last executing test programs: 1m44.243080325s ago: executing program 0 (id=734): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x1ff, 0x0, &(0x7f000001a000/0x4000)=nil}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6c, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/udp6\x00') preadv(r6, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2, 0x8, 0x3) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x6, 0x3, 0x1, 0x7}, {0x5, 0x4, 0x8}, {0x2, 0x0, 0x1, 0x2}, {0x1, 0x4a, 0x8, 0xda21}, {0x3e4f, 0x6}]}) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r1, 0xce33a000) 1m43.383700022s ago: executing program 0 (id=754): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x19, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x2) userfaultfd(0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m42.832111293s ago: executing program 0 (id=757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x139, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x67, 0xd9, 0xe7, 0x20, 0x19d2, 0x42, 0x6f66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x127, 0x2, 0x2, 0x9f, 0x90, 0x4, [{{0x9, 0x4, 0x4, 0x1, 0x0, 0xbb, 0xbc, 0x70, 0x3}}, {{0x9, 0x4, 0xa, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, [], [{{0x9, 0x5, 0x80, 0xc, 0x400, 0x3, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xa0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4af}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x5, 0x10, [@generic={0xad, 0x8, "015b5df5a59e7a13d03cf69f8c26d4a7ea5977ea67faf37251853768a44b85a54c9c8d51b32fb7e28021f38a47168ff2faaac104d34adbdca90a8bc70ee0911e690afe25a51f5dba3c2178e1d7a88f7db3d1ca2556547fec0b6587f20b50e1f8aef20410eb3ea6901288748a7f795e2b00dac404c848d321c6052d567be60b389fb5d30627e993cd2ebd560389a479eee15242b47001028666255921aadce4000901197be35f2a6ac84e87"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x81, 0x2, 0x4, [@generic={0x2f, 0x10, "e796064dbc1dd898633debfc2cf80ca58d61da1ef046cd4354e458410f5e2eb95cc73c0a1a35f1fac88355858f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfffd}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xa, 0x0, 0xe, 0x10, 0x1d}, 0x52, &(0x7f0000000040)={0x5, 0xf, 0x52, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xe1, 0x0, 0x8000, 0x0, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1160a1fcbd213221e3c51cc32abce345"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "69ec118ed00dd921b0976ff616ea6cc7"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x3, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x42, 0x3, 0x3, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x4, 0x1ff}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x804}}]}) 1m42.357348653s ago: executing program 0 (id=785): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)={0xfffffff7, {{0x2, 0x4e22, @local}}, 0x1, 0x2, [{{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @local}}]}, 0x190) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}, 0x4000014) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x12, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="307ddfb9528ce93e743d235a18440cf491d4ae659e66e11f0b940f0c13f5f2", 0x1f}, {&(0x7f00000004c0)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610", 0x24}], 0x2}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}], 0x1}, 0x2}], 0x1, 0x100, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000002c0)={{0x33, @private=0xa010100, 0x4e22, 0x3, 'lc\x00', 0x22, 0x1, 0x24}, {@broadcast, 0x4e21, 0x0, 0x1, 0x4, 0x6}}, 0x44) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000240)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m41.47718026s ago: executing program 0 (id=813): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000240)={0x4, {{0xa, 0x4e20, 0xff, @mcast2, 0x1}}, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}, 0x3}}}, 0x108) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x5, 0xfffe, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r6, 0x0, 0x7, 0x68000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x26, 0xa, 0x40861102, 0x200, 0xfffc, 0x6, 0x9, 0x0, 0x0, 0x4, 0x10001}}, 0x50) (async) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 64) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) shutdown(r1, 0x1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async, rerun: 64) close_range(r0, r7, 0x0) (rerun: 64) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r10, 0x5760, 0x1) 1m41.451810961s ago: executing program 0 (id=815): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = getpid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) fcntl$dupfd(r0, 0x0, r0) (async) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x880, 0x0, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000b0000000d000000"]) (async) r6 = syz_pidfd_open(r1, 0x0) setns(r6, 0x24020000) umount2(&(0x7f00000000c0)='.\x00', 0xb) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) 1m41.393603382s ago: executing program 32 (id=815): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = getpid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) fcntl$dupfd(r0, 0x0, r0) (async) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x880, 0x0, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000b0000000d000000"]) (async) r6 = syz_pidfd_open(r1, 0x0) setns(r6, 0x24020000) umount2(&(0x7f00000000c0)='.\x00', 0xb) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) 42.459785657s ago: executing program 3 (id=1896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x1, 0x2, 0x2, 0x800, 0x0, [{0x1, 0x2, 0x1, '\x00', 0x8}, {0x7, 0x5, 0x7f, '\x00', 0x2}, {0x0, 0x2, 0x3}, {0x7, 0xf8, 0x3}, {0x3, 0x8, 0x6, '\x00', 0x5}, {0xa, 0x2a, 0x6, '\x00', 0xba}, {0x6, 0x8, 0xba, '\x00', 0x9}, {0x8, 0x2, 0x40, '\x00', 0x1}, {0xa2, 0x5, 0x1, '\x00', 0x7a}, {0x8, 0x6e, 0xfe, '\x00', 0x8}, {0xd8, 0x71, 0x6, '\x00', 0x6}, {0x4, 0x94, 0x1e}, {0xc, 0x81, 0x0, '\x00', 0x6}, {0x1, 0x8, 0xf8, '\x00', 0x7f}, {0x9, 0x5, 0xb, '\x00', 0x2}, {0x40, 0x7, 0x5, '\x00', 0x7}, {0xca, 0x1, 0x8, '\x00', 0x5}, {0xe1, 0xfd, 0x6, '\x00', 0x5}, {0x1, 0x7, 0x1}, {0x5, 0x5, 0x96}, {0x8, 0x9, 0xd, '\x00', 0xb}, {0x3, 0x4, 0x7, '\x00', 0x7f}, {0xff, 0x2, 0x4, '\x00', 0x9}, {0x8, 0x81, 0xd, '\x00', 0x4}]}}) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x1, 0x2, 0x2, 0x800, 0x0, [{0x1, 0x2, 0x1, '\x00', 0x8}, {0x7, 0x5, 0x7f, '\x00', 0x2}, {0x0, 0x2, 0x3}, {0x7, 0xf8, 0x3}, {0x3, 0x8, 0x6, '\x00', 0x5}, {0xa, 0x2a, 0x6, '\x00', 0xba}, {0x6, 0x8, 0xba, '\x00', 0x9}, {0x8, 0x2, 0x40, '\x00', 0x1}, {0xa2, 0x5, 0x1, '\x00', 0x7a}, {0x8, 0x6e, 0xfe, '\x00', 0x8}, {0xd8, 0x71, 0x6, '\x00', 0x6}, {0x4, 0x94, 0x1e}, {0xc, 0x81, 0x0, '\x00', 0x6}, {0x1, 0x8, 0xf8, '\x00', 0x7f}, {0x9, 0x5, 0xb, '\x00', 0x2}, {0x40, 0x7, 0x5, '\x00', 0x7}, {0xca, 0x1, 0x8, '\x00', 0x5}, {0xe1, 0xfd, 0x6, '\x00', 0x5}, {0x1, 0x7, 0x1}, {0x5, 0x5, 0x96}, {0x8, 0x9, 0xd, '\x00', 0xb}, {0x3, 0x4, 0x7, '\x00', 0x7f}, {0xff, 0x2, 0x4, '\x00', 0x9}, {0x8, 0x81, 0xd, '\x00', 0x4}]}}) ustat(0x801, &(0x7f0000000140)) (async) ustat(0x801, &(0x7f0000000140)) userfaultfd(0x80000) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.458773637s ago: executing program 3 (id=1898): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1b0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x1ff, 0x0, &(0x7f000001a000/0x4000)=nil}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x80, 0x4, 0x1, 0x3, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}}}, 0x3a) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) open(&(0x7f0000001480)='./file0\x00', 0x96b80, 0x1ed) setreuid(0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r2, 0xce33a000) 41.573739224s ago: executing program 3 (id=1913): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 41.538961285s ago: executing program 3 (id=1915): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x32}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x406, r2) 41.467361507s ago: executing program 3 (id=1918): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) socket$unix(0x1, 0x5, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x800000, &(0x7f0000000180)='check=relaxed') readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 41.463706356s ago: executing program 3 (id=1919): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) (async) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0xffffbdfe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) r6 = gettid() ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0x2) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) (async) prlimit64(r6, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000004000000000000000000000f2156"]) (async) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) 26.429185399s ago: executing program 33 (id=1919): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) (async) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0xffffbdfe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) r6 = gettid() ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0x2) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) (async) prlimit64(r6, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "ab840a3fffe3999e7b880470de"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000004000000000000000000000f2156"]) (async) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) 9.733200504s ago: executing program 4 (id=2651): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x290, 0x21, 0x10, 0x70bd25, 0x25dfdbfd, {0xe}, [@typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@local}, @generic="a0219a4e5b010c1dbc227b18888160e3b52f5ae353af19e6f44a4ec11996c43a2dee3f7644a3de839f02cb2c7582c220b724119c4d230ac640bd5b864ac5570a2bd4fc8b702a63b8b1de4b52c1eb10fdfae17ed4c3d0c2", @nested={0xb3, 0x8e, 0x0, 0x1, [@nested={0x4, 0x8d}, @generic="781d752bb065cfd76f64dc04eefb9fba83d4a87f96b629993371eca512daf88c11913264bb22a5e0abf10abffdc86ebe5f1c4c08f2dece27f424931b4ea4bdc399c1947c2bed840bc3584658071bada3dd2814dc63dc9d1da3c662a932ae0e617a471d83d3119867b41aba52d314f82f46bea4cac066806aea3a3e3b1976800f7815124e84af563f174fd930abc7d546aa01bd", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x4, 0x1c}]}, @nested={0x11a, 0x52, 0x0, 0x1, [@nested={0x4, 0xfe}, @nested={0x4, 0x3}, @generic="d1835cd6c7d63ab6d1b13b00fa04", @typed={0x4, 0xfe}, @generic="aadf210db2a57ebf8b7765f16f2fa703ce6641e89196b33da226ffc160cd2547737219820119fd0886c4a58670e73a5ed8dd42de53f4adfdacf6c0b41ac119426656647591e9f1377300fa6d87b1e86052f1f2231dfa6bb2a5259353ec7cc34640325103f3278da6649eb313eb86f74e472a766c2f2074b9df41cbc1e5f366a0beff3d557bdb920e840418794dac15cb9aae109f63975729761a576eeec17f0494be6e33afc0a89b17cc38ef6e3e1c766c81c699bd5b7ca675d8ed396c741833ad9b32be96eb68afa0c7191b945ed12abe03d7faf9f5f7cd46bdd2896713b2c91f289ff3d4013e4fb602b8d2414c49a7", @nested={0x4, 0x23}, @nested={0x4, 0x100}, @nested={0x4, 0x3c}]}, @generic="9d0f1768bc9ba42ac6ef1e65f92ee3d6486967bd1ce617eb9f7e9ded7f8c89276c", @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r1}]}, 0x290}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0xcc, 0x0, &(0x7f0000000840)=[@decrefs, @acquire={0x40046305, 0x1}, @exit_looper, @request_death, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/138, 0x8a, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x101}, @flat=@handle={0x73682a85, 0x100a, 0x3}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/209, 0xd1, 0x1, 0x22}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000800)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x3}], 0x74, 0x0, &(0x7f0000000940)="403d29eae929110d205ec135b2a0fe020b026189d6e93d7d22ebd51a4609138092657be51f8086f35c3acd1c370f9d7ee8ef10593e4d979a25222bc394ad734fa42c6130e5b05c7cfca3c481588da087402901c88d5f198a3c1d5ff975daaa9db901e56bcd7e2190ef34554e53f804914a4d55d9"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r2) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000a80)={0x4, 0x2}) mknodat$null(r0, &(0x7f0000000b00)='./file0\x00', 0x40, 0x103) clock_gettime(0x0, &(0x7f0000004700)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/22, 0x16}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000c40)=""/173, 0xad}], 0x3, &(0x7f0000000d40)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001d40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/217, 0xd9}], 0x1, &(0x7f0000001f00)=""/229, 0xe5}, 0x4}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)=""/73, 0x49}, {&(0x7f0000002080)=""/104, 0x68}], 0x2, &(0x7f0000002140)=""/102, 0x66}, 0x3}, {{&(0x7f00000021c0)=@alg, 0x80, &(0x7f0000002440)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/86, 0x56}, {&(0x7f0000002300)}, {&(0x7f0000002340)=""/221, 0xdd}], 0x4, &(0x7f0000002480)=""/155, 0x9b}, 0x1ec}, {{&(0x7f0000002540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000025c0)=""/196, 0xc4}, {&(0x7f00000026c0)=""/230, 0xe6}, {&(0x7f00000027c0)=""/155, 0x9b}], 0x3, &(0x7f00000028c0)=""/216, 0xd8}, 0x1}, {{&(0x7f00000029c0), 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/164, 0xa4}, {&(0x7f0000002bc0)=""/241, 0xf1}, {&(0x7f0000002cc0)=""/26, 0x1a}], 0x4, &(0x7f0000002d40)=""/64, 0x40}, 0xa3}, {{&(0x7f0000002d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002e00)}, 0xf3}, {{&(0x7f0000002e40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/241, 0xf1}], 0x1, &(0x7f0000003000)=""/167, 0xa7}, 0x800}, {{&(0x7f00000030c0)=@alg, 0x80, &(0x7f0000003240)=[{&(0x7f0000003140)=""/248, 0xf8}], 0x1, &(0x7f0000003280)=""/4096, 0x1000}, 0xb9e7}, {{&(0x7f0000004280)=@ax25={{}, [@bcast, @remote, @default, @netrom, @default, @default, @remote, @netrom]}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004300)}, {&(0x7f0000004340)=""/66, 0x42}], 0x2, &(0x7f0000004400)=""/77, 0x4d}, 0x2}], 0xa, 0x2023, &(0x7f0000004740)={r6, r7+60000000}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000047c0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x40, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x70}]}, 0x40}, 0x1, 0x0, 0x0, 0x48041}, 0x649c88e6c9531247) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000049c0)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x60, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x69}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a40), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x2c, r10, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xb}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004b40)='./file0\x00', 0x192) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', &(0x7f0000004bc0)={0x2200, 0x82, 0x9}, 0x18) openat2(r11, &(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)={0x20000, 0x80, 0x22}, 0x18) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000004c80)) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000004d80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0xd9dd6b92edcbc605) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r12, &(0x7f0000004e80)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44004080) ioctl$BTRFS_IOC_DEFRAG_RANGE(r12, 