last executing test programs: 2m10.801403395s ago: executing program 0 (id=1337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010701000000000000006700e7ff070001"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0xa}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0xa}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) 2m10.790911356s ago: executing program 0 (id=1341): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4000000646174042cbd7000ffdbdf256334864c3e57974cf57286b572cda2c211eb9a6d44273ebf455a99c9f22c1dfe09cc14b5b78fd02c4772989c2f72db15db2e64199e79af97bcedacc288c3c14db44beddd6e5a0b705c43375b4c413251956598c637d509fbeaaefff8b149fe6403364d89ed63b09f4634711b30f44c22272acd7cc717298ec967c854d04c09956890c2ec6ae4c3799ebdf453ebed69234837326f15db5071b201b23f5ff31604bd1ae69ac804b76cf03ff135c0bc795cdfc0d30da0571157ae617a53d92a257d691802aec5ac18d67771b50280d20f1e3613bdfee336b50e054a88b275f8b59b86000000bb62719dcff8daa7c8f9525e983f669d6b976e4d9fc003915c3da6a0e74f5fab"], 0xf4}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) (async) fadvise64(r0, 0x81, 0x9, 0x5) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)={0x24c, 0x1296}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) r4 = inotify_init1(0x800) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$sock_netdev_private(r3, 0x89f4, &(0x7f0000000040)="4f08930170f72fe60a519c77fa05cba4e169f10774e958e607099c62d12825239a2a3fadfce3a36ef8cb6c9f13495b16e56fdb26bfef62f669bfdc829cac67ad7d837e5ad37f721bd87f9005af104442ed0bec43c537efddcf9523caf1e82160b3e3ce1812e980dd0295bd4e1ebca8851ffd6df0b0e15ed01ad873c8ada8d891ddcb6244f41e464b8188943292a9def0712d9fdd37996fc3a51a004e613d94d6944e4dc8045df5acbd8bc1f2") (async) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'veth1_vlan\x00', @local}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) 2m10.775717907s ago: executing program 0 (id=1342): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410800e0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x302000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r4, 0x100, 0x5, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x21008200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20801}, 0x20008852) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xf}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40000c4) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1b4, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x44}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x7}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5c}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000045) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ec0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000f80)={'gretap0\x00', &(0x7f0000000f00)={'tunl0\x00', 0x0, 0x10, 0x7800, 0xd, 0xcf9, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast1, @remote, {[@noop, @cipso={0x86, 0xb, 0x0, [{0x6, 0x5, "dfbe61"}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000001180)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xa4, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x611034ea755acab8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x1) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r6) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, r13, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xc}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, r14, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x4080) 2m10.717150533s ago: executing program 0 (id=1343): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x7709, 0x0) 2m10.716666233s ago: executing program 0 (id=1344): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x12d2c2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000240)=""/4096) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x12d2c2, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000240)=""/4096) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) write$tcp_mem(r2, 0x0, 0x0) (async) read$eventfd(r1, &(0x7f0000000080), 0x8) (async) 2m10.715739453s ago: executing program 0 (id=1345): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020100030e00000000000000fcdbdf2505000600001000000a004e2000000400fe800000000000000000000000000004000000000000000005000500320000000a004e2200000001fc000000000000000000000000000000010100000000000002001000"], 0x70}}, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r1, &(0x7f0000000480)="532e2eac770767f7429748", 0xb) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FREEZING\x00', 0x9) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r6, 0x8008550e, &(0x7f0000000180)={0x7, "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"}) fcntl$dupfd(r4, 0x406, r4) r7 = socket(0x18, 0xa, 0x2) getsockname$packet(r7, 0x0, &(0x7f0000000200)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{}]}) r10 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x32, 0x38, 0x64, 0x66, 0x3, 0x30, 0x2f, 0x36, 0x5, 0x65, 0x34, 0x37, 0x32, 0x34, 0x31]}, &(0x7f0000000500)={0x0, "76d027c17ee1adcd5979614b18d9ec49e591b97cbc429f20c93da63bc6387cb969f06993468df9b5a0a57af68f8e689facf9c4d1d0a93f453ef38f1c9e7ef713", 0x38}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010002b6fc71fbee0c522a0c00000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 1m55.71739314s ago: executing program 32 (id=1345): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020100030e00000000000000fcdbdf2505000600001000000a004e2000000400fe800000000000000000000000000004000000000000000005000500320000000a004e2200000001fc000000000000000000000000000000010100000000000002001000"], 0x70}}, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r1, &(0x7f0000000480)="532e2eac770767f7429748", 0xb) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FREEZING\x00', 0x9) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_GETDRIVER(r6, 0x8008550e, &(0x7f0000000180)={0x7, "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"}) fcntl$dupfd(r4, 0x406, r4) r7 = socket(0x18, 0xa, 0x2) getsockname$packet(r7, 0x0, &(0x7f0000000200)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{}]}) r10 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x32, 0x38, 0x64, 0x66, 0x3, 0x30, 0x2f, 0x36, 0x5, 0x65, 0x34, 0x37, 0x32, 0x34, 0x31]}, &(0x7f0000000500)={0x0, "76d027c17ee1adcd5979614b18d9ec49e591b97cbc429f20c93da63bc6387cb969f06993468df9b5a0a57af68f8e689facf9c4d1d0a93f453ef38f1c9e7ef713", 0x38}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010002b6fc71fbee0c522a0c00000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 17.283463489s ago: executing program 1 (id=2981): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0xa, 0x1, 0x5}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) creat(&(0x7f00000014c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x11, 0x0, &(0x7f0000000300)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 17.28151536s ago: executing program 1 (id=2983): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000240)={r1, 0x9, {0x0, 0x0, 0x0, 0x7fffffff, 0x8000000000000000, 0x0, 0x0, 0x7, 0x8, "3e357c460bdf05e4ac24e19d9257009790c1b4fe20ed4caaf46d527504150b6c4b21f77291d21986a440b9ef5b34e8720b5e3a1108d0ebe29bd8da8a221f5218", "013117acdfd7aac93cf23a4f3719030947a5f834d5e5ccd822e2aa8b022a43b60dea5600b1ce23c18b42969bf28fd6297e233b81b627667590ffd2c80ff9a495", "4459633b5251a434fadd33ebb74cb26c67ae2a1f41e45188bad7daecc1531875", [0x1112]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') close_range(r3, r4, 0x6a52568d64c00852) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x40000100000200) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b6d5ae97ba7526378c688845ed6b51e3e6cb75e7fb9962cbeadb407416ad2d27cdfedb16784077fca1db4b7f5523c809e7e11cbd705bc8", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250d000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4881) r7 = socket(0x2, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, 0x0) setsockopt$inet_opts(r7, 0x0, 0x19, 0x0, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x85b83000) writev(r2, 0xfffffffffffffffc, 0x0) 17.210902426s ago: executing program 1 (id=2984): r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x7706, 0x2) 17.145161802s ago: executing program 1 (id=2987): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f000089b000/0x2000)=nil, 0x2000, 0x2000004) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 17.092131107s ago: executing program 1 (id=2991): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a00020004000000140002"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r0, 0x60ac}], 0x1, &(0x7f0000000240), 0x0, 0x0) 17.072566889s ago: executing program 1 (id=2992): mknodat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="150000000080224c8e291aad005c50322030300e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffb, 0x82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = dup(r5) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES8=r4, @ANYBLOB="2c69676e6f726571762c6e6f78617474722c76657273696f6e3d3970323030302e4ce69a"]) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r8, r7, 0x0, 0xffffffff) 4.306522098s ago: executing program 2 (id=3212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0xb7, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) 4.305569659s ago: executing program 2 (id=3214): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000140)={r2}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x102) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x43b}) r5 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x4000f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x80ab}, 0x1c) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000140)={r2}) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x102) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x43b}) (async) socket$inet6(0xa, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x4000f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x80ab}, 0x1c) (async) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) 4.255820724s ago: executing program 2 (id=3216): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kheaders.tar.xz', 0x141000, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\a\x00\x00\x00SP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r&\"\xff\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00\x00\x00\x00\x00', 0x8) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) (async) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="66b83f000f00d8ea00300000a6000f20d835080000000f22d866b816000f00d00fc76b0066b856000f00d866ba610066b83ed366ef36670f71e11af30f090f01c2", 0x41}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ftruncate(r6, 0xffff) (async) fcntl$addseals(r6, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x1, 0x0, 0x4000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40086200, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) 4.240996905s ago: executing program 2 (id=3218): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="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", 0x1b4}], 0x1}}], 0x2, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000040)=0x3800, 0x4) (async) sendto$inet(r5, &(0x7f00000002c0)="d7f0fcc5819f12ed780b80f87505bfe5a0109e5ffc756f3593a84cfd650fff6fd7fe3c6cf2ec30abed8e8157b8f52cf9bf9151c0d649c55312b1f122ad5535fb2524a62a86157173253e8473aa97a0890c4885c07358555d5c10e36acc448a299998caff3235339d0f90a4dbd5978b6e21d2e54e70338450d816ea738b7074ddd344", 0x82, 0x20000800, 0x0, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0xe, 0x78, "170b0de472e907122049446b806a804de50fd222ec4b7773302b6c5c7bbef42f6a1d366e84d1d2a182a8667c2fc25cc64a86519115afa579e109b55414b5d876dc14ffd53dc4440ba98b3e70d3fe7b699e17f9137c6fda4d83f68152c5bb90cefd43256e4453e582661c8c54438b10a7505df72e50f9a9a2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000280)={0x20, 0x82, 0x1, "e3"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "298103"}, &(0x7f00000000c0)={0x20, 0x84, 0x3, "2db849"}, &(0x7f0000000340)={0x20, 0x85, 0x3, '!.C'}}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x0, 0x37, {0x37, 0xa, "1e76f96cb0605262eeb23cc9c42b85b9db9d33f3713f464976635cd5b22c2abf1e2820f8d58300e46751acd7aec4ddafe4fa266260"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="400d5500300bd027e3c7327fa5e06256373a2a6e9bb1c95d97d6496b52eef85351fc6785ea2fe278fb51eb566c566ebb01d8aeefc363c9962c6fc383e27fb3cf5d9c44d86979f1b2225d3a7deefc2dd1c9f9a22e1bddc9dd636c3c1f5cdedf63494c240fc27ad0dd3e"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @pic={0x8, 0x70, 0x2, 0x6, 0xc6, 0x1, 0x3, 0x5, 0x20, 0xd3, 0x49, 0x0, 0x4, 0x50, 0x6, 0x40}}) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x5, 0x1, 0x3}, 0x10) (async) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xfb, 0x3, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xeeee0000, 0x5000, 0xa, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0xffff1000, 0xe, 0x5, 0x3, 0x7, 0x9f, 0x4, 0x1, 0xa7, 0x5, 0x81}, {0x4, 0xeeee0000, 0xc, 0x6, 0x4, 0x42, 0x7, 0xff, 0x8, 0x7, 0xe, 0x8}, {0xeeee0000, 0xdddd1000, 0xb, 0x3, 0x6, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x8, 0x0, 0x80, 0xf, 0x1, 0xfd}, {0xffff1000, 0xd000, 0x0, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0xd, 0x2, 0xc, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0xf000, 0x2024, 0x5, 0x10800, 0x8000c00, [0x6800000000000000, 0x4, 0x5, 0x3]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.34707248s ago: executing program 3 (id=3256): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) (async) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) 2.24111331s ago: executing program 3 (id=3257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f0000000000000000070000e10b0002"], 0x20}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x99) setpriority(0x1, 0x0, 0xff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x50, 0x0, &(0x7f0000000280)="6dc005603ca76fed2aea2f95710ad49f288d9047c96cf3f4f63290a48c074818003a648d6dcf2e0c6792f34db27736127b730a840214d3cca9d51513848e4b5c0011a1dd6564b8e6a347e91fec5f02ba"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) 2.240203471s ago: executing program 3 (id=3258): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18010100000000000000fc366abf109f5ab9b4b35004037c478582aa758016b8af2e67cfbd38c0d90da7362c8800fba97329ad034fdd670df3c9f7c863e11436efa8cb2b2c03b18d1a3ec3bf6c3ef39f79aab023f93b17f011f1d4448a4f7fcb76a792f2f59204574d08aa7becf2f77411f8398f8ac0c71265cea5b5b8b79beab37e5f2599a02c8701c41300"/155], 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r6, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) (async) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0xc0) getdents(r7, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000010ec0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261775b6932c5cb364895849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea05cbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd951872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f792742a3069c8a96e213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910be07fd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e033baccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e99f9aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f6923f8b6edccc412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x10, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xdcad3d6d7978420) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) userfaultfd(0x80001) (async) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r9, 0xc028aa05, 0x0) socket$igmp6(0xa, 0x3, 0x3a) 2.216972863s ago: executing program 3 (id=3259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x3, 0x7ff, 0x0, @mcast2, @empty, 0x8000, 0x7800, 0x92, 0xfffff5f0}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xd2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@redirect_dir_follow}, {@userxattr}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000000008704"]) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010026bd706e6e24139e07"], 0x40}}, 0x90) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.182565826s ago: executing program 3 (id=3261): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000340)=0x3, 0x2) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902240001000000000904"], 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x40042, 0x1, 0x3}, 0x10) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x86) unlinkat(r5, &(0x7f0000000040)='./bus\x00', 0x200) openat$cgroup_procs(r5, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x18a3c85) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) openat(0xffffffffffffffff, &(0x7f0000000480)='./bus\x00', 0x410400, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00026a0830fa5e1cc4991009000000658195e259d31c5b2dd815897cce104c01af000000098d23ce53ccfe69ed8e23fd4dc31d2baa4be5b13507d4b7932f3086bfbac564d1f9022d5f755631c4ebe07929a0018e5efcd9b2d7c5b7a308f73d306c9470fcde9e84aad1b6ca9727fc1b7d7034c7b32b2ae952be0e675dad674316d5144b17d546fe211b538c17ad322199c9a71711a5cfb8c800"/163], 0x20}, 0x1, 0x0, 0x0, 0x40018}, 0x20000000) (async) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="0a62a8ea", 0x4}], 0x2, 0x1) (async) madvise(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) 2.130213461s ago: executing program 3 (id=3263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000013c0)={0x79, 0x0, 0x800000080003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) (async) socket$inet6(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x7, 0xe}) (async, rerun: 32) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) (rerun: 32) syz_io_uring_setup(0x103238, &(0x7f0000000380)={0x0, 0x8000000, 0x13090, 0x0, 0xcf}, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$inet6(0xa, 0x3, 0x9) (async, rerun: 64) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x80, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0xd, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x4b2, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x4, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x6, 0x5, 0x1003, 0xa3, 0x50000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) 1.852624588s ago: executing program 33 (id=2992): mknodat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="150000000080224c8e291aad005c50322030300e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffb, 0x82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = dup(r5) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES8=r4, @ANYBLOB="2c69676e6f726571762c6e6f78617474722c76657273696f6e3d3970323030302e4ce69a"]) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r8, r7, 0x0, 0xffffffff) 1.160953296s ago: executing program 2 (id=3273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x74}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f00000000c0)=0x18) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000140)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000006900)=ANY=[@ANYBLOB="2c0000001e000900709fe995be4dc13b589ad037ffff0000000000000003000000110001002f6465762f726e756c6c620100000000040002806a48bc1237a6bf3e8f5bfcf2da91a7aa162c33cf064b5e14d9cd297a54da229204de9abc086a3d60f6489f062143d3e18ae87b651632353db97a1df14e8d8846b4ef0faa03d203b4a76cc7af2d5f9e0f83680c4a206144123fc368ac647b3e53e2825fa64afaa2a7cd4ed6efdf190b30ce220b5d8107edbfcdd86ffc694b6402a61007814a3493ae35bbdd48143dff731fce8d3cfbb0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {0x0, 