00000043c0)=ANY=[@ANYBLOB="2900000003"], 0x29) bind$unix(r6, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e20, @loopback}}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe4g\xdc\xec\x13X\x98:\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8(\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\a\x00\x00\x00\x00\x00\x00\x003\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3') 459.474423ms ago: executing program 2 (id=56): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x24000000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2040, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6803, 0x0) write$tun(r2, &(0x7f00000001c0)={@void, @void, @ipv6=@dccp_packet={0x3, 0x6, "b4de6f", 0xa1, 0x21, 0x0, @private2, @private2, {[], {{0x4e22, 0x4e22, 0x4, 0x1, 0xf, 0x0, 0x0, 0xa, 0x7, "9d732a", 0x7, "18c625"}, "7f40191e4f4764e814c704e7220066b7504ab9cd8a39b40059e5c66675c181f79f838ef03af41ffbfa04432141cfe1611c75fe686b2b9a53a1a3db5c72e428daf010fff968dae9579d63046843e39c6404b5d8d5acd7e80e49fe40471cdb4dceb49e56a0c75e809842706b0b9fdd6980d929cddd24d13573f484b099521903c48448612d249a1606a8857b74b7e14fd898"}}}}, 0xc9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 459.079023ms ago: executing program 2 (id=57): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fedbdf251100000008000680040005003c0003800800030003000000080003000400000008000100000000000800010077000000080002007d4affff08000200faffffff08000100bae18074edf105568778b8b1dd4ff054c0ec77f9d03497c3e172cf3ee5ae3c"], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) socket$igmp6(0xa, 0x3, 0x87) r3 = open(&(0x7f0000000000)='./file0\x00', 0x181400, 0x168) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x717, 0x20, 0x9, 0x4, {{0x1d, 0x4, 0x1, 0xa, 0x74, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x1f, 0x5f, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010102, @private=0xa010102, @remote, @loopback, @remote]}, @timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xb85}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0xd, [{@loopback}]}, @ssrr={0x89, 0x17, 0xb6, [@multicast2, @remote, @multicast2, @empty, @broadcast]}]}}}}}) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r5, 0x1e67b000) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @rand_addr=0x64010100, r4}, 0xc) 445.438924ms ago: executing program 3 (id=58): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1}}], 0x1, 0x100) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munlock(&(0x7f0000123000/0x1000)=nil, 0x1000) r5 = socket$key(0xf, 0x3, 0x2) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000000c0)) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 433.792595ms ago: executing program 2 (id=59): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) unshare(0x44040200) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x664, 0x0, 0x7ff, 0x8, 0x1]}, &(0x7f00000001c0)=0x54) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r2, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x8f, 0x0) unshare(0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r6, 0x0, {0x2a12, 0x80010000, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1a, 0xd, "fee8a2ab78fcc0aad1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af05b40000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd407000003000000000000000000000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe4]}}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000340)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x7}, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r2, r2, 0x0, 0x7ffff000) 239.852661ms ago: executing program 3 (id=60): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000080)=0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20642, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 239.53484ms ago: executing program 3 (id=61): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x770a, 0x2) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xff24, 0x8, 0x8000, 0x1, 0x9, 0x0}) capset(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x8, 0x8, 0x5, 0x3, 0xc43d}) 215.306762ms ago: executing program 3 (id=62): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000001580)={0x0, "e5cf03000000ff000000ec5fd9ecb3bf2ad2cceb6d2f7879709ab29cf7cfa07307000000000000002c78cc00", 0x63}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="14000380040004000400050008000200000000000800050010270800"], 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4044094) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r4, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(r4, &(0x7f0000003680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r5, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) r6 = open(&(0x7f0000000280)='./file0\x00', 0x400001, 0x18) epoll_pwait2(r6, &(0x7f00000002c0)=[{}, {}, {}], 0x3, &(0x7f0000000340), &(0x7f0000000380)={[0x10000]}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x2200, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x75, 0x2a40}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x40, 0x3, 0xaa, '\x00', 0xaa7}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') r11 = socket(0xf, 0x6, 