0x40309410, &(0x7f0000004ec0)={0x8000, 0x3b9, 0x0, 0x2, 0x3, [0x3, 0x4, 0x7, 0x6]}) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000004f00)={0xd, 0xffffffffffffffff, 'id1\x00'}) ppoll(&(0x7f0000004f80)=[{r13, 0x4064}, {r11, 0x100}, {r4, 0x400}], 0x3, &(0x7f0000004fc0)={0x77359400}, &(0x7f0000005000)={[0x5]}, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000005040), r0) mount$9p_unix(&(0x7f0000005080)='./file1\x00', &(0x7f00000050c0)='./file1\x00', &(0x7f0000005100), 0x8000, &(0x7f0000005140)={'trans=unix,', {[{@loose}, {@access_user}, {@noxattr}, {@access_client}, {@cachetag={'cachetag', 0x3d, ':'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@aname}, {@noxattr}, {@dfltuid={'dfltuid', 0x3d, r1}}], [{@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 8.901339841s ago: executing program 4 (id=2666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x9, 0x7, 0x36, 0xa06}, {0x1000, 0xa, 0x9, 0x4}, {0x3, 0xe, 0x0, 0x2}, {0x7, 0x8, 0xff, 0x5}, {0x5, 0xd2, 0x40, 0x3}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f0000000440)=[@release={0x40046306, 0x1}, @increfs, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/238, 0xee, 0x2, 0x3f}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) recvfrom(r4, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffcd6) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x100, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x3ff, 0x5, 0x8001, 0x5, 0x5}) syz_pidfd_open(r2, 0x0) syz_open_procfs$pagemap(r2, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x6d9, 0x40000, 0xb, 0x0, 0x4, 0xffffffffffffffff}, {0x3ff, 0xb, 0x7, 0x2, 0x610, 0x5}], ['\x00', '\x00']}) 8.889133531s ago: executing program 4 (id=2667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/60, 0x3c}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004b80)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x2a}]}, 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x870a}, {r2, 0xa21c}], 0x2, 0x0, 0x0, 0x45) r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000980)={{r4}, r5, 0x10, @inherit={0x60, &(0x7f00000001c0)={0x0, 0x3, 0x6, 0x8, {0x10, 0x6, 0x200, 0x50e0, 0x8}, [0xa, 0x6, 0x80000000]}}, @subvolid=0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 8.049075838s ago: executing program 4 (id=2676): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000001500)=0xffffffffffffffff, 0x12) fcntl$setstatus(r0, 0x4, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, 0x0, 0x0) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$inet6(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendto$inet6(r2, &(0x7f00000001c0)="9c8f", 0x2, 0x881, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'veth0_to_team\x00', 0x3001}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) r4 = syz_clone(0x22002211, 0x0, 0x26, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_pidfd_open(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 7.994378059s ago: executing program 4 (id=2677): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40c81, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x8d, "b5734dc5f87ba48a3feeebfb7a1e56fcc87673fb147489cca592044d2b0212a0fc7b800125a40be800fbf1404104a33889780449c53f5036051bea428212fdb2545a1c194fddf55116f6a70ee900a5863c0c72cc3a8b14e8d37a94762a9e903a754ec200475c021a064373a70abd5a2afe3f5902030d5becc28445c6f956cbe9e62e87e1ad7c74c0b14c9779f9"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x8, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7ff]}, 0x8) getdents(r5, &(0x7f00000001c0)=""/202, 0xca) r6 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) close_range(r0, r5, 0x2) 7.884685221s ago: executing program 4 (id=2678): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r3, &(0x7f0000000100)) (async) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xa) (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000640)) 7.860806782s ago: executing program 34 (id=2678): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r3, &(0x7f0000000100)) (async) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xa) (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000640)) 3.634957427s ago: executing program 6 (id=2746): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000440)=""/134, 0x86}, {0x0}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 3.611149508s ago: executing program 6 (id=2748): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x84, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00i\x00'], 0x28}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x800000000000002) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28c}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup/file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x8000, 0x0) 3.545994789s ago: executing program 6 (id=2751): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x1d, 0x73, 0xf, 0x80000002, 0xa, 0x100, 0x0, 0xb1, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0xc4}], 0x1, 0x0, 0x0, 0x0) 2.717040335s ago: executing program 6 (id=2765): unshare(0x6c000600) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x494f3513d8250d4e) r0 = socket$unix(0x1, 0x1, 0x0) read(r0, &(0x7f0000000040)=""/32, 0x20) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pidfd_send_signal(r1, 0x5, &(0x7f00000000c0)={0x5, 0x8, 0xffffffc4}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r5 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ffc0000) shutdown(r6, 0x1) sendmmsg$inet(r6, &(0x7f000000b5c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5800) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x424) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x4000008) tkill(r5, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) 2.596797147s ago: executing program 6 (id=2766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.45844143s ago: executing program 6 (id=2769): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000540)=ANY=[], 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r5, 0x40045506, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.077631438s ago: executing program 1 (id=2780): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010828bd7000fcdbdf2501000054680000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socket(0x28, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8940, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2.077504158s ago: executing program 1 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x1c}], 0x1}, 0x4000080) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x4, &(0x7f00000004c0)) 2.077016448s ago: executing program 1 (id=2782): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4042, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'caif0\x00', 0x2000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000580)={0x5, {{0xa, 0x4e21, 0x200000f, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 2.070110168s ago: executing program 1 (id=2783): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) close_range(r1, 0xffffffffffffffff, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x14, 0x11, 0x200, 0xfffffffc, 0x2, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r3, r0, 0x0) 1.226373195s ago: executing program 1 (id=2800): syz_usb_connect(0x4, 0x188, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xab, 0x47, 0x63, 0x10, 0x1199, 0xc080, 0xfdfb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x176, 0x2, 0x84, 0x9, 0x40, 0x7, [{{0x9, 0x4, 0x13, 0x8, 0x5, 0x94, 0x8c, 0xea, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xfff7}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x4, 0x34, "ce20da4d"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x1, "b2"}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x5, 0x9, "c9d78800"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x0, 0x9, "f9ffbb"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x3, 0xf3, 0x7, 0x4, 0x7}]}, @uac_control={{}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x6, 0x9b, 0x3, 0xe6, 0xfd}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x6, 0x5, [0x1, 0x2, 0xa, 0x8, 0x6], 0x5}]}], [{{0x9, 0x5, 0x9, 0xc, 0x8, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x5, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x59, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0x9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x12, 0xe5}}, {{0x9, 0x5, 0x6, 0x8, 0x10, 0x0, 0x9b, 0x9f, [@generic={0xad, 0x5, "32e231511ad4cd8d444525002e7c60be6166f8ec38640d75ffd58ee72fe314d44ddbc0a75ecbd13ccaf40587b882b06713a7919e23f82578987e7ebc8bc525e8e4881164ac8951046ccd6609e5facccf85658c851058d36854a220e9e5e019d9372ba8438c62ddf40abadabb97e002f7fcc208c11b78ebc9c829039680ec47cda43b3865f65200644990c423a85b7de11a9421db9ef386b2cbcaca3dff7ca84adcca7b5fed7085b3ced766"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x59, 0x65}]}}]}}, {{0x9, 0x4, 0x7d, 0x7, 0x1, 0x8d, 0xa9, 0x5a, 0x6, [], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xe, 0x80, 0x3}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x9, 0x80, 0x3, 0x10, 0x9}, 0x2b, &(0x7f0000000200)={0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x0, 0x93e}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "859602abb93056949b3a6f3d4a5b0957"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0xca, 0x9, 0x401, 0x7}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x9b, 0x1, 0x7, 0x1, 0x2, 0xc0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x9, 0xe0}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0xd, 0x5}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x288, 0x1, 0x4, 0x5, 0x8, 0x7}, 0x5e, &(0x7f0000000340)={0x5, 0xf, 0x5e, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x6, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x5, 0x1, 0xe, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x7fffffc, 0xf00, 0xa, [0x0, 0x1fe0000, 0x0, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "eba152f76e98757ede74c16a2dd52d8a"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "f46a3e1a67d2339f04242b5ee7b8c8cb"}]}, 0x2, [{0x81, &(0x7f00000003c0)=@string={0x81, 0x3, "fadd0b7b74ccc269e0dc70397db5bb96e3a88b7999c3b6f1362827627ff5841a26df59fbe2df6d3188db4b46c8edf5c06145d83658ca2cb03558b8bf1c4bf3267e03cfca2afbd8518fd2d3820e2c98b255db65f73f76d2616e1e86fac6aba663ed9d11fdb06039abb1205d6a45c001b33eae38e35188e629935a253bc68a5c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c01}}]}) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x9b, 0x1, 0x7, 0x1, 0x2, 0xc0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x9, 0xe0}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0xd, 0x5}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x288, 0x1, 0x4, 0x5, 0x8, 0x7}, 0x5e, &(0x7f0000000340)={0x5, 0xf, 0x5e, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x6, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x5, 0x1, 0xe, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x7fffffc, 0xf00, 0xa, [0x0, 0x1fe0000, 0x0, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "eba152f76e98757ede74c16a2dd52d8a"}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "f46a3e1a67d2339f04242b5ee7b8c8cb"}]}, 0x2, [{0x81, &(0x7f00000003c0)=@string={0x81, 0x3, "fadd0b7b74ccc269e0dc70397db5bb96e3a88b7999c3b6f1362827627ff5841a26df59fbe2df6d3188db4b46c8edf5c06145d83658ca2cb03558b8bf1c4bf3267e03cfca2afbd8518fd2d3820e2c98b255db65f73f76d2616e1e86fac6aba663ed9d11fdb06039abb1205d6a45c001b33eae38e35188e629935a253bc68a5c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c01}}]}) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x60, 0x80800) writev(r0, &(0x7f0000000700)=[{&(0x7f00000005c0)="34e4ce0065d204257d20b0d5611a5401918eacd8abe97e76e02df9b3b2bd21f9e5c091ce260a46c5de9631336aab778e9b98b191982e1c23897309952bf0e63da78eba3159b54a946c9cb6bdc025d6e59505457c514a6d3d801677a0c4ce5c87ace9303a05ab0371ac527d269b950d5024306b5d3498bc2abefac1434fc02d822922494def0993dad5dfcbd18c47e8fde682b7e101b84820307af6ab1376b51516b68754f969f2bf1f662fac5e8d17346ae5fe", 0xb3}, {&(0x7f0000000680)="348b8d6ef70eabcd25239dce61834e0b999c19e6f93b523c22755ec0fabd4495ca43a5f954f879ae22c4fa3ab772a8afbc87a54af063dfc042c3aa31121f53ecb78014d426348532034234df2d8834", 0x4f}], 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x5, 0x0, 0x20, @empty, @mcast2, 0x7, 0x7800, 0x5, 0x5}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x17}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a40), 0x2, 0x0) (async) r5 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a40), 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000a80)=@ll={0x11, 0x6, r3, 0x1, 0x7}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="4f07a3311e9ff0c650a35e0ed1864c944aa00b4531ffc6a9d3c50e38bc61ad2ebf9d3caae0a7a9c86b8d59a030cb7044ea33f909570e1cdc1976865f0f38230c412e7b74b181a58bd10e09c9c530794931d4f1ae39a313e4ce971e65948fcacd3c072f90d6b51b0df9ce52bb059a97e5010658f18a81a7ebe081b3c24836557848a50f037952522ee4620b12d8ccfde4eb981fa23312d6b433e8", 0x9a}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000001040)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x9}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000010c0)={0x0, &(0x7f0000001080)}) r6 = syz_open_dev$mouse(&(0x7f0000001100), 0x7ff, 0x80100) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000001140), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x134, r8, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x115, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x5}, 0x3, 0xff, @device_a, 0x0, 0xffffd093, 0x3}}, @cf={0x4, 0x6, {0x0, 0x2, 0x0, 0x5}}, @mesh_chsw={0x76, 0x6, {0x8, 0x80, 0xe, 0x1}}, @tim={0x5, 0xe8, {0x6, 0x9d, 0x7f, "3787d7d66a24e29d0179588b63fbe1ee4a077186bff7b02d3de746ad2baf913bdecc158dcf2ccf5e93374c2772d3bb682ec9e3f0998c0d64e5d7c5b54bd231dd7d43ea4d2a82329f0791b81d7bbee764f1da7ad8dc104c0a257024b35e60f027803b32f40e86de17c1a9492baab3c18f6225341284f0b263f809b6906f9aa35b8b048459c014d181f990eb83d92cbbc508d308c5a6f3d025633d0cccc2d4d32215a835093194536cd2732b0230e83060fac339661641c883bb1970fdcaa0a15168cb45ef3e089187f24da7e2c622a41e0ed7a6f05b5bb316b9f4abc21c6e7a441fe81d7c0c"}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004800) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x134, r8, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x115, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x5}, 0x3, 0xff, @device_a, 0x0, 0xffffd093, 0x3}}, @cf={0x4, 0x6, {0x0, 0x2, 0x0, 0x5}}, @mesh_chsw={0x76, 0x6, {0x8, 0x80, 0xe, 0x1}}, @tim={0x5, 0xe8, {0x6, 0x9d, 