0x0, 0x1, 0x3}, {0x28, 0x0, 0x0, 0xfffffffe}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000000)="580000001500add40500000000e5000002117ffffdff81004e230e227f0000000001e809100000ffffe74fd200000000000000020000000000000000000000000000000000079ad148d4ee0000b9cb25bba2968253ea1c03", 0x58}], 0x1) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f00000000c0)=0x800004, 0x4) recvmmsg(r6, &(0x7f0000006740)=[{{&(0x7f0000000440)=@tipc=@id, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000280)=""/183, 0xb7}], 0x2, &(0x7f0000000580)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000001580)=""/81, 0x51}, {&(0x7f0000001600)=""/239, 0xef}, {&(0x7f0000001700)=""/154, 0x9a}], 0x5, &(0x7f0000001840)=""/4094, 0x1000}, 0x4}, {{&(0x7f0000002840)=@x25, 0x80, &(0x7f0000004b80)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/166, 0xa6}, {&(0x7f0000003980)=""/167, 0xa7}, {&(0x7f0000003a40)=""/194, 0x2d}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/19, 0x13}], 0x6}, 0x1ff}, {{&(0x7f0000004c00)=@alg, 0x80, &(0x7f0000005140)=[{&(0x7f0000004c80)=""/177, 0xb1}, {&(0x7f0000004d40)=""/108, 0x6c}, {&(0x7f0000006240)=""/205, 0xcd}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)=""/63, 0x3f}, {&(0x7f0000004f40)=""/177, 0xb1}, {&(0x7f0000004dc0)=""/217, 0xd2}, {&(0x7f0000005100)=""/50, 0x32}], 0x8, &(0x7f00000051c0)=""/4096, 0x1000}, 0x741}, {{&(0x7f00000061c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000006340), 0x0, &(0x7f0000006380)=""/149, 0x95}, 0x590}, {{&(0x7f0000006440)=@alg, 0x80, &(0x7f0000006600)=[{&(0x7f00000064c0)=""/140, 0x8c}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f00000065c0)=""/4, 0x4}], 0x3, &(0x7f0000006640)=""/214, 0xd6}, 0x7ff}], 0x6, 0x1, &(0x7f00000068c0)={0x77359400}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r9, &(0x7f0000000780)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r10 = syz_open_pts(r9, 0x80000) r11 = dup3(r10, r9, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000240)=0x12) 1.041360068s ago: executing program 5 (id=3266): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfa3c05026521f44}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x40040) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x880) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x22, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000004c0)=@buf={0x33, &(0x7f0000000480)="d89260f00c55561156eb884f4786f4e776a0d0b0ff33d43995ede141cec5c5ace79fd23eb78dbb947d5924b5466f1ce665056a"}) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)=@getpolicy={0x298, 0x15, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@empty, @in=@empty, 0x4e23, 0x15, 0x4e22, 0x3, 0x2, 0x20, 0xa0, 0x8, 0x0, r3}, 0x6e6bbe, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xc}, @algo_aead={0x5d, 0x12, {{'gcm(aes)\x00'}, 0x88, 0xc0, "81ef25568d819bc0489034adec7589b3d5"}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa, 0xbb, 0x22}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd2c, 0x70bd2d, 0x70bd2b, 0x5, [0x6, 0x7, 0x8fad, 0x757]}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @tmpl={0x184, 0x5, [{{@in=@remote, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x3503, 0x0, 0x0, 0x4, 0xe, 0x8001, 0x624}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3503, 0x2, 0x1, 0x3, 0x4, 0x8, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4d3, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x6, 0x3, 0xff, 0x4, 0x4, 0x4}, {{@in6=@empty, 0x4d2, 0xff}, 0x2, @in6=@loopback, 0x3500, 0x2, 0x2, 0x6, 0x9, 0xdd, 0x6}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x0, 0x3, 0xe, 0x4, 0xd, 0xfe}, {{@in=@broadcast, 0x4d6, 0x6c}, 0x2, @in=@multicast2, 0x3505, 0x0, 0x2, 0x40, 0x6, 0x1, 0x8}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40008}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x57}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xa}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x7ad66493c70f285d}, 0x40) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa4, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "6bad5b9689c540b5c515ba641d12005bc140e3925cabd95f06a1f3605c3234"}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x40) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000cc0)={0x0, r2, 'id0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000010c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000dc0)={0x2b4, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]]}, 0x2b4}, 0x1, 0x0, 0x0, 0xe779a8d891949ef9}, 0x8801) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r3, &(0x7f0000001100)={0x3ff, 0x371e4865, 0x4, 0x2, 0x9, 0x0, 0x24e, 0x100, 0x6}) syz_clone3(&(0x7f0000002300)={0x84000000, &(0x7f0000001180), &(0x7f00000011c0)=0x0, &(0x7f0000001200)=0x0, {0x2}, &(0x7f0000001240)=""/69, 0x45, &(0x7f00000012c0)=""/4096, &(0x7f00000022c0)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r4}}, 0x58) ptrace(0x4208, r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000023c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x50, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004841}, 0x11) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, r9, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4010) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, r5, 0x801, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc00}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x79}]}, 0x4c}}, 0x4004811) ptrace$getregset(0x4204, r6, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)=""/24, 0x18}) recvmsg$unix(r4, &(0x7f0000002d40)={&(0x7f0000002940), 0x6e, &(0x7f0000002c00)=[{&(0x7f00000029c0)=""/40, 0x28}, {&(0x7f0000002a00)=""/42, 0x2a}, {&(0x7f0000002a40)=""/175, 0xaf}, {&(0x7f0000002b00)=""/255, 0xff}], 0x4, &(0x7f0000002c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x10063) sendmsg$NL80211_CMD_GET_INTERFACE(r12, &(0x7f0000002e40)={&(0x7f0000002d80), 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x20, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r11, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x2c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8054) 931.783509ms ago: executing program 5 (id=3278): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f00000bb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80200) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000001c0)) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2, 0x2a0800, 0x0) pwrite64(r2, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a31253633", 0x4a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x8, 0x3, 0x3cb}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) 832.251868ms ago: executing program 5 (id=3282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$packet(0x11, 0xa, 0x300) prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0065581327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x4100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 743.905787ms ago: executing program 4 (id=3284): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) waitid(0x4, 0x0, &(0x7f0000000080), 0x20000000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 741.553787ms ago: executing program 5 (id=3285): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000540)=@v3={0x3000000, [{0x6, 0x4}, {0x31da7250, 0xc}], 0xee01}, 0x18, 0x1) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000540)=@v3={0x3000000, [{0x6, 0x4}, {0x31da7250, 0xc}], 0xee01}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) listen(r0, 0xf) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x6000) 725.474699ms ago: executing program 5 (id=3286): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef66, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b6f7ef06db9629e"}) io_setup(0x1ff, &(0x7f0000000080)=0x0) io_destroy(r3) io_cancel(r3, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000001d40), 0x0, 0x3, 0x0, 0x1}, 0x0) io_pgetevents(r3, 0x7, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x8]}, 0x8}) 434.641617ms ago: executing program 2 (id=3287): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) writev(r2, &(0x7f0000000300)=[{&(0x7f00000004c0)="0e46732248", 0x5}], 0x1) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94002600", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf251b000000900022802400008008000200010000000800040000000000080003006e080000080003000800000034000080080004007a0000000800050061e80000080001000500000008000600eaf30000080003009e640000080001004621000034000080080004000100000008000600bd0000000800010003000000080001000900000008000300f9ffffff080001000000000e0400cc00"], 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000100)={0x40000a3a, [0x7, 0x8eff], 0x1}, 0x10) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='blacklist\x00', &(0x7f00000002c0)=@chain) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(r8, &(0x7f00000001c0)=""/28, 0x1c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)="361802f0c2", 0x5, r6) readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 253.120015ms ago: executing program 4 (id=3288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="e5262a8b242f3f3b25bc1c455fb65b761034eb1801d12fbb03f00bbf92", 0x1d}, {&(0x7f0000000200)="da97c97fa76b9b8a1d2128327a6d3b1946ef60670f0d992a2914750da87c6e9ff0252c3e34b394a839fb2459bfb4f421c2b84789a459e0cc5740602e2b0e4a19ad51730d2bbaff41665562402a", 0x4d}], 0x2, 0x5) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 252.598855ms ago: executing program 4 (id=3289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$revoke(0x3, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) ioctl$KVM_CREATE_VCPU(r0, 0x7706, 0x2) 251.594195ms ago: executing program 4 (id=3290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x5, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0xa02}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000523000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x33, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x81}, {0xdddd0000, 0x4000, 0x0, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xeeef0000, 0xeeee0000, 0xd, 0x6, 0x4, 0x44, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x85, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0xf000, 0x8, 0x4, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x4, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x30, 0x0, 0x0, 0x2060, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) clock_nanosleep(0x4, 0x1, 0x0, 0x0) unshare(0x800) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 96.16199ms ago: executing program 4 (id=3291): pipe2$9p(0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6d276b17) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x44) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) sigaltstack(&(0x7f0000001ac0)={0x0, 0x80000002}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6d276b17) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x44) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r4, r3, 0x0, 0xffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r1, r0, 0x0, 0xffffffff) mkdir(&(0x7f0000000000)='./bus\x00', 0x101) 0s ago: executing program 4 (id=3292): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x30, 0x1}, {0x36}, {0x60}, {0x6c, 0x1}, {0x3}, {0x16}, {0x1b}, {0x1b, 0x1}, {0xb}, {0x60}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x5}, {0x5}, {0xb}, {0x16}, {0xb}, {0x30}, {0xb}, {0x36, 0x1}, {0x36, 0x1}, {0x36}, {0x2}, {0x3, 0x1}, {0x16, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x12}, {0x18, 0x1}, {0x12, 0x1}, {0x36, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004800}, 0x48) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) recvmmsg(r1, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/25, 0x19}, {&(0x7f0000001200)=""/147, 0x93}, {&(0x7f00000012c0)=""/20, 0x14}, {&(0x7f0000001300)=""/11, 0xb}, {&(0x7f0000001340)=""/153, 0x99}, {&(0x7f0000001400)=""/194, 0xc2}, {&(0x7f0000001500)=""/99, 0x63}], 0x8, &(0x7f0000001600)=""/184, 0xb8}, 0xffff8000}, {{&(0x7f00000016c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000001800)=""/105, 0x69}, {&(0x7f0000001880)=""/161, 0xa1}], 0x3}, 0x7fff}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000001980)=""/179, 0xb3}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/252, 0xfc}, {&(0x7f0000002b40)=""/240, 0xf0}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/3, 0x3}, {&(0x7f0000006c80)=""/33, 0x21}], 0xa, &(0x7f0000006d80)=""/79, 0x4f}, 0xfffffff7}], 0x3, 0x2, &(0x7f0000006ec0)={0x0, 0x989680}) r2 = socket$netlink(0x10, 0x3, 0x8) shutdown(r2, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000006f40), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000007000)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f80)={0x1c, r3, 0x520, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000007040)=""/36, &(0x7f0000007080)=0x24) pause() r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007100), r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000007140)={@remote, 0x0}, &(0x7f0000007180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007240)={'syztnl1\x00', &(0x7f00000071c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0xfc, 0x8, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x4, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000007280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000007400)={&(0x7f00000070c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000073c0)={&(0x7f00000072c0)={0xfc, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004800}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007480), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000007540)={&(0x7f0000007440)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000007500)={&(0x7f00000074c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000075c0), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000076c0)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007680)={&(0x7f0000007600)={0x50, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000007700), &(0x7f0000007740)=0x8) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000077c0), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000007940)={&(0x7f0000007780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007900)={&(0x7f0000007800)={0xf0, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x17b1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc99}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f80000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000007a40)={&(0x7f0000007980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007a00)={&(0x7f00000079c0)={0x40, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) syz_clone3(&(0x7f0000007c00)={0x10080080, &(0x7f0000007a80)=0xffffffffffffffff, &(0x7f0000007ac0), &(0x7f0000007b00), {0x23}, &(0x7f0000007b40)=""/16, 0x10, &(0x7f0000007b80)=""/35, &(0x7f0000007bc0)=[0xffffffffffffffff], 0x1}, 0x58) writev(r12, &(0x7f00000080c0)=[{&(0x7f0000007c80)="a8f46e6be02b45d1bc7e325b297d384a61c9b7f54670d807ba0d1064d726d60e6331b2c1881cd83c5d65df46eb7a51b8f02f2bc48dc43b5f21d76341128b80ba7e0f70598b7f576674e06b322b05df3bf1618c830c49ccd2613f4b403ffd0735ee67d473bab59afd7aa98b3130ae19a04fbac3b1fca5a3f6a60e13e49e1f1d6425e640c5cfe80244c1906beea0076c4de088fadccc70a08d67", 0x99}, {&(0x7f0000007d40)="3d322200c5130500eec4d87e21427c5a66c5984e409b8663bfa1871ae896823016f3dd352d35bd13e43dd27a647ade1d400000fc6448f86a4ec70daea591a8a78fe1561c8b94176805b21a2c24986db7f338725b74ac6a333d929c0b47b650c2f1df4c5c37afbec5e697067368a6e5713924cef7373bc9c3b8916fe5f6c87f3c81e4", 0x82}, {&(0x7f0000007e00)="6c3b4511782ff163cb00966ed4a1e85b3549d811da953aee8e131e922906e6a46c127070211ddd3707267ffe7b3a5c97fa78a40833734b4817d282f6087f04911a75858b1b52d8468e5f6c9857e29e62da9fd595fc5a1ad5860582739bab3089806179d8e6", 0x65}, {&(0x7f0000007e80)="cf9300569df3bd49349271eea0c7b2d6e06e64a55cada613f5715c73bb127b888f2c77c86b46c9f7a3677fa484f661a68cadb8ddc2e29adfe9eac8cb49adaf44fc2b9ffa3ec2f3cff1e2e9464c1ce6f1227d4f6706b890583ac47bb991f6b5912efc3ac4744800ff275b4238500baabd39154b524661e72fc7441dae975eacf30b70ce4e0a0250a98d70705a055f9dd9b6fce0779284a0365ba894e897c97173a4beb6b9ea5aa93b35337c84", 0xac}, {&(0x7f0000007f40)="f9c51c5dcf7ec8c495992fe0f08c9c2d25c3a0a52219548b8d2ba0fb5acc5e43ac6fd853d9e614e250056659d04d0530c97a73fb002e52e0cd4810bbf664220de657f237936e6645d0149b28f16d38b77fb5ccf0fdc5549b5fb545ee3d14453df01011a68bd65772cdba8e1ef046", 0x6e}, {&(0x7f0000007fc0)="42129a6a85989f089f787da53f8e74bbd3cf6c75cfa13531cb1621343f82700a32bedd67f6633155a39ae76d6e3f53bd58e0cabf18a2e8da0fb7b2d24991de775d111d56d3549919531691eb591f5d5158b1396de6740d1305284a0711ce2cec3a937c11ea94a282b52b04bf35b24742753b87c22b40308667a054ae2c80c317b7d43de0788ee9e82ec6f75cf5466e021b4b4e", 0x93}, {&(0x7f0000008080)="e53d539d382e", 0x6}], 0x7) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000008140)={0xfffffffffffffff8, r11, 'id0\x00'}) write$UHID_CREATE2(r13, &(0x7f00000081c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xb, 0x9, 0x5, 0x6, 0x3, 0xf, "3457c27a19edad0287a727"}}, 0x123) openat$sysfs(0xffffffffffffff9c, &(0x7f0000008300)='/sys/power/mem_sleep', 0x104201, 0x6) readahead(r12, 0x9, 0x5) kernel console output (not intermixed with test programs): 96] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.598697][ T6200] rust_binder: 102: no such ref 0 [ 123.611123][ T6200] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 123.618532][ T6201] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 123.625921][ T6201] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 123.633091][ T6200] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 123.657494][ T6207] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 123.657538][ T6207] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 123.665855][ T6207] rust_binder: Read failure Err(EFAULT) in pid:105 [ 123.674974][ T6209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.682055][ T6211] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 123.688757][ T6211] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 123.696937][ T6211] rust_binder: Read failure Err(EFAULT) in pid:105 [ 123.985525][ T1225] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.090643][ T36] audit: type=1400 audit(1760996951.370:526): avc: denied { unlink } for pid=6226 comm="syz.2.1964" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.155510][ T1225] usb 5-1: Using ep0 maxpacket: 16 [ 124.161879][ T1225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.172231][ T1225] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.181328][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.190182][ T1225] usb 5-1: config 0 descriptor?? [ 124.421436][ T6239] incfs: Options parsing error. -22 [ 124.426819][ T36] audit: type=1400 audit(1760996951.700:527): avc: denied { mounton } for pid=6238 comm="syz.1.1968" path="/475/file0" dev="tmpfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 124.426911][ T6239] incfs: mount failed -22 [ 124.457731][ T1225] usb 5-1: USB disconnect, device number 9 [ 124.550427][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 125.144957][ T6279] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 125.163021][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 125.166016][ T6276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.197104][ T6276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 125.482837][ T36] audit: type=1400 audit(1760996952.760:528): avc: denied { create } for pid=6293 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 125.786360][ T36] audit: type=1400 audit(1760996953.070:529): avc: denied { execute } for pid=6310 comm="syz.2.1991" path="/dev/rnullb0" dev="devtmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 125.854275][ T6317] rust_binder: inc_ref_done called when no active inc_refs [ 125.854861][ T6317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.865654][ T6318] rust_binder: inc_ref_done called when no active inc_refs [ 125.873803][ T6315] overlayfs: failed to clone upperpath [ 125.911241][ T6315] 9pnet_fd: Insufficient options for proto=fd [ 125.991560][ T36] audit: type=1400 audit(1760996953.270:530): avc: denied { mounton } for pid=6333 comm="syz.2.1997" path="/56/file2" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.991645][ T6335] rust_binder: 175: no such ref 3 [ 126.035366][ T6334] rust_binder: 175: no such ref 3 [ 126.049611][ T6339] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 126.065547][ T6339] rust_binder: Write failure EINVAL in pid:127 [ 126.145445][ T6355] fuse: Bad value for 'fd' [ 126.195798][ T6369] __vm_enough_memory: pid: 6369, comm: syz.2.2008, bytes: 18014402804453376 not enough memory for the allocation [ 126.247165][ T6375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 126.247200][ T6375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:137 [ 126.268800][ T36] audit: type=1400 audit(1760996953.540:531): avc: denied { mount } for pid=6380 comm="syz.1.2013" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 126.313096][ T36] audit: type=1400 audit(1760996953.550:532): avc: denied { sqpoll } for pid=6379 comm="syz.2.