last executing test programs: 1.8669431s ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) sendto(r2, &(0x7f0000000680)="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", 0x1000, 0x4000015, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000280)=[@decrefs={0x400c6314}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.823236644s ago: executing program 1 (id=5): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(r0, r1, 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'batadv0\x00', {0x7}, 0x2}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xdf, 0x1, 0x0, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x40, 0x5, 0x8000}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@multicast1, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0xc, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, 0x1, 0x40, 0xffffff00, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x3, 0xa, 0x2c, @remote, @mcast1, 0x20, 0x31, 0x3, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x56, 0xc, 0x40, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x80000001, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x6a7, 0xfffffff7, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x11, "c5f50b1c66abb35a7ed7b5f96dd691"}, @noop, @noop, @end, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x10, 0x10, 0x7, 0x1, {{0x8, 0x4, 0x0, 0x32, 0x20, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @empty, {[@timestamp={0x44, 0xc, 0xfb, 0x0, 0xc, [0x0, 0x80000000]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4040440}, 0x8044) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$RTC_PIE_ON(r18, 0x7005) read$FUSE(r18, &(0x7f0000000a80)={0x2020}, 0x2020) r19 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002ac0), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000002b00)=0xc3, 0x4) sendmsg$SOCK_DESTROY(r17, &(0x7f00000030c0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003080)={&(0x7f0000002b80)={0x4e0, 0x15, 0x4, 0x70bd26, 0x25dfdbfc, {0x6, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "76b4f306222449c61c539a915b9d4aea886ea69a2e77001c6a631744cdbbbeb6fb5c7b3741250f4df95ee7f97e17803c70b9531a1910fd4738c7d496e0391caa3fddeed739919705e2cd455e1f506ea2983343425472e2d34f0511e1579ef6798864d4499bd92459b1629924afa61306c0e9ab55029d493cd186cc903ffe2fed04852532b4705a5ef3ae4f72be1128e8110d3a7fa1e60377c330d2c4911d42f40b1364d8c221e33acf44dcf8b5d9df2f022450cc71a3f5859c25f09753547a98118edfe713bcc18175ccd8d24e02fa04d44503937af19583a54d221af8"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "09b9934ab40b880b1d576c34a9904bcc"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "619f2a21e00f4de851eadac97ff201671af16fb6bad226de6dffdbebebe14620e2c83cee6a7021249780f4d273c7cb544befe10317b76f779fdfb6988a9b80159a22b7c9c16ba25d0f3d14c13316981bba484b872e4be4bb9aa837bea5ce85ead20a323d115a184f09252742b85e0e1e4419f024e7a99b3c5ef641ac47c6fb1d5af327d2bbc59edc5d3600447a8d1abcc13e74d5c86b55fa54d24a308ca9a6ef814bbd78173f17587a71acc5c81f59ea9dfca209a8143007ab357e0987d1e5a107f673e99f607fa0dc0626c2f49f9d68b90f2413859ecede538b6e1d"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b19183b85a09af64fbf1c9cf78c3c0c092e522abfec110617fa9f97adffc046bb3bf8f2386f8823b10b96fbc3a7b913b7f59230560195af4e05f66a5e298bb6f6b07c749b20df229c15d60b7ba186ee5c341c3af74b59e88157777c0e9e64d51adc61d3ec7783033296aa413a69d6c075760590c378cfb280bb0bdcf334afaeb5ee2ac9df2c1894c9bdd120cb2bc44f9e0377ba2037f37774a607c02fffbc15c16f4afdded3b0e8854291bb0b64ce6954d2196d2b28b4368e9adb363"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "fb375b981ff8c0329a0ec6e789e2e6629d60261835f60db7395508d590d75bddfe4a44af483c11e1ee5f5e1d0a23b5dc0c437c9190d38855f4b7e3c45c5366d61565d8912b3be050ef6e9856d3479413b904f93a1d6f4a4d04554c24f627d074d2e702c15e46994c7cb82937797382af6ae664b3faea7d4dbdb2c6a38d9eff347dad554e3e3a3851d808dfa11a5fed9e3c9e44a6ae85ffe186b1b969826bf66006051fef31d0be5f85ae34385717d5bde83dfde1a5afd3a0c827ef083c97283770a7f48877d6f28ba3bf374e3b69a119b4d27b5f"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "2d948481e84ba79cc69bff2b49bd2848574beba35f2eac1f558d1bc521dfc49cc5516f9d5f0e8c3830c1c957291cc34c7f7a76474c4120e0f3f64057b766011ff899f2bc20f8bcb6b0303e5c38c61547734cee80fc438799"}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$TIOCGSERIAL(r18, 0x541e, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=""/100}) r20 = syz_genetlink_get_family_id$tipc(&(0x7f0000003240), r19) sendmsg$TIPC_CMD_GET_MAX_PORTS(r17, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, r20, 0x123, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048010) connect$inet(0xffffffffffffffff, &(0x7f00000033c0)={0x2, 0x4e24, @multicast2}, 0x10) 1.688003045s ago: executing program 1 (id=6): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdir(0x0, 0x0) open(0x0, 0x108843, 0x190) listen(0xffffffffffffffff, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101a01) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045520, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f00000000c0)='net/igmp\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 1.686325905s ago: executing program 1 (id=9): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x3b, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2"}) r0 = getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) syz_clone3(&(0x7f0000000540)={0x10080, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0), {0x9}, &(0x7f0000000300)=""/142, 