0x7f, "3787d7d66a24e29d0179588b63fbe1ee4a077186bff7b02d3de746ad2baf913bdecc158dcf2ccf5e93374c2772d3bb682ec9e3f0998c0d64e5d7c5b54bd231dd7d43ea4d2a82329f0791b81d7bbee764f1da7ad8dc104c0a257024b35e60f027803b32f40e86de17c1a9492baab3c18f6225341284f0b263f809b6906f9aa35b8b048459c014d181f990eb83d92cbbc508d308c5a6f3d025633d0cccc2d4d32215a835093194536cd2732b0230e83060fac339661641c883bb1970fdcaa0a15168cb45ef3e089187f24da7e2c622a41e0ed7a6f05b5bb316b9f4abc21c6e7a441fe81d7c0c"}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001400)='dvmrp1\x00') r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r10, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, r11, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040) syz_usb_connect$uac1(0x1, 0xba, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x0, 0x98, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xed8}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x5, 0x7, 0x7f, 0x7, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x4a43, 0x7, "685816"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x2, "7ea842eea0890c27"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x5, 0x2, "248187547b86"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0xaf, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x2, "735cd7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3bf, 0x4, 0x9, 0xc, {0x7, 0x25, 0x1, 0x81, 0x8, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x80, 0x56, {0x7, 0x25, 0x1, 0x1, 0x5, 0x1}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x201, 0xfb, 0x5, 0x9, 0xff, 0xe}, 0x81, &(0x7f0000001780)={0x5, 0xf, 0x81, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x1, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "ab6fe7b1468139c671c271b3fdaddfd5"}, @generic={0x50, 0x10, 0xa, "d03ecc6448c137759cb5f622d3d7718e71a159a336d54e3b5f2b4749284af964008e0539ecca6adb1cd83e673d6572748f0459f253315ba5ba8c7ece4724d705a4853ddde97cf157ab2a172f87"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x3, 0xe8b6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x3, 0xa}]}, 0x5, [{0x2, &(0x7f0000001840)=@string={0x2}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x438}}]}) 448.965481ms ago: executing program 5 (id=2816): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {0x0}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 447.966911ms ago: executing program 5 (id=2817): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x8100, 0x4) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/notes', 0x8100, 0x4) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0x7, 0x4) r1 = socket(0xa, 0x3, 0xff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0x7, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001980)={0x929, 0x8000000000000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0xfffffffffffffffe]}, 0x0, &(0x7f0000000200), 0x8) io_setup(0x7, &(0x7f000000f580)) (async) io_setup(0x7, &(0x7f000000f580)=0x0) io_pgetevents(r5, 0xfffffffffffffbff, 0x2, &(0x7f000000f5c0)=[{}, {}], &(0x7f000000f600)={0x0, 0x3938700}, &(0x7f000000f680)={&(0x7f000000f640)={[0x79db]}, 0x8}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 350.466113ms ago: executing program 5 (id=2818): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) setns(r1, 0x8000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}}, 0x0) (async) umount2(&(0x7f00000000c0)='.\x00', 0xb) 350.218693ms ago: executing program 5 (id=2819): r0 = getpid() syz_pidfd_open(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb00}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x1a, &(0x7f0000000080)=ANY=[], 0x18) r3 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x70, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) r6 = socket$nl_audit(0x10, 0x3, 0x9) pwritev2(r6, 0x0, 0x0, 0xfffffffb, 0x3, 0x4) fcntl$setlease(r4, 0x400, 0x1) setns(r3, 0x2000000) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x2040600) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="00497ac3c19cd0467645752a368321d12b537786d5a5e99a59", 0x19}], 0x1}, 0x4000001) recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f00000002c0)=""/95, 0x5f}, 0xfffffffc}], 0x1, 0x0, 0x0) umount2(&(0x7f00000000c0)='.\x00', 0xb) 347.623353ms ago: executing program 5 (id=2820): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 32) listen(r3, 0x0) (async, rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r7, 0x701, 0x70bd25, 0x25dfdbfd, {0xb}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x1, 0x4, 0x2}) (async) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) (async, rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (rerun: 32) modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r9, 0x0, 0x0) (async) read$FUSE(r8, &(0x7f0000000940)={0x2020}, 0x2020) (async) close_range(r0, r8, 0x2) 338.165013ms ago: executing program 5 (id=2821): r0 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') close_range(r0, r0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000801) rmdir(&(0x7f0000000080)='./cgroup\x00') 294.280944ms ago: executing program 2 (id=2822): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@empty}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) signalfd4(r0, &(0x7f0000000240)={[0x1]}, 0x8, 0x800) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x1) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/97) 263.256585ms ago: executing program 2 (id=2823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 262.931185ms ago: executing program 2 (id=2824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x0, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0) close_range(r0, r5, 0x2) 212.581536ms ago: executing program 2 (id=2825): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fchmod(r3, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000010000000074d564b"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r0, 0x4dd99000) r5 = socket$inet(0x2, 0x3, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="ad3dda7cc892b9b90e5e068af4b8f23bdd7f1c", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES64=r5, @ANYRES16=r2, @ANYRESHEX=r4, @ANYRES32=r4]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket(0x80000000000000a, 0x2, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x2, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @private0}}}, 0x108) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r12, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="e0018000009354a7f65df7075327671ed9519c9757b96557993346354b768ab50464ad08ce6911ac93e311302c19c71598c8dd293c68ad8e6692a78a311a3ae718bbe2caf23c3a6bc0ee2c8422cff27cb8ea5b0700c90af37b40eed8cbc238f1333b357380cf54ec575cc73ca1710e720a0bfae6166fa79edf8f87fb172743a0f026eba360656fe3ddb7087ca1ad13049dd86351fcd7253912bfa6c8ed1e1dd3978e80de7ab954"]) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) 211.630166ms ago: executing program 2 (id=2826): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000400)=""/60, 0x3c}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 210.618876ms ago: executing program 2 (id=2827): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee0, 0x110, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201400017f0b2209f045a50777801020301090238000302609e50a504170400a2a1b804052406000105240008000d240f010700000005000600f706241afbff020904490100f29bbe09b9f26910e6d5788c9622125108627b2dbb"], 0x0) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, 0x0, 0x20000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=2828): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000020100c0000000"]) r3 = socket$netlink(0x10, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000440)={0x1, r2, 'id1\x00'}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000003c0)=0x200000000) syz_io_uring_setup(0xeae, &(0x7f0000000540)={0x0, 0xa236, 0x20000, 0x0, 0x2cb, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200)) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) lsm_set_self_attr(0x65, &(0x7f0000001580)=ANY=[@ANYRES16, @ANYBLOB="a0c2d6fd10ef35bc72ab4d5867289f"], 0x20, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) capset(&(0x7f0000000f40)={0x19980330}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(r3, &(0x7f00000002c0)="0c67aa33745b5d27fc7db9e99cbb96863ad09ff2f6fcda1854946343d8bf0bf1f41192820bdf6a741d3ac75b7206ce32719ab91ccb44dfcfadad072946a42fd1749c1c98c774afaf606530b3ac7a556a928758482a14101d8a6830c2a8827a782b128553c7f8dec31f375b0138f6f7cd2cda582f16bdc8c42656645b1efd31d082f1e6fc51c033b3b7d391302869a7ae6dd000aeafc50330b7a53c2f6fc9a6954df6a451c0a0c9d83de33f531147a3ce41aacc608857b70f066706aac7c295d98a0b1636c3ed0d168fa2dfc64adbb16630", 0xd1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x44f0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0x1000000008, 0x6b) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) kernel console output (not intermixed with test programs): llable+0x104/0x1c0 [ 113.698735][ T5437] ? __cfi_mutex_lock_killable+0x10/0x10 [ 113.698758][ T5437] mem_cgroup_out_of_memory+0x279/0x350 [ 113.698776][ T5437] ? drain_obj_stock+0xed0/0xed0 [ 113.698796][ T5437] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 113.698815][ T5437] try_charge_memcg+0x8f7/0xde0 [ 113.698839][ T5437] ? __cfi_try_charge_memcg+0x10/0x10 [ 113.698862][ T5437] ? __alloc_pages_noprof+0x31f/0x7b0 [ 113.698884][ T5437] ? folio_unlock+0x12f/0x1a0 [ 113.698905][ T5437] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 113.698929][ T5437] __mem_cgroup_charge+0xf6/0x410 [ 113.698957][ T5437] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 113.698983][ T5437] ? do_pte_missing+0x2bdb/0x4240 [ 113.699006][ T5437] shmem_alloc_and_add_folio+0x86d/0x1050 [ 113.699027][ T5437] ? finish_task_switch+0x13a/0x780 [ 113.699050][ T5437] ? put_swap_device+0x130/0x130 [ 113.699070][ T5437] ? shmem_huge_global_enabled+0x2da/0x360 [ 113.699091][ T5437] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 113.699110][ T5437] ? __kasan_check_write+0x18/0x20 [ 113.699136][ T5437] ? _raw_spin_lock+0x8c/0x120 [ 113.699161][ T5437] shmem_get_folio_gfp+0x5f0/0x1380 [ 113.699182][ T5437] ? shmem_get_folio+0xc0/0xc0 [ 113.699200][ T5437] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 113.699226][ T5437] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 113.699251][ T5437] ? inode_to_bdi+0x6d/0x100 [ 113.699276][ T5437] shmem_write_begin+0xf4/0x270 [ 113.699296][ T5437] generic_perform_write+0x330/0x960 [ 113.699320][ T5437] ? __cfi_generic_perform_write+0x10/0x10 [ 113.699345][ T5437] ? down_write+0xe9/0x2a0 [ 113.699366][ T5437] ? mnt_get_write_access_file+0x1af/0x3b0 [ 113.699390][ T5437] ? mnt_put_write_access_file+0xc2/0x100 [ 113.699414][ T5437] ? file_update_time+0x1ef/0x220 [ 113.699447][ T5437] shmem_file_write_iter+0x105/0x130 [ 113.699471][ T5437] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 113.699494][ T5437] __kernel_write_iter+0x395/0x830 [ 113.699512][ T5437] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 113.699536][ T5437] ? __cfi___kernel_write_iter+0x10/0x10 [ 113.699553][ T5437] ? get_dump_page+0x160/0x220 [ 113.699576][ T5437] ? __asan_memset+0x39/0x50 [ 113.699600][ T5437] ? iov_iter_bvec+0xc0/0x180 [ 113.699622][ T5437] dump_user_range+0xb06/0xdf0 [ 113.699641][ T5437] ? __cfi_dump_emit+0x10/0x10 [ 113.699668][ T5437] ? __cfi_dump_user_range+0x10/0x10 [ 113.699684][ T5437] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 113.699711][ T5437] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 113.699739][ T5437] elf_core_dump+0x2cd9/0x3810 [ 113.699763][ T5437] ? __cfi_elf_core_dump+0x10/0x10 [ 113.699790][ T5437] ? dump_interrupted+0xf0/0xf0 [ 113.699816][ T5437] ? filp_open+0x182/0x1d0 [ 113.699839][ T5437] ? 0xffffffffff600000 [ 113.699855][ T5437] do_coredump+0x1bfa/0x2bd0 [ 113.699884][ T5437] ? __cfi_do_coredump+0x10/0x10 [ 113.699909][ T5437] ? asm_exc_page_fault+0x2b/0x30 [ 113.699935][ T5437] ? __kasan_slab_free+0x6a/0x80 [ 113.699954][ T5437] ? kmem_cache_free+0x1c1/0x510 [ 113.699979][ T5437] ? get_signal+0xa75/0x14f0 [ 113.700002][ T5437] get_signal+0x11fd/0x14f0 [ 113.700027][ T5437] arch_do_signal_or_restart+0x96/0x720 [ 113.700056][ T5437] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 113.700086][ T5437] irqentry_exit_to_user_mode+0x4e/0xb0 [ 113.700109][ T5437] irqentry_exit+0x16/0x60 [ 113.700129][ T5437] exc_page_fault+0x66/0xc0 [ 113.700150][ T5437] asm_exc_page_fault+0x2b/0x30 [ 113.700169][ T5437] RIP: 0033:0x7fb91898ebf1 [ 113.700184][ T5437] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 113.700200][ T5437] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 113.700217][ T5437] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 113.700231][ T5437] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 113.700245][ T5437] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.700257][ T5437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.700269][ T5437] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 113.700286][ T5437] [ 113.700294][ T5437] memory: usage 307200kB, limit 307200kB, failcnt 36726 [ 114.186381][ T5437] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 114.194523][ T5437] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.201559][ T5437] Memory cgroup stats for /syz2: [ 114.201690][ T5437] cache 314343424 [ 114.209253][ T330] usb 5-1: config 16 has an invalid interface number: 19 but max is 0 [ 114.210506][ T5437] rss 208896 [ 114.218465][ T330] usb 5-1: config 16 has no interface number 0 [ 114.221777][ T5437] rss_huge 0 [ 114.232012][ T5437] shmem 314310656 [ 114.232811][ T330] usb 5-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 114.235639][ T5437] mapped_file 0 [ 114.235648][ T5437] dirty 0 [ 114.244701][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.248538][ T5437] writeback 0 [ 114.254464][ T330] usb 5-1: Product: syz [ 114.259509][ T5437] workingset_refault_anon 27 [ 114.262379][ T330] usb 5-1: Manufacturer: syz [ 114.266409][ T5437] workingset_refault_file 20702 [ 114.271025][ T330] usb 5-1: SerialNumber: syz [ 114.275926][ T5437] swap 127926272 [ 114.288625][ T5437] swapcached 57344 [ 114.292337][ T5437] pgpgin 303890 [ 114.295783][ T5437] pgpgout 227601 [ 114.299335][ T5437] pgfault 133752 [ 114.302866][ T5437] pgmajfault 2453 [ 114.306476][ T5437] inactive_anon 257617920 [ 114.310859][ T5437] active_anon 56922112 [ 114.314909][ T5437] inactive_file 0 [ 114.318547][ T5437] active_file 32768 [ 114.322335][ T5437] unevictable 0 [ 114.325767][ T5437] hierarchical_memory_limit 314572800 [ 114.331147][ T5437] hierarchical_memsw_limit 9223372036854771712 [ 114.337282][ T5437] total_cache 314343424 [ 114.341459][ T5437] total_rss 208896 [ 114.345169][ T5437] total_rss_huge 0 [ 114.348896][ T5437] total_shmem 314310656 [ 114.353166][ T5437] total_mapped_file 0 [ 114.357125][ T5437] total_dirty 0 [ 114.360578][ T5437] total_writeback 0 [ 114.364372][ T5437] total_workingset_refault_anon 27 [ 114.369485][ T5437] total_workingset_refault_file 20702 [ 114.374839][ T5437] total_swap 127926272 [ 114.378914][ T5437] total_swapcached 57344 [ 114.383139][ T5437] total_pgpgin 303890 [ 114.387105][ T5437] total_pgpgout 227601 [ 114.391173][ T5437] total_pgfault 133752 [ 114.395223][ T5437] total_pgmajfault 2453 [ 114.399488][ T5437] total_inactive_anon 257617920 [ 114.404323][ T5437] total_active_anon 56922112 [ 114.408932][ T5437] total_inactive_file 0 [ 114.413075][ T5437] total_active_file 32768 [ 114.417386][ T5437] total_unevictable 0 [ 114.421368][ T5437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1791,pid=5712,uid=0 [ 114.436223][ T5437] Memory cgroup out of memory: Killed process 5712 (syz.2.1791) total-vm:93744kB, anon-rss:1004kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 114.543860][ T5060] udevd[5060]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.564785][ T330] usb 5-1: USB disconnect, device number 27 [ 114.576825][ T5421] syz.2.1698 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 114.638857][ T5421] CPU: 1 UID: 0 PID: 5421 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 114.638893][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.638905][ T5421] Call Trace: [ 114.638911][ T5421] [ 114.638918][ T5421] __dump_stack+0x21/0x30 [ 114.638948][ T5421] dump_stack_lvl+0x10c/0x190 [ 114.638972][ T5421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.638996][ T5421] ? ___ratelimit+0x3f7/0x5a0 [ 114.639016][ T5421] dump_stack+0x19/0x20 [ 114.639039][ T5421] dump_header+0xd7/0x490 [ 114.639058][ T5421] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 114.639083][ T5421] oom_kill_process+0x4c0/0x7e0 [ 114.639104][ T5421] ? sched_clock_cpu+0x75/0x400 [ 114.639129][ T5421] out_of_memory+0x7ee/0xbd0 [ 114.639150][ T5421] ? __cfi_out_of_memory+0x10/0x10 [ 114.639170][ T5421] ? mutex_lock_killable+0x92/0x1c0 [ 114.639188][ T5421] ? __cfi_mutex_lock_killable+0x10/0x10 [ 114.639207][ T5421] mem_cgroup_out_of_memory+0x279/0x350 [ 114.639224][ T5421] ? drain_obj_stock+0xed0/0xed0 [ 114.639241][ T5421] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 114.639257][ T5421] try_charge_memcg+0x8f7/0xde0 [ 114.639279][ T5421] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 114.639304][ T5421] ? __cfi_try_charge_memcg+0x10/0x10 [ 114.639327][ T5421] ? __alloc_pages_noprof+0x31f/0x7b0 [ 114.639348][ T5421] __mem_cgroup_charge+0xf6/0x410 [ 114.639372][ T5421] ? filemap_get_entry+0x3fb/0x460 [ 114.639397][ T5421] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 114.639423][ T5421] filemap_add_folio+0x57/0x2d0 [ 114.639442][ T5421] __filemap_get_folio+0x597/0x9d0 [ 114.639462][ T5421] ? __cfi___filemap_get_folio+0x10/0x10 [ 114.639482][ T5421] ? mm_trace_rss_stat+0x20/0x130 [ 114.639506][ T5421] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 114.639529][ T5421] filemap_fault+0xb41/0x16b0 [ 114.639551][ T5421] ? __cfi_filemap_fault+0x10/0x10 [ 114.639572][ T5421] ? __cfi_filemap_map_pages+0x10/0x10 [ 114.639594][ T5421] ? __cfi_lru_add+0x10/0x10 [ 114.639612][ T5421] ? folio_rotate_reclaimable+0x130/0x130 [ 114.639632][ T5421] do_pte_missing+0x298f/0x4240 [ 114.639652][ T5421] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 114.639672][ T5421] ? pte_marker_clear+0x1b0/0x1b0 [ 114.639691][ T5421] ? put_swap_device+0x130/0x130 [ 114.639709][ T5421] ? __pte_offset_map+0x1b0/0x230 [ 114.639731][ T5421] ? pte_offset_map_rw_nolock+0xba/0x110 [ 114.639754][ T5421] handle_mm_fault+0x1166/0x1b90 [ 114.639771][ T5421] ? __kasan_check_write+0x18/0x20 [ 114.639797][ T5421] ? __cfi_handle_mm_fault+0x10/0x10 [ 114.639816][ T5421] ? follow_page_pte+0x2bd/0xb90 [ 114.639839][ T5421] ? gup_must_unshare+0x1e0/0x1e0 [ 114.639862][ T5421] ? vma_is_secretmem+0x11/0x50 [ 114.639886][ T5421] __get_user_pages+0x1169/0x22d0 [ 114.639909][ T5421] ? __kasan_check_write+0x18/0x20 [ 114.639937][ T5421] ? populate_vma_page_range+0x230/0x230 [ 114.639957][ T5421] ? __kernel_write_iter+0x66b/0x830 [ 114.639974][ T5421] get_dump_page+0x107/0x220 [ 114.639997][ T5421] ? __cfi_get_dump_page+0x10/0x10 [ 114.640017][ T5421] ? __asan_memset+0x39/0x50 [ 114.640043][ T5421] dump_user_range+0x181/0xdf0 [ 114.640062][ T5421] ? __cfi_dump_emit+0x10/0x10 [ 114.640089][ T5421] ? __cfi_dump_user_range+0x10/0x10 [ 114.640106][ T5421] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 114.640134][ T5421] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 114.640160][ T5421] elf_core_dump+0x2cd9/0x3810 [ 114.640184][ T5421] ? __cfi_elf_core_dump+0x10/0x10 [ 114.640211][ T5421] ? dump_interrupted+0xf0/0xf0 [ 114.640236][ T5421] ? filp_open+0x182/0x1d0 [ 114.640260][ T5421] ? 0xffffffffff600000 [ 114.640276][ T5421] do_coredump+0x1bfa/0x2bd0 [ 114.640305][ T5421] ? __cfi_do_coredump+0x10/0x10 [ 114.640330][ T5421] ? asm_exc_page_fault+0x2b/0x30 [ 114.640357][ T5421] ? __kasan_slab_free+0x6a/0x80 [ 114.640376][ T5421] ? kmem_cache_free+0x1c1/0x510 [ 114.640409][ T5421] ? get_signal+0xa75/0x14f0 [ 114.640432][ T5421] get_signal+0x11fd/0x14f0 [ 114.640457][ T5421] arch_do_signal_or_restart+0x96/0x720 [ 114.640485][ T5421] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 114.640515][ T5421] irqentry_exit_to_user_mode+0x4e/0xb0 [ 114.640538][ T5421] irqentry_exit+0x16/0x60 [ 114.640558][ T5421] exc_page_fault+0x66/0xc0 [ 114.640578][ T5421] asm_exc_page_fault+0x2b/0x30 [ 114.640598][ T5421] RIP: 0033:0x7fb91898ebf1 [ 114.640614][ T5421] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 114.640631][ T5421] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 114.640649][ T5421] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 114.640664][ T5421] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 114.640677][ T5421] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 114.640690][ T5421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.640702][ T5421] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 114.640719][ T5421] [ 114.640753][ T5421] memory: usage 307200kB, limit 307200kB, failcnt 37691 [ 114.751109][ T5742] overlayfs: failed to clone upperpath [ 114.752702][ T5421] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 115.142175][ T5421] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 115.149103][ T5421] Memory cgroup stats for /syz2: [ 115.149224][ T5421] cache 314482688 [ 115.168244][ T5421] rss 69632 [ 115.171397][ T5421] rss_huge 0 [ 115.174585][ T5421] shmem 314466304 [ 115.188043][ T5421] mapped_file 0 [ 115.191543][ T5421] dirty 0 [ 115.194475][ T5421] writeback 0 [ 115.198000][ T5421] workingset_refault_anon 27 [ 115.202624][ T5421] workingset_refault_file 20945 [ 115.207867][ T5421] swap 127926272 [ 115.211560][ T5421] swapcached 57344 [ 115.215534][ T5421] pgpgin 304174 [ 115.225232][ T5421] pgpgout 227885 [ 115.232845][ T5421] pgfault 133797 [ 115.236399][ T5421] pgmajfault 2490 [ 115.241367][ T5421] inactive_anon 53526528 [ 115.246252][ T5421] active_anon 261029888 [ 115.250500][ T5421] inactive_file 16384 [ 115.254537][ T5421] active_file 0 [ 115.257987][ T5421] unevictable 0 [ 115.261468][ T5421] hierarchical_memory_limit 314572800 [ 115.266831][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 115.273161][ T5421] total_cache 314482688 [ 115.277515][ T5421] total_rss 69632 [ 115.282463][ T5421] total_rss_huge 0 [ 115.286187][ T5421] total_shmem 314466304 [ 115.292083][ T5763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=5763 comm=syz.4.1809 [ 115.304635][ T5421] total_mapped_file 0 [ 115.313637][ T5421] total_dirty 0 [ 115.317106][ T5421] total_writeback 0 [ 115.324022][ T5421] total_workingset_refault_anon 27 [ 115.329428][ T5421] total_workingset_refault_file 20945 [ 115.334978][ T5421] total_swap 127926272 [ 115.339094][ T5421] total_swapcached 57344 [ 115.343327][ T5421] total_pgpgin 304174 [ 115.347301][ T5421] total_pgpgout 227885 [ 115.351574][ T5421] total_pgfault 133797 [ 115.355637][ T5421] total_pgmajfault 2490 [ 115.360479][ T5421] total_inactive_anon 53526528 [ 115.365358][ T5421] total_active_anon 261029888 [ 115.370205][ T5421] total_inactive_file 16384 [ 115.374718][ T5421] total_active_file 0 [ 115.379518][ T5421] total_unevictable 0 [ 115.383527][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5429,uid=0 [ 115.398589][ T5421] Memory cgroup out of memory: Killed process 5429 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 115.448273][ T5430] syz.2.1698 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 115.498255][ T5430] CPU: 0 UID: 0 PID: 5430 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 115.498290][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.498303][ T5430] Call Trace: [ 115.498309][ T5430] [ 115.498318][ T5430] __dump_stack+0x21/0x30 [ 115.498348][ T5430] dump_stack_lvl+0x10c/0x190 [ 115.498372][ T5430] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.498396][ T5430] ? ___ratelimit+0x3f7/0x5a0 [ 115.498414][ T5430] dump_stack+0x19/0x20 [ 115.498437][ T5430] dump_header+0xd7/0x490 [ 115.498456][ T5430] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 115.498479][ T5430] oom_kill_process+0x4c0/0x7e0 [ 115.498501][ T5430] ? sched_clock_cpu+0x75/0x400 [ 115.498526][ T5430] out_of_memory+0x7ee/0xbd0 [ 115.498555][ T5430] ? __cfi_out_of_memory+0x10/0x10 [ 115.498573][ T5430] ? mutex_lock_killable+0x104/0x1c0 [ 115.498593][ T5430] ? __cfi_mutex_lock_killable+0x10/0x10 [ 115.498614][ T5430] mem_cgroup_out_of_memory+0x279/0x350 [ 115.498633][ T5430] ? drain_obj_stock+0xed0/0xed0 [ 115.498652][ T5430] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 115.498670][ T5430] try_charge_memcg+0x8f7/0xde0 [ 115.498694][ T5430] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 115.498721][ T5430] ? __cfi_try_charge_memcg+0x10/0x10 [ 115.498746][ T5430] ? __alloc_pages_noprof+0x31f/0x7b0 [ 115.498769][ T5430] __mem_cgroup_charge+0xf6/0x410 [ 115.498795][ T5430] ? filemap_get_entry+0x3fb/0x460 [ 115.498816][ T5430] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 115.498844][ T5430] filemap_add_folio+0x57/0x2d0 [ 115.498870][ T5430] __filemap_get_folio+0x597/0x9d0 [ 115.498894][ T5430] ? __cfi___filemap_get_folio+0x10/0x10 [ 115.498915][ T5430] ? mm_trace_rss_stat+0x20/0x130 [ 115.498942][ T5430] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 115.498966][ T5430] filemap_fault+0xb41/0x16b0 [ 115.498990][ T5430] ? __cfi_filemap_fault+0x10/0x10 [ 115.499013][ T5430] ? __cfi_filemap_map_pages+0x10/0x10 [ 115.499037][ T5430] ? __cfi_lru_add+0x10/0x10 [ 115.499057][ T5430] ? folio_rotate_reclaimable+0x130/0x130 [ 115.499085][ T5430] do_pte_missing+0x298f/0x4240 [ 115.499107][ T5430] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 115.499128][ T5430] ? pte_marker_clear+0x1b0/0x1b0 [ 115.499146][ T5430] ? put_swap_device+0x130/0x130 [ 115.499165][ T5430] ? __pte_offset_map+0x1b0/0x230 [ 115.499190][ T5430] ? pte_offset_map_rw_nolock+0xba/0x110 [ 115.499215][ T5430] handle_mm_fault+0x1166/0x1b90 [ 115.499234][ T5430] ? __kasan_check_write+0x18/0x20 [ 115.499262][ T5430] ? __cfi_handle_mm_fault+0x10/0x10 [ 115.499281][ T5430] ? follow_page_pte+0x2bd/0xb90 [ 115.499304][ T5430] ? gup_must_unshare+0x1e0/0x1e0 [ 115.499326][ T5430] ? vma_is_secretmem+0x11/0x50 [ 115.499354][ T5430] __get_user_pages+0x1169/0x22d0 [ 115.499376][ T5430] ? __kasan_check_write+0x18/0x20 [ 115.499404][ T5430] ? populate_vma_page_range+0x230/0x230 [ 115.499426][ T5430] ? __kernel_write_iter+0x66b/0x830 [ 115.499444][ T5430] get_dump_page+0x107/0x220 [ 115.499465][ T5430] ? __cfi_get_dump_page+0x10/0x10 [ 115.499485][ T5430] ? __asan_memset+0x39/0x50 [ 115.499511][ T5430] dump_user_range+0x181/0xdf0 [ 115.499530][ T5430] ? __cfi_dump_emit+0x10/0x10 [ 115.499555][ T5430] ? __cfi_dump_user_range+0x10/0x10 [ 115.499573][ T5430] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 115.499599][ T5430] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 115.499626][ T5430] elf_core_dump+0x2cd9/0x3810 [ 115.499650][ T5430] ? __cfi_elf_core_dump+0x10/0x10 [ 115.499676][ T5430] ? dump_interrupted+0xf0/0xf0 [ 115.499701][ T5430] ? filp_open+0x182/0x1d0 [ 115.499724][ T5430] ? 0xffffffffff600000 [ 115.499739][ T5430] do_coredump+0x1bfa/0x2bd0 [ 115.499768][ T5430] ? __cfi_do_coredump+0x10/0x10 [ 115.499792][ T5430] ? asm_exc_page_fault+0x2b/0x30 [ 115.499818][ T5430] ? __kasan_slab_free+0x6a/0x80 [ 115.499837][ T5430] ? kmem_cache_free+0x1c1/0x510 [ 115.499863][ T5430] ? get_signal+0xa75/0x14f0 [ 115.499886][ T5430] get_signal+0x11fd/0x14f0 [ 115.499911][ T5430] arch_do_signal_or_restart+0x96/0x720 [ 115.499938][ T5430] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 115.499967][ T5430] irqentry_exit_to_user_mode+0x4e/0xb0 [ 115.499990][ T5430] irqentry_exit+0x16/0x60 [ 115.500009][ T5430] exc_page_fault+0x66/0xc0 [ 115.500029][ T5430] asm_exc_page_fault+0x2b/0x30 [ 115.500048][ T5430] RIP: 0033:0x7fb91898ebf1 [ 115.500063][ T5430] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 115.500085][ T5430] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 115.500103][ T5430] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 115.500117][ T5430] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 115.500130][ T5430] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 115.500142][ T5430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 115.500154][ T5430] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 115.500171][ T5430] [ 115.500219][ T5430] memory: usage 303572kB, limit 307200kB, failcnt 38021 [ 116.013346][ T5430] memory+swap: usage 397920kB, limit 9007199254740988kB, failcnt 0 [ 116.021448][ T5430] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 116.028383][ T5430] Memory cgroup stats for /syz2: [ 116.028514][ T5430] cache 289947648 [ 116.037197][ T5430] rss 69632 [ 116.040381][ T5430] rss_huge 0 [ 116.043571][ T5430] shmem 289931264 [ 116.047193][ T5430] mapped_file 0 [ 116.050826][ T5430] dirty 0 [ 116.053820][ T5430] writeback 0 [ 116.057105][ T5430] workingset_refault_anon 27 [ 116.061844][ T5430] workingset_refault_file 20946 [ 116.066724][ T5430] swap 117432320 [ 116.071007][ T5430] swapcached 57344 [ 116.074790][ T5430] pgpgin 304175 [ 116.078258][ T5430] pgpgout 233876 [ 116.081795][ T5430] pgfault 133798 [ 116.085386][ T5430] pgmajfault 2490 [ 116.089085][ T5430] inactive_anon 239063040 [ 116.093401][ T5430] active_anon 50958336 [ 116.097512][ T5430] inactive_file 16384 [ 116.101529][ T5430] active_file 0 [ 116.104978][ T5430] unevictable 0 [ 116.108500][ T5430] hierarchical_memory_limit 314572800 [ 116.113865][ T5430] hierarchical_memsw_limit 9223372036854771712 [ 116.120074][ T5430] total_cache 289947648 [ 116.124222][ T5430] total_rss 69632 [ 116.127845][ T5430] total_rss_huge 0 [ 116.137277][ T5430] total_shmem 289931264 [ 116.151700][ T5430] total_mapped_file 0 [ 116.155686][ T5430] total_dirty 0 [ 116.168227][ T5430] total_writeback 0 [ 116.172110][ T5430] total_workingset_refault_anon 27 [ 116.177210][ T5430] total_workingset_refault_file 20946 [ 116.192679][ T5430] total_swap 117432320 [ 116.196794][ T5430] total_swapcached 57344 [ 116.208234][ T5430] total_pgpgin 304175 [ 116.212274][ T5430] total_pgpgout 233876 [ 116.226408][ T5430] total_pgfault 133798 [ 116.230518][ T5430] total_pgmajfault 2490 [ 116.234662][ T5430] total_inactive_anon 239063040 [ 116.241851][ T5430] total_active_anon 50958336 [ 116.249013][ T5430] total_inactive_file 16384 [ 116.253558][ T5430] total_active_file 0 [ 116.257532][ T5430] total_unevictable 0 [ 116.267814][ T5430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5428,uid=0 [ 116.292775][ T5430] Memory cgroup out of memory: Killed process 5428 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:22208kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 116.313409][ T5793] tipc: Enabling of bearer rejected, failed to enable media [ 116.329177][ T5795] tipc: Started in network mode [ 116.338597][ T5795] tipc: Node identity , cluster identity 4711 [ 116.344665][ T5795] tipc: Failed to set node id, please configure manually [ 116.353819][ T5795] tipc: Enabling of bearer rejected, failed to enable media [ 116.469375][ T5802] fuse: Bad value for 'group_id' [ 116.478249][ T5802] fuse: Bad value for 'group_id' [ 116.585582][ T5421] syz.2.1698 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 116.665429][ T5421] CPU: 1 UID: 0 PID: 5421 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 116.665461][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.665474][ T5421] Call Trace: [ 116.665481][ T5421] [ 116.665488][ T5421] __dump_stack+0x21/0x30 [ 116.665517][ T5421] dump_stack_lvl+0x10c/0x190 [ 116.665541][ T5421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.665566][ T5421] ? ___ratelimit+0x3f7/0x5a0 [ 116.665584][ T5421] dump_stack+0x19/0x20 [ 116.665607][ T5421] dump_header+0xd7/0x490 [ 116.665626][ T5421] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 116.665650][ T5421] oom_kill_process+0x4c0/0x7e0 [ 116.665672][ T5421] ? sched_clock_cpu+0x75/0x400 [ 116.665697][ T5421] out_of_memory+0x7ee/0xbd0 [ 116.665718][ T5421] ? __cfi_out_of_memory+0x10/0x10 [ 116.665738][ T5421] ? mutex_lock_killable+0x104/0x1c0 [ 116.665759][ T5421] ? __cfi_mutex_lock_killable+0x10/0x10 [ 116.665780][ T5421] mem_cgroup_out_of_memory+0x279/0x350 [ 116.665800][ T5421] ? drain_obj_stock+0xed0/0xed0 [ 116.665819][ T5421] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 116.665837][ T5421] try_charge_memcg+0x8f7/0xde0 [ 116.665862][ T5421] ? __cfi_try_charge_memcg+0x10/0x10 [ 116.665887][ T5421] ? __alloc_pages_noprof+0x31f/0x7b0 [ 116.665910][ T5421] ? folio_unlock+0x12f/0x1a0 [ 116.665929][ T5421] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 116.665953][ T5421] __mem_cgroup_charge+0xf6/0x410 [ 116.665991][ T5421] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 116.666017][ T5421] ? do_pte_missing+0x2bdb/0x4240 [ 116.666040][ T5421] shmem_alloc_and_add_folio+0x86d/0x1050 [ 116.666062][ T5421] ? put_swap_device+0x130/0x130 [ 116.666082][ T5421] ? shmem_huge_global_enabled+0x2da/0x360 [ 116.666101][ T5421] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 116.666120][ T5421] ? __kasan_check_write+0x18/0x20 [ 116.666143][ T5421] ? _raw_spin_lock+0x8c/0x120 [ 116.666163][ T5421] shmem_get_folio_gfp+0x5f0/0x1380 [ 116.666182][ T5421] ? shmem_get_folio+0xc0/0xc0 [ 116.666197][ T5421] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 116.666220][ T5421] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 116.666242][ T5421] ? inode_to_bdi+0x6d/0x100 [ 116.666264][ T5421] shmem_write_begin+0xf4/0x270 [ 116.666284][ T5421] generic_perform_write+0x330/0x960 [ 116.666308][ T5421] ? __cfi_generic_perform_write+0x10/0x10 [ 116.666328][ T5421] ? down_write+0xe9/0x2a0 [ 116.666346][ T5421] ? mnt_get_write_access_file+0x1af/0x3b0 [ 116.666369][ T5421] ? mnt_put_write_access_file+0xc2/0x100 [ 116.666393][ T5421] ? file_update_time+0x1ef/0x220 [ 116.666416][ T5421] shmem_file_write_iter+0x105/0x130 [ 116.666438][ T5421] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 116.666465][ T5421] __kernel_write_iter+0x395/0x830 [ 116.666482][ T5421] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 116.666503][ T5421] ? __cfi___kernel_write_iter+0x10/0x10 [ 116.666520][ T5421] ? get_dump_page+0x160/0x220 [ 116.666542][ T5421] ? __asan_memset+0x39/0x50 [ 116.666567][ T5421] ? iov_iter_bvec+0xc0/0x180 [ 116.666587][ T5421] dump_user_range+0xb06/0xdf0 [ 116.666605][ T5421] ? __cfi_dump_emit+0x10/0x10 [ 116.666630][ T5421] ? __cfi_dump_user_range+0x10/0x10 [ 116.666646][ T5421] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 116.666668][ T5421] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 116.666690][ T5421] elf_core_dump+0x2cd9/0x3810 [ 116.666710][ T5421] ? __cfi_elf_core_dump+0x10/0x10 [ 116.666734][ T5421] ? dump_interrupted+0xf0/0xf0 [ 116.666759][ T5421] ? filp_open+0x182/0x1d0 [ 116.666782][ T5421] ? 0xffffffffff600000 [ 116.666798][ T5421] do_coredump+0x1bfa/0x2bd0 [ 116.666827][ T5421] ? __cfi_do_coredump+0x10/0x10 [ 116.666853][ T5421] ? asm_exc_page_fault+0x2b/0x30 [ 116.666880][ T5421] ? __kasan_slab_free+0x6a/0x80 [ 116.666899][ T5421] ? kmem_cache_free+0x1c1/0x510 [ 116.666926][ T5421] ? get_signal+0xa75/0x14f0 [ 116.666950][ T5421] get_signal+0x11fd/0x14f0 [ 116.666981][ T5421] arch_do_signal_or_restart+0x96/0x720 [ 116.667010][ T5421] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 116.667039][ T5421] irqentry_exit_to_user_mode+0x4e/0xb0 [ 116.667062][ T5421] irqentry_exit+0x16/0x60 [ 116.667082][ T5421] exc_page_fault+0x66/0xc0 [ 116.667102][ T5421] asm_exc_page_fault+0x2b/0x30 [ 116.667122][ T5421] RIP: 0033:0x7fb91898ebf1 [ 116.667137][ T5421] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 116.667155][ T5421] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 116.667171][ T5421] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 116.667186][ T5421] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 116.667199][ T5421] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 116.667212][ T5421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.667223][ T5421] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 116.667240][ T5421] [ 117.154050][ T5421] memory: usage 307024kB, limit 307200kB, failcnt 40324 [ 117.278375][ T36] audit: type=1326 audit(2000000063.863:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.4.1829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe245d8ebe9 code=0x0 [ 117.304608][ T5421] memory+swap: usage 429340kB, limit 9007199254740988kB, failcnt 0 [ 117.437243][ T5421] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 117.520261][ T5421] Memory cgroup stats for /syz2: [ 117.520411][ T5421] cache 314044416 [ 117.613564][ T5421] rss 200704 [ 117.638227][ T5421] rss_huge 0 [ 117.658266][ T5421] shmem 302018560 [ 117.662731][ T5421] mapped_file 11771904 [ 117.666847][ T5421] dirty 40960 [ 117.670221][ T5421] writeback 8192 [ 117.673791][ T5421] workingset_refault_anon 43 [ 117.678444][ T5421] workingset_refault_file 24395 [ 117.683340][ T5421] swap 127934464 [ 117.686911][ T5421] swapcached 53248 [ 117.690758][ T5421] pgpgin 321858 [ 117.694267][ T5421] pgpgout 245639 [ 117.697835][ T5421] pgfault 134893 [ 117.722070][ T5421] pgmajfault 2511 [ 117.732805][ T5421] inactive_anon 301965312 [ 117.742250][ T5421] active_anon 184320 [ 117.750336][ T5421] inactive_file 7024640 [ 117.754550][ T5421] active_file 3444736 [ 117.758646][ T5421] unevictable 0 [ 117.762201][ T5421] hierarchical_memory_limit 314572800 [ 117.767670][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 117.773863][ T5421] total_cache 314044416 [ 117.778055][ T5421] total_rss 200704 [ 117.781815][ T5421] total_rss_huge 0 [ 117.785560][ T5421] total_shmem 302018560 [ 117.791533][ T5421] total_mapped_file 11771904 [ 117.796130][ T5421] total_dirty 40960 [ 117.799993][ T5421] total_writeback 8192 [ 117.804046][ T5421] total_workingset_refault_anon 43 [ 117.809154][ T5421] total_workingset_refault_file 24395 [ 117.814527][ T5421] total_swap 127934464 [ 117.818611][ T5421] total_swapcached 53248 [ 117.822837][ T5421] total_pgpgin 321858 [ 117.826790][ T5421] total_pgpgout 245639 [ 117.830851][ T5421] total_pgfault 134893 [ 117.834922][ T5421] total_pgmajfault 2511 [ 117.839115][ T5421] total_inactive_anon 301965312 [ 117.843950][ T5421] total_active_anon 184320 [ 117.848368][ T5421] total_inactive_file 7024640 [ 117.853029][ T5421] total_active_file 3444736 [ 117.857503][ T5421] total_unevictable 0 [ 117.861481][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5431,uid=0 [ 117.876361][ T5421] Memory cgroup out of memory: Killed process 5431 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:21940kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 117.965397][ T5421] syz.2.1698 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 118.054985][ T5421] CPU: 1 UID: 0 PID: 5421 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 118.055020][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.055032][ T5421] Call Trace: [ 118.055037][ T5421] [ 118.055044][ T5421] __dump_stack+0x21/0x30 [ 118.055073][ T5421] dump_stack_lvl+0x10c/0x190 [ 118.055096][ T5421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.055119][ T5421] ? ___ratelimit+0x3f7/0x5a0 [ 118.055138][ T5421] dump_stack+0x19/0x20 [ 118.055160][ T5421] dump_header+0xd7/0x490 [ 118.055179][ T5421] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 118.055204][ T5421] oom_kill_process+0x4c0/0x7e0 [ 118.055225][ T5421] ? sched_clock_cpu+0x75/0x400 [ 118.055249][ T5421] out_of_memory+0x7ee/0xbd0 [ 118.055270][ T5421] ? __cfi_out_of_memory+0x10/0x10 [ 118.055290][ T5421] ? mutex_lock_killable+0x92/0x1c0 [ 118.055310][ T5421] ? __cfi_mutex_lock_killable+0x10/0x10 [ 118.055331][ T5421] mem_cgroup_out_of_memory+0x279/0x350 [ 118.055349][ T5421] ? drain_obj_stock+0xed0/0xed0 [ 118.055368][ T5421] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 118.055387][ T5421] try_charge_memcg+0x8f7/0xde0 [ 118.055411][ T5421] ? __cfi_try_charge_memcg+0x10/0x10 [ 118.055435][ T5421] ? __alloc_pages_noprof+0x31f/0x7b0 [ 118.055457][ T5421] ? folio_unlock+0x12f/0x1a0 [ 118.055475][ T5421] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 118.055499][ T5421] __mem_cgroup_charge+0xf6/0x410 [ 118.055524][ T5421] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 118.055550][ T5421] ? do_pte_missing+0x2bdb/0x4240 [ 118.055573][ T5421] shmem_alloc_and_add_folio+0x86d/0x1050 [ 118.055606][ T5421] ? put_swap_device+0x130/0x130 [ 118.055627][ T5421] ? shmem_huge_global_enabled+0x2da/0x360 [ 118.055648][ T5421] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 118.055667][ T5421] ? __kasan_check_write+0x18/0x20 [ 118.055694][ T5421] ? _raw_spin_lock+0x8c/0x120 [ 118.055719][ T5421] shmem_get_folio_gfp+0x5f0/0x1380 [ 118.055740][ T5421] ? shmem_get_folio+0xc0/0xc0 [ 118.055757][ T5421] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 118.055783][ T5421] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 118.055808][ T5421] ? inode_to_bdi+0x6d/0x100 [ 118.055832][ T5421] shmem_write_begin+0xf4/0x270 [ 118.055876][ T5421] generic_perform_write+0x330/0x960 [ 118.055903][ T5421] ? __cfi_generic_perform_write+0x10/0x10 [ 118.055928][ T5421] ? down_write+0xe9/0x2a0 [ 118.055948][ T5421] ? mnt_get_write_access_file+0x1af/0x3b0 [ 118.055972][ T5421] ? mnt_put_write_access_file+0xc2/0x100 [ 118.055996][ T5421] ? file_update_time+0x1ef/0x220 [ 118.056024][ T5421] shmem_file_write_iter+0x105/0x130 [ 118.056047][ T5421] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 118.056070][ T5421] __kernel_write_iter+0x395/0x830 [ 118.056088][ T5421] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 118.056111][ T5421] ? __cfi___kernel_write_iter+0x10/0x10 [ 118.056128][ T5421] ? get_dump_page+0x160/0x220 [ 118.056151][ T5421] ? __asan_memset+0x39/0x50 [ 118.056176][ T5421] ? iov_iter_bvec+0xc0/0x180 [ 118.056197][ T5421] dump_user_range+0xb06/0xdf0 [ 118.056216][ T5421] ? __cfi_dump_emit+0x10/0x10 [ 118.056242][ T5421] ? __cfi_dump_user_range+0x10/0x10 [ 118.056260][ T5421] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 118.056287][ T5421] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 118.056315][ T5421] elf_core_dump+0x2cd9/0x3810 [ 118.056339][ T5421] ? __cfi_elf_core_dump+0x10/0x10 [ 118.056366][ T5421] ? dump_interrupted+0xf0/0xf0 [ 118.056392][ T5421] ? filp_open+0x182/0x1d0 [ 118.056415][ T5421] ? 0xffffffffff600000 [ 118.056430][ T5421] do_coredump+0x1bfa/0x2bd0 [ 118.056459][ T5421] ? __cfi_do_coredump+0x10/0x10 [ 118.056484][ T5421] ? asm_exc_page_fault+0x2b/0x30 [ 118.056510][ T5421] ? __kasan_slab_free+0x6a/0x80 [ 118.056528][ T5421] ? kmem_cache_free+0x1c1/0x510 [ 118.056554][ T5421] ? get_signal+0xa75/0x14f0 [ 118.056574][ T5421] get_signal+0x11fd/0x14f0 [ 118.056599][ T5421] arch_do_signal_or_restart+0x96/0x720 [ 118.056624][ T5421] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 118.056652][ T5421] irqentry_exit_to_user_mode+0x4e/0xb0 [ 118.056674][ T5421] irqentry_exit+0x16/0x60 [ 118.056694][ T5421] exc_page_fault+0x66/0xc0 [ 118.056715][ T5421] asm_exc_page_fault+0x2b/0x30 [ 118.056743][ T5421] RIP: 0033:0x7fb91898ebf1 [ 118.056759][ T5421] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 118.056776][ T5421] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 118.056794][ T5421] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 118.056808][ T5421] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 118.056822][ T5421] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.056835][ T5421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.056847][ T5421] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 118.056872][ T5421] [ 118.368978][ T5421] memory: usage 307200kB, limit 307200kB, failcnt 44721 [ 118.538131][ T5421] memory+swap: usage 431532kB, limit 9007199254740988kB, failcnt 0 [ 118.546549][ T5845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5234 sclass=netlink_route_socket pid=5845 comm=syz.4.1835 [ 118.559256][ T5421] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 118.566145][ T5421] Memory cgroup stats for /syz2: [ 118.566288][ T5421] cache 313729024 [ 118.575216][ T5421] rss 192512 [ 118.578453][ T5421] rss_huge 0 [ 118.581714][ T5421] shmem 313700352 [ 118.585353][ T5421] mapped_file 0 [ 118.588825][ T5421] dirty 0 [ 118.591753][ T5421] writeback 0 [ 118.595202][ T5421] workingset_refault_anon 44 [ 118.599964][ T5421] workingset_refault_file 25770 [ 118.600239][ T5855] netlink: 556 bytes leftover after parsing attributes in process `syz.1.1837'. [ 118.604799][ T5421] swap 127315968 [ 118.604806][ T5421] swapcached 675840 [ 118.604812][ T5421] pgpgin 332949 [ 118.604818][ T5421] pgpgout 256660 [ 118.604825][ T5421] pgfault 135109 [ 118.632246][ T5421] pgmajfault 2558 [ 118.634116][ T5861] netlink: 'syz.1.1840': attribute type 11 has an invalid length. [ 118.635870][ T5421] inactive_anon 76144640 [ 118.635881][ T5421] active_anon 238399488 [ 118.635887][ T5421] inactive_file 28672 [ 118.635894][ T5421] active_file 0 [ 118.659518][ T5421] unevictable 0 [ 118.663009][ T5421] hierarchical_memory_limit 314572800 [ 118.668399][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 118.674544][ T5421] total_cache 313729024 [ 118.678723][ T5421] total_rss 192512 [ 118.682433][ T5421] total_rss_huge 0 [ 118.686319][ T5421] total_shmem 313700352 [ 118.688860][ T5868] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1843'. [ 118.690647][ T5421] total_mapped_file 0 [ 118.703553][ T5421] total_dirty 0 [ 118.707018][ T5421] total_writeback 0 [ 118.715056][ T5421] total_workingset_refault_anon 44 [ 118.720341][ T5421] total_workingset_refault_file 25770 [ 118.728236][ T5421] total_swap 127315968 [ 118.732311][ T5421] total_swapcached 675840 [ 118.736631][ T5421] total_pgpgin 332949 [ 118.740636][ T5421] total_pgpgout 256660 [ 118.744695][ T5421] total_pgfault 135109 [ 118.748794][ T5421] total_pgmajfault 2558 [ 118.752938][ T5421] total_inactive_anon 76144640 [ 118.757694][ T5421] total_active_anon 238399488 [ 118.762581][ T5421] total_inactive_file 28672 [ 118.768230][ T5421] total_active_file 0 [ 118.772217][ T5421] total_unevictable 0 [ 118.776189][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1828,pid=5817,uid=0 [ 118.791635][ T5421] Memory cgroup out of memory: Killed process 5817 (syz.2.1828) total-vm:93876kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 118.856474][ T5437] syz.2.1698 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 118.904807][ T5437] CPU: 1 UID: 0 PID: 5437 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 118.904843][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.904856][ T5437] Call Trace: [ 118.904862][ T5437] [ 118.904869][ T5437] __dump_stack+0x21/0x30 [ 118.904899][ T5437] dump_stack_lvl+0x10c/0x190 [ 118.904924][ T5437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.904948][ T5437] ? ___ratelimit+0x3f7/0x5a0 [ 118.904967][ T5437] dump_stack+0x19/0x20 [ 118.904990][ T5437] dump_header+0xd7/0x490 [ 118.905009][ T5437] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 118.905033][ T5437] oom_kill_process+0x4c0/0x7e0 [ 118.905063][ T5437] ? sched_clock_cpu+0x75/0x400 [ 118.905089][ T5437] out_of_memory+0x7ee/0xbd0 [ 118.905111][ T5437] ? __cfi_out_of_memory+0x10/0x10 [ 118.905131][ T5437] ? mutex_lock_killable+0x104/0x1c0 [ 118.905156][ T5437] ? __cfi_mutex_lock_killable+0x10/0x10 [ 118.905178][ T5437] mem_cgroup_out_of_memory+0x279/0x350 [ 118.905196][ T5437] ? drain_obj_stock+0xed0/0xed0 [ 118.905216][ T5437] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 118.905234][ T5437] try_charge_memcg+0x8f7/0xde0 [ 118.905259][ T5437] ? __cfi_try_charge_memcg+0x10/0x10 [ 118.905283][ T5437] ? __alloc_pages_noprof+0x31f/0x7b0 [ 118.905307][ T5437] ? folio_unlock+0x12f/0x1a0 [ 118.905327][ T5437] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 118.905350][ T5437] __mem_cgroup_charge+0xf6/0x410 [ 118.905377][ T5437] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 118.905401][ T5437] ? do_pte_missing+0x2bdb/0x4240 [ 118.905422][ T5437] shmem_alloc_and_add_folio+0x86d/0x1050 [ 118.905446][ T5437] ? put_swap_device+0x130/0x130 [ 118.905467][ T5437] ? shmem_huge_global_enabled+0x2da/0x360 [ 118.905487][ T5437] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 118.905507][ T5437] ? __kasan_check_write+0x18/0x20 [ 118.905533][ T5437] ? _raw_spin_lock+0x8c/0x120 [ 118.905558][ T5437] shmem_get_folio_gfp+0x5f0/0x1380 [ 118.905580][ T5437] ? shmem_get_folio+0xc0/0xc0 [ 118.905597][ T5437] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 118.905623][ T5437] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 118.905649][ T5437] ? inode_to_bdi+0x6d/0x100 [ 118.905674][ T5437] shmem_write_begin+0xf4/0x270 [ 118.905695][ T5437] generic_perform_write+0x330/0x960 [ 118.905723][ T5437] ? __cfi_generic_perform_write+0x10/0x10 [ 118.905747][ T5437] ? down_write+0xe9/0x2a0 [ 118.905767][ T5437] ? mnt_get_write_access_file+0x1af/0x3b0 [ 118.905791][ T5437] ? mnt_put_write_access_file+0xc2/0x100 [ 118.905815][ T5437] ? file_update_time+0x1ef/0x220 [ 118.905838][ T5437] shmem_file_write_iter+0x105/0x130 [ 118.905862][ T5437] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 118.905885][ T5437] __kernel_write_iter+0x395/0x830 [ 118.905903][ T5437] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 118.905926][ T5437] ? __cfi___kernel_write_iter+0x10/0x10 [ 118.905944][ T5437] ? get_dump_page+0x160/0x220 [ 118.905966][ T5437] ? __asan_memset+0x39/0x50 [ 118.905991][ T5437] ? iov_iter_bvec+0xc0/0x180 [ 118.906012][ T5437] dump_user_range+0xb06/0xdf0 [ 118.906031][ T5437] ? __cfi_dump_emit+0x10/0x10 [ 118.906064][ T5437] ? __cfi_dump_user_range+0x10/0x10 [ 118.906081][ T5437] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 118.906109][ T5437] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 118.906137][ T5437] elf_core_dump+0x2cd9/0x3810 [ 118.906161][ T5437] ? __cfi_elf_core_dump+0x10/0x10 [ 118.906188][ T5437] ? dump_interrupted+0xf0/0xf0 [ 118.906214][ T5437] ? filp_open+0x182/0x1d0 [ 118.906237][ T5437] ? 0xffffffffff600000 [ 118.906253][ T5437] do_coredump+0x1bfa/0x2bd0 [ 118.906282][ T5437] ? __cfi_do_coredump+0x10/0x10 [ 118.906308][ T5437] ? asm_exc_page_fault+0x2b/0x30 [ 118.906335][ T5437] ? __kasan_slab_free+0x6a/0x80 [ 118.906354][ T5437] ? kmem_cache_free+0x1c1/0x510 [ 118.906381][ T5437] ? get_signal+0xa75/0x14f0 [ 118.906403][ T5437] get_signal+0x11fd/0x14f0 [ 118.906427][ T5437] arch_do_signal_or_restart+0x96/0x720 [ 118.906455][ T5437] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 118.906484][ T5437] irqentry_exit_to_user_mode+0x4e/0xb0 [ 118.906508][ T5437] irqentry_exit+0x16/0x60 [ 118.906527][ T5437] exc_page_fault+0x66/0xc0 [ 118.906548][ T5437] asm_exc_page_fault+0x2b/0x30 [ 118.906567][ T5437] RIP: 0033:0x7fb91898ebf1 [ 118.906582][ T5437] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 118.906599][ T5437] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 118.906616][ T5437] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 118.906631][ T5437] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 118.906644][ T5437] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.906658][ T5437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.906670][ T5437] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 118.906688][ T5437] [ 118.998272][ T5437] memory: usage 307200kB, limit 307200kB, failcnt 45807 [ 119.388707][ T5437] memory+swap: usage 431504kB, limit 9007199254740988kB, failcnt 0 [ 119.396675][ T5437] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 119.403688][ T5437] Memory cgroup stats for /syz2: [ 119.403773][ T5437] cache 313856000 [ 119.412408][ T5437] rss 61440 [ 119.416102][ T5437] rss_huge 0 [ 119.419310][ T5437] shmem 313839616 [ 119.422946][ T5437] mapped_file 0 [ 119.426394][ T5437] dirty 0 [ 119.429357][ T5437] writeback 0 [ 119.432627][ T5437] workingset_refault_anon 47 [ 119.437191][ T5437] workingset_refault_file 26233 [ 119.442040][ T5437] swap 127287296 [ 119.445571][ T5437] swapcached 679936 [ 119.450113][ T5437] pgpgin 333450 [ 119.453589][ T5437] pgpgout 257161 [ 119.457121][ T5437] pgfault 135144 [ 119.460718][ T5437] pgmajfault 2590 [ 119.464344][ T5437] inactive_anon 76169216 [ 119.468649][ T5437] active_anon 238387200 [ 119.472790][ T5437] inactive_file 16384 [ 119.476742][ T5437] active_file 0 [ 119.480198][ T5437] unevictable 0 [ 119.483642][ T5437] hierarchical_memory_limit 314572800 [ 119.489038][ T5437] hierarchical_memsw_limit 9223372036854771712 [ 119.495245][ T5437] total_cache 313856000 [ 119.499442][ T5437] total_rss 61440 [ 119.503062][ T5437] total_rss_huge 0 [ 119.506764][ T5437] total_shmem 313839616 [ 119.510952][ T5437] total_mapped_file 0 [ 119.514918][ T5437] total_dirty 0 [ 119.518424][ T5437] total_writeback 0 [ 119.522247][ T5437] total_workingset_refault_anon 47 [ 119.527332][ T5437] total_workingset_refault_file 26233 [ 119.532807][ T5437] total_swap 127287296 [ 119.536882][ T5437] total_swapcached 679936 [ 119.541378][ T5437] total_pgpgin 333450 [ 119.545397][ T5437] total_pgpgout 257161 [ 119.549523][ T5437] total_pgfault 135144 [ 119.553634][ T5437] total_pgmajfault 2590 [ 119.557795][ T5437] total_inactive_anon 76169216 [ 119.562601][ T5437] total_active_anon 238387200 [ 119.567275][ T5437] total_inactive_file 16384 [ 119.571804][ T5437] total_active_file 0 [ 119.575788][ T5437] total_unevictable 0 [ 119.579807][ T5437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5419,uid=0 [ 119.594693][ T5437] Memory cgroup out of memory: Killed process 5419 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:22200kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 119.647355][ T5432] syz.2.1698 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 119.671135][ T5908] netlink: 4432 bytes leftover after parsing attributes in process `syz.4.1857'. [ 119.745048][ T36] audit: type=1326 audit(2000000066.333:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.4.1859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8ebe9 code=0x0 [ 119.779350][ T5432] CPU: 0 UID: 0 PID: 5432 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 119.779380][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.779410][ T5432] Call Trace: [ 119.779416][ T5432] [ 119.779424][ T5432] __dump_stack+0x21/0x30 [ 119.779454][ T5432] dump_stack_lvl+0x10c/0x190 [ 119.779479][ T5432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.779503][ T5432] ? ___ratelimit+0x3f7/0x5a0 [ 119.779522][ T5432] dump_stack+0x19/0x20 [ 119.779545][ T5432] dump_header+0xd7/0x490 [ 119.779564][ T5432] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 119.779588][ T5432] oom_kill_process+0x4c0/0x7e0 [ 119.779610][ T5432] ? sched_clock_cpu+0x75/0x400 [ 119.779636][ T5432] out_of_memory+0x7ee/0xbd0 [ 119.779657][ T5432] ? __cfi_out_of_memory+0x10/0x10 [ 119.779677][ T5432] ? mutex_lock_killable+0x92/0x1c0 [ 119.779697][ T5432] ? __cfi_mutex_lock_killable+0x10/0x10 [ 119.779719][ T5432] mem_cgroup_out_of_memory+0x279/0x350 [ 119.779738][ T5432] ? drain_obj_stock+0xed0/0xed0 [ 119.779757][ T5432] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 119.779775][ T5432] try_charge_memcg+0x8f7/0xde0 [ 119.779807][ T5432] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 119.779835][ T5432] ? __cfi_try_charge_memcg+0x10/0x10 [ 119.779861][ T5432] ? __alloc_pages_noprof+0x31f/0x7b0 [ 119.779885][ T5432] __mem_cgroup_charge+0xf6/0x410 [ 119.779911][ T5432] ? filemap_get_entry+0x3fb/0x460 [ 119.779937][ T5432] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 119.779969][ T5432] filemap_add_folio+0x57/0x2d0 [ 119.779991][ T5432] __filemap_get_folio+0x597/0x9d0 [ 119.780015][ T5432] ? __cfi___filemap_get_folio+0x10/0x10 [ 119.780037][ T5432] ? mm_trace_rss_stat+0x20/0x130 [ 119.780064][ T5432] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 119.780089][ T5432] filemap_fault+0xb41/0x16b0 [ 119.780113][ T5432] ? __cfi_filemap_fault+0x10/0x10 [ 119.780136][ T5432] ? __cfi_filemap_map_pages+0x10/0x10 [ 119.780161][ T5432] ? __cfi_lru_add+0x10/0x10 [ 119.780182][ T5432] ? folio_rotate_reclaimable+0x130/0x130 [ 119.780205][ T5432] do_pte_missing+0x298f/0x4240 [ 119.780227][ T5432] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 119.780250][ T5432] ? pte_marker_clear+0x1b0/0x1b0 [ 119.780271][ T5432] ? put_swap_device+0x130/0x130 [ 119.780292][ T5432] ? __pte_offset_map+0x1b0/0x230 [ 119.780316][ T5432] ? pte_offset_map_rw_nolock+0xba/0x110 [ 119.780342][ T5432] handle_mm_fault+0x1166/0x1b90 [ 119.780362][ T5432] ? __kasan_check_write+0x18/0x20 [ 119.780391][ T5432] ? __cfi_handle_mm_fault+0x10/0x10 [ 119.780410][ T5432] ? follow_page_pte+0x2bd/0xb90 [ 119.780434][ T5432] ? gup_must_unshare+0x1e0/0x1e0 [ 119.780456][ T5432] ? vma_is_secretmem+0x11/0x50 [ 119.780482][ T5432] __get_user_pages+0x1169/0x22d0 [ 119.780505][ T5432] ? __kasan_check_write+0x18/0x20 [ 119.780534][ T5432] ? populate_vma_page_range+0x230/0x230 [ 119.780556][ T5432] ? __kernel_write_iter+0x66b/0x830 [ 119.780574][ T5432] get_dump_page+0x107/0x220 [ 119.780596][ T5432] ? __cfi_get_dump_page+0x10/0x10 [ 119.780617][ T5432] ? __asan_memset+0x39/0x50 [ 119.780644][ T5432] dump_user_range+0x181/0xdf0 [ 119.780663][ T5432] ? __cfi_dump_emit+0x10/0x10 [ 119.780690][ T5432] ? __cfi_dump_user_range+0x10/0x10 [ 119.780708][ T5432] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 119.780735][ T5432] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 119.780763][ T5432] elf_core_dump+0x2cd9/0x3810 [ 119.780788][ T5432] ? __cfi_elf_core_dump+0x10/0x10 [ 119.780821][ T5432] ? dump_interrupted+0xf0/0xf0 [ 119.780847][ T5432] ? filp_open+0x182/0x1d0 [ 119.780871][ T5432] ? 