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.357331][ T6396] rust_binder: 141: no such ref 1 [ 126.464991][ T6416] overlayfs: failed to clone upperpath [ 126.526534][ T6421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6421 comm=syz.3.2024 [ 126.615565][ T6424] tipc: Started in network mode [ 126.625588][ T6424] tipc: Node identity 56417a23d9bf, cluster identity 4711 [ 126.632940][ T6424] tipc: Enabled bearer , priority 0 [ 126.664548][ T6428] batadv_slave_0: mtu less than device minimum [ 126.670896][ T1348] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 126.826525][ T1348] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 126.835720][ T1348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.844643][ T1348] usb 3-1: config 0 descriptor?? [ 127.050553][ T1348] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 127.255081][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 127.264107][ T6450] bridge_slave_1: left allmulticast mode [ 127.269859][ T6450] bridge_slave_1: left promiscuous mode [ 127.275575][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.283358][ T6450] bridge_slave_0: left allmulticast mode [ 127.289166][ T6450] bridge_slave_0: left promiscuous mode [ 127.294912][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.389748][ T6423] tipc: Resetting bearer [ 127.405610][ T6423] tipc: Disabling bearer [ 127.565199][ T6468] usb usb8: usbfs: process 6468 (syz.4.2041) did not claim interface 0 before use [ 127.574725][ T6468] rust_binder: Write failure EFAULT in pid:159 [ 127.576321][ T6468] usb usb8: usbfs: process 6468 (syz.4.2041) did not claim interface 0 before use [ 127.582795][ T6469] rust_binder: Write failure EFAULT in pid:159 [ 127.808036][ T6477] IPv6: Can't replace route, no match found [ 128.089174][ T6517] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 128.196333][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 128.356532][ T6545] netlink: 'syz.4.2067': attribute type 11 has an invalid length. [ 128.389403][ T6550] rust_binder: Write failure EFAULT in pid:171 [ 128.414559][ T6555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6555 comm=syz.1.2071 [ 128.655530][ T1225] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.786974][ T1225] usb 5-1: device descriptor read/64, error -71 [ 128.793054][ T36] audit: type=1400 audit(1760996956.070:533): avc: denied { ioctl } for pid=6568 comm="syz.3.2076" path="socket:[32460]" dev="sockfs" ino=32460 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.025578][ T1225] usb 5-1: device descriptor read/64, error -71 [ 129.265552][ T1225] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.266666][ T6407] rust_binder: 201: no such ref 0 [ 129.278316][ T6407] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 129.285584][ T6407] rust_binder: 201: no such ref 2 [ 129.290714][ T6407] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 129.291739][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.308479][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.321954][ T1348] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 129.332324][ T1348] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 129.343615][ T1348] asix 3-1:0.0: probe with driver asix failed with error -71 [ 129.352154][ T1348] usb 3-1: USB disconnect, device number 3 [ 129.395537][ T1225] usb 5-1: device descriptor read/64, error -71 [ 129.635549][ T1225] usb 5-1: device descriptor read/64, error -71 [ 129.685570][ T1348] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 129.746039][ T1225] usb usb5-port1: attempt power cycle [ 129.836611][ T36] audit: type=1400 audit(1760996957.120:534): avc: denied { append } for pid=6592 comm="syz.2.2083" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.846855][ T6593] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2083'. [ 129.870660][ T6593] rust_binder: Error while translating object. [ 129.870721][ T6593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 129.876961][ T6593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 129.887905][ T1348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.905353][ T1348] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 129.913070][ T1348] usb 3-1: can't read configurations, error -71 [ 130.085600][ T1225] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.106554][ T1225] usb 5-1: device descriptor read/8, error -71 [ 130.236530][ T1225] usb 5-1: device descriptor read/8, error -71 [ 130.272447][ T6643] netlink: 'syz.3.2100': attribute type 13 has an invalid length. [ 130.331183][ T6655] fuseblk: Bad value for 'fd' [ 130.354064][ T6657] tipc: Started in network mode [ 130.361997][ T6657] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 130.377524][ T6657] tipc: Enabling of bearer rejected, failed to enable media [ 130.476116][ T1225] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.507808][ T1225] usb 5-1: device descriptor read/8, error -71 [ 130.564670][ T6688] overlayfs: failed to clone upperpath [ 130.646582][ T1225] usb 5-1: device descriptor read/8, error -71 [ 130.756150][ T1225] usb usb5-port1: unable to enumerate USB device [ 130.965522][ T1348] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.092351][ T6695] overlayfs: failed to resolve './cgroup': -2 [ 131.116896][ T1348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.125326][ T1348] usb 3-1: config 2 has an invalid interface number: 34 but max is 2 [ 131.133503][ T1348] usb 3-1: config 2 has an invalid interface number: 6 but max is 2 [ 131.141580][ T1348] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 131.152174][ T1348] usb 3-1: config 2 has no interface number 0 [ 131.158298][ T1348] usb 3-1: config 2 has no interface number 2 [ 131.164402][ T1348] usb 3-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 131.175372][ T1348] usb 3-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 131.186501][ T1348] usb 3-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.199641][ T1348] usb 3-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 131.206053][ T6697] 9pnet: Could not find request transport: fdjfdno=0xffffffffffffffff [ 131.210899][ T1348] usb 3-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 131.231843][ T1348] usb 3-1: config 2 interface 1 has no altsetting 0 [ 131.238669][ T1348] usb 3-1: config 2 interface 34 has no altsetting 0 [ 131.245409][ T1348] usb 3-1: config 2 interface 6 has no altsetting 0 [ 131.253891][ T1348] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 131.263238][ T1348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.271448][ T1348] usb 3-1: Product: syz [ 131.276014][ T1348] usb 3-1: Manufacturer: syz [ 131.280947][ T1348] usb 3-1: SerialNumber: syz [ 131.409616][ T36] audit: type=1400 audit(1760996958.690:535): avc: denied { lock } for pid=6720 comm="syz.3.2131" path="socket:[32640]" dev="sockfs" ino=32640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.872180][ T36] audit: type=1326 audit(1760996959.150:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 131.895660][ T36] audit: type=1326 audit(1760996959.150:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 131.932125][ T36] audit: type=1326 audit(1760996959.210:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 131.955745][ T36] audit: type=1326 audit(1760996959.210:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 131.955921][ T6756] fuse: Bad value for 'user_id' [ 131.984289][ T6756] fuse: Bad value for 'user_id' [ 131.992076][ T36] audit: type=1326 audit(1760996959.270:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 132.015641][ T36] audit: type=1326 audit(1760996959.270:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 132.052160][ T36] audit: type=1326 audit(1760996959.330:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6753 comm="syz.4.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 132.255082][ T6758] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 132.255644][ T6759] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 132.362063][ T6777] bpf: Bad value for 'uid' [ 132.622462][ T6785] rust_binder: Write failure EINVAL in pid:196 [ 133.123064][ T6804] overlayfs: failed to resolve './file1': -2 [ 133.521325][ T6806] fuseblk: Bad value for 'fd' [ 133.588227][ T6816] 9pnet_fd: Insufficient options for proto=fd [ 133.625149][ T1348] usb 3-1: selecting invalid altsetting 0 [ 133.643924][ T6822] overlay: ./bus is not a directory [ 133.650842][ T1348] usb 3-1: USB disconnect, device number 5 [ 133.682628][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.731404][ T6832] rust_binder: Error while translating object. [ 133.731468][ T6832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.740542][ T6832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 134.285505][ T1348] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 134.446585][ T1348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.457816][ T1348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.467646][ T1348] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 134.476826][ T1348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.485962][ T1348] usb 3-1: config 0 descriptor?? [ 134.595037][ T6861] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2180'. [ 134.695177][ T1348] usbhid 3-1:0.0: can't add hid device: -71 [ 134.701838][ T1348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.713739][ T1348] usb 3-1: USB disconnect, device number 6 [ 134.764499][ T6889] overlayfs: failed to clone upperpath [ 134.787305][ T6891] 9pnet_fd: Insufficient options for proto=fd [ 134.806484][ T6893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=6893 comm=syz.4.2190 [ 135.433901][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.433936][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.447543][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.447575][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.462970][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.479628][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.479663][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.487520][ T6916] rust_binder: Error in use_page_slow: ESRCH [ 135.494131][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.501374][ T6916] rust_binder: use_range failure ESRCH [ 135.507937][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.513507][ T6916] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 135.520136][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.528549][ T6916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 135.535198][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.543961][ T6916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:251 [ 135.544724][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.566198][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.573248][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.580431][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.587249][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.593725][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.600519][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.607569][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.614092][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.620799][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.627571][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.634041][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.641036][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.642186][ T6934] tipc: Enabling of bearer rejected, failed to enable media [ 135.648149][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.655255][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2205'. [ 135.663121][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.677952][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.684719][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.691820][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.698729][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.705420][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.706025][ T6938] overlayfs: failed to clone lowerpath [ 135.712341][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.836968][ T6945] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 135.885940][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=6947 comm=syz.2.2211 [ 135.907454][ T6947] rust_binder: Error while translating object. [ 135.907497][ T6947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.913745][ T6947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 136.083259][ T6952] tipc: Enabling of bearer rejected, media not registered [ 136.140237][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 136.140256][ T36] audit: type=1400 audit(1760996963.420:635): avc: denied { getopt } for pid=6956 comm="syz.2.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.269022][ T6963] tmpfs: Invalid uid '0x00000000ffffffff' [ 136.320319][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.327572][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.334778][ T6959] bridge_slave_0: entered allmulticast mode [ 136.342966][ T6959] bridge_slave_0: entered promiscuous mode [ 136.351206][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.363984][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.371464][ T6959] bridge_slave_1: entered allmulticast mode [ 136.378047][ T6959] bridge_slave_1: entered promiscuous mode [ 136.392820][ T6991] overlay: Bad value for 'xino' [ 136.422935][ T6998] fuseblk: Bad value for 'fd' [ 136.451248][ T7002] bpf: Bad value for 'uid' [ 136.489137][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.496266][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.503573][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.510643][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.541199][ T883] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.549180][ T883] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.573148][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.580285][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.595919][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.603007][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.658645][ T6959] veth0_vlan: entered promiscuous mode [ 136.673643][ T6959] veth1_macvtap: entered promiscuous mode [ 136.742597][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2236'. [ 136.805089][ T7037] rust_binder: Error while translating object. [ 136.805139][ T7037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.811596][ T7037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 136.838495][ T7039] rust_binder: Error while translating object. [ 136.847968][ T7039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.854294][ T7039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 136.881811][ T7041] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 136.891030][ T7041] rust_binder: Error while translating object. [ 136.902577][ T7041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.908963][ T7041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 137.175609][ T511] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 137.335658][ T511] usb 4-1: Using ep0 maxpacket: 16 [ 137.342527][ T511] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.352962][ T511] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.362386][ T511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.372926][ T511] usb 4-1: config 0 descriptor?? [ 137.418901][ T7078] 9pnet_fd: Insufficient options for proto=fd [ 137.653262][ T7100] 9pnet_fd: Insufficient options for proto=fd [ 137.663469][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.675676][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.684295][ T7102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.694681][ T7102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.704530][ T1225] usb 4-1: USB disconnect, device number 24 [ 137.852797][ T7126] fuse: Bad value for 'user_id' [ 137.857839][ T7126] fuse: Bad value for 'user_id' [ 138.012343][ T7147] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2280'. [ 138.130636][ T7162] netlink: 'syz.2.2287': attribute type 11 has an invalid length. [ 138.294820][ T7165] fuse: Bad value for 'fd' [ 138.873282][ T36] audit: type=1400 audit(1760996966.150:636): avc: denied { create } for pid=7187 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.903672][ T36] audit: type=1400 audit(1760996966.180:637): avc: denied { map } for pid=7183 comm="syz.3.2294" path="net:[4026532496]" dev="nsfs" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.965313][ T7208] fuse: Bad value for 'fd' [ 138.972608][ T7208] fuse: Bad value for 'fd' [ 139.135489][ T511] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 139.155985][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.163052][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.170249][ T7215] bridge_slave_0: entered allmulticast mode [ 139.176699][ T7215] bridge_slave_0: entered promiscuous mode [ 139.183295][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.190383][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.197495][ T7215] bridge_slave_1: entered allmulticast mode [ 139.203765][ T7215] bridge_slave_1: entered promiscuous mode [ 139.261067][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.268179][ T7215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.275488][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.282532][ T7215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.296568][ T511] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.306568][ T511] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 139.317056][ T511] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 139.327806][ T511] usb 4-1: config 220 has no interface number 2 [ 139.334150][ T511] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.348464][ T511] usb 4-1: config 220 interface 0 has no altsetting 0 [ 139.355383][ T511] usb 4-1: config 220 interface 76 has no altsetting 0 [ 139.357561][ T7226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.362702][ T511] usb 4-1: config 220 interface 1 has no altsetting 0 [ 139.369536][ T7226] IPv6: NLM_F_CREATE should be set when creating new route [ 139.369556][ T7226] IPv6: NLM_F_CREATE should be set when creating new route [ 139.378359][ T511] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.394016][ T7215] veth0_vlan: entered promiscuous mode [ 139.400918][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.413952][ T511] usb 4-1: Product: syz [ 139.418807][ T511] usb 4-1: Manufacturer: syz [ 139.420803][ T7215] veth1_macvtap: entered promiscuous mode [ 139.423503][ T511] usb 4-1: SerialNumber: syz [ 139.500494][ T36] audit: type=1400 audit(1760996966.780:638): avc: denied { getopt } for pid=7227 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.799528][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2305'. [ 139.800662][ T511] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 139.811699][ T7239] overlay: ./file0 is not a directory [ 139.816152][ T511] usb 4-1: No valid video chain found. [ 139.826647][ T511] usb 4-1: selecting invalid altsetting 0 [ 139.838834][ T511] usb 4-1: USB disconnect, device number 25 [ 139.933948][ T36] audit: type=1400 audit(1760996967.210:639): avc: denied { map } for pid=7258 comm="syz.2.2314" path="socket:[35793]" dev="sockfs" ino=35793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.958819][ T7259] 9pnet_fd: Insufficient options for proto=fd [ 139.972185][ T36] audit: type=1400 audit(1760996967.210:640): avc: denied { accept } for pid=7258 comm="syz.2.2314" path="socket:[35793]" dev="sockfs" ino=35793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.164961][ T7269] rust_binder: Error while translating object. [ 140.164994][ T7269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 140.171645][ T7269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:10 [ 140.242371][ T511] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 140.276762][ T511] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.288095][ T7273] rust_binder: 39: no such ref 1 [ 140.293097][ T7273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 140.305796][ T7273] rust_binder: 39: no such ref 1 [ 140.455495][ T575] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 140.477157][ T7287] 9pnet_fd: Insufficient options for proto=fd [ 140.516353][ T7291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2327'. [ 140.610332][ T575] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 140.618556][ T575] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.631328][ T575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.642308][ T575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.653707][ T575] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.666956][ T575] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.674958][ T7304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=607 sclass=netlink_route_socket pid=7304 comm=syz.2.2331 [ 140.676429][ T575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.699270][ T575] usb 2-1: config 0 descriptor?? [ 140.704644][ T7269] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.116516][ T575] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 141.124092][ T575] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 141.131806][ T575] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 141.140834][ T575] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 141.366700][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2338'. [ 141.378066][ T66] usb 2-1: USB disconnect, device number 26 [ 141.411006][ T7328] netlink: 'syz.4.2339': attribute type 12 has an invalid length. [ 141.865544][ T575] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 142.015569][ T575] usb 4-1: Using ep0 maxpacket: 32 [ 142.022219][ T575] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.033452][ T575] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.044758][ T575] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 142.054155][ T575] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 142.062615][ T575] usb 4-1: Product: syz [ 142.066910][ T575] usb 4-1: Manufacturer: syz [ 142.073949][ T575] hub 4-1:4.0: USB hub found [ 142.123585][ T36] audit: type=1400 audit(1760996969.400:641): avc: denied { remount } for pid=7356 comm="syz.4.2348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 142.195530][ T66] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 142.274944][ T575] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 142.345519][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 142.352126][ T66] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 142.360442][ T66] usb 2-1: config 0 has no interface number 0 [ 142.368733][ T66] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.378066][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.386235][ T66] usb 2-1: Product: syz [ 142.390443][ T66] usb 2-1: Manufacturer: syz [ 142.395052][ T66] usb 2-1: SerialNumber: syz [ 142.400557][ T66] usb 2-1: config 0 descriptor?? [ 142.406502][ T66] smsc95xx v2.0.0 [ 142.490269][ T7332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55 [ 142.655648][ T6594] usb 4-1: USB disconnect, device number 26 [ 143.408081][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 143.418960][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.428342][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 143.439277][ T66] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 143.448771][ T66] usb 2-1: USB disconnect, device number 27 [ 143.935627][ T7383] netlink: 'syz.1.2357': attribute type 10 has an invalid length. [ 143.943526][ T7383] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2357'. [ 143.965229][ T7381] rust_binder: Error while translating object. [ 143.965265][ T7381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 143.985236][ T7381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60 [ 144.255483][ T6594] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 144.405542][ T6594] usb 2-1: device descriptor read/64, error -71 [ 144.645655][ T6594] usb 2-1: device descriptor read/64, error -71 [ 144.895524][ T6594] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 145.025525][ T6594] usb 2-1: device descriptor read/64, error -71 [ 145.265568][ T6594] usb 2-1: device descriptor read/64, error -71 [ 145.375670][ T6594] usb usb2-port1: attempt power cycle [ 145.386416][ T36] audit: type=1326 audit(1760996972.670:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.4.2382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06dcf8efc9 code=0x0 [ 145.715514][ T6594] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 145.736583][ T6594] usb 2-1: device descriptor read/8, error -71 [ 145.805510][ T66] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 145.866412][ T6594] usb 2-1: device descriptor read/8, error -71 [ 145.956600][ T66] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 145.964868][ T66] usb 4-1: config 0 has no interface number 0 [ 145.971056][ T66] usb 4-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 145.981283][ T66] usb 4-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.991414][ T66] usb 4-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.002706][ T66] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 146.011811][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.019851][ T66] usb 4-1: Product: syz [ 146.024041][ T66] usb 4-1: Manufacturer: syz [ 146.028666][ T66] usb 4-1: SerialNumber: syz [ 146.034067][ T66] usb 4-1: config 0 descriptor?? [ 146.039396][ T7481] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 146.047490][ T66] ftdi_sio 4-1:0.99: FTDI USB Serial Device converter detected [ 146.055660][ T66] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 146.115502][ T6594] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 146.136515][ T6594] usb 2-1: device descriptor read/8, error -71 [ 146.255232][ T7481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.258503][ T7481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 146.270800][ T6594] usb 2-1: device descriptor read/8, error -71 [ 146.274669][ T7497] 9pnet_fd: Insufficient options for proto=fd [ 146.308598][ T1225] usb 4-1: USB disconnect, device number 27 [ 146.315203][ T1225] ftdi_sio 4-1:0.99: device disconnected [ 146.385601][ T6594] usb usb2-port1: unable to enumerate USB device [ 146.849837][ T7521] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 147.092909][ T7535] 9pnet_fd: Insufficient options for proto=fd [ 147.105547][ T575] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 147.266639][ T575] usb 4-1: No LPM exit latency info found, disabling LPM. [ 147.274802][ T575] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 147.285978][ T575] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.301418][ T575] usb 4-1: string descriptor 0 read error: -22 [ 147.314423][ T575] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 147.323773][ T575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.333741][ T7521] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 147.395503][ T6594] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 147.456227][ T7558] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2418'. [ 147.525534][ T6594] usb 2-1: device descriptor read/64, error -71 [ 147.550576][ T575] usbhid 4-1:1.0: can't add hid device: -71 [ 147.556167][ T36] audit: type=1400 audit(1760996974.830:643): avc: denied { setattr } for pid=7562 comm="syz.4.2420" name="" dev="pipefs" ino=36309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 147.565617][ T575] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 147.587901][ T575] usb 4-1: USB disconnect, device number 28 [ 147.775532][ T6594] usb 2-1: device descriptor read/64, error -71 [ 148.015516][ T6594] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 148.145598][ T6594] usb 2-1: device descriptor read/64, error -71 [ 148.305524][ T575] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 148.385493][ T6594] usb 2-1: device descriptor read/64, error -71 [ 148.455936][ T575] usb 4-1: no configurations [ 148.460599][ T575] usb 4-1: can't read configurations, error -22 [ 148.505506][ T6594] usb usb2-port1: attempt power cycle [ 148.605684][ T575] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 148.766441][ T575] usb 4-1: no configurations [ 148.771095][ T575] usb 4-1: can't read configurations, error -22 [ 148.777840][ T575] usb usb4-port1: attempt power cycle [ 148.802835][ T36] audit: type=1400 audit(1760996976.080:644): avc: denied { accept } for pid=7602 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 148.845519][ T6594] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 148.866575][ T6594] usb 2-1: device descriptor read/8, error -71 [ 148.996600][ T6594] usb 2-1: device descriptor read/8, error -71 [ 149.008414][ T36] audit: type=1400 audit(1760996976.290:645): avc: denied { create } for pid=7626 comm="syz.2.2441" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.016892][ T7628] overlayfs: failed to clone upperpath [ 149.083826][ T36] audit: type=1326 audit(1760996976.360:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7638 comm="syz.2.2445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x0 [ 149.115530][ T575] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 149.136266][ T575] usb 4-1: no configurations [ 149.140904][ T575] usb 4-1: can't read configurations, error -22 [ 149.235495][ T6594] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 149.256411][ T6594] usb 2-1: device descriptor read/8, error -71 [ 149.275504][ T575] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 149.296290][ T575] usb 4-1: no configurations [ 149.300936][ T575] usb 4-1: can't read configurations, error -22 [ 149.307398][ T575] usb usb4-port1: unable to enumerate USB device [ 149.386591][ T6594] usb 2-1: device descriptor read/8, error -71 [ 149.495622][ T6594] usb usb2-port1: unable to enumerate USB device [ 149.994119][ T7654] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 150.208428][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'. [ 150.471010][ T36] audit: type=1326 audit(1760996977.750:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.4.2472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06dcf8efc9 code=0x0 [ 150.475532][ T575] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 150.645634][ T575] usb 2-1: Using ep0 maxpacket: 16 [ 150.652052][ T575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.663046][ T575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.672841][ T575] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 150.681954][ T575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.691327][ T575] usb 2-1: config 0 descriptor?? [ 151.098669][ T575] konepure 0003:1E7D:2DB4.000F: unknown main item tag 0x0 [ 151.105911][ T575] konepure 0003:1E7D:2DB4.000F: item fetching failed at offset 3/4 [ 151.114110][ T575] konepure 0003:1E7D:2DB4.000F: parse failed [ 151.120310][ T575] konepure 0003:1E7D:2DB4.000F: probe with driver konepure failed with error -22 [ 151.294879][ T36] audit: type=1400 audit(1760996978.570:648): avc: denied { unmount } for pid=7728 comm="syz.2.2476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 151.326558][ T66] usb 2-1: USB disconnect, device number 36 [ 151.595493][ T6594] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 151.746598][ T6594] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 151.755023][ T6594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 151.766099][ T6594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 151.777445][ T6594] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 151.786582][ T6594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.794719][ T6594] usb 4-1: Product: syz [ 151.798949][ T6594] usb 4-1: Manufacturer: syz [ 151.803570][ T6594] usb 4-1: SerialNumber: syz [ 151.809041][ T6594] usb 4-1: config 0 descriptor?? [ 152.078992][ T575] usb 4-1: USB disconnect, device number 33 [ 152.249708][ T7773] netlink: 'syz.4.2488': attribute type 11 has an invalid length. [ 152.329620][ T7779] rust_binder: Error while translating object. [ 152.329670][ T7779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 152.336004][ T7779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:53 [ 152.773287][ T36] audit: type=1400 audit(1760996980.047:649): avc: denied { create } for pid=7815 comm="syz.1.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.799144][ T7814] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2504'. [ 152.911958][ T7829] netlink: 'syz.1.2508': attribute type 27 has an invalid length. [ 152.942674][ T7834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7834 comm=syz.1.2511 [ 153.042482][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.042512][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.049385][ T7854] rust_binder: Error while translating object. [ 153.054100][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.056188][ T7854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 153.062107][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.068869][ T7854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 153.078142][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.093602][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.100248][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.106735][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.113179][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.119641][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.126204][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.132645][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.139120][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.145600][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.152051][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.158527][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.165009][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.171558][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.178032][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.184566][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.191080][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.197742][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.201423][ T7858] fuseblk: Bad value for 'fd' [ 153.204205][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.204225][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.222324][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.228976][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.235515][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.242048][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.248785][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.255243][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.261827][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.268337][ T7853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.538265][ T7883] 9pnet_fd: Insufficient options for proto=fd [ 153.665954][ T7902] IPv6: A: Disabled Multicast RS [ 153.918627][ T7928] /dev/rnullb0: Can't lookup blockdev [ 153.948357][ T7930] rust_binder: Fixups oob 178 180 369 186 [ 153.948405][ T7930] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 153.954227][ T7930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.962547][ T7930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 153.990589][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2544'. [ 154.005309][ T36] audit: type=1400 audit(1760996981.277:650): avc: denied { listen } for pid=7932 comm="syz.1.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.103932][ T36] audit: type=1400 audit(1760996981.377:651): avc: denied { getattr } for pid=7937 comm="syz.1.2547" path="socket:[39099]" dev="sockfs" ino=39099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.144537][ T7940] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2548'. [ 154.165319][ T7942] netlink: 8540 bytes leftover after parsing attributes in process `syz.2.2549'. [ 154.174578][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 154.183577][ T7942] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2549'. [ 154.205310][ T36] audit: type=1326 audit(1760996981.477:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.1.2548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f002b38efc9 code=0x0 [ 154.228307][ T7947] incfs: Error accessing: ./file0. [ 154.233519][ T7947] incfs: mount failed -20 [ 154.685522][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.685553][ T4114] Bluetooth: hci0: command 0x1003 tx timeout [ 154.712659][ T7953] rust_binder: Error while translating object. [ 154.712720][ T7953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.719062][ T7953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 154.744334][ T36] audit: type=1326 audit(1760996982.017:653): auid=4294967295 uid=49663 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.4.