0x8e, &(0x7f0000000440)=""/207, &(0x7f00000003c0)=[r0, r1, r2], 0x3, {r3}}, 0x58) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f00000005c0)={0xdb, 0x0, 0x8000000000000001}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.264389069s ago: executing program 2 (id=18): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) write$UHID_INPUT(r1, &(0x7f0000000f00)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab2c9c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz1\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.264110749s ago: executing program 2 (id=19): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x8, 0x2}, {}, {0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in6=@private0, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000140)=0xffff, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.262540019s ago: executing program 2 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"]) add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) r1 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) r2 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r4 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r4, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x13, r4, 0x3949000) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) readlinkat(r3, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xb) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x02\x00\x00'}]}, 0x1c}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x800000001d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.235495841s ago: executing program 2 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e4, &(0x7f0000000280)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea0683"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.11998379s ago: executing program 0 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket(0x2, 0xa, 0x300) (async) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r3, &(0x7f0000000240)="b4", 0x1, 0x4, 0x0, 0x0) shutdown(r3, 0x1) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x6000, 0x5000, 0x8080000, 0x4000], 0x8, 0x6, 0xfffffffffffffffc}) (async) getcwd(&(0x7f0000000000)=""/133, 0x85) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="7365636c6162656c2c0006fbe8a22a5a3f339ea006dbb0aaa11610ef6d85bf87707248c0b981e3054dd5e6775fec2c15d97c98384c95fc34a1116469ddea0807e69dcad6d7147e7f38bccd09e5ac84d7952cf97f23500379539e28"]) 1.076377714s ago: executing program 3 (id=23): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death], 0x50, 0x0, &(0x7f0000000580)="05de66730879c09a3dad5fda5a11568bd6fdffdb8a6c55bad3ce0e7d04883d574b211f9860bc1a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34a"}) finit_module(r2, &(0x7f0000000000)='./binderfs/binder0\x00', 0x3) (async) finit_module(r2, &(0x7f0000000000)='./binderfs/binder0\x00', 0x3) 1.063597105s ago: executing program 3 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000540)={"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"}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 997.06417ms ago: executing program 0 (id=25): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000580)="5c7f496a", 0x4, 0x4008000, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x10, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x2, 0x0, 0x1, "49e77157"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x0, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x804}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "787d77d6f4cd95"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf8, 0x3}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xbaa30f3da50194fd, 0x12, r2, 0x7000) r3 = userfaultfd(0x80801) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f00000001c0)='1\x00', 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12011001070102109806826bebd30102030109021200010600b06a091f"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') read$msr(r5, &(0x7f0000000200)=""/124, 0x7c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="bcf66d33e8577efdc99a729c18441901000000b92c50e0d91a3ff6280c2df31f8cb3f7715d1e85515af4a8f4", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000000,\x00']) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000000200)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt(0xffffffffffffffff, 0x90, 0x1, 0x0, 0x0) read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002980)={0xd4, 0x0, &(0x7f0000002780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x908, 0x3}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x2, 0x0, 0x1c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002600)={@fda={0x66646185, 0x2, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/144, 0x90, 0x0, 0x1e}, @flat=@handle}, &(0x7f0000000580)={0x0, 0x20, 0x48}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002a80)={@ptr={0x70742a85, 0x1, &(0x7f0000002680)=""/12, 0xc, 0x2, 0x33}, @fda={0x66646185, 0x7, 0x1, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/90, 0x5a, 0x0, 0x11}}, &(0x7f0000002740)={0x0, 0x28, 0x48}}}], 0xe0, 0x0, &(0x7f0000002880)="4e8e65f228abe8f613a04892970a13d9593df73af5952119f324107ff2a2bca8b5718b8788b6ef59206ddcdbc9906e908daf4cbb2ff990221cdd78c033133d3d8bff56d2d1a22145e665bc70aa16fe948f65793e3e80ae7c17e0d8c9096af25e30a5080e367aae2f349540a3c12e73fd4a1d76ae89505506c8986cfc84eead9400d24051bd017e5eba732b6a356bc27481040940610593a9bdc9bc9e6b069360f1f1193af55cab94eb2af53532d742b7c91d6fbeee286f418d00711797786fe3d9ac639f73c57de36ce323dbbee3066f9222894ff531154c17d0488d733a793c"}) 