0x0) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000000)={'ip6gretap0\x00', 0x3}) 97.873742ms ago: executing program 3 (id=63): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x40, 0x4) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d", 0x2}], 0x1}, 0x4000001) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 0s ago: executing program 1 (id=64): r0 = getpid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) (async) mount$incfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@nfs_export_on}]}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) (async) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) syz_pidfd_open(r0, 0x0) (async) setns(0xffffffffffffffff, 0x10000000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. [ 22.046010][ T36] audit: type=1400 audit(1756356320.150:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.047672][ T281] cgroup: Unknown subsys name 'net' [ 22.068674][ T36] audit: type=1400 audit(1756356320.150:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.095994][ T36] audit: type=1400 audit(1756356320.180:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.096383][ T281] cgroup: Unknown subsys name 'devices' [ 22.299929][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.305633][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.481927][ T36] audit: type=1400 audit(1756356320.590:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.505386][ T36] audit: type=1400 audit(1756356320.590:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.513607][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.530513][ T36] audit: type=1400 audit(1756356320.590:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.560122][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.562296][ T36] audit: type=1400 audit(1756356320.650:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.596332][ T36] audit: type=1400 audit(1756356320.650:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.622268][ T36] audit: type=1400 audit(1756356320.660:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.647804][ T36] audit: type=1400 audit(1756356320.660:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.542992][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.557810][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.564932][ T288] bridge_slave_0: entered allmulticast mode [ 23.585629][ T288] bridge_slave_0: entered promiscuous mode [ 23.592490][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.599652][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.606740][ T288] bridge_slave_1: entered allmulticast mode [ 23.613080][ T288] bridge_slave_1: entered promiscuous mode [ 23.745861][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.753048][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.760364][ T292] bridge_slave_0: entered allmulticast mode [ 23.766627][ T292] bridge_slave_0: entered promiscuous mode [ 23.774531][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.781752][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.788931][ T292] bridge_slave_1: entered allmulticast mode [ 23.795183][ T292] bridge_slave_1: entered promiscuous mode [ 23.858041][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.865110][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.872457][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.879503][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.887697][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.894756][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.901892][ T293] bridge_slave_0: entered allmulticast mode [ 23.908347][ T293] bridge_slave_0: entered promiscuous mode [ 23.914778][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.921860][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.929005][ T293] bridge_slave_1: entered allmulticast mode [ 23.935261][ T293] bridge_slave_1: entered promiscuous mode [ 23.944632][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.951736][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.958875][ T294] bridge_slave_0: entered allmulticast mode [ 23.965190][ T294] bridge_slave_0: entered promiscuous mode [ 23.982073][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.989501][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.996585][ T294] bridge_slave_1: entered allmulticast mode [ 24.002995][ T294] bridge_slave_1: entered promiscuous mode [ 24.126782][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.133959][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.141277][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.148330][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.173602][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.180692][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.188004][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.195036][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.214371][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.221457][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.228778][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.235819][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.244005][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.251373][