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 154.810642][ T7965] veth1: entered allmulticast mode [ 154.816161][ T7964] veth1: left allmulticast mode [ 154.885754][ T7968] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 154.975500][ T1348] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 155.090871][ T7974] 9pnet_fd: Insufficient options for proto=fd [ 155.135531][ T1348] usb 4-1: Invalid ep0 maxpacket: 64 [ 155.235553][ T575] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 155.265557][ T1348] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 155.388035][ T575] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.397286][ T575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.405354][ T575] usb 2-1: Product: syz [ 155.409670][ T575] usb 2-1: Manufacturer: syz [ 155.414326][ T575] usb 2-1: SerialNumber: syz [ 155.425537][ T1348] usb 4-1: Invalid ep0 maxpacket: 64 [ 155.431276][ T1348] usb usb4-port1: attempt power cycle [ 155.624497][ T575] usb 2-1: USB disconnect, device number 37 [ 155.686914][ T8026] netlink: 'syz.4.2575': attribute type 16 has an invalid length. [ 155.694846][ T8026] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2575'. [ 155.795561][ T1348] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 155.815854][ T1348] usb 4-1: Invalid ep0 maxpacket: 64 [ 155.945519][ T1348] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 155.965966][ T1348] usb 4-1: Invalid ep0 maxpacket: 64 [ 155.972001][ T1348] usb usb4-port1: unable to enumerate USB device [ 156.055512][ T575] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 156.208284][ T575] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 156.217458][ T575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.225513][ T575] usb 2-1: Product: syz [ 156.229781][ T575] usb 2-1: Manufacturer: syz [ 156.234385][ T575] usb 2-1: SerialNumber: syz [ 156.435724][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2596'. [ 156.840814][ T36] audit: type=1400 audit(1760996984.117:654): avc: denied { write } for pid=8098 comm="syz.4.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 156.843071][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 156.872047][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 157.052195][ T8108] overlayfs: missing 'workdir' [ 157.258906][ T8118] /dev/loop0: Can't lookup blockdev [ 157.542641][ T8136] overlayfs: failed to clone upperpath [ 157.943720][ T8150] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 158.000170][ T1225] usb 2-1: USB disconnect, device number 38 [ 158.157616][ T8170] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2624'. [ 158.168091][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 158.227012][ T8174] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2625'. [ 158.859680][ T8198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8198 comm=syz.4.2632 [ 158.925487][ T1348] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 159.075506][ T1348] usb 4-1: Using ep0 maxpacket: 32 [ 159.082471][ T1348] usb 4-1: config 1 interface 0 has no altsetting 0 [ 159.090624][ T1348] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 159.099840][ T1348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.107902][ T1348] usb 4-1: Product: Щ [ 159.112004][ T1348] usb 4-1: Manufacturer: п [ 159.116558][ T1348] usb 4-1: SerialNumber: Я [ 159.295500][ T66] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 159.445497][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 159.451683][ T66] usb 2-1: config 6 has an invalid interface number: 63 but max is 0 [ 159.459838][ T66] usb 2-1: config 6 has no interface number 0 [ 159.465991][ T66] usb 2-1: config 6 interface 63 has no altsetting 0 [ 159.474082][ T66] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ff.ab [ 159.483215][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.491296][ T66] usb 2-1: Product: syz [ 159.495516][ T66] usb 2-1: Manufacturer: syz [ 159.500141][ T66] usb 2-1: SerialNumber: syz [ 159.527718][ T1348] usbhid 4-1:1.0: can't add hid device: -71 [ 159.533768][ T1348] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 159.543304][ T1348] usb 4-1: USB disconnect, device number 38 [ 159.708899][ T66] ftdi_sio 2-1:6.63: FTDI USB Serial Device converter detected [ 159.716917][ T66] ftdi_sio ttyUSB0: unknown device type: 0xffab [ 159.724185][ T66] usb 2-1: USB disconnect, device number 39 [ 159.731094][ T66] ftdi_sio 2-1:6.63: device disconnected [ 160.551202][ T8225] overlayfs: failed to clone upperpath [ 161.345476][ T6594] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 161.427656][ T8277] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 161.437403][ T36] audit: type=1400 audit(1760996988.717:655): avc: denied { relabelto } for pid=8276 comm="syz.3.2658" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 161.438916][ T8277] tipc: Started in network mode [ 161.468353][ T8277] tipc: Node identity 2aeb8cce2d77, cluster identity 4711 [ 161.469273][ T36] audit: type=1400 audit(1760996988.717:656): avc: denied { associate } for pid=8276 comm="syz.3.2658" name="file0" dev="tmpfs" ino=338 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mnt_t:s0" [ 161.478562][ T8277] tipc: Enabled bearer , priority 10 [ 161.508496][ T6594] usb 2-1: Using ep0 maxpacket: 16 [ 161.514734][ T6594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.527048][ T6594] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.534973][ T36] audit: type=1400 audit(1760996988.807:657): avc: denied { rmdir } for pid=6959 comm="syz-executor" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 161.544225][ T6594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.589633][ T6594] usb 2-1: config 0 descriptor?? [ 161.789072][ T8325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2674'. [ 161.816710][ T8247] cgroup: Bad value for 'name' [ 161.846230][ T36] audit: type=1400 audit(1760996989.127:658): avc: denied { map } for pid=8334 comm="syz.2.2677" path="socket:[38689]" dev="sockfs" ino=38689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 161.846768][ T8335] netlink: 'syz.2.2677': attribute type 12 has an invalid length. [ 161.882403][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 161.923506][ T8343] overlayfs: failed to clone upperpath [ 161.939134][ T1225] usb 2-1: USB disconnect, device number 40 [ 161.999681][ T8357] x_tables: unsorted entry at hook 2 [ 162.110874][ T8377] overlayfs: failed to clone lowerpath [ 162.285579][ T1225] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 162.435517][ T1225] usb 2-1: Using ep0 maxpacket: 32 [ 162.442689][ T1225] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 162.452951][ T1225] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 162.464524][ T1225] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.473682][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.481723][ T1225] usb 2-1: Product: syz [ 162.485935][ T1225] usb 2-1: Manufacturer: syz [ 162.490562][ T1225] usb 2-1: SerialNumber: syz [ 162.605503][ T6594] tipc: Node number set to 127700174 [ 162.670468][ T8389] 9pnet_fd: Insufficient options for proto=fd [ 163.241960][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2704'. [ 163.412981][ T1225] cdc_ncm 2-1:1.0: bind() failure [ 163.442141][ T8412] x_tables: duplicate underflow at hook 1 [ 163.445727][ T1225] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 163.454711][ T1225] cdc_ncm 2-1:1.1: bind() failure [ 163.463474][ T1225] usb 2-1: USB disconnect, device number 41 [ 164.096290][ T8439] __vm_enough_memory: pid: 8439, comm: syz.1.2715, bytes: 18014402804453376 not enough memory for the allocation [ 164.107089][ T8442] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2716'. [ 164.365958][ T8479] 9pnet_fd: Insufficient options for proto=fd [ 167.386395][ T110] udevd[110]: worker [567] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 183.222611][ T8487] netlink: 'syz.1.2732': attribute type 64 has an invalid length. [ 183.256605][ T8487] binder: Unknown parameter '' [ 183.484716][ T8556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 183.558874][ T8567] rust_binder: Write failure EINVAL in pid:188 [ 183.598109][ T8573] binder: Unknown parameter '¿æپƵâܲ­t)¬& ã)žä1e"0ýù1ºÔµLuŒa·ˆw¯ñY6äÉe.åæÖÞ^óPñ/*€›VÜÿÔg) [ 183.598109][ T8573] „‚Êä¿Å‚tò© âäÌGÌZX ©"àVJ×Ù‡é\RÌtÏ­E§Ì©Ý|n' [ 183.843173][ T36] audit: type=1326 audit(1760997011.117:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002b38efc9 code=0x7fc00000 [ 183.962236][ T36] audit: type=1326 audit(1760997011.237:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 183.986350][ T36] audit: type=1326 audit(1760997011.237:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 184.010052][ T36] audit: type=1326 audit(1760997011.247:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef9558d810 code=0x7ffc0000 [ 184.033506][ T36] audit: type=1326 audit(1760997011.247:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef9558d810 code=0x7ffc0000 [ 184.057020][ T36] audit: type=1326 audit(1760997011.247:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 184.080723][ T36] audit: type=1326 audit(1760997011.247:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 184.104222][ T36] audit: type=1326 audit(1760997011.247:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 184.128346][ T36] audit: type=1326 audit(1760997011.247:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 184.152030][ T36] audit: type=1326 audit(1760997011.247:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.2.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x7ffc0000 [ 185.451729][ T8701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8701 comm=syz.1.2802 [ 185.510829][ T8705] netlink: 'syz.1.2803': attribute type 4 has an invalid length. [ 185.535517][ T8705] netlink: 'syz.1.2803': attribute type 4 has an invalid length. [ 185.927676][ T8722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8722 comm=syz.1.2808 [ 185.940842][ T8722] binder: Bad value for 'defcontext' [ 185.999907][ T8730] netlink: 'syz.4.2812': attribute type 4 has an invalid length. [ 186.007822][ T8730] netlink: 'syz.4.2812': attribute type 6 has an invalid length. [ 186.015680][ T8730] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2812'. [ 186.267671][ T8764] tipc: Started in network mode [ 186.272657][ T8764] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 186.282015][ T8764] tipc: Enabled bearer , priority 10 [ 186.288539][ T8764] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.2823'. [ 186.297773][ T8764] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2823'. [ 186.307118][ T8765] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.2823'. [ 186.316316][ T8765] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2823'. [ 186.325822][ T8764] binder: Unknown parameter 'defcontext00000000000000000000000ÿÿ00000000000000000000000' [ 186.585485][ T1225] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 186.735470][ T1225] usb 2-1: Using ep0 maxpacket: 16 [ 186.741824][ T1225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.752012][ T1225] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.761090][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.769950][ T1225] usb 2-1: config 0 descriptor?? [ 187.099187][ T1225] usb 2-1: USB disconnect, device number 42 [ 187.395507][ T10] tipc: Node number set to 4269801494 [ 187.743159][ T8841] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2848'. [ 187.798519][ T915] tipc: Subscription rejected, illegal request [ 188.300840][ T8853] fuse: Unknown parameter 'group_¦d' [ 188.361488][ T8863] 9pnet_fd: Insufficient options for proto=fd [ 188.607831][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 188.620222][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.628877][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.855513][ T66] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 188.985477][ T66] usb 2-1: device descriptor read/64, error -71 [ 189.225493][ T66] usb 2-1: device descriptor read/64, error -71 [ 189.328734][ T8915] overlayfs: failed to clone lowerpath [ 189.370334][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 189.370372][ T36] audit: type=1326 audit(1760997016.647:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 189.400277][ T36] audit: type=1326 audit(1760997016.647:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x7fc00000 [ 189.471944][ T36] audit: type=1400 audit(1760997016.747:677): avc: denied { module_load } for pid=8924 comm="syz.3.2876" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 189.475522][ T66] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 189.530658][ T8929] fuseblk: Bad value for 'fd' [ 189.535568][ T8930] fuseblk: Bad value for 'fd' [ 189.574013][ T36] audit: type=1400 audit(1760997016.847:678): avc: denied { accept } for pid=8937 comm="syz.3.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.635504][ T66] usb 2-1: device descriptor read/64, error -71 [ 189.838466][ T8954] overlayfs: failed to clone upperpath [ 189.879652][ T66] usb 2-1: device descriptor read/64, error -71 [ 189.995592][ T66] usb usb2-port1: attempt power cycle [ 190.108657][ T8962] 9pnet_fd: Insufficient options for proto=fd [ 190.115507][ T8962] 9pnet_fd: Insufficient options for proto=fd [ 190.335488][ T66] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 190.356465][ T66] usb 2-1: device descriptor read/8, error -71 [ 190.486571][ T66] usb 2-1: device descriptor read/8, error -71 [ 190.725491][ T66] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 190.746511][ T66] usb 2-1: device descriptor read/8, error -71 [ 190.817832][ T8999] fuse: Bad value for 'fd' [ 190.876483][ T66] usb 2-1: device descriptor read/8, error -71 [ 190.985595][ T66] usb usb2-port1: unable to enumerate USB device [ 190.990057][ T9026] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 191.000609][ T9027] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 191.027472][ T36] audit: type=1400 audit(1760997018.307:679): avc: denied { read } for pid=9030 comm="syz.3.2917" name="file0" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.734302][ T9080] SELinux: policydb magic number 0x20766264 does not match expected magic number 0xf97cff8c [ 191.744592][ T9080] SELinux: failed to load policy [ 191.776476][ T36] audit: type=1400 audit(1760997019.057:680): avc: denied { unmount } for pid=7215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 191.903393][ T9105] fuseblk: Bad value for 'fd' [ 192.159462][ T9137] : renamed from bond_slave_0 [ 209.214711][ T9152] overlayfs: failed to clone upperpath [ 209.221003][ T9151] netlink: 5660 bytes leftover after parsing attributes in process `syz.2.2955'. [ 209.286690][ T36] audit: type=1326 audit(1760997036.567:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz.4.2957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x0 [ 209.313740][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2965'. [ 209.335738][ T9184] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 209.345430][ T36] audit: type=1400 audit(1760997036.617:682): avc: denied { relabelto } for pid=9183 comm="syz.2.2967" name="rnullb0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 209.371858][ T36] audit: type=1400 audit(1760997036.617:683): avc: denied { associate } for pid=9183 comm="syz.2.2967" name="rnullb0" dev="tmpfs" ino=502 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 209.407323][ T9199] netlink: 'syz.3.2972': attribute type 12 has an invalid length. [ 209.468526][ T9202] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2972'. [ 210.050219][ T9206] rust_binder: Read failure Err(EAGAIN) in pid:296 [ 210.075291][ T9211] netlink: 'syz.4.2976': attribute type 30 has an invalid length. [ 210.193061][ T36] audit: type=1400 audit(1760997037.467:684): avc: denied { unmount } for pid=7215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 210.223120][ T36] audit: type=1400 audit(1760997037.497:685): avc: denied { map } for pid=9229 comm="syz.1.2983" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 210.315566][ T9242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.331837][ T9241] rust_binder: Error in use_page_slow: ESRCH [ 210.331866][ T9241] rust_binder: use_range failure ESRCH [ 210.342092][ T9246] sock: sock_set_timeout: `syz.3.2990' (pid 9246) tries to set negative timeout [ 210.345480][ T9241] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 210.356905][ T9241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 210.364934][ T9241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:311 [ 210.717991][ T9274] tmpfs: Bad value for 'nr_blocks' [ 211.041647][ T9285] overlayfs: failed to clone upperpath [ 211.055440][ T36] audit: type=1400 audit(1760997038.327:686): avc: denied { read write } for pid=9284 comm="syz.2.3004" name="rnullb0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 211.105470][ T36] audit: type=1400 audit(1760997038.327:687): avc: denied { open } for pid=9284 comm="syz.2.3004" path="/dev/rnullb0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 211.163258][ T36] audit: type=1400 audit(1760997038.327:688): avc: denied { map } for pid=9284 comm="syz.2.3004" path="/dev/rnullb0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 211.190548][ T36] audit: type=1400 audit(1760997038.327:689): avc: denied { execute } for pid=9284 comm="syz.2.3004" path="/dev/rnullb0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 211.406660][ T9299] fuse: Bad value for 'fd' [ 211.439013][ T9303] cgroup: none used incorrectly [ 211.688722][ T9329] netlink: 'syz.3.3021': attribute type 12 has an invalid length. [ 211.723059][ T9339] 9pnet_fd: Insufficient options for proto=fd [ 211.813882][ T9358] vlan1: entered promiscuous mode [ 211.821589][ T9358] vlan1: entered allmulticast mode [ 211.827093][ T9358] veth0_vlan: entered allmulticast mode [ 211.854750][ T9358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3031'. [ 211.905586][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'. [ 212.302696][ T36] audit: type=1326 audit(1760997039.577:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.3.3051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc7b98efc9 code=0x0 [ 212.771574][ T9432] netlink: 'syz.4.3053': attribute type 4 has an invalid length. [ 213.914600][ T9407] syz.4.3049 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 213.937736][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.4.3049 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 213.937780][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.937804][ T9407] Call Trace: [ 213.937812][ T9407] [ 213.937829][ T9407] __dump_stack+0x21/0x30 [ 213.937878][ T9407] dump_stack_lvl+0x10c/0x190 [ 213.937910][ T9407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 213.937940][ T9407] ? ___ratelimit+0x3f7/0x5a0 [ 213.937976][ T9407] dump_stack+0x19/0x20 [ 213.938005][ T9407] dump_header+0xd7/0x490 [ 213.938029][ T9407] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 213.938060][ T9407] oom_kill_process+0x35d/0x640 [ 213.938088][ T9407] ? sched_clock_cpu+0x75/0x400 [ 213.938121][ T9407] out_of_memory+0x659/0xa80 [ 213.938148][ T9407] ? __cfi_out_of_memory+0x10/0x10 [ 213.938176][ T9407] ? mutex_lock_killable+0x92/0x1c0 [ 213.938198][ T9407] ? __cfi_mutex_lock_killable+0x10/0x10 [ 213.938223][ T9407] mem_cgroup_out_of_memory+0x279/0x350 [ 213.938247][ T9407] ? drain_obj_stock+0xed0/0xed0 [ 213.938270][ T9407] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 213.938292][ T9407] try_charge_memcg+0x8f7/0xde0 [ 213.938325][ T9407] ? __cfi_try_charge_memcg+0x10/0x10 [ 213.938355][ T9407] ? __alloc_pages_noprof+0x31f/0x7b0 [ 213.938387][ T9407] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 213.938419][ T9407] ? __folio_batch_add_and_move+0x2ab/0x370 [ 213.938449][ T9407] __mem_cgroup_charge+0xf6/0x410 [ 213.938483][ T9407] ? _raw_spin_lock+0x8c/0x120 [ 213.938511][ T9407] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 213.938558][ T9407] shmem_alloc_and_add_folio+0x86d/0x1050 [ 213.938590][ T9407] ? put_swap_device+0x130/0x130 [ 213.938617][ T9407] ? shmem_huge_global_enabled+0x2da/0x360 [ 213.938643][ T9407] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 213.938669][ T9407] ? __kasan_check_write+0x18/0x20 [ 213.938704][ T9407] ? _raw_spin_lock+0x8c/0x120 [ 213.938733][ T9407] shmem_get_folio_gfp+0x5f0/0x1380 [ 213.938761][ T9407] ? shmem_get_folio+0xc0/0xc0 [ 213.938785][ T9407] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 213.938818][ T9407] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 213.938867][ T9407] ? inode_to_bdi+0x6d/0x100 [ 213.938895][ T9407] shmem_write_begin+0xf4/0x270 [ 213.938919][ T9407] generic_perform_write+0x330/0x960 [ 213.938950][ T9407] ? __cfi_generic_perform_write+0x10/0x10 [ 213.938978][ T9407] ? down_write+0xe9/0x2a0 [ 213.938997][ T9407] ? mnt_get_write_access_file+0x1af/0x3b0 [ 213.939023][ T9407] ? mnt_put_write_access_file+0xc2/0x100 [ 213.939048][ T9407] ? file_update_time+0x1ef/0x220 [ 213.939075][ T9407] shmem_file_write_iter+0x105/0x130 [ 213.939103][ T9407] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 213.939130][ T9407] __kernel_write_iter+0x41a/0x8e0 [ 213.939148][ T9407] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 213.939174][ T9407] ? __cfi___kernel_write_iter+0x10/0x10 [ 213.939192][ T9407] ? get_dump_page+0x160/0x220 [ 213.939217][ T9407] ? __asan_memset+0x39/0x50 [ 213.939234][ T9407] ? iov_iter_bvec+0xc0/0x180 [ 213.939259][ T9407] dump_user_range+0xb06/0xdf0 [ 213.939278][ T9407] ? __cfi_dump_emit+0x10/0x10 [ 213.939296][ T9407] ? __cfi_dump_user_range+0x10/0x10 [ 213.939314][ T9407] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 213.939343][ T9407] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 213.939372][ T9407] ? elf_core_dump+0x2368/0x3800 [ 213.939395][ T9407] elf_core_dump+0x2ccc/0x3800 [ 213.939421][ T9407] ? __cfi_elf_core_dump+0x10/0x10 [ 213.939451][ T9407] ? dump_interrupted+0xf0/0xf0 [ 213.939479][ T9407] ? filp_open+0x182/0x1d0 [ 213.939504][ T9407] ? 