916.346247ms ago: executing program 3 (id=26): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x0, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @local, 0x9, 0x80, 0x6, 0x4}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x81, 0x10001, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) close(r1) 916.052917ms ago: executing program 3 (id=27): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddcffff, 0xe, 0xf0, 0x3f, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x0, 0x2, 0xd, 0x9, 0x8, 0xc, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x10, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x8000000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003808"]) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00fc003a2a5e247b000000080001"], 0x24}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x1f972000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_ep_write(r7, 0x3, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r6) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) (async) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) sendmmsg$inet6(r9, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0baeb3a05c43", 0x1e}, {&(0x7f0000000540)="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", 0x232}], 0x2}}], 0x1, 0x4000001) r10 = dup(r9) read$FUSE(r10, &(0x7f00000075c0)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x6, 0xffffffff, 0x9, 0x9, 0xe, 0x7}, 0x0, &(0x7f0000000180)={0x8, 0x9, 0x8, 0xffffffffffffff8b, 0x5, 0x4, 0xfffffffffffffffc, 0x4}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 405.364467ms ago: executing program 0 (id=28): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x0, @link_local}, &(0x7f0000000040)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x170}, 0x1, 0x0, 0x0, 0x8081}, 0x4000040) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="e3", 0x1}], 0x1, 0x8) fcntl$setpipe(r4, 0x407, 0x176) vmsplice(r5, &(0x7f0000001080)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x8) capset(&(0x7f0000000040), 0x0) vmsplice(r4, &(0x7f0000002a80)=[{&(0x7f0000000580)='I', 0x1}], 0x1, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) 370.13642ms ago: executing program 2 (id=29): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4095, 0xfff}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0x802}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x80d}], 0x8, 0x40002100, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x3, "e3b887", 0x4, 0x7f}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) keyctl$negate(0xd, 0x0, 0x5, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1e, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x0, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8, 0x40, 0x2, 0x3c}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xb, 0xf1, 0x80, 0x22, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8, 0x51f6, 0x5}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000001e40)=ANY=[@ANYBLOB="60060000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="04000180"], 0x660}, 0x1, 0x0, 0x0, 0x40110}, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg0\x00'}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 268.267049ms ago: executing program 2 (id=30): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x228200, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f00000001c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffc) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24001, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x94822, &(0x7f00000003c0)={[{@nr_inodes}]}) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x7500}], 0x1, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) socket$netlink(0x10, 0x3, 0x7) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) unlinkat(r4, &(0x7f0000000080)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x3, 0x2, 0x4, 0x8}, {0x8000, 0x9, 0x2, 0x5}, {0xff, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x23, 0x9}, {0x401, 0xf9, 0xd, 0xfffffff8}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 208.888083ms ago: executing program 0 (id=31): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) sendto$inet(r3, &(0x7f00000001c0)="e92c074a91aed692cb74bc556b4fe024869bef91d391df61845d4e8edea314d5471e51e9922e40167dab17f312b5e0304c963ea92dcf649ce1a291c3bf68eeca52e4b0c32cf23566d5f4d5596f38bba615e7ac5e542d3af6e514157e830d18", 0x5f, 0x800, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async) sendto$inet(r3, &(0x7f00000001c0)="e92c074a91aed692cb74bc556b4fe024869bef91d391df61845d4e8edea314d5471e51e9922e40167dab17f312b5e0304c963ea92dcf649ce1a291c3bf68eeca52e4b0c32cf23566d5f4d5596f38bba615e7ac5e542d3af6e514157e830d18", 0x5f, 0x800, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) (async) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000000000001a0a0000000000000002000000000000820200000000000006000000000000008d0b000000000000000000000080000000000000fa0b0000000000000500000000000000430b0000000000000500"/104]) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r8, 0x1000007, 0x13, r7, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 190.995845ms ago: executing program 0 (id=32): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10000025) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 120.47868ms ago: executing program 0 (id=33): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f00001f2000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0xe6680000) r1 = socket(0x11, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r2, &(0x7f0000000980)="a9", 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="2840c35fc30a"}, 0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 35.313777ms ago: executing program 3 (id=34): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) 0s ago: executing program 3 (id=35): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeee8000, 0x0, r2, 0x8}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) close_range(r1, r1, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.917186][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 14.917205][ T36] audit: type=1400 audit(1755333358.810:59): avc: denied { transition } for pid=229 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.921938][ T36] audit: type=1400 audit(1755333358.810:60): avc: denied { noatsecure } for pid=229 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.924751][ T36] audit: type=1400 audit(1755333358.820:61): avc: denied { write } for pid=229 comm="sh" path="pipe:[1817]" dev="pipefs" ino=1817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.928151][ T36] audit: type=1400 audit(1755333358.820:62): avc: denied { rlimitinh } for pid=229 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.930908][ T36] audit: type=1400 audit(1755333358.820:63): avc: denied { siginh } for pid=229 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. [ 22.971012][ T36] audit: type=1400 audit(1755333366.870:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.972609][ T281] cgroup: Unknown subsys name 'net' [ 22.993687][ T36] audit: type=1400 audit(1755333366.870:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.021046][ T36] audit: type=1400 audit(1755333366.910:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.021291][ T281] cgroup: Unknown subsys name 'devices' [ 23.200178][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.205806][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.382088][ T36] audit: type=1400 audit(1755333367.280:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.405351][ T36] audit: type=1400 audit(1755333367.280:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.424248][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.430211][ T36] audit: type=1400 audit(1755333367.280:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.462289][ T36] audit: type=1400 audit(1755333367.350:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.472563][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.487850][ T36] audit: type=1400 audit(1755333367.350:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.522327][ T36] audit: type=1400 audit(1755333367.380:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.548034][ T36] audit: type=1400 audit(1755333367.380:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.267627][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.274751][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.281982][ T288] bridge_slave_0: entered allmulticast mode [ 24.288387][ T288] bridge_slave_0: entered promiscuous mode [ 24.294807][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.301897][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.309093][ T288] bridge_slave_1: entered allmulticast mode [ 24.315334][ T288] bridge_slave_1: entered promiscuous mode [ 24.455780][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.462901][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.470392][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.477827][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.491840][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.499400][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.506496][ T291] bridge_slave_0: entered allmulticast mode [ 24.513212][ T291] bridge_slave_0: entered promiscuous mode [ 24.520190][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.527340][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.534541][ T291] bridge_slave_1: entered allmulticast mode [ 24.541017][ T291] bridge_slave_1: entered promiscuous mode [ 24.580510][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.587588][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.594826][ T293] bridge_slave_0: entered allmulticast mode [ 24.601396][ T293] bridge_slave_0: entered promiscuous mode [ 24.611255][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.618779][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.626034][ T294] bridge_slave_0: entered allmulticast mode [ 24.632618][ T294] bridge_slave_0: entered promiscuous mode [ 24.641734][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.648873][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.655953][ T293] bridge_slave_1: entered allmulticast mode [ 24.662343][ T293] bridge_slave_1: entered promiscuous mode [ 24.672226][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.679316][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.686393][ T294] bridge_slave_1: entered allmulticast mode [ 24.692730][ T294] bridge_slave_1: entered promiscuous mode [ 24.896990][ T288] veth0_vlan: entered promiscuous mode [ 