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.258898][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.266074][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.273409][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.280656][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.288076][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.295368][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.306292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.313377][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.332249][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.339503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.370584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.377669][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.393202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400287][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.413339][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.420404][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.429047][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.436103][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.475006][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.482096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.490287][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.497475][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.508286][ T288] veth0_vlan: entered promiscuous mode [ 24.525051][ T288] veth1_macvtap: entered promiscuous mode [ 24.555621][ T294] veth0_vlan: entered promiscuous mode [ 24.562828][ T292] veth0_vlan: entered promiscuous mode [ 24.582962][ T294] veth1_macvtap: entered promiscuous mode [ 24.602061][ T292] veth1_macvtap: entered promiscuous mode [ 24.612490][ T293] veth0_vlan: entered promiscuous mode [ 24.620374][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.626266][ T293] veth1_macvtap: entered promiscuous mode [ 24.742356][ T340] rust_binder: Error while translating object. [ 24.742425][ T340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 24.753731][ T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 24.789734][ T350] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 24.807712][ T350] rust_binder: Write failure EINVAL in pid:4 [ 24.885589][ T348] rust_binder: Write failure EINVAL in pid:9 [ 24.896901][ T329] rust_binder: 347: removing orphan mapping 0:24 [ 24.910535][ T329] rust_binder: 0: removing orphan mapping 24:1112 [ 24.918284][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.926970][ T357] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 24.926992][ T357] rust_binder: Error while translating object. [ 24.939424][ T357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.945626][ T357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 25.068638][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.088728][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.099084][ T45] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 25.108340][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.117412][ T45] usb 2-1: config 0 descriptor?? [ 25.157534][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.308627][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.319848][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.329897][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 25.339064][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.347957][ T9] usb 3-1: config 0 descriptor?? [ 25.577339][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 25.591578][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.603085][ T45] usb 2-1: USB disconnect, device number 2 [ 25.754992][ T356] 9pnet_fd: Insufficient options for proto=fd [ 25.764072][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 25.770127][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.778890][ T9] usb 3-1: USB disconnect, device number 2 [ 25.937705][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.957619][ T335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.067539][ T329] usb 4-1: device descriptor read/64, error -71 [ 26.107517][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 26.113944][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 26.125225][ T335] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.134350][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.143119][ T335] usb 1-1: config 0 descriptor?? [ 26.150548][ T335] hub 1-1:0.0: USB hub found [ 26.308309][ T329] usb 4-1: device descriptor read/64, error -71 [ 26.347677][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.355878][ T335] hub 1-1:0.0: 1 port detected [ 26.381577][ T376] rust_binder: 375 RLIMIT_NICE not set [ 26.388010][ T363] rust_binder: 374: removing orphan mapping 0:24 [ 26.443069][ T378] tipc: Started in network mode [ 26.448398][ T378] tipc: Node identity ce9f4645ac92, cluster identity 4711 [ 26.455722][ T378] tipc: Enabled bearer , priority 0 [ 26.492626][ T378] syzkaller0: entered promiscuous mode [ 26.498794][ T378] syzkaller0: entered allmulticast mode [ 26.504711][ T378] tipc: Resetting bearer [ 26.508791][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.522712][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.536920][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.550477][ T378] tipc: Resetting bearer [ 26.557474][ T329] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.558604][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 26.574152][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 26.585432][ T378] tipc: Disabling bearer [ 26.589028][ T9] usb 2-1: Product: syz [ 26.595412][ T9] usb 2-1: Manufacturer: syz [ 26.601490][ T9] usb 2-1: SerialNumber: syz [ 26.688137][ T329] usb 4-1: device descriptor read/64, error -71 [ 26.741506][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 26.757195][ T365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.802045][ T388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 26.813247][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.927574][ T329] usb 4-1: device descriptor read/64, error -71 [ 27.020525][ T9] usb 2-1: USB disconnect, device number 3 [ 27.028087][ T9] usblp0: removed [ 27.037616][ T329] usb usb4-port1: attempt power cycle [ 27.220494][ T335] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 27.227485][ T45] usb 1-1: USB disconnect, device number 2 [ 27.377497][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.398695][ T329] usb 4-1: device descriptor read/8, error -71 [ 27.528751][ T329] usb 4-1: device descriptor read/8, error -71 [ 27.545076][ T390] rust_binder: Error while translating object. [ 27.545143][ T390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 27.551539][ T390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 27.561527][ T391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.588666][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.599182][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 27.599206][ T36] audit: type=1400 audit(1756356325.690:167): avc: denied { read write } for pid=394 comm="syz.1.22" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.603286][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.607404][ T36] audit: type=1400 audit(1756356325.690:168): avc: denied { open } for pid=394 comm="syz.1.22" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.632145][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.637791][ T36] audit: type=1400 audit(1756356325.700:169): avc: denied { write } for pid=394 comm="syz.1.22" path="socket:[3487]" dev="sockfs" ino=3487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.661819][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.695605][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.702510][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 27.709414][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.716171][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 27.722984][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 27.729895][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 27.758064][ T400] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 27.766071][ T36] audit: type=1400 audit(1756356325.870:170): avc: denied { mounton } for pid=399 comm="syz.0.24" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 27.783979][ T400] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 27.798072][ T329] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.798328][ T400] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 27.813576][ T400] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 27.823418][ T329] usb 4-1: device descriptor read/8, error -71 [ 27.839490][ T36] audit: type=1400 audit(1756356325.950:171): avc: denied { append } for pid=404 comm="syz.0.26" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.862288][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.892988][ T36] audit: type=1400 audit(1756356326.000:172): avc: denied { validate_trans } for pid=404 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 27.958637][ T329] usb 4-1: device descriptor read/8, error -71 [ 28.018616][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.029626][ T363] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.037203][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.047403][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 28.056492][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.066088][ T9] usb 3-1: config 0 descriptor?? [ 28.077949][ T329] usb usb4-port1: unable to enumerate USB device [ 28.197798][ T363] usb 2-1: Using ep0 maxpacket: 16 [ 28.204025][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.215187][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.225036][ T363] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 28.234165][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.242968][ T363] usb 2-1: config 0 descriptor?? [ 28.473332][ T397] 9pnet_fd: Insufficient options for proto=fd [ 28.481208][ T36] audit: type=1400 audit(1756356326.590:173): avc: denied { unlink } for pid=396 comm="syz.2.23" name="#5" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.484293][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 28.504122][ T36] audit: type=1400 audit(1756356326.590:174): avc: denied { mount } for pid=396 comm="syz.2.23" name="/" dev="overlay" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.510857][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 