0xffffffffff600000 [ 213.939525][ T9407] do_coredump+0x1bfa/0x2bd0 [ 213.939557][ T9407] ? __cfi_do_coredump+0x10/0x10 [ 213.939585][ T9407] ? asm_exc_page_fault+0x2b/0x30 [ 213.939615][ T9407] ? __kasan_slab_free+0x6a/0x80 [ 213.939636][ T9407] ? kmem_cache_free+0x1c1/0x510 [ 213.939655][ T9407] ? get_signal+0xa75/0x14f0 [ 213.939681][ T9407] get_signal+0x11fd/0x14f0 [ 213.939708][ T9407] arch_do_signal_or_restart+0x96/0x720 [ 213.939739][ T9407] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 213.939771][ T9407] ? __kasan_check_write+0x18/0x20 [ 213.939801][ T9407] irqentry_exit_to_user_mode+0x4e/0xb0 [ 213.939829][ T9407] irqentry_exit+0x16/0x60 [ 213.939848][ T9407] exc_page_fault+0x66/0xc0 [ 213.939868][ T9407] asm_exc_page_fault+0x2b/0x30 [ 213.939887][ T9407] RIP: 0033:0x7f06dcf8efc9 [ 213.939907][ T9407] Code: Unable to access opcode bytes at 0x7f06dcf8ef9f. [ 213.939918][ T9407] RSP: 002b:00007f06db9b4fe8 EFLAGS: 00010206 [ 213.939941][ T9407] RAX: 0000000000000000 RBX: 00007f06dd1e6180 RCX: 00007f06dcf8efc9 [ 213.939956][ T9407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 213.939967][ T9407] RBP: 00007f06dd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 213.939980][ T9407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.939993][ T9407] R13: 00007f06dd1e6218 R14: 00007f06dd1e6180 R15: 00007fff20d519c8 [ 213.940011][ T9407] [ 213.940085][ T9407] memory: usage 307200kB, limit 307200kB, failcnt 16478 [ 214.132340][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'. [ 214.138598][ T9407] memory+swap: usage 431872kB, limit 9007199254740988kB, failcnt 0 [ 214.439261][ T9407] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 214.446402][ T9407] Memory cgroup stats for /syz4: [ 214.446558][ T9407] cache 313077760 [ 214.455180][ T9407] rss 118784 [ 214.458453][ T9407] rss_huge 0 [ 214.461676][ T9407] shmem 229421056 [ 214.465326][ T9407] mapped_file 0 [ 214.468825][ T9407] dirty 0 [ 214.471772][ T9407] writeback 0 [ 214.475075][ T9407] workingset_refault_anon 0 [ 214.479615][ T9407] workingset_refault_file 0 [ 214.484129][ T9407] swap 127664128 [ 214.487721][ T9407] swapcached 331776 [ 214.491541][ T9407] pgpgin 213418 [ 214.495011][ T9407] pgpgout 136618 [ 214.498597][ T9407] pgfault 78995 [ 214.502071][ T9407] pgmajfault 4 [ 214.505492][ T9407] inactive_anon 129015808 [ 214.509841][ T9407] active_anon 101900288 [ 214.514010][ T9407] inactive_file 0 [ 214.517702][ T9407] active_file 0 [ 214.521173][ T9407] unevictable 83656704 [ 214.525250][ T9407] hierarchical_memory_limit 314572800 [ 214.530663][ T9407] hierarchical_memsw_limit 9223372036854771712 [ 214.536851][ T9407] total_cache 313077760 [ 214.541052][ T9407] total_rss 118784 [ 214.544786][ T9407] total_rss_huge 0 [ 214.548563][ T9407] total_shmem 229421056 [ 214.552730][ T9407] total_mapped_file 0 [ 214.556760][ T9407] total_dirty 0 [ 214.560228][ T9407] total_writeback 0 [ 214.564068][ T9407] total_workingset_refault_anon 0 [ 214.569158][ T9407] total_workingset_refault_file 0 [ 214.580511][ T9407] total_swap 127664128 [ 214.584595][ T9407] total_swapcached 331776 [ 214.597137][ T9407] total_pgpgin 213418 [ 214.601156][ T9407] total_pgpgout 136618 [ 214.605345][ T9407] total_pgfault 78995 [ 214.609560][ T9407] total_pgmajfault 4 [ 214.613571][ T9407] total_inactive_anon 129015808 [ 214.618457][ T9407] total_active_anon 101900288 [ 214.623230][ T9407] total_inactive_file 0 [ 214.627422][ T9407] total_active_file 0 [ 214.631413][ T9407] total_unevictable 83656704 [ 214.636050][ T9407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1896,pid=6014,uid=0 [ 214.651081][ T9407] Memory cgroup out of memory: Killed process 6014 (syz.4.1896) total-vm:94136kB, anon-rss:1196kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 214.677026][ T9407] syz.4.3049 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 214.686897][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.4.3049 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 214.686928][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.686941][ T9407] Call Trace: [ 214.686947][ T9407] [ 214.686956][ T9407] __dump_stack+0x21/0x30 [ 214.686989][ T9407] dump_stack_lvl+0x10c/0x190 [ 214.687017][ T9407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.687045][ T9407] ? ___ratelimit+0x3f7/0x5a0 [ 214.687076][ T9407] dump_stack+0x19/0x20 [ 214.687101][ T9407] dump_header+0xd7/0x490 [ 214.687123][ T9407] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 214.687150][ T9407] oom_kill_process+0x35d/0x640 [ 214.687176][ T9407] ? sched_clock_cpu+0x75/0x400 [ 214.687205][ T9407] out_of_memory+0x659/0xa80 [ 214.687230][ T9407] ? __cfi_out_of_memory+0x10/0x10 [ 214.687254][ T9407] ? mutex_lock_killable+0x104/0x1c0 [ 214.687275][ T9407] ? __cfi_mutex_lock_killable+0x10/0x10 [ 214.687297][ T9407] mem_cgroup_out_of_memory+0x279/0x350 [ 214.687318][ T9407] ? drain_obj_stock+0xed0/0xed0 [ 214.687339][ T9407] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 214.687359][ T9407] try_charge_memcg+0x8f7/0xde0 [ 214.687388][ T9407] ? __cfi_try_charge_memcg+0x10/0x10 [ 214.687415][ T9407] ? __alloc_pages_noprof+0x31f/0x7b0 [ 214.687444][ T9407] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 214.687473][ T9407] ? __folio_batch_add_and_move+0x2ab/0x370 [ 214.687500][ T9407] __mem_cgroup_charge+0xf6/0x410 [ 214.687529][ T9407] ? _raw_spin_lock+0x8c/0x120 [ 214.687551][ T9407] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 214.687580][ T9407] shmem_alloc_and_add_folio+0x86d/0x1050 [ 214.687605][ T9407] ? put_swap_device+0x130/0x130 [ 214.687625][ T9407] ? shmem_huge_global_enabled+0x2da/0x360 [ 214.687645][ T9407] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 214.687665][ T9407] ? __kasan_check_write+0x18/0x20 [ 214.687691][ T9407] ? _raw_spin_lock+0x8c/0x120 [ 214.687715][ T9407] shmem_get_folio_gfp+0x5f0/0x1380 [ 214.687744][ T9407] ? shmem_get_folio+0xc0/0xc0 [ 214.687762][ T9407] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 214.687791][ T9407] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 214.687815][ T9407] ? inode_to_bdi+0x6d/0x100 [ 214.687841][ T9407] shmem_write_begin+0xf4/0x270 [ 214.687864][ T9407] generic_perform_write+0x330/0x960 [ 214.687892][ T9407] ? __cfi_generic_perform_write+0x10/0x10 [ 214.687918][ T9407] ? down_write+0xe9/0x2a0 [ 214.687935][ T9407] ? mnt_get_write_access_file+0x1af/0x3b0 [ 214.687958][ T9407] ? mnt_put_write_access_file+0xc2/0x100 [ 214.687983][ T9407] ? file_update_time+0x1ef/0x220 [ 214.688007][ T9407] shmem_file_write_iter+0x105/0x130 [ 214.688050][ T9407] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 214.688076][ T9407] __kernel_write_iter+0x41a/0x8e0 [ 214.688093][ T9407] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 214.688119][ T9407] ? __cfi___kernel_write_iter+0x10/0x10 [ 214.688138][ T9407] ? get_dump_page+0x160/0x220 [ 214.688163][ T9407] ? __asan_memset+0x39/0x50 [ 214.688179][ T9407] ? iov_iter_bvec+0xc0/0x180 [ 214.688203][ T9407] dump_user_range+0xb06/0xdf0 [ 214.688222][ T9407] ? __cfi_dump_emit+0x10/0x10 [ 214.688239][ T9407] ? __cfi_dump_user_range+0x10/0x10 [ 214.688258][ T9407] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 214.688289][ T9407] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 214.688316][ T9407] ? elf_core_dump+0x2368/0x3800 [ 214.688340][ T9407] elf_core_dump+0x2ccc/0x3800 [ 214.688365][ T9407] ? __cfi_elf_core_dump+0x10/0x10 [ 214.688395][ T9407] ? dump_interrupted+0xf0/0xf0 [ 214.688423][ T9407] ? filp_open+0x182/0x1d0 [ 214.688447][ T9407] ? 0xffffffffff600000 [ 214.688463][ T9407] do_coredump+0x1bfa/0x2bd0 [ 214.688495][ T9407] ? __cfi_do_coredump+0x10/0x10 [ 214.688523][ T9407] ? asm_exc_page_fault+0x2b/0x30 [ 214.688551][ T9407] ? __kasan_slab_free+0x6a/0x80 [ 214.688572][ T9407] ? kmem_cache_free+0x1c1/0x510 [ 214.688590][ T9407] ? get_signal+0xa75/0x14f0 [ 214.688615][ T9407] get_signal+0x11fd/0x14f0 [ 214.688642][ T9407] arch_do_signal_or_restart+0x96/0x720 [ 214.688675][ T9407] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 214.688707][ T9407] ? __kasan_check_write+0x18/0x20 [ 214.688742][ T9407] irqentry_exit_to_user_mode+0x4e/0xb0 [ 214.688764][ T9407] irqentry_exit+0x16/0x60 [ 214.688783][ T9407] exc_page_fault+0x66/0xc0 [ 214.688805][ T9407] asm_exc_page_fault+0x2b/0x30 [ 214.688824][ T9407] RIP: 0033:0x7f06dcf8efc9 [ 214.688844][ T9407] Code: Unable to access opcode bytes at 0x7f06dcf8ef9f. [ 214.688854][ T9407] RSP: 002b:00007f06db9b4fe8 EFLAGS: 00010206 [ 214.688872][ T9407] RAX: 0000000000000000 RBX: 00007f06dd1e6180 RCX: 00007f06dcf8efc9 [ 214.688887][ T9407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 214.688899][ T9407] RBP: 00007f06dd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.688912][ T9407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.688926][ T9407] R13: 00007f06dd1e6218 R14: 00007f06dd1e6180 R15: 00007fff20d519c8 [ 214.688945][ T9407] [ 214.688986][ T9407] memory: usage 307200kB, limit 307200kB, failcnt 16529 [ 215.169629][ T9407] memory+swap: usage 431672kB, limit 9007199254740988kB, failcnt 0 [ 215.177698][ T9407] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 215.184924][ T9407] Memory cgroup stats for /syz4: [ 215.185066][ T9407] cache 313077760 [ 215.193709][ T9407] rss 118784 [ 215.196949][ T9407] rss_huge 0 [ 215.200162][ T9407] shmem 229421056 [ 215.203811][ T9407] mapped_file 0 [ 215.207327][ T9407] dirty 0 [ 215.210325][ T9407] writeback 0 [ 215.213720][ T9407] workingset_refault_anon 0 [ 215.218522][ T9407] workingset_refault_file 0 [ 215.223160][ T9407] swap 127459328 [ 215.226965][ T9407] swapcached 331776 [ 215.230860][ T9407] pgpgin 213418 [ 215.234395][ T9407] pgpgout 136618 [ 215.238304][ T9407] pgfault 78995 [ 215.241866][ T9407] pgmajfault 4 [ 215.245315][ T9407] inactive_anon 129015808 [ 215.250087][ T9407] active_anon 101900288 [ 215.254326][ T9407] inactive_file 0 [ 215.258196][ T9407] active_file 0 [ 215.261735][ T9407] unevictable 83656704 [ 215.266084][ T9407] hierarchical_memory_limit 314572800 [ 215.271555][ T9407] hierarchical_memsw_limit 9223372036854771712 [ 215.277995][ T9407] total_cache 313077760 [ 215.282226][ T9407] total_rss 118784 [ 215.286461][ T9407] total_rss_huge 0 [ 215.290312][ T9407] total_shmem 229421056 [ 215.294561][ T9407] total_mapped_file 0 [ 215.298937][ T9407] total_dirty 0 [ 215.302619][ T9407] total_writeback 0 [ 215.306677][ T9407] total_workingset_refault_anon 0 [ 215.311808][ T9407] total_workingset_refault_file 0 [ 215.323494][ T9407] total_swap 127459328 [ 215.329050][ T9407] total_swapcached 331776 [ 215.333904][ T9407] total_pgpgin 213418 [ 215.338749][ T9407] total_pgpgout 136618 [ 215.343045][ T9407] total_pgfault 78995 [ 215.359164][ T9407] total_pgmajfault 4 [ 215.363138][ T9407] total_inactive_anon 129015808 [ 215.375486][ T9407] total_active_anon 101900288 [ 215.380246][ T9407] total_inactive_file 0 [ 215.384439][ T9407] total_active_file 0 [ 215.388820][ T9407] total_unevictable 83656704 [ 215.393471][ T9407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3049,pid=9404,uid=0 [ 215.408705][ T9407] Memory cgroup out of memory: Killed process 9404 (syz.4.3049) total-vm:49268kB, anon-rss:0kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 215.553392][ T9413] syz.4.3049 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 215.577100][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.4.3049 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 215.577183][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.577224][ T9413] Call Trace: [ 215.577232][ T9413] [ 215.577241][ T9413] __dump_stack+0x21/0x30 [ 215.577277][ T9413] dump_stack_lvl+0x10c/0x190 [ 215.577309][ T9413] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.577339][ T9413] ? ___ratelimit+0x3f7/0x5a0 [ 215.577433][ T9413] dump_stack+0x19/0x20 [ 215.577490][ T9413] dump_header+0xd7/0x490 [ 215.577513][ T9413] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 215.577545][ T9413] oom_kill_process+0x35d/0x640 [ 215.577574][ T9413] ? sched_clock_cpu+0x75/0x400 [ 215.577607][ T9413] out_of_memory+0x659/0xa80 [ 215.577634][ T9413] ? __cfi_out_of_memory+0x10/0x10 [ 215.577662][ T9413] ? mutex_lock_killable+0x92/0x1c0 [ 215.577691][ T9413] ? __cfi_mutex_lock_killable+0x10/0x10 [ 215.577718][ T9413] mem_cgroup_out_of_memory+0x279/0x350 [ 215.577742][ T9413] ? drain_obj_stock+0xed0/0xed0 [ 215.577765][ T9413] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 215.577788][ T9413] try_charge_memcg+0x8f7/0xde0 [ 215.577821][ T9413] ? __cfi_try_charge_memcg+0x10/0x10 [ 215.577852][ T9413] ? __alloc_pages_noprof+0x31f/0x7b0 [ 215.577884][ T9413] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 215.577915][ T9413] ? __folio_batch_add_and_move+0x2ab/0x370 [ 215.577946][ T9413] __mem_cgroup_charge+0xf6/0x410 [ 215.577980][ T9413] ? _raw_spin_lock+0x8c/0x120 [ 215.578009][ T9413] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 215.578045][ T9413] shmem_alloc_and_add_folio+0x86d/0x1050 [ 215.578077][ T9413] ? put_swap_device+0x130/0x130 [ 215.578104][ T9413] ? shmem_huge_global_enabled+0x2da/0x360 [ 215.578131][ T9413] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 215.578220][ T9413] ? __kasan_check_write+0x18/0x20 [ 215.578302][ T9413] ? _raw_spin_lock+0x8c/0x120 [ 215.578337][ T9413] shmem_get_folio_gfp+0x5f0/0x1380 [ 215.578409][ T9413] ? shmem_get_folio+0xc0/0xc0 [ 215.578459][ T9413] ? follow_page_pte+0xa5c/0xb90 [ 215.578494][ T9413] ? inode_to_bdi+0x6d/0x100 [ 215.578559][ T9413] shmem_write_begin+0xf4/0x270 [ 215.578612][ T9413] generic_perform_write+0x330/0x960 [ 215.578683][ T9413] ? __cfi_generic_perform_write+0x10/0x10 [ 215.578756][ T9413] ? down_write+0xe9/0x2a0 [ 215.578810][ T9413] ? file_update_time+0xa3/0x220 [ 215.578857][ T9413] shmem_file_write_iter+0x105/0x130 [ 215.578914][ T9413] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 215.578958][ T9413] __kernel_write_iter+0x41a/0x8e0 [ 215.578978][ T9413] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 215.579025][ T9413] ? __cfi___kernel_write_iter+0x10/0x10 [ 215.579044][ T9413] ? get_dump_page+0x160/0x220 [ 215.579071][ T9413] ? __asan_memset+0x39/0x50 [ 215.579090][ T9413] ? iov_iter_bvec+0xc0/0x180 [ 215.579122][ T9413] dump_user_range+0xb06/0xdf0 [ 215.579145][ T9413] ? __cfi_dump_emit+0x10/0x10 [ 215.579183][ T9413] ? __cfi_dump_user_range+0x10/0x10 [ 215.579205][ T9413] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 215.579238][ T9413] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 215.579272][ T9413] ? elf_core_dump+0x2368/0x3800 [ 215.579298][ T9413] elf_core_dump+0x2ccc/0x3800 [ 215.579327][ T9413] ? __cfi_elf_core_dump+0x10/0x10 [ 215.579360][ T9413] ? dump_interrupted+0xf0/0xf0 [ 215.579392][ T9413] ? filp_open+0x182/0x1d0 [ 215.579421][ T9413] ? 