24.913429][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.920517][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.928622][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.935669][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.957873][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.964957][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.972649][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.979747][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.000170][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.007213][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.014823][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.021870][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.037610][ T288] veth1_macvtap: entered promiscuous mode [ 25.071043][ T291] veth0_vlan: entered promiscuous mode [ 25.100141][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.100999][ T293] veth0_vlan: entered promiscuous mode [ 25.123911][ T294] veth0_vlan: entered promiscuous mode [ 25.143987][ T291] veth1_macvtap: entered promiscuous mode [ 25.150170][ T331] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 25.162206][ T331] rust_binder: Write failure EINVAL in pid:2 [ 25.170348][ T294] veth1_macvtap: entered promiscuous mode [ 25.199349][ T293] veth1_macvtap: entered promiscuous mode [ 25.281761][ T340] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 25.290117][ T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 25.307034][ T343] rust_binder: Read failure Err(EFAULT) in pid:4 [ 25.344326][ T344] netlink: 57 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.356467][ T352] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4216, limit: 5264, size: 18446744073709551583) [ 25.361122][ T353] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.361529][ T352] rust_binder: Error while translating object. [ 25.401032][ T352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.407342][ T352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 25.467985][ T360] rust_binder: Error in use_page_slow: ESRCH [ 25.468012][ T360] rust_binder: use_range failure ESRCH [ 25.474301][ T360] rust_binder: Failed to allocate buffer. len:5264, is_oneway:false [ 25.493196][ T360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.493228][ T360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:6 [ 25.552140][ T369] netlink: 57 bytes leftover after parsing attributes in process `syz.2.12'. [ 25.590006][ T371] ======================================================= [ 25.590006][ T371] WARNING: The mand mount option has been deprecated and [ 25.590006][ T371] and is ignored by this kernel. Remove the mand [ 25.590006][ T371] option from the mount to silence this warning. [ 25.590006][ T371] ======================================================= [ 25.627189][ T371] binder: Unknown parameter 'dirwync' [ 25.675663][ T376] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 25.687959][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.706423][ T378] rust_binder: Write failure EFAULT in pid:10 [ 25.834201][ T388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 25.841546][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.842078][ T388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 25.857773][ T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.897337][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.908644][ T392] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 25.932729][ T45] usb 2-1: config 0 descriptor?? [ 26.349077][ T45] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 26.367405][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 26.417812][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.451687][ T45] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 26.569139][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.589239][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.618279][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 26.626432][ T31] usb 4-1: SerialNumber: syz [ 26.645749][ T414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.659748][ T414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=414 comm=syz.2.29 [ 26.711003][ T418] tmpfs: Bad value for 'nr_inodes' [ 26.849856][ T405] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 26.861505][ T405] netlink: 'syz.3.27': attribute type 5 has an invalid length. [ 26.869311][ T405] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.27'. [ 26.898156][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK [ 26.940887][ T31] usb 4-1: USB disconnect, device number 2 [ 26.956455][ T45] usb 2-1: USB disconnect, device number 2 [ 26.968519][ T361] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.039075][ T442] ------------[ cut here ]------------ [ 27.044595][ T442] WARNING: CPU: 0 PID: 442 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 27.054398][ T442] Modules linked in: [ 27.058413][ T442] CPU: 0 UID: 0 PID: 442 Comm: syz.3.35 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 27.071734][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 27.082236][ T442] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 27.088222][ T442] Code: 00 48 8b 5d a0 74 08 48 89 df e8 12 43 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 27.107982][ T442] RSP: 0018:ffffc9000b94fc88 EFLAGS: 00010202 [ 27.114234][ T442] RAX: 1ffffd1ffff87812 