0xffffffffff600000 [ 119.780887][ T5432] do_coredump+0x1bfa/0x2bd0 [ 119.780916][ T5432] ? __cfi_do_coredump+0x10/0x10 [ 119.780942][ T5432] ? asm_exc_page_fault+0x2b/0x30 [ 119.780969][ T5432] ? __kasan_slab_free+0x6a/0x80 [ 119.780989][ T5432] ? kmem_cache_free+0x1c1/0x510 [ 119.781020][ T5432] ? get_signal+0xa75/0x14f0 [ 119.781044][ T5432] get_signal+0x11fd/0x14f0 [ 119.781068][ T5432] arch_do_signal_or_restart+0x96/0x720 [ 119.781096][ T5432] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 119.781126][ T5432] irqentry_exit_to_user_mode+0x4e/0xb0 [ 119.781150][ T5432] irqentry_exit+0x16/0x60 [ 119.781170][ T5432] exc_page_fault+0x66/0xc0 [ 119.781190][ T5432] asm_exc_page_fault+0x2b/0x30 [ 119.781210][ T5432] RIP: 0033:0x7fb91898ebf1 [ 119.781226][ T5432] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 119.781243][ T5432] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 119.781261][ T5432] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 119.781275][ T5432] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 119.781289][ T5432] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.781302][ T5432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 119.781314][ T5432] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 119.781331][ T5432] [ 119.781339][ T5432] memory: usage 299660kB, limit 307200kB, failcnt 46317 [ 120.269437][ T5432] memory+swap: usage 396988kB, limit 9007199254740988kB, failcnt 0 [ 120.277343][ T5432] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 120.284241][ T5432] Memory cgroup stats for /syz2: [ 120.284359][ T5432] cache 281083904 [ 120.292993][ T5432] rss 65536 [ 120.296110][ T5432] rss_huge 0 [ 120.348240][ T5432] shmem 274206720 [ 120.351905][ T5432] mapped_file 6471680 [ 120.414068][ T5432] dirty 0 [ 120.439666][ T5432] writeback 20480 [ 120.458240][ T5938] 9pnet_fd: p9_fd_create_tcp (5938): problem binding to privport [ 120.478228][ T5432] workingset_refault_anon 49 [ 120.528266][ T5432] workingset_refault_file 28965 [ 120.533171][ T5432] swap 127475712 [ 120.629397][ T5432] swapcached 516096 [ 120.633251][ T5432] pgpgin 339605 [ 120.708884][ T5432] pgpgout 271285 [ 120.712549][ T5432] pgfault 135345 [ 120.716085][ T5432] pgmajfault 2597 [ 120.791790][ T5432] inactive_anon 270999552 [ 120.847508][ T5432] active_anon 3682304 [ 120.914106][ T5432] inactive_file 2666496 [ 120.945570][ T5432] active_file 3710976 [ 120.980800][ T5432] unevictable 0 [ 121.005684][ T5432] hierarchical_memory_limit 314572800 [ 121.033440][ T5432] hierarchical_memsw_limit 9223372036854771712 [ 121.076966][ T5432] total_cache 281083904 [ 121.148262][ T5432] total_rss 65536 [ 121.213359][ T5432] total_rss_huge 0 [ 121.217163][ T5432] total_shmem 274206720 [ 121.253275][ T5432] total_mapped_file 6471680 [ 121.343630][ T5979] 9pnet_fd: Insufficient options for proto=fd [ 121.378345][ T5432] total_dirty 0 [ 121.381877][ T5432] total_writeback 20480 [ 121.386021][ T5432] total_workingset_refault_anon 49 [ 121.499339][ T5432] total_workingset_refault_file 28965 [ 121.504743][ T5432] total_swap 127475712 [ 121.618254][ T5432] total_swapcached 516096 [ 121.622615][ T5432] total_pgpgin 339605 [ 121.731746][ T5994] vcan0: entered allmulticast mode [ 121.747575][ T5432] total_pgpgout 271285 [ 121.758249][ T5432] total_pgfault 135345 [ 121.762333][ T5432] total_pgmajfault 2597 [ 121.771958][ T5432] total_inactive_anon 270999552 [ 121.816897][ T5432] total_active_anon 3682304 [ 121.844665][ T5432] total_inactive_file 2666496 [ 121.858264][ T5432] total_active_file 3710976 [ 121.865265][ T6015] fuseblk: Bad value for 'fd' [ 121.873058][ T5432] total_unevictable 0 [ 121.877053][ T5432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5420,uid=0 [ 121.916485][ T5432] Memory cgroup out of memory: Killed process 5420 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 121.942077][ T36] audit: type=1400 audit(2000000068.523:514): avc: denied { setattr } for pid=6026 comm="syz.4.1902" name="CAN_RAW" dev="sockfs" ino=22572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.956315][ T6029] /dev/loop0: Can't lookup blockdev [ 121.978241][ T36] audit: type=1400 audit(2000000068.523:515): avc: denied { map } for pid=6026 comm="syz.4.1902" path="socket:[22572]" dev="sockfs" ino=22572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.380970][ T5442] syz.2.1698 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 122.486074][ T5442] CPU: 1 UID: 0 PID: 5442 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 122.486109][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.486122][ T5442] Call Trace: [ 122.486129][ T5442] [ 122.486136][ T5442] __dump_stack+0x21/0x30 [ 122.486165][ T5442] dump_stack_lvl+0x10c/0x190 [ 122.486188][ T5442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.486211][ T5442] ? ___ratelimit+0x3f7/0x5a0 [ 122.486231][ T5442] dump_stack+0x19/0x20 [ 122.486253][ T5442] dump_header+0xd7/0x490 [ 122.486272][ T5442] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 122.486297][ T5442] oom_kill_process+0x4c0/0x7e0 [ 122.486318][ T5442] ? sched_clock_cpu+0x75/0x400 [ 122.486344][ T5442] out_of_memory+0x7ee/0xbd0 [ 122.486365][ T5442] ? __cfi_out_of_memory+0x10/0x10 [ 122.486386][ T5442] ? mutex_lock_killable+0x92/0x1c0 [ 122.486407][ T5442] ? __cfi_mutex_lock_killable+0x10/0x10 [ 122.486429][ T5442] mem_cgroup_out_of_memory+0x279/0x350 [ 122.486449][ T5442] ? drain_obj_stock+0xed0/0xed0 [ 122.486468][ T5442] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 122.486486][ T5442] try_charge_memcg+0x8f7/0xde0 [ 122.486511][ T5442] ? __cfi_try_charge_memcg+0x10/0x10 [ 122.486535][ T5442] ? __alloc_pages_noprof+0x31f/0x7b0 [ 122.486557][ T5442] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 122.486581][ T5442] ? __folio_batch_add_and_move+0x2ab/0x370 [ 122.486604][ T5442] __mem_cgroup_charge+0xf6/0x410 [ 122.486630][ T5442] ? _raw_spin_lock+0x8c/0x120 [ 122.486654][ T5442] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 122.486681][ T5442] shmem_alloc_and_add_folio+0x86d/0x1050 [ 122.486704][ T5442] ? put_swap_device+0x130/0x130 [ 122.486725][ T5442] ? shmem_huge_global_enabled+0x2da/0x360 [ 122.486745][ T5442] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 122.486764][ T5442] ? __kasan_check_write+0x18/0x20 [ 122.486790][ T5442] ? _raw_spin_lock+0x8c/0x120 [ 122.486820][ T5442] shmem_get_folio_gfp+0x5f0/0x1380 [ 122.486841][ T5442] ? shmem_get_folio+0xc0/0xc0 [ 122.486858][ T5442] ? follow_page_pte+0xa5c/0xb90 [ 122.486882][ T5442] ? inode_to_bdi+0x6d/0x100 [ 122.486906][ T5442] shmem_write_begin+0xf4/0x270 [ 122.486927][ T5442] generic_perform_write+0x330/0x960 [ 122.486954][ T5442] ? __cfi_generic_perform_write+0x10/0x10 [ 122.486978][ T5442] ? down_write+0xe9/0x2a0 [ 122.486999][ T5442] ? file_update_time+0xa3/0x220 [ 122.487024][ T5442] shmem_file_write_iter+0x105/0x130 [ 122.487047][ T5442] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 122.487070][ T5442] __kernel_write_iter+0x395/0x830 [ 122.487087][ T5442] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 122.487111][ T5442] ? __cfi___kernel_write_iter+0x10/0x10 [ 122.487128][ T5442] ? get_dump_page+0x160/0x220 [ 122.487149][ T5442] ? __asan_memset+0x39/0x50 [ 122.487173][ T5442] ? iov_iter_bvec+0xc0/0x180 [ 122.487194][ T5442] dump_user_range+0xb06/0xdf0 [ 122.487212][ T5442] ? __cfi_dump_emit+0x10/0x10 [ 122.487238][ T5442] ? __cfi_dump_user_range+0x10/0x10 [ 122.487255][ T5442] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 122.487281][ T5442] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 122.487307][ T5442] elf_core_dump+0x2cd9/0x3810 [ 122.487331][ T5442] ? __cfi_elf_core_dump+0x10/0x10 [ 122.487357][ T5442] ? dump_interrupted+0xf0/0xf0 [ 122.487381][ T5442] ? filp_open+0x182/0x1d0 [ 122.487403][ T5442] ? 0xffffffffff600000 [ 122.487418][ T5442] do_coredump+0x1bfa/0x2bd0 [ 122.487446][ T5442] ? __cfi_do_coredump+0x10/0x10 [ 122.487470][ T5442] ? asm_exc_page_fault+0x2b/0x30 [ 122.487495][ T5442] ? __kasan_slab_free+0x6a/0x80 [ 122.487514][ T5442] ? kmem_cache_free+0x1c1/0x510 [ 122.487540][ T5442] ? get_signal+0xa75/0x14f0 [ 122.487563][ T5442] get_signal+0x11fd/0x14f0 [ 122.487586][ T5442] arch_do_signal_or_restart+0x96/0x720 [ 122.487612][ T5442] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 122.487642][ T5442] irqentry_exit_to_user_mode+0x4e/0xb0 [ 122.487664][ T5442] irqentry_exit+0x16/0x60 [ 122.487683][ T5442] exc_page_fault+0x66/0xc0 [ 122.487702][ T5442] asm_exc_page_fault+0x2b/0x30 [ 122.487719][ T5442] RIP: 0033:0x7fb91898ebf1 [ 122.487734][ T5442] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 122.487747][ T5442] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 122.487763][ T5442] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 122.487775][ T5442] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 122.487787][ T5442] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 122.487797][ T5442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.487814][ T5442] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 122.487831][ T5442] [ 122.487838][ T5442] memory: usage 306824kB, limit 307200kB, failcnt 51766 [ 122.540263][ T6058] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1910'. [ 122.549144][ T5442] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 122.811820][ T6069] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1915'. [ 122.813891][ T5442] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 122.870260][ T425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=425 comm=kworker/0:3 [ 122.873702][ T5442] Memory cgroup stats for [ 122.887393][ T425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=425 comm=kworker/0:3 [ 122.899546][ T5442] /syz2: [ 123.019309][ T5442] cache 314503168 [ 123.025804][ T5442] rss 69632 [ 123.028946][ T5442] rss_huge 0 [ 123.032238][ T5442] shmem 314503168 [ 123.035866][ T5442] mapped_file 0 [ 123.039359][ T5442] dirty 0 [ 123.042667][ T5442] writeback 0 [ 123.045951][ T5442] workingset_refault_anon 58 [ 123.050948][ T5442] workingset_refault_file 33711 [ 123.055798][ T5442] swap 127967232 [ 123.059375][ T5442] swapcached 24576 [ 123.063272][ T5442] pgpgin 363955 [ 123.066857][ T5442] pgpgout 287666 [ 123.070540][ T5442] pgfault 136342 [ 123.074292][ T5442] pgmajfault 2672 [ 123.077929][ T5442] inactive_anon 108601344 [ 123.083280][ T5442] active_anon 205971456 [ 123.087620][ T5442] inactive_file 0 [ 123.092683][ T5442] active_file 0 [ 123.096143][ T5442] unevictable 0 [ 123.099801][ T5442] hierarchical_memory_limit 314572800 [ 123.105623][ T5442] hierarchical_memsw_limit 9223372036854771712 [ 123.111980][ T5442] total_cache 314503168 [ 123.116139][ T5442] total_rss 69632 [ 123.119812][ T5442] total_rss_huge 0 [ 123.123514][ T5442] total_shmem 314503168 [ 123.127643][ T5442] total_mapped_file 0 [ 123.131645][ T5442] total_dirty 0 [ 123.135461][ T5442] total_writeback 0 [ 123.139415][ T5442] total_workingset_refault_anon 58 [ 123.144513][ T5442] total_workingset_refault_file 33711 [ 123.150229][ T5442] total_swap 127967232 [ 123.154333][ T5442] total_swapcached 24576 [ 123.158642][ T5442] total_pgpgin 363955 [ 123.162648][ T5442] total_pgpgout 287666 [ 123.166731][ T5442] total_pgfault 136342 [ 123.170834][ T5442] total_pgmajfault 2672 [ 123.174983][ T5442] total_inactive_anon 108601344 [ 123.180008][ T5442] total_active_anon 205971456 [ 123.184838][ T5442] total_inactive_file 0 [ 123.189017][ T5442] total_active_file 0 [ 123.192999][ T5442] total_unevictable 0 [ 123.196955][ T5442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5430,uid=0 [ 123.211790][ T5442] Memory cgroup out of memory: Killed process 5430 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:26952kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 123.263982][ T5421] syz.2.1698 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 123.318236][ T5421] CPU: 1 UID: 0 PID: 5421 Comm: syz.2.1698 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 123.318268][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.318280][ T5421] Call Trace: [ 123.318286][ T5421] [ 123.318294][ T5421] __dump_stack+0x21/0x30 [ 123.318323][ T5421] dump_stack_lvl+0x10c/0x190 [ 123.318343][ T5421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.318365][ T5421] ? ___ratelimit+0x3f7/0x5a0 [ 123.318384][ T5421] dump_stack+0x19/0x20 [ 123.318407][ T5421] dump_header+0xd7/0x490 [ 123.318426][ T5421] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 123.318451][ T5421] oom_kill_process+0x4c0/0x7e0 [ 123.318472][ T5421] ? sched_clock_cpu+0x75/0x400 [ 123.318497][ T5421] out_of_memory+0x7ee/0xbd0 [ 123.318518][ T5421] ? __cfi_out_of_memory+0x10/0x10 [ 123.318538][ T5421] ? mutex_lock_killable+0x92/0x1c0 [ 123.318566][ T5421] ? __cfi_mutex_lock_killable+0x10/0x10 [ 123.318587][ T5421] mem_cgroup_out_of_memory+0x279/0x350 [ 123.318606][ T5421] ? drain_obj_stock+0xed0/0xed0 [ 123.318625][ T5421] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 123.318643][ T5421] try_charge_memcg+0x8f7/0xde0 [ 123.318669][ T5421] ? __cfi_try_charge_memcg+0x10/0x10 [ 123.318692][ T5421] ? __alloc_pages_noprof+0x31f/0x7b0 [ 123.318715][ T5421] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 123.318738][ T5421] ? __folio_batch_add_and_move+0x2ab/0x370 [ 123.318760][ T5421] __mem_cgroup_charge+0xf6/0x410 [ 123.318787][ T5421] ? cgroup_rstat_updated+0x132/0x7f0 [ 123.318811][ T5421] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 123.318839][ T5421] shmem_alloc_and_add_folio+0x86d/0x1050 [ 123.318863][ T5421] ? put_swap_device+0x130/0x130 [ 123.318884][ T5421] ? shmem_huge_global_enabled+0x2da/0x360 [ 123.318904][ T5421] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 123.318924][ T5421] ? __perf_event_task_sched_in+0x116e/0x1340 [ 123.318948][ T5421] shmem_get_folio_gfp+0x5f0/0x1380 [ 123.318970][ T5421] ? shmem_get_folio+0xc0/0xc0 [ 123.318988][ T5421] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 123.319014][ T5421] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 123.319039][ T5421] ? __switch_to_asm+0x3d/0x70 [ 123.319065][ T5421] ? inode_to_bdi+0x6d/0x100 [ 123.319090][ T5421] shmem_write_begin+0xf4/0x270 [ 123.319111][ T5421] generic_perform_write+0x330/0x960 [ 123.319139][ T5421] ? __cfi_generic_perform_write+0x10/0x10 [ 123.319163][ T5421] ? down_write+0xe9/0x2a0 [ 123.319183][ T5421] ? mnt_get_write_access_file+0x1af/0x3b0 [ 123.319207][ T5421] ? mnt_put_write_access_file+0xc2/0x100 [ 123.319231][ T5421] ? file_update_time+0x1ef/0x220 [ 123.319255][ T5421] shmem_file_write_iter+0x105/0x130 [ 123.319279][ T5421] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 123.319303][ T5421] __kernel_write_iter+0x395/0x830 [ 123.319321][ T5421] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 123.319344][ T5421] ? __cfi___kernel_write_iter+0x10/0x10 [ 123.319363][ T5421] ? __asan_memset+0x39/0x50 [ 123.319388][ T5421] ? iov_iter_bvec+0xc0/0x180 [ 123.319409][ T5421] dump_user_range+0xb06/0xdf0 [ 123.319428][ T5421] ? __cfi_dump_emit+0x10/0x10 [ 123.319455][ T5421] ? __cfi_dump_user_range+0x10/0x10 [ 123.319473][ T5421] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 123.319500][ T5421] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 123.319528][ T5421] elf_core_dump+0x2cd9/0x3810 [ 123.319559][ T5421] ? __cfi_elf_core_dump+0x10/0x10 [ 123.319587][ T5421] ? dump_interrupted+0xf0/0xf0 [ 123.319613][ T5421] ? filp_open+0x182/0x1d0 [ 123.319637][ T5421] ? 