28.540556][ T9] usb 3-1: USB disconnect, device number 3 [ 28.650569][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.658535][ T363] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0001/input/input4 [ 28.659735][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.682702][ T363] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0001/input/input5 [ 28.683958][ T36] audit: type=1400 audit(1756356326.780:175): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.715903][ T363] kye 0003:0458:5012.0001: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 28.725368][ T36] audit: type=1400 audit(1756356326.780:176): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.776133][ T413] exFAT-fs (rnullb0): invalid boot record signature [ 28.793179][ T363] usb 2-1: USB disconnect, device number 4 [ 28.810671][ T413] exFAT-fs (rnullb0): failed to read boot sector [ 28.816804][ T421] mmap: syz.1.29 (421) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.838197][ T413] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.847689][ T414] fido_id[414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 28.912575][ T434] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.923089][ T434] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 28.932092][ T434] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.948002][ T434] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 28.968239][ T439] rust_binder: Error while translating object. [ 28.968293][ T439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.974696][ T439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 28.987167][ T440] Zero length message leads to an empty skb [ 28.987215][ T443] capability: warning: `syz.0.35' uses deprecated v2 capabilities in a way that may be insecure [ 29.004557][ T440] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.056189][ T450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 29.078457][ T449] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 29.084407][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.101718][ T455] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 29.182949][ T469] ======================================================= [ 29.182949][ T469] WARNING: The mand mount option has been deprecated and [ 29.182949][ T469] and is ignored by this kernel. Remove the mand [ 29.182949][ T469] option from the mount to silence this warning. [ 29.182949][ T469] ======================================================= [ 29.218861][ T469] 9p: Unknown access argument 18446744073709551615: -34 [ 29.307553][ T335] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.341497][ T475] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 29.344890][ T482] netlink: 216 bytes leftover after parsing attributes in process `syz.1.46'. [ 29.457511][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 29.465031][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.476112][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.489529][ T335] usb 3-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 29.498975][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.508845][ T335] usb 3-1: config 0 descriptor?? [ 29.521304][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 29.798210][ T407] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 29.948599][ T407] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 29.958313][ T407] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 29.967381][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.976295][ T407] usb 2-1: config 0 descriptor?? [ 31.157487][ T458] Bluetooth: hci0: command 0x1003 tx timeout [ 31.157492][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.186402][ T503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.214031][ T508] binder: Unknown parameter 'fscontext?}' [ 31.557507][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 31.557557][ T459] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 31.627489][ T329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.780125][ T329] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 31.789249][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.797294][ T329] usb 1-1: Product: syz [ 31.801507][ T329] usb 1-1: Manufacturer: syz [ 31.806142][ T329] usb 1-1: SerialNumber: syz [ 31.811605][ T329] usb 1-1: config 0 descriptor?? [ 32.076816][ T335] usb 3-1: string descriptor 0 read error: -71 [ 32.088368][ T335] usbhid 3-1:0.0: can't add hid device: -71 [ 32.091995][ T513] 9pnet_fd: Insufficient options for proto=fd [ 32.094525][ T335] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.110416][ T335] usb 3-1: USB disconnect, device number 4 [ 32.166595][ T519] binder: Unknown parameter 'context' [ 32.255999][ T523] netlink: 9 bytes leftover after parsing attributes in process `syz.2.59'. [ 32.274866][ T523] gretap0: entered promiscuous mode [ 32.292021][ T523] netlink: 5 bytes leftover after parsing attributes in process `syz.2.59'. [ 32.301546][ T523] 0{X: renamed from gretap0 [ 32.308709][ T523] 0{X: left promiscuous mode [ 32.320741][ T523] 0{X: entered allmulticast mode [ 32.424009][ T329] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 32.448604][ T329] asix 1-1:0.0: probe with driver asix failed with error -32 [ 32.485214][ T533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.535895][ T329] usb 1-1: USB disconnect, device number 3 [ 32.572846][ T335] usb 2-1: USB disconnect, device number 5 [ 32.596094][ T539] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 32.637503][ T539] overlayfs: missing 'lowerdir' [ 32.640338][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 32.640359][ T36] audit: type=1400 audit(1756356330.750:215): avc: denied { load_policy } for pid=538 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.669990][ T540] ------------[ cut here ]------------ [ 32.675517][ T540] WARNING: CPU: 0 PID: 540 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 32.684921][ T540] Modules linked in: [ 32.688915][ T540] CPU: 0 UID: 0 PID: 540 Comm: syz.1.64 Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 32.700273][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.710410][ T540] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 32.716355][ T540] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f1 25 ee 05 00 0f 85 be 00 00 00 c6 05 e4 25 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 32.736054][ T540] RSP: 0018:ffffc9000d8ef580 EFLAGS: 00010246 [ 32.742207][ T540] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 32.750231][ T540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d8ef638 [ 32.758285][ T540] RBP: ffffc9000d8ef6a8 R08: ffffc9000d8ef637 R09: 0000000000000000 [ 32.766302][ T540] R10: ffffc9000d8ef620 R11: fffff52001b1dec7 R12: ffffc9000d8ef5c0 [ 32.774784][ T540] R13: dffffc0000000000 R14: 1ffff92001b1deb4 R15: 0000000000000000 [ 32.782820][ T540] FS: 00007f7afe93f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.791839][ T540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.798486][ T540] CR2: 00007f36b8e46f98 CR3: 00000001333f6000 CR4: 00000000003526b0 [ 32.806496][ T540] Call Trace: [ 32.809851][ T540] [ 32.812813][ T540] ? do_syscall_64+0x58/0xf0 [ 32.817475][ T540] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.823589][ T540] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 32.829400][ T540] ? hashtab_init+0xdb/0x1f0 [ 32.834026][ T540] ___kmalloc_large_node+0x9c/0x1d0 [ 32.839330][ T540] ? hashtab_init+0xdb/0x1f0 [ 32.843945][ T540] __kmalloc_large_node_noprof+0x1e/0xe0 [ 32.849687][ T540] ? hashtab_init+0xdb/0x1f0 [ 32.854317][ T540] __kmalloc_noprof+0x26d/0x450 [ 32.859262][ T540] hashtab_init+0xdb/0x1f0 [ 32.863703][ T540] ? class_read+0x162/0x8a0 [ 32.868314][ T540] symtab_init+0x44/0x70 [ 32.872585][ T540] class_read+0x1df/0x8a0 [ 32.877054][ T540] ? __cfi_class_read+0x10/0x10 [ 32.881996][ T540] ? hashtab_init+0x105/0x1f0 [ 32.886700][ T540] policydb_read+0xaab/0x28c0 [ 32.891461][ T540] ? kasan_save_alloc_info+0x40/0x50 [ 32.896784][ T540] ? __cfi_policydb_read+0x10/0x10 [ 32.901971][ T540] ? security_load_policy+0x128/0x12f0 [ 32.907604][ T540] security_load_policy+0x162/0x12f0 [ 32.912930][ T540] ? __kasan_check_write+0x18/0x20 [ 32.918122][ T540] ? _raw_spin_lock+0x8c/0x120 [ 32.922923][ T540] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.928199][ T540] ? sel_write_load+0x226/0x5e0 [ 32.933104][ T540] ? vmalloc_noprof+0xfd/0x1d0 [ 32.937948][ T540] ? _raw_spin_unlock+0x45/0x60 [ 32.942830][ T540] ? __cfi_security_load_policy+0x10/0x10 [ 32.949140][ T540] ? __kasan_check_write+0x18/0x20 [ 32.954300][ T540] sel_write_load+0x298/0x5e0 [ 32.959083][ T540] ? futex_wait+0x29a/0x7a0 [ 32.963621][ T540] ? __cfi_sel_write_load+0x10/0x10 [ 32.968906][ T540] ? __cfi_futex_wait+0x10/0x10 [ 32.973789][ T540] ? bpf_lsm_file_permission+0xd/0x20 [ 32.979251][ T540] ? __cfi_sel_write_load+0x10/0x10 [ 32.984491][ T540] vfs_write+0x3c0/0xe80 [ 32.988810][ T540] ? __cfi_vfs_write+0x10/0x10 [ 32.993601][ T540] ? __kasan_check_write+0x18/0x20 [ 32.998812][ T540] ? mutex_lock+0x92/0x1c0 [ 33.003256][ T540] ? __cfi_mutex_lock+0x10/0x10 [ 33.008171][ T540] ? __fget_files+0x2c5/0x340 [ 33.012895][ T540] ksys_write+0x141/0x250 [ 33.017288][ T540] ? xfd_validate_state+0x68/0x150 [ 33.022484][ T540] ? __cfi_ksys_write+0x10/0x10 [ 33.027379][ T540] ? __kasan_check_write+0x18/0x20 [ 33.032579][ T540] ? fpregs_restore_userregs+0x11d/0x260 [ 33.038314][ T540] __x64_sys_write+0x7f/0x90 [ 33.042934][ T540] x64_sys_call+0x271c/0x2ee0 [ 33.047689][ T540] do_syscall_64+0x58/0xf0 [ 33.052147][ T540] ? clear_bhb_loop+0x50/0xa0 [ 33.056857][ T540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.062836][ T540] RIP: 0033:0x7f7afdb8ebe9 [ 33.067298][ T540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.087153][ T540] RSP: 002b:00007f7afe93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 33.095670][ T540] RAX: ffffffffffffffda RBX: 00007f7afddb6090 RCX: 00007f7afdb8ebe9 [ 33.103727][ T540] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000004 [ 33.111795][ T540] RBP: 00007f7afdc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 33.119860][ T540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.127883][ T540] R13: 00007f7afddb6128 R14: 00007f7afddb6090 R15: 00007ffe869c7958 [ 33.135888][ T540] [ 33.138980][ T540] ---[ end trace 0000000000000000 ]--- [ 33.159849][ T540] SELinux: failed to load policy