RBX: ffffc9000d4b28e8 RCX: ffffffff816dc249 [ 27.122318][ T442] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc3c090 [ 27.130355][ T442] RBP: ffffc9000b94fcf0 R08: ffffe8ffffc3c097 R09: 1ffffd1ffff87812 Stopping crond: [ 27.138406][ T442] R10: dffffc0000000000 R11: fffff91ffff87813 R12: dffffc0000000000 [ 27.147826][ T442] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc3c090 [ 27.155832][ T442] FS: 00007f03e87f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.164848][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 stopped /usr/sbi[ 27.171874][ T442] CR2: 000000110c2daa5f CR3: 000000011378a000 CR4: 00000000003526b0 n/crond (pid 193[ 27.181280][ T442] Call Trace: )[ 27.185812][ T442] [ 27.188909][ T442] kvm_put_kvm+0x1100/0x12b0 [ 27.193659][ T442] ? __cfi_kvm_vm_release+0x10/0x10 OK[ 27.199057][ T442] kvm_vm_release+0x47/0x70 [ 27.203648][ T442] __fput+0x1fb/0xa00 [ 27.207692][ T442] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 27.213580][ T442] ____fput+0x20/0x30 [ 27.217616][ T442] task_work_run+0x1e0/0x250 [ 27.222312][ T442] ? __cfi_task_work_run+0x10/0x10 [ 27.227498][ T442] ? __kasan_check_write+0x18/0x20 [ 27.232713][ T442] resume_user_mode_work+0x36/0x50 [ 27.237924][ T442] syscall_exit_to_user_mode+0x64/0xb0 [ 27.243431][ T442] do_syscall_64+0x64/0xf0 [ 27.247939][ T442] ? clear_bhb_loop+0x50/0xa0 [ 27.252664][ T442] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.258649][ T442] RIP: 0033:0x7f03e9d8ebe9 [ 27.263117][ T442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.282823][ T442] RSP: 002b:00007f03e87f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 Stopping dhcpcd.[ 27.291568][ T442] RAX: 0000000000000000 RBX: 00007f03e9fb5fa0 RCX: 00007f03e9d8ebe9 .. [ 27.300898][ T442] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 27.309134][ T442] RBP: 00007f03e9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 27.317141][ T442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 stopped /sbin/dh[ 27.325412][ T442] R13: 00007f03e9fb6038 R14: 00007f03e9fb5fa0 R15: 00007fffdd24bda8 cpcd (pid 147)[ 27.334872][ T442] [ 27.338920][ T442] ---[ end trace 0000000000000000 ]--- Stopping network: [ 27.428820][ T361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.439049][ T361] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 27.452136][ T361] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 27.466890][ T361] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 27.476171][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.484321][ T361] usb 3-1: Product: syz [ 27.488648][ T361] usb 3-1: Manufacturer: syz [ 27.493368][ T361] usb 3-1: SerialNumber: syz [ 27.499435][ T361] usb 3-1: config 0 descriptor?? OK Stopping iptables: OK Stopping system message bus: done killall: can't kill pid 434: No such process Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only Connection to 10.128.1.240 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 29.048946][ T36] kauditd_printk_skb: 118 callbacks suppressed [ 29.048969][ T36] audit: type=1400 audit(1755333372.930:192): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2578]" dev="pipefs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 29.188070][ T12] bridge_slave_1: left allmulticast mode [ 29.193785][ T12] bridge_slave_1: left promiscuous mode [ 29.199778][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.207615][ T12] bridge_slave_0: left allmulticast mode [ 29.213409][ T12] bridge_slave_0: left promiscuous mode [ 29.216433][ T31] usb 3-1: USB disconnect, device number 2 [ 29.224924][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.360343][ T12] veth1_macvtap: left promiscuous mode [ 29.366003][ T12] veth0_vlan: left promiscuous mode [ 29.720060][ T12] bridge_slave_1: left allmulticast mode [ 29.725734][ T12] bridge_slave_1: left promiscuous mode [ 29.731399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.738904][ T12] bridge_slave_0: left allmulticast mode [ 29.744540][ T12] bridge_slave_0: left promiscuous mode [ 29.750298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.758109][ T12] bridge_slave_1: left allmulticast mode [ 29.763751][ T12] bridge_slave_1: left promiscuous mode [ 29.769505][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.777192][ T12] bridge_slave_0: left allmulticast mode [ 29.782998][ T12] bridge_slave_0: left promiscuous mode [ 29.788632][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.796401][ T12] bridge_slave_1: left allmulticast mode [ 29.802422][ T12] bridge_slave_1: left promiscuous mode [ 29.808198][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.815788][ T12] bridge_slave_0: left allmulticast mode [ 29.821556][ T12] bridge_slave_0: left promiscuous mode [ 29.827200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.022459][ T12] veth1_macvtap: left promiscuous mode [ 30.028044][ T12] veth0_vlan: left promiscuous mode [ 30.033415][ T12] veth1_macvtap: left promiscuous mode [ 30.039100][ T12] veth0_vlan: left promiscuous mode [ 30.044495][ T12] veth1_macvtap: left promiscuous mode [ 30.050006][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 31.111650][ T485] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 31.118385][ T485] ACPI: PM: Preparing to enter system sleep state S5 [ 31.125314][ T485] kvm: exiting hardware virtualization [ 31.130840][ T485] reboot: Power down serialport: VM disconnected.