0xffffffffff600000 [ 215.579441][ T9413] do_coredump+0x1bfa/0x2bd0 [ 215.579478][ T9413] ? __cfi_do_coredump+0x10/0x10 [ 215.579510][ T9413] ? asm_exc_page_fault+0x2b/0x30 [ 215.579543][ T9413] ? __kasan_slab_free+0x6a/0x80 [ 215.579567][ T9413] ? kmem_cache_free+0x1c1/0x510 [ 215.579587][ T9413] ? get_signal+0xa75/0x14f0 [ 215.579616][ T9413] get_signal+0x11fd/0x14f0 [ 215.579647][ T9413] arch_do_signal_or_restart+0x96/0x720 [ 215.579690][ T9413] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 215.579729][ T9413] ? __kasan_check_write+0x18/0x20 [ 215.579765][ T9413] irqentry_exit_to_user_mode+0x4e/0xb0 [ 215.579792][ T9413] irqentry_exit+0x16/0x60 [ 215.579816][ T9413] exc_page_fault+0x66/0xc0 [ 215.579840][ T9413] asm_exc_page_fault+0x2b/0x30 [ 215.579863][ T9413] RIP: 0033:0x7f06dcf8efc9 [ 215.579887][ T9413] Code: Unable to access opcode bytes at 0x7f06dcf8ef9f. [ 215.579898][ T9413] RSP: 002b:00007f06db9b4fe8 EFLAGS: 00010206 [ 215.579921][ T9413] RAX: 0000000000000000 RBX: 00007f06dd1e6180 RCX: 00007f06dcf8efc9 [ 215.579940][ T9413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 215.579955][ T9413] RBP: 00007f06dd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.579971][ T9413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.579985][ T9413] R13: 00007f06dd1e6218 R14: 00007f06dd1e6180 R15: 00007fff20d519c8 [ 215.580006][ T9413] [ 215.580019][ T9413] memory: usage 307200kB, limit 307200kB, failcnt 17690 [ 216.042403][ T9413] memory+swap: usage 395992kB, limit 9007199254740988kB, failcnt 0 [ 216.050761][ T9413] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 216.057855][ T9413] Memory cgroup stats for /syz4: [ 216.058007][ T9413] cache 292909056 [ 216.070263][ T9413] rss 118784 [ 216.073618][ T9413] rss_huge 0 [ 216.076867][ T9413] shmem 209252352 [ 216.080522][ T9413] mapped_file 0 [ 216.083986][ T9413] dirty 0 [ 216.088442][ T9413] writeback 0 [ 216.092496][ T9413] workingset_refault_anon 0 [ 216.098637][ T9413] workingset_refault_file 0 [ 216.103250][ T9413] swap 111091712 [ 216.106883][ T9413] swapcached 331776 [ 216.110744][ T9413] pgpgin 213418 [ 216.110985][ T9499] fuseblk: Invalid rootmode [ 216.114209][ T9413] pgpgout 141542 [ 216.114220][ T9413] pgfault 78996 [ 216.114229][ T9413] pgmajfault 4 [ 216.114238][ T9413] inactive_anon 115806208 [ 216.133515][ T9413] active_anon 94941184 [ 216.137688][ T9413] inactive_file 0 [ 216.141382][ T9413] active_file 0 [ 216.144936][ T9413] unevictable 83656704 [ 216.149051][ T9413] hierarchical_memory_limit 314572800 [ 216.154442][ T9413] hierarchical_memsw_limit 9223372036854771712 [ 216.160661][ T9413] total_cache 292909056 [ 216.164828][ T9413] total_rss 118784 [ 216.168603][ T9413] total_rss_huge 0 [ 216.172347][ T9413] total_shmem 209252352 [ 216.177695][ T9510] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3081'. [ 216.179094][ T9413] total_mapped_file 0 [ 216.190803][ T9413] total_dirty 0 [ 216.194270][ T9413] total_writeback 0 [ 216.198115][ T9413] total_workingset_refault_anon 0 [ 216.203145][ T9413] total_workingset_refault_file 0 [ 216.208446][ T9413] total_swap 111091712 [ 216.212523][ T9413] total_swapcached 331776 [ 216.216877][ T9413] total_pgpgin 213418 [ 216.221035][ T9413] total_pgpgout 141542 [ 216.225130][ T9413] total_pgfault 78996 [ 216.229728][ T9413] total_pgmajfault 4 [ 216.233649][ T9413] total_inactive_anon 115806208 [ 216.238542][ T9413] total_active_anon 94941184 [ 216.243135][ T9413] total_inactive_file 0 [ 216.247359][ T9413] total_active_file 0 [ 216.251381][ T9413] total_unevictable 83656704 [ 216.256026][ T9413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3049,pid=9410,uid=0 [ 216.270944][ T9413] Memory cgroup out of memory: Killed process 9410 (syz.4.3049) total-vm:49268kB, anon-rss:0kB, file-rss:29440kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 216.490342][ T36] audit: type=1400 audit(1760997043.767:691): avc: denied { append } for pid=9535 comm="syz.2.3090" name="rnullb0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 216.526657][ T36] audit: type=1400 audit(1760997043.797:692): avc: denied { ioctl } for pid=9535 comm="syz.2.3090" path="/dev/rnullb0" dev="tmpfs" ino=502 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 216.715371][ T9548] netlink: 'syz.3.3095': attribute type 4 has an invalid length. [ 217.024306][ T9561] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3100'. [ 217.025281][ T9412] syz.4.3049 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 217.070665][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.4.3049 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 217.070702][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.070724][ T9412] Call Trace: [ 217.070733][ T9412] [ 217.070741][ T9412] __dump_stack+0x21/0x30 [ 217.070780][ T9412] dump_stack_lvl+0x10c/0x190 [ 217.070810][ T9412] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.070840][ T9412] ? ___ratelimit+0x3f7/0x5a0 [ 217.070873][ T9412] dump_stack+0x19/0x20 [ 217.070902][ T9412] dump_header+0xd7/0x490 [ 217.070924][ T9412] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 217.070954][ T9412] oom_kill_process+0x35d/0x640 [ 217.070980][ T9412] ? sched_clock_cpu+0x75/0x400 [ 217.071011][ T9412] out_of_memory+0x659/0xa80 [ 217.071037][ T9412] ? __cfi_out_of_memory+0x10/0x10 [ 217.071062][ T9412] ? mutex_lock_killable+0x92/0x1c0 [ 217.071084][ T9412] ? __cfi_mutex_lock_killable+0x10/0x10 [ 217.071107][ T9412] mem_cgroup_out_of_memory+0x279/0x350 [ 217.071130][ T9412] ? drain_obj_stock+0xed0/0xed0 [ 217.071153][ T9412] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 217.071174][ T9412] try_charge_memcg+0x8f7/0xde0 [ 217.071204][ T9412] ? __cfi_try_charge_memcg+0x10/0x10 [ 217.071234][ T9412] ? __alloc_pages_noprof+0x31f/0x7b0 [ 217.071266][ T9412] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 217.071295][ T9412] ? __folio_batch_add_and_move+0x2ab/0x370 [ 217.071325][ T9412] __mem_cgroup_charge+0xf6/0x410 [ 217.071357][ T9412] ? _raw_spin_lock+0x8c/0x120 [ 217.071386][ T9412] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 217.071421][ T9412] shmem_alloc_and_add_folio+0x86d/0x1050 [ 217.071451][ T9412] ? put_swap_device+0x130/0x130 [ 217.071479][ T9412] ? shmem_huge_global_enabled+0x2da/0x360 [ 217.071512][ T9412] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 217.071535][ T9412] ? __kasan_check_write+0x18/0x20 [ 217.071568][ T9412] ? _raw_spin_lock+0x8c/0x120 [ 217.071596][ T9412] shmem_get_folio_gfp+0x5f0/0x1380 [ 217.071623][ T9412] ? shmem_get_folio+0xc0/0xc0 [ 217.071644][ T9412] ? follow_page_pte+0xa5c/0xb90 [ 217.071673][ T9412] ? inode_to_bdi+0x6d/0x100 [ 217.071716][ T9412] shmem_write_begin+0xf4/0x270 [ 217.071739][ T9412] generic_perform_write+0x330/0x960 [ 217.071772][ T9412] ? __cfi_generic_perform_write+0x10/0x10 [ 217.071801][ T9412] ? down_write+0xe9/0x2a0 [ 217.071823][ T9412] ? file_update_time+0xa3/0x220 [ 217.071851][ T9412] shmem_file_write_iter+0x105/0x130 [ 217.071878][ T9412] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 217.071904][ T9412] __kernel_write_iter+0x41a/0x8e0 [ 217.071924][ T9412] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 217.071951][ T9412] ? __cfi___kernel_write_iter+0x10/0x10 [ 217.071969][ T9412] ? get_dump_page+0x160/0x220 [ 217.071994][ T9412] ? __asan_memset+0x39/0x50 [ 217.072012][ T9412] ? iov_iter_bvec+0xc0/0x180 [ 217.072037][ T9412] dump_user_range+0xb06/0xdf0 [ 217.072059][ T9412] ? __cfi_dump_emit+0x10/0x10 [ 217.072077][ T9412] ? __cfi_dump_user_range+0x10/0x10 [ 217.072097][ T9412] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 217.072128][ T9412] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 217.072159][ T9412] ? elf_core_dump+0x2368/0x3800 [ 217.072184][ T9412] elf_core_dump+0x2ccc/0x3800 [ 217.072211][ T9412] ? __cfi_elf_core_dump+0x10/0x10 [ 217.072242][ T9412] ? dump_interrupted+0xf0/0xf0 [ 217.072273][ T9412] ? filp_open+0x182/0x1d0 [ 217.072298][ T9412] ? 0xffffffffff600000 [ 217.072316][ T9412] do_coredump+0x1bfa/0x2bd0 [ 217.072349][ T9412] ? __cfi_do_coredump+0x10/0x10 [ 217.072378][ T9412] ? asm_exc_page_fault+0x2b/0x30 [ 217.072408][ T9412] ? __kasan_slab_free+0x6a/0x80 [ 217.072432][ T9412] ? kmem_cache_free+0x1c1/0x510 [ 217.072453][ T9412] ? get_signal+0xa75/0x14f0 [ 217.072480][ T9412] get_signal+0x11fd/0x14f0 [ 217.072518][ T9412] arch_do_signal_or_restart+0x96/0x720 [ 217.072552][ T9412] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 217.072586][ T9412] ? __kasan_check_write+0x18/0x20 [ 217.072618][ T9412] irqentry_exit_to_user_mode+0x4e/0xb0 [ 217.072642][ T9412] irqentry_exit+0x16/0x60 [ 217.072663][ T9412] exc_page_fault+0x66/0xc0 [ 217.072685][ T9412] asm_exc_page_fault+0x2b/0x30 [ 217.072706][ T9412] RIP: 0033:0x7f06dcf8efc9 [ 217.072727][ T9412] Code: Unable to access opcode bytes at 0x7f06dcf8ef9f. [ 217.072738][ T9412] RSP: 002b:00007f06db9b4fe8 EFLAGS: 00010206 [ 217.072758][ T9412] RAX: 0000000000000000 RBX: 00007f06dd1e6180 RCX: 00007f06dcf8efc9 [ 217.072775][ T9412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 217.072788][ T9412] RBP: 00007f06dd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.072802][ T9412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.072816][ T9412] R13: 00007f06dd1e6218 R14: 00007f06dd1e6180 R15: 00007fff20d519c8 [ 217.072835][ T9412] [ 217.072861][ T9412] memory: usage 307200kB, limit 307200kB, failcnt 23465 [ 217.536828][ T9412] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 217.545052][ T9412] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 217.552229][ T9412] Memory cgroup stats for /syz4: [ 217.552390][ T9412] cache 313413632 [ 217.561240][ T9412] rss 98304 [ 217.564399][ T9412] rss_huge 0 [ 217.567665][ T9412] shmem 229756928 [ 217.571370][ T9412] mapped_file 3776512 [ 217.575630][ T9412] dirty 0 [ 217.578716][ T9412] writeback 0 [ 217.582049][ T9412] workingset_refault_anon 0 [ 217.586711][ T9412] workingset_refault_file 0 [ 217.591310][ T9412] swap 127987712 [ 217.595030][ T9412] swapcached 8192 [ 217.598737][ T9412] pgpgin 229942 [ 217.602265][ T9412] pgpgout 153142 [ 217.605957][ T9412] pgfault 81177 [ 217.609486][ T9412] pgmajfault 4 [ 217.613089][ T9412] inactive_anon 155947008 [ 217.624826][ T9412] active_anon 74969088 [ 217.628982][ T9412] inactive_file 0 [ 217.632646][ T9412] active_file 0 [ 217.636332][ T9412] unevictable 83656704 [ 217.642440][ T9412] hierarchical_memory_limit 314572800 [ 217.648460][ T9412] hierarchical_memsw_limit 9223372036854771712 [ 217.654666][ T9412] total_cache 313413632 [ 217.658873][ T9412] total_rss 98304 [ 217.662527][ T9412] total_rss_huge 0 [ 217.666316][ T9412] total_shmem 229756928 [ 217.670508][ T9412] total_mapped_file 3776512 [ 217.675060][ T9412] total_dirty 0 [ 217.678569][ T9412] total_writeback 0 [ 217.682493][ T9412] total_workingset_refault_anon 0 [ 217.687633][ T9412] total_workingset_refault_file 0 [ 217.692734][ T9412] total_swap 127987712 [ 217.696908][ T9412] total_swapcached 8192 [ 217.701252][ T9412] total_pgpgin 229942 [ 217.705430][ T9412] total_pgpgout 153142 [ 217.709538][ T9412] total_pgfault 81177 [ 217.713546][ T9412] total_pgmajfault 4 [ 217.717550][ T9412] total_inactive_anon 155947008 [ 217.722475][ T9412] total_active_anon 74969088 [ 217.727120][ T9412] total_inactive_file 0 [ 217.731315][ T9412] total_active_file 0 [ 217.735316][ T9412] total_unevictable 83656704 [ 217.740056][ T9412] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3049,pid=9405,uid=0 [ 217.755082][ T9412] Memory cgroup out of memory: Killed process 9405 (syz.4.3049) total-vm:49268kB, anon-rss:0kB, file-rss:36096kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 217.904459][ T9409] syz.4.3049 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 217.968113][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz.4.3049 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 217.968151][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.968176][ T9409] Call Trace: [ 217.968184][ T9409] [ 217.968194][ T9409] __dump_stack+0x21/0x30 [ 217.968229][ T9409] dump_stack_lvl+0x10c/0x190 [ 217.968258][ T9409] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.968288][ T9409] ? ___ratelimit+0x3f7/0x5a0 [ 217.968321][ T9409] dump_stack+0x19/0x20 [ 217.968349][ T9409] dump_header+0xd7/0x490 [ 217.968372][ T9409] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 217.968402][ T9409] oom_kill_process+0x35d/0x640 [ 217.968429][ T9409] ? sched_clock_cpu+0x75/0x400 [ 217.968460][ T9409] out_of_memory+0x659/0xa80 [ 217.968487][ T9409] ? __cfi_out_of_memory+0x10/0x10 [ 217.968513][ T9409] ? mutex_lock_killable+0x92/0x1c0 [ 217.968536][ T9409] ? __cfi_mutex_lock_killable+0x10/0x10 [ 217.968560][ T9409] mem_cgroup_out_of_memory+0x279/0x350 [ 217.968583][ T9409] ? drain_obj_stock+0xed0/0xed0 [ 217.968623][ T9409] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 217.968646][ T9409] try_charge_memcg+0x8f7/0xde0 [ 217.968678][ T9409] ? __cfi_try_charge_memcg+0x10/0x10 [ 217.968708][ T9409] ? __alloc_pages_noprof+0x31f/0x7b0 [ 217.968741][ T9409] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 217.968772][ T9409] ? __folio_batch_add_and_move+0x2ab/0x370 [ 217.968803][ T9409] __mem_cgroup_charge+0xf6/0x410 [ 217.968837][ T9409] ? _raw_spin_lock+0x8c/0x120 [ 217.968866][ T9409] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 217.968901][ T9409] shmem_alloc_and_add_folio+0x86d/0x1050 [ 217.968933][ T9409] ? put_swap_device+0x130/0x130 [ 217.968961][ T9409] ? shmem_huge_global_enabled+0x2da/0x360 [ 217.968987][ T9409] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 217.969013][ T9409] ? __kasan_check_write+0x18/0x20 [ 217.969047][ T9409] ? _raw_spin_lock+0x8c/0x120 [ 217.969077][ T9409] shmem_get_folio_gfp+0x5f0/0x1380 [ 217.969112][ T9409] ? shmem_get_folio+0xc0/0xc0 [ 217.969136][ T9409] ? follow_page_pte+0xa5c/0xb90 [ 217.969173][ T9409] ? inode_to_bdi+0x6d/0x100 [ 217.969205][ T9409] shmem_write_begin+0xf4/0x270 [ 217.969234][ T9409] generic_perform_write+0x330/0x960 [ 217.969271][ T9409] ? __cfi_generic_perform_write+0x10/0x10 [ 217.969304][ T9409] ? down_write+0xe9/0x2a0 [ 217.969328][ T9409] ? file_update_time+0xa3/0x220 [ 217.969358][ T9409] shmem_file_write_iter+0x105/0x130 [ 217.969390][ T9409] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 217.969421][ T9409] __kernel_write_iter+0x41a/0x8e0 [ 217.969443][ T9409] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 217.969475][ T9409] ? __cfi___kernel_write_iter+0x10/0x10 [ 217.969496][ T9409] ? get_dump_page+0x160/0x220 [ 217.969526][ T9409] ? __asan_memset+0x39/0x50 [ 217.969547][ T9409] ? iov_iter_bvec+0xc0/0x180 [ 217.969576][ T9409] dump_user_range+0xb06/0xdf0 [ 217.969600][ T9409] ? __cfi_dump_emit+0x10/0x10 [ 217.969621][ T9409] ? __cfi_dump_user_range+0x10/0x10 [ 217.969644][ T9409] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 217.969678][ T9409] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 217.969711][ T9409] ? elf_core_dump+0x2368/0x3800 [ 217.969740][ T9409] elf_core_dump+0x2ccc/0x3800 [ 217.969771][ T9409] ? __cfi_elf_core_dump+0x10/0x10 [ 217.969806][ T9409] ? dump_interrupted+0xf0/0xf0 [ 217.969840][ T9409] ? filp_open+0x182/0x1d0 [ 217.969869][ T9409] ? 0xffffffffff600000 [ 217.969889][ T9409] do_coredump+0x1bfa/0x2bd0 [ 217.969926][ T9409] ? __cfi_do_coredump+0x10/0x10 [ 217.969960][ T9409] ? asm_exc_page_fault+0x2b/0x30 [ 217.969993][ T9409] ? __kasan_slab_free+0x6a/0x80 [ 217.970019][ T9409] ? kmem_cache_free+0x1c1/0x510 [ 217.970041][ T9409] ? get_signal+0xa75/0x14f0 [ 217.970071][ T9409] get_signal+0x11fd/0x14f0 [ 217.970104][ T9409] arch_do_signal_or_restart+0x96/0x720 [ 217.970140][ T9409] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 217.970183][ T9409] ? __kasan_check_write+0x18/0x20 [ 217.970220][ T9409] irqentry_exit_to_user_mode+0x4e/0xb0 [ 217.970246][ T9409] irqentry_exit+0x16/0x60 [ 217.970270][ T9409] exc_page_fault+0x66/0xc0 [ 217.970293][ T9409] asm_exc_page_fault+0x2b/0x30 [ 217.970328][ T9409] RIP: 0033:0x7f06dcf8efc9 [ 217.970349][ T9409] Code: Unable to access opcode bytes at 0x7f06dcf8ef9f. [ 217.970361][ T9409] RSP: 002b:00007f06db9b4fe8 EFLAGS: 00010206 [ 217.970382][ T9409] RAX: 0000000000000000 RBX: 00007f06dd1e6180 RCX: 00007f06dcf8efc9 [ 217.970398][ T9409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 217.970412][ T9409] RBP: 00007f06dd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.970427][ T9409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.970442][ T9409] R13: 00007f06dd1e6218 R14: 00007f06dd1e6180 R15: 00007fff20d519c8 [ 217.970462][ T9409] [ 218.436720][ T9409] memory: usage 307200kB, limit 307200kB, failcnt 24766 [ 218.443805][ T9409] memory+swap: usage 428396kB, limit 9007199254740988kB, failcnt 0 [ 218.452161][ T9409] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 218.459153][ T9409] Memory cgroup stats for /syz4: [ 218.459324][ T9409] cache 313442304 [ 218.468040][ T9409] rss 77824 [ 218.471271][ T9409] rss_huge 0 [ 218.474928][ T9409] shmem 229785600 [ 218.478644][ T9409] mapped_file 3747840 [ 218.482717][ T9409] dirty 0 [ 218.485725][ T9409] writeback 0 [ 218.489052][ T9409] workingset_refault_anon 0 [ 218.493634][ T9409] workingset_refault_file 0 [ 218.498186][ T9409] swap 124104704 [ 218.501761][ T9409] swapcached 4096 [ 218.505483][ T9409] pgpgin 230811 [ 218.515182][ T9409] pgpgout 154011 [ 218.518838][ T9409] pgfault 81313 [ 218.522497][ T9409] pgmajfault 4 [ 218.525968][ T9409] inactive_anon 93614080 [ 218.545309][ T9409] active_anon 136314880 [ 218.549654][ T9409] inactive_file 0 [ 218.553451][ T9409] active_file 0 [ 218.556972][ T9409] unevictable 83656704 [ 218.563072][ T9409] hierarchical_memory_limit 314572800 [ 218.568524][ T9409] hierarchical_memsw_limit 9223372036854771712 [ 218.582901][ T9409] total_cache 313442304 [ 218.726343][ T9409] total_rss 77824 [ 218.730046][ T9409] total_rss_huge 0 [ 218.733796][ T9409] total_shmem 229785600 [ 218.738186][ T9409] total_mapped_file 3747840 [ 218.742892][ T9409] total_dirty 0 [ 218.746430][ T9409] total_writeback 0 [ 218.752179][ T9409] total_workingset_refault_anon 0 [ 218.757350][ T9409] total_workingset_refault_file 0 [ 218.762557][ T9409] total_swap 124104704 [ 218.763548][ T9634] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3122'. [ 218.766692][ T9409] total_swapcached 4096 [ 218.766703][ T9409] total_pgpgin 230811 [ 218.766712][ T9409] total_pgpgout 154011 [ 218.766720][ T9409] total_pgfault 81313 [ 218.766729][ T9409] total_pgmajfault 4 [ 218.766737][ T9409] total_inactive_anon 93614080 [ 218.766746][ T9409] total_active_anon 136314880 [ 218.805610][ T9409] total_inactive_file 0 [ 218.809804][ T9409] total_active_file 0 [ 218.813997][ T9409] total_unevictable 83656704 [ 218.818703][ T9409] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3049,pid=9403,uid=0 [ 218.833814][ T9409] Memory cgroup out of memory: Killed process 9403 (syz.4.3049) total-vm:49268kB, anon-rss:0kB, file-rss:32896kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:0 [ 219.048161][ T9417] syz.4.3049 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 219.089337][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.4.3049 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 219.089377][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.089392][ T9417] Call Trace: [ 219.089401][ T9417] [ 219.089410][ T9417] __dump_stack+0x21/0x30 [ 219.089447][ T9417] dump_stack_lvl+0x10c/0x190 [ 219.089481][ T9417] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.089511][ T9417] ? ___ratelimit+0x3f7/0x5a0 [ 219.089545][ T9417] dump_stack+0x19/0x20 [ 219.089574][ T9417] dump_header+0xd7/0x490 [ 219.089597][ T9417] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 219.089627][ T9417] oom_kill_process+0x35d/0x640 [ 219.089655][ T9417] ? sched_clock_cpu+0x75/0x400 [ 219.089686][ T9417] out_of_memory+0x659/0xa80 [ 219.089713][ T9417] ? __cfi_out_of_memory+0x10/0x10 [ 219.089740][ T9417] ? mutex_lock_killable+0x92/0x1c0 [ 219.089763][ T9417] ? __cfi_mutex_lock_killable+0x10/0x10 [ 219.089788][ T9417] mem_cgroup_out_of_memory+0x279/0x350 [ 219.089810][ T9417] ? drain_obj_stock+0xed0/0xed0 [ 219.089834][ T9417] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 219.089856][ T9417] try_charge_memcg+0x8f7/0xde0 [ 219.089887][ T9417] ? __cfi_try_charge_memcg+0x10/0x10 [ 219.089917][ T9417] ? __alloc_pages_noprof+0x31f/0x7b0 [ 219.089949][ T9417] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 219.089980][ T9417] ? __folio_batch_add_and_move+0x2ab/0x370 [ 219.090010][ T9417] __mem_cgroup_charge+0xf6/0x410 [ 219.090044][ T9417] ? _raw_spin_lock+0x8c/0x120 [ 219.090072][ T9417] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 219.090107][ T9417] shmem_alloc_and_add_folio+0x86d/0x1050 [ 219.090137][ T9417] ? put_swap_device+0x130/0x130 [ 219.090164][ T9417] ? shmem_huge_global_enabled+0x2da/0x360 [ 219.090191][ T9417] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 219.090217][ T9417] ? __kasan_check_write+0x18/0x20 [ 219.090250][ T9417] ? _raw_spin_lock+0x8c/0x120 [ 219.090286][ T9417] shmem_get_folio_gfp+0x5f0/0x1380 [ 219.090325][ T9417] ? shmem_get_folio+0xc0/0xc0 [ 219.090347][ T9417] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 219.090378][ T9417] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 219.090409][ T9417] ? inode_to_bdi+0x6d/0x100 [ 219.090440][ T9417] shmem_write_begin+0xf4/0x270 [ 219.090467][ T9417] generic_perform_write+0x330/0x960 [ 219.090501][ T9417] ? __cfi_generic_perform_write+0x10/0x10 [ 219.090532][ T9417] ? down_write+0xe9/0x2a0 [ 219.090554][ T9417] ? mnt_get_write_access_file+0x1af/0x3b0 [ 219.090583][ T9417] ? mnt_put_write_access_file+0xc2/0x100 [ 219.090612][ T9417] ? file_update_time+0x1ef/0x220 [ 219.090641][ T9417] shmem_file_write_iter+0x105/0x130 [ 219.090671][ T9417] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 219.090700][ T9417] __kernel_write_iter+0x41a/0x8e0 [ 219.090721][ T9417] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 219.090750][ T9417] ? __cfi___kernel_write_iter+0x10/0x10 [ 219.090770][ T9417] ? get_dump_page+0x160/0x220 [ 219.090798][ T9417] ? __asan_memset+0x39/0x50 [ 219.090817][ T9417] ? iov_iter_bvec+0xc0/0x180 [ 219.090844][ T9417] dump_user_range+0xb06/0xdf0 [ 219.090866][ T9417] ? __cfi_dump_emit+0x10/0x10 [ 219.090886][ T9417] ? __cfi_dump_user_range+0x10/0x10 [ 219.090907][ T9417] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 219.090939][ T9417] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 219.090971][ T9417] ? elf_core_dump+0x2368/0x3800 [ 219.090998][ T9417] elf_core_dump+0x2ccc/0x3800 [ 219.091028][ T9417] ? __cfi_elf_core_dump+0x10/0x10 [ 219.091062][ T9417] ? dump_interrupted+0xf0/0xf0 [ 219.091093][ T9417] ? filp_open+0x182/0x1d0 [ 219.091121][ T9417] ? 0xffffffffff600000 [ 219.091139][ T9417] do_coredump+0x1bfa/0x2bd0 [ 219.091174][ T9417] ? __cfi_do_coredump+0x10/0x10 [ 219.091215][ T9417] ? asm_exc_page_fault+0x2b/0x30 [ 219.091245][ T9417] ? __kasan_slab_free+0x6a/0x80 [ 219.091272][ T9417] ? kmem_cache_free+0x1c1/0x510 [ 219.091292][ T9417] ? get_signal+0xa75/0x14f0 [ 219.091318][ T9417] get_signal+0x11fd/0x14f0 [ 219.091346][ T9417] arch_do_signal_or_restart+0x96/0x720 [ 219.091377][ T9417] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 219.091410][ T9417] ? __kasan_check_write+0x18/0x20 [ 219.091441][ T9417] irqentry_exit_to_user_mode+0x4e/0xb0 [ 219.091464][ T9417] irqentry_exit+0x16/0x60 [ 219.091485][ T9417] exc_page_fault+0x66/0xc0 [ 219.091505][ T9417] asm_exc_page_fault+0x2b/0x30 [ 219.091525][ T9417] RIP: 0033:0x7f06dcf8efc9 [ 219.091545][ T9417] Code: Unable to access opcode bytes at 0x7f06dcf8ef9f. [ 219.091556][ T9417] RSP: 002b:00007f06db9b4fe8 EFLAGS: 00010206 [ 219.091575][ T9417] RAX: 0000000000000000 RBX: 00007f06dd1e6180 RCX: 00007f06dcf8efc9 [ 219.091591][ T9417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 219.091604][ T9417] RBP: 00007f06dd011f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.091618][ T9417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.091631][ T9417] R13: 00007f06dd1e6218 R14: 00007f06dd1e6180 R15: 00007fff20d519c8 [ 219.091650][ T9417] [ 219.567870][ T9417] memory: usage 289020kB, limit 307200kB, failcnt 25399 [ 219.574896][ T9417] memory+swap: usage 413488kB, limit 9007199254740988kB, failcnt 0 [ 219.582826][ T9417] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 219.589754][ T9417] Memory cgroup stats for /syz4: [ 219.589918][ T9417] cache 294436864 [ 219.598543][ T9417] rss 81920 [ 219.601672][ T9417] rss_huge 0 [ 219.604921][ T9417] shmem 210780160 [ 219.608618][ T9417] mapped_file 3493888 [ 219.612618][ T9417] dirty 0 [ 219.615662][ T9417] writeback 0 [ 219.618980][ T9417] workingset_refault_anon 8 [ 219.623601][ T9417] workingset_refault_file 0 [ 219.628402][ T9417] swap 127815680 [ 219.632290][ T9417] swapcached 36864 [ 219.636052][ T9417] pgpgin 242686 [ 219.639531][ T9417] pgpgout 170517 [ 219.643104][ T9417] pgfault 82055 [ 219.646646][ T9417] pgmajfault 5 [ 219.650048][ T9417] inactive_anon 140742656 [ 219.654405][ T9417] active_anon 71016448 [ 219.658562][ T9417] inactive_file 0 [ 219.662223][ T9417] active_file 0 [ 219.665724][ T9417] unevictable 83656704 [ 219.669825][ T9417] hierarchical_memory_limit 314572800 [ 219.675226][ T9417] hierarchical_memsw_limit 9223372036854771712 [ 219.681519][ T9417] total_cache 294436864 [ 219.685720][ T9417] total_rss 81920 [ 219.689383][ T9417] total_rss_huge 0 [ 219.693174][ T9417] total_shmem 210780160 [ 219.697386][ T9417] total_mapped_file 3493888 [ 219.701916][ T9417] total_dirty 0 [ 219.705432][ T9417] total_writeback 0 [ 219.709501][ T9417] total_workingset_refault_anon 8 [ 219.714730][ T9417] total_workingset_refault_file 0 [ 219.719803][ T9417] total_swap 127815680 [ 219.723899][ T9417] total_swapcached 36864 [ 219.728228][ T9417] total_pgpgin 242686 [ 219.732245][ T9417] total_pgpgout 170517 [ 219.736355][ T9417] total_pgfault 82055 [ 219.740377][ T9417] total_pgmajfault 5 [ 219.744298][ T9417] total_inactive_anon 140742656 [ 219.749198][ T9417] total_active_anon 71016448 [ 219.753814][ T9417] total_inactive_file 0 [ 219.758017][ T9417] total_active_file 0 [ 219.762026][ T9417] total_unevictable 83656704 [ 219.766670][ T9417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3049,pid=9408,uid=0 [ 219.781580][ T9417] Memory cgroup out of memory: Killed process 9408 (syz.4.3049) total-vm:49268kB, anon-rss:0kB, file-rss:36864kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0 [ 220.255280][ T9700] 9pnet_fd: Insufficient options for proto=fd [ 220.795934][ T36] audit: type=1326 audit(1760997048.077:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9738 comm="syz.3.3145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x0 [ 220.937141][ T9760] 9pnet_fd: Insufficient options for proto=fd [ 220.987376][ T9768] overlayfs: failed to clone lowerpath [ 221.145019][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 221.154250][ T9780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9780 comm=syz.4.3159 [ 221.167345][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 221.248298][ T36] audit: type=1400 audit(1760997048.527:694): avc: denied { create } for pid=9805 comm="syz.2.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 221.899224][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 222.198028][ T36] audit: type=1326 audit(1760997049.477:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.4.3192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06dcf8efc9 code=0x0 [ 222.293655][ T9900] netlink: 'syz.3.3199': attribute type 11 has an invalid length. [ 223.197128][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 223.239797][ T36] audit: type=1326 audit(1760997050.517:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9949 comm="syz.2.3218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef9558efc9 code=0x0 [ 223.747118][ T9970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9970 comm=syz.3.3224 [ 223.760211][ T9970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3224'. [ 223.815996][ T36] audit: type=1400 audit(1760997051.097:697): avc: denied { accept } for pid=9990 comm="syz.3.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 223.890752][T10002] netlink: 'syz.4.3235': attribute type 4 has an invalid length. [ 223.907464][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3235'. [ 224.476536][T10014] overlayfs: failed to clone lowerpath [ 224.509829][T10023] overlayfs: failed to clone upperpath [ 225.151612][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 225.200320][T10070] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3257'. [ 225.271694][T10076] overlayfs: conflicting options: userxattr,redirect_dir=on [ 225.324697][ T36] audit: type=1326 audit(1760997052.597:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.365473][ T36] audit: type=1326 audit(1760997052.597:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.395455][ T36] audit: type=1326 audit(1760997052.597:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.425446][ T36] audit: type=1326 audit(1760997052.597:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.448803][ T36] audit: type=1326 audit(1760997052.597:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.472168][ T36] audit: type=1326 audit(1760997052.597:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.484260][T10090] ªªªªªªZ7nz>RAÌ: renamed from lo [ 225.495575][ T36] audit: type=1326 audit(1760997052.597:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 225.535587][T10091] fuse: Bad value for 'user_id' [ 225.540524][T10091] fuse: Bad value for 'user_id' [ 225.856300][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.865424][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.865633][T10105] 9pnet_fd: Insufficient options for proto=fd [ 225.872557][T10100] bridge_slave_0: entered allmulticast mode [ 225.895288][T10100] bridge_slave_0: entered promiscuous mode [ 225.902240][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.911270][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.937978][T10100] bridge_slave_1: entered allmulticast mode [ 225.953407][T10100] bridge_slave_1: entered promiscuous mode [ 226.114886][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.122019][T10100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.129346][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.136415][T10100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.195017][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.202549][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.234073][ T883] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.241169][ T883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.288368][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.295493][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.348773][T10100] veth0_vlan: entered promiscuous mode [ 226.369946][T10100] veth1_macvtap: entered promiscuous mode [ 226.658325][T10158] rust_binder: got new transaction with bad transaction stack [ 226.658348][T10158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 226.712576][T10164] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 227.205587][ T36] kauditd_printk_skb: 15393 callbacks suppressed [ 227.205605][ T36] audit: type=1326 audit(1760997054.487:16099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.238146][ T36] audit: type=1326 audit(1760997054.477:16098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.262302][ T36] audit: type=1326 audit(1760997054.517:16100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.285760][ T36] audit: type=1326 audit(1760997054.517:16101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.309259][ T36] audit: type=1326 audit(1760997054.517:16102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.334231][ T36] audit: type=1326 audit(1760997054.517:16103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.357895][ T36] audit: type=1326 audit(1760997054.517:16104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc7b98da7f code=0x50000 [ 227.381148][ T36] audit: type=1326 audit(1760997054.517:16105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.392234][T10184] overlayfs: failed to clone lowerpath [ 227.404534][ T36] audit: type=1326 audit(1760997054.517:16106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b98efc9 code=0x50000 [ 227.433702][ T36] audit: type=1326 audit(1760997054.517:16107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.3.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc7b98da7f code=0x50000 [ 227.436364][T10184] overlayfs: failed to clone lowerpath [ 227.485650][ T37] INFO: task syz.0.1345:4412 blocked for more than 122 seconds. [ 227.502147][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 227.512715][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 227.565651][ T37] task:syz.0.1345 state:D stack:0 pid:4412 tgid:4411 ppid:1762 flags:0x00000004 [ 227.575971][ T37] Call Trace: [ 227.579274][ T37] [ 227.582223][ T37] __schedule+0x1322/0x1df0 [ 227.586763][ T37] ? __sched_text_start+0x10/0x10 [ 227.591833][ T37] ? __kasan_check_write+0x18/0x20 [ 227.596978][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 227.602210][ T37] ? __kasan_check_write+0x18/0x20 [ 227.607379][ T37] ? trace_contention_begin+0xc0/0xc0 [ 227.612772][ T37] schedule+0xc6/0x240 [ 227.616879][ T37] schedule_preempt_disabled+0x14/0x30 [ 227.622373][ T37] __mutex_lock+0x81e/0x1b50 [ 227.626998][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 227.633798][ T37] ? __kasan_check_write+0x18/0x20 [ 227.638978][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 227.644477][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 227.650591][ T37] ? __kasan_check_write+0x18/0x20 [ 227.655739][ T37] ? _raw_spin_lock+0x8c/0x120 [ 227.660534][ T37] ? __kasan_check_write+0x18/0x20 [ 227.665688][ T37] ? __kasan_check_write+0x18/0x20 [ 227.670830][ T37] ? kobject_put+0x1cc/0x2a0 [ 227.675454][ T37] __mutex_lock_slowpath+0xe/0x20 [ 227.680497][ T37] mutex_lock+0x102/0x1c0 [ 227.684843][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 227.689732][ T37] ? usbdev_open+0xb2/0x840 [ 227.694276][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 227.699384][ T37] ? avc_has_perm+0x144/0x220 [ 227.704117][ T37] usbdev_open+0x171/0x840 [ 227.708653][ T37] ? __kasan_check_write+0x18/0x20 [ 227.713801][ T37] ? _raw_spin_lock+0x8c/0x120 [ 227.718604][ T37] ? __cfi_usbdev_open+0x10/0x10 [ 227.723658][ T37] chrdev_open+0x4de/0x5f0 [ 227.728130][ T37] ? __cfi_chrdev_open+0x10/0x10 [ 227.733101][ T37] ? bpf_lsm_file_open+0xd/0x20 [ 227.737987][ T37] ? __cfi_chrdev_open+0x10/0x10 [ 227.742939][ T37] do_dentry_open+0x97b/0x1510 [ 227.747729][ T37] vfs_open+0x86/0x230 [ 227.751819][ T37] ? __cfi_vfs_open+0x10/0x10 [ 227.756573][ T37] ? may_open+0x352/0x430 [ 227.760953][ T37] path_openat+0x2b6c/0x34b0 [ 227.765583][ T37] ? kasan_save_track+0x3e/0x80 [ 227.770571][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 227.775945][ T37] ? getname+0x1b/0x30 [ 227.780039][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 227.784839][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.790954][ T37] ? do_filp_open+0x3e0/0x3e0 [ 227.795667][ T37] do_filp_open+0x1c6/0x3e0 [ 227.800197][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 227.805262][ T37] ? alloc_fd+0x4e7/0x5a0 [ 227.809671][ T37] do_sys_openat2+0x12c/0x1c0 [ 227.814373][ T37] ? do_sys_open+0x100/0x100 [ 227.818999][ T37] ? irqentry_exit+0x4a/0x60 [ 227.823631][ T37] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 227.829831][ T37] __x64_sys_openat+0x13a/0x170 [ 227.834729][ T37] x64_sys_call+0xe69/0x2ee0 [ 227.839367][ T37] do_syscall_64+0x58/0xf0 [ 227.843819][ T37] ? clear_bhb_loop+0x50/0xa0 [ 227.848534][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.854451][ T37] RIP: 0033:0x7ff4e2f8d810 [ 227.858890][ T37] RSP: 002b:00007ff4e3efeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 227.867404][ T37] RAX: ffffffffffffffda RBX: 000000000000a401 RCX: 00007ff4e2f8d810 [ 227.875430][ T37] RDX: 000000000000a401 RSI: 00007ff4e3efec10 RDI: 00000000ffffff9c [ 227.883516][ T37] RBP: 00007ff4e3efec10 R08: 0000000000000000 R09: 0000000000000000 [ 227.891519][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 227.899728][ T37] R13: 00007ff4e31e6038 R14: 00007ff4e31e5fa0 R15: 00007ffc60a2b2e8 [ 227.907754][ T37] [ 227.918628][ T37] NMI backtrace for cpu 1 [ 227.918645][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 227.918674][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.918688][ T37] Call Trace: [ 227.918696][ T37] [ 227.918705][ T37] __dump_stack+0x21/0x30 [ 227.918741][ T37] dump_stack_lvl+0x10c/0x190 [ 227.918770][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 227.918801][ T37] dump_stack+0x19/0x20 [ 227.918830][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 227.918858][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 227.918886][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 227.918913][ T37] ? sched_show_task+0x379/0x560 [ 227.918941][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 227.918967][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 227.918995][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 227.919023][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 227.919052][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 227.919080][ T37] watchdog+0xd8f/0xed0 [ 227.919111][ T37] ? __cfi_watchdog+0x10/0x10 [ 227.919141][ T37] ? __kasan_check_read+0x15/0x20 [ 227.919193][ T37] ? __kthread_parkme+0x138/0x180 [ 227.919214][ T37] ? schedule+0xc6/0x240 [ 227.919244][ T37] kthread+0x2ca/0x370 [ 227.919266][ T37] ? __cfi_watchdog+0x10/0x10 [ 227.919296][ T37] ? __cfi_kthread+0x10/0x10 [ 227.919319][ T37] ret_from_fork+0x67/0xa0 [ 227.919349][ T37] ? __cfi_kthread+0x10/0x10 [ 227.919382][ T37] ret_from_fork_asm+0x1a/0x30 [ 227.919418][ T37] [ 227.919445][ T37] Sending NMI from CPU 1 to CPUs 0: [ 228.079118][ C0] NMI backtrace for cpu 0 [ 228.079131][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 34a01fd9912578d30c7e3161d648b1041de1ca52 [ 228.079172][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.079184][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 228.079209][ C0] Code: cc cc cc b8 0a 6c ad e3 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e2 39 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 228.079226][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c2 [ 228.079245][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858d70be [ 228.079259][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000260114 [ 228.079270][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 228.079283][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 228.079297][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb2128 [ 228.079309][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 228.079323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.079335][ C0] CR2: 0000560b1f421b98 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 228.079351][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.079373][ C0] DR3: 0000000000002d75 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 228.079384][ C0] Call Trace: [ 228.079390][ C0] [ 228.079397][ C0] default_idle+0x17/0x30 [ 228.079418][ C0] arch_cpu_idle+0xd/0x20 [ 228.079438][ C0] default_idle_call+0x3f/0x80 [ 228.079457][ C0] do_idle+0x1a0/0x470 [ 228.079475][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 228.079495][ C0] ? do_idle+0x10/0x470 [ 228.079514][ C0] cpu_startup_entry+0x48/0x70 [ 228.079532][ C0] rest_init+0x10b/0x130 [ 228.079553][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 228.079575][ C0] start_kernel+0x46a/0x4bb [ 228.079594][ C0] x86_64_start_reservations+0x2e/0x30 [ 228.079616][ C0] x86_64_start_kernel+0x6a/0x7b [ 228.079639][ C0] common_startup_64+0x13b/0x157 [ 228.079665][ C0] [ 228.376473][ T885] bridge_slave_1: left allmulticast mode [ 228.382173][ T885] bridge_slave_1: left promiscuous mode [ 228.395714][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.410899][ T885] bridge_slave_0: left allmulticast mode [ 228.419274][ T885] bridge_slave_0: left promiscuous mode [ 228.424926][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.618264][ T885] veth1_macvtap: left promiscuous mode [ 228.976786][ T885] bridge_slave_1: left allmulticast mode [ 228.982478][ T885] bridge_slave_1: left promiscuous mode [ 228.988165][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.995889][ T885] bridge_slave_0: left allmulticast mode [ 229.001549][ T885] bridge_slave_0: left promiscuous mode [ 229.007258][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.147657][ T885] veth1_macvtap: left promiscuous mode [ 229.153200][ T885] veth0_vlan: left promiscuous mode