0xffffffffff600000 [ 123.319652][ T5421] do_coredump+0x1bfa/0x2bd0 [ 123.319682][ T5421] ? __cfi_do_coredump+0x10/0x10 [ 123.319708][ T5421] ? asm_exc_page_fault+0x2b/0x30 [ 123.319735][ T5421] ? __kasan_slab_free+0x6a/0x80 [ 123.319755][ T5421] ? kmem_cache_free+0x1c1/0x510 [ 123.319782][ T5421] ? get_signal+0xa75/0x14f0 [ 123.319805][ T5421] get_signal+0x11fd/0x14f0 [ 123.319830][ T5421] arch_do_signal_or_restart+0x96/0x720 [ 123.319858][ T5421] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 123.319888][ T5421] irqentry_exit_to_user_mode+0x4e/0xb0 [ 123.319910][ T5421] irqentry_exit+0x16/0x60 [ 123.319931][ T5421] exc_page_fault+0x66/0xc0 [ 123.319952][ T5421] asm_exc_page_fault+0x2b/0x30 [ 123.319972][ T5421] RIP: 0033:0x7fb91898ebf1 [ 123.319988][ T5421] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 123.320004][ T5421] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 123.320022][ T5421] RAX: 0000000000000000 RBX: 00007fb918bc6180 RCX: 00007fb91898ebe9 [ 123.320037][ T5421] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 123.320050][ T5421] RBP: 00007fb918a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 123.320063][ T5421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.320075][ T5421] R13: 00007fb918bc6218 R14: 00007fb918bc6180 R15: 00007ffc396b9628 [ 123.320092][ T5421] [ 123.320099][ T5421] memory: usage 290660kB, limit 307200kB, failcnt 52978 [ 123.811843][ T5421] memory+swap: usage 431276kB, limit 9007199254740988kB, failcnt 0 [ 123.819888][ T5421] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 123.826963][ T5421] Memory cgroup stats for /syz2: [ 123.827158][ T5421] cache 313438208 [ 123.835893][ T5421] rss 286720 [ 123.839206][ T5421] rss_huge 0 [ 123.842399][ T5421] shmem 313397248 [ 123.846023][ T5421] mapped_file 40960 [ 123.850250][ T5421] dirty 0 [ 123.853186][ T5421] writeback 0 [ 123.856463][ T5421] workingset_refault_anon 78 [ 123.861093][ T5421] workingset_refault_file 34703 [ 123.865969][ T5421] swap 127246336 [ 123.869550][ T5421] swapcached 737280 [ 123.873347][ T5421] pgpgin 373070 [ 123.876799][ T5421] pgpgout 296828 [ 123.880389][ T5421] pgfault 136612 [ 123.883974][ T5421] pgmajfault 2688 [ 123.887844][ T5421] inactive_anon 28614656 [ 123.892527][ T5421] active_anon 285704192 [ 123.896792][ T5421] inactive_file 0 [ 123.900575][ T5421] active_file 0 [ 123.904139][ T5421] unevictable 0 [ 123.907607][ T5421] hierarchical_memory_limit 314572800 [ 123.907720][ T6136] sit0: entered promiscuous mode [ 123.913166][ T5421] hierarchical_memsw_limit 9223372036854771712 [ 123.913179][ T5421] total_cache 313438208 [ 123.913186][ T5421] total_rss 286720 [ 123.919845][ T6136] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 123.924287][ T5421] total_rss_huge 0 [ 123.928713][ T6136] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1938'. [ 123.932096][ T5421] total_shmem 313397248 [ 123.956574][ T5421] total_mapped_file 40960 [ 123.960900][ T5421] total_dirty 0 [ 123.964343][ T5421] total_writeback 0 [ 123.968117][ T5421] total_workingset_refault_anon 78 [ 123.973219][ T5421] total_workingset_refault_file 34703 [ 123.978593][ T5421] total_swap 127246336 [ 123.982638][ T5421] total_swapcached 737280 [ 123.986936][ T5421] total_pgpgin 373070 [ 123.990916][ T5421] total_pgpgout 296828 [ 123.994964][ T5421] total_pgfault 136612 [ 123.999034][ T5421] total_pgmajfault 2688 [ 124.003172][ T5421] total_inactive_anon 28614656 [ 124.007904][ T5421] total_active_anon 285704192 [ 124.012854][ T5421] total_inactive_file 0 [ 124.016996][ T5421] total_active_file 0 [ 124.021000][ T5421] total_unevictable 0 [ 124.025003][ T5421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5436,uid=0 [ 124.039917][ T5421] Memory cgroup out of memory: Killed process 5436 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:27620kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 124.097897][ T6137] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 124.114142][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz-executor Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 124.114175][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.114188][ T6137] Call Trace: [ 124.114194][ T6137] [ 124.114201][ T6137] __dump_stack+0x21/0x30 [ 124.114231][ T6137] dump_stack_lvl+0x10c/0x190 [ 124.114255][ T6137] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.114279][ T6137] ? ___ratelimit+0x3f7/0x5a0 [ 124.114298][ T6137] dump_stack+0x19/0x20 [ 124.114321][ T6137] dump_header+0xd7/0x490 [ 124.114340][ T6137] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 124.114365][ T6137] oom_kill_process+0x4c0/0x7e0 [ 124.114387][ T6137] ? sched_clock_cpu+0x75/0x400 [ 124.114412][ T6137] out_of_memory+0x7ee/0xbd0 [ 124.114433][ T6137] ? __cfi_out_of_memory+0x10/0x10 [ 124.114453][ T6137] ? mutex_lock_killable+0x92/0x1c0 [ 124.114474][ T6137] ? __cfi_mutex_lock_killable+0x10/0x10 [ 124.114503][ T6137] mem_cgroup_out_of_memory+0x279/0x350 [ 124.114522][ T6137] ? drain_obj_stock+0xed0/0xed0 [ 124.114542][ T6137] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 124.114560][ T6137] try_charge_memcg+0x8f7/0xde0 [ 124.114585][ T6137] ? __cfi_try_charge_memcg+0x10/0x10 [ 124.114609][ T6137] ? __alloc_pages_noprof+0x31f/0x7b0 [ 124.114633][ T6137] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 124.114657][ T6137] __mem_cgroup_charge+0xf6/0x410 [ 124.114684][ T6137] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 124.114712][ T6137] folio_prealloc+0x67/0x240 [ 124.114734][ T6137] do_wp_page+0x1885/0x2ed0 [ 124.114754][ T6137] ? folio_put+0x90/0x90 [ 124.114771][ T6137] ? __cfi__raw_spin_lock+0x10/0x10 [ 124.114795][ T6137] ? __pte_offset_map+0x1b0/0x230 [ 124.114821][ T6137] ? pte_offset_map_rw_nolock+0xba/0x110 [ 124.114847][ T6137] handle_mm_fault+0xff7/0x1b90 [ 124.114869][ T6137] ? __cfi_handle_mm_fault+0x10/0x10 [ 124.114889][ T6137] ? find_vma+0xcd/0x110 [ 124.114906][ T6137] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 124.114926][ T6137] do_user_addr_fault+0x4ca/0x1200 [ 124.114954][ T6137] exc_page_fault+0x59/0xc0 [ 124.114974][ T6137] asm_exc_page_fault+0x2b/0x30 [ 124.114995][ T6137] RIP: 0010:__put_user_4+0x11/0x30 [ 124.115021][ T6137] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 03 8f 02 00 90 90 90 90 90 90 90 90 90 90 [ 124.115037][ T6137] RSP: 0018:ffffc9000e907ef0 EFLAGS: 00050202 [ 124.115054][ T6137] RAX: 0000000000000693 RBX: 0000000000000000 RCX: 000055555daf07d0 [ 124.115068][ T6137] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888119534c00 [ 124.115081][ T6137] RBP: ffffc9000e907f18 R08: ffff8881201c9203 R09: 1ffff11024039240 [ 124.115096][ T6137] R10: dffffc0000000000 R11: ffffed1024039241 R12: 1ffff110232a6a62 [ 124.115110][ T6137] R13: 0000000000000000 R14: ffff888119534c00 R15: dffffc0000000000 [ 124.115127][ T6137] ? schedule_tail+0x7c/0xb0 [ 124.115149][ T6137] ret_from_fork+0x28/0xa0 [ 124.115174][ T6137] ret_from_fork_asm+0x1a/0x30 [ 124.115200][ T6137] RIP: 0033:0x7fb918985453 [ 124.115219][ T6137] Code: Unable to access opcode bytes at 0x7fb918985429. [ 124.115229][ T6137] RSP: 002b:00007ffc396b98a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 124.115249][ T6137] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb918985453 [ 124.115261][ T6137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 124.115274][ T6137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 124.115286][ T6137] R10: 000055555daf07d0 R11: 0000000000000246 R12: 0000000000000001 [ 124.115300][ T6137] R13: 00000000000927c0 R14: 000000000001e486 R15: 00007ffc396b9a40 [ 124.115316][ T6137] [ 124.115323][ T6137] memory: usage 307200kB, limit 307200kB, failcnt 54177 [ 124.319074][ T6147] fuse: Bad value for 'fd' [ 124.323563][ T6137] memory+swap: usage 386052kB, limit 9007199254740988kB, failcnt 0 [ 124.485325][ T6137] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 124.493308][ T6137] Memory cgroup stats for /syz2: [ 124.493434][ T6137] cache 278343680 [ 124.494403][ T6160] netlink: 'syz.4.1948': attribute type 63 has an invalid length. [ 124.498586][ T6137] rss 126976 [ 124.507442][ T6160] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1948'. [ 124.512602][ T6137] rss_huge 0 [ 124.515297][ T6160] gretap0: entered allmulticast mode [ 124.522343][ T6137] shmem 278339584 [ 124.525904][ T6160] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.530702][ T6137] mapped_file 0 [ 124.553535][ T6137] dirty 0 [ 124.556679][ T6137] writeback 0 [ 124.560065][ T6137] workingset_refault_anon 78 [ 124.564786][ T6137] workingset_refault_file 34720 [ 124.568309][ T6163] fuse: Bad value for 'fd' [ 124.569651][ T6137] swap 116191232 [ 124.577554][ T6137] swapcached 737280 [ 124.581407][ T6137] pgpgin 373182 [ 124.587011][ T6137] pgpgout 305547 [ 124.591992][ T6137] pgfault 136625 [ 124.595663][ T6137] pgmajfault 2689 [ 124.599428][ T6137] inactive_anon 26038272 [ 124.600625][ T6171] /dev/loop0: Can't lookup blockdev [ 124.603807][ T6137] active_anon 253083648 [ 124.613047][ T6137] inactive_file 0 [ 124.616686][ T6137] active_file 4096 [ 124.620426][ T6137] unevictable 0 [ 124.623877][ T6137] hierarchical_memory_limit 314572800 [ 124.630647][ T6137] hierarchical_memsw_limit 9223372036854771712 [ 124.637358][ T6137] total_cache 278343680 [ 124.641948][ T6137] total_rss 126976 [ 124.645745][ T6137] total_rss_huge 0 [ 124.647865][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1955'. [ 124.649544][ T6137] total_shmem 278339584 [ 124.662811][ T6137] total_mapped_file 0 [ 124.662869][ T6178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6178 comm=syz.1.1953 [ 124.666790][ T6137] total_dirty 0 [ 124.666798][ T6137] total_writeback 0 [ 124.686839][ T6137] total_workingset_refault_anon 78 [ 124.692088][ T6137] total_workingset_refault_file 34720 [ 124.697526][ T6137] total_swap 116191232 [ 124.701707][ T6137] total_swapcached 737280 [ 124.706051][ T6137] total_pgpgin 373182 [ 124.710108][ T6137] total_pgpgout 305547 [ 124.714757][ T6137] total_pgfault 136625 [ 124.718875][ T6137] total_pgmajfault 2689 [ 124.727683][ T6137] total_inactive_anon 26038272 [ 124.732520][ T6137] total_active_anon 253083648 [ 124.737236][ T6137] total_inactive_file 0 [ 124.741420][ T6137] total_active_file 4096 [ 124.745643][ T6137] total_unevictable 0 [ 124.749628][ T6137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1698,pid=5432,uid=0 [ 124.764491][ T6137] Memory cgroup out of memory: Killed process 5432 (syz.2.1698) total-vm:90168kB, anon-rss:1020kB, file-rss:26824kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 124.829293][ T6196] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 124.837405][ T6196] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1959'. [ 125.060717][ T6222] 9pnet_fd: Insufficient options for proto=fd [ 125.129888][ T6225] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1971'. [ 125.150224][ T6225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1971'. [ 125.263070][ T6237] futex_wake_op: syz.1.1975 tries to shift op by 144; fix this program [ 125.314732][ T6241] fuseblk: Unknown parameter 'fd0x0000000000000004' [ 125.363594][ T6244] netlink: 'syz.2.1977': attribute type 46 has an invalid length. [ 125.393211][ T6243] netlink: 'syz.2.1977': attribute type 46 has an invalid length. [ 125.547911][ T6255] overlayfs: failed to clone upperpath [ 125.815224][ T6268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=6268 comm=syz.4.1986 [ 125.848964][ T6276] overlayfs: failed to clone upperpath [ 126.737919][ T6317] fuse: Bad value for 'rootmode' [ 126.797321][ T6337] bpf: Bad value for 'gid' [ 127.439391][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 128.011828][ T6394] overlayfs: failed to clone upperpath [ 128.014614][ T6396] netlink: 'syz.2.2031': attribute type 10 has an invalid length. [ 128.053342][ T6403] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6403 comm=syz.2.2034 [ 128.133614][ T36] audit: type=1400 audit(2000000074.724:516): avc: denied { listen } for pid=6408 comm="syz.4.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.982601][ T6422] fuse: Unknown parameter '_' [ 128.994423][ T6426] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 129.004198][ T36] audit: type=1400 audit(2000000075.594:517): avc: denied { relabelto } for pid=6425 comm="syz.4.2040" name="file0" dev="tmpfs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 129.031240][ T36] audit: type=1400 audit(2000000075.594:518): avc: denied { associate } for pid=6425 comm="syz.4.2040" name="file0" dev="tmpfs" ino=1519 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 129.062093][ T36] audit: type=1400 audit(2000000075.654:519): avc: denied { unlink } for pid=2806 comm="syz-executor" name="file0" dev="tmpfs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 129.774202][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'. [ 129.783276][ T6450] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2049'. [ 129.792313][ T6450] netlink: 'syz.2.2049': attribute type 3 has an invalid length. [ 129.800117][ T6450] netlink: 'syz.2.2049': attribute type 2 has an invalid length. [ 129.807908][ T6450] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2049'. [ 129.854062][ T6454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2051'. [ 130.102526][ T6488] fuse: Unknown parameter '' [ 130.134907][ T6495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=6495 comm=syz.4.2066 [ 131.548820][ T6531] devpts: called with bogus options [ 131.687421][ T6539] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2081'. [ 132.113686][ T6554] netlink: 8568 bytes leftover after parsing attributes in process `syz.2.2087'. [ 132.182294][ T6565] netlink: 'syz.2.2091': attribute type 4 has an invalid length. [ 132.555570][ T36] audit: type=1400 audit(2000000079.144:520): avc: denied { read } for pid=6568 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.440362][ T6596] xt_NFQUEUE: number of total queues is 0 [ 133.548046][ T6613] netlink: 'syz.2.2109': attribute type 29 has an invalid length. [ 136.089530][ T36] audit: type=1400 audit(2000000082.684:521): avc: denied { relabelfrom } for pid=6687 comm="syz.4.2133" name="" dev="pipefs" ino=23356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 136.121026][ T36] audit: type=1400 audit(2000000082.714:522): avc: denied { map } for pid=6689 comm="syz.4.2134" path="socket:[23364]" dev="sockfs" ino=23364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 136.448272][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 137.419860][ T6762] overlayfs: failed to clone upperpath [ 137.492966][ T6773] 9pnet_fd: Insufficient options for proto=fd [ 137.789394][ T6796] tipc: Enabling of bearer rejected, failed to enable media [ 137.934758][ T36] audit: type=1326 audit(2000000084.524:523): auid=4294967295 uid=49663 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.1.2181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3a8b8ebe9 code=0x0 [ 137.992646][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.999832][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.006938][ T6819] bridge_slave_0: entered allmulticast mode [ 138.013255][ T6819] bridge_slave_0: entered promiscuous mode [ 138.019561][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.026579][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.033794][ T6819] bridge_slave_1: entered allmulticast mode [ 138.041045][ T6819] bridge_slave_1: entered promiscuous mode [ 138.082087][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.089160][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.096447][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.103509][ T6819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.121343][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.128744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.138569][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.145614][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.154564][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.161619][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.184381][ T6819] veth0_vlan: entered promiscuous mode [ 138.194504][ T6819] veth1_macvtap: entered promiscuous mode [ 138.365599][ T36] audit: type=1326 audit(2000000084.954:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91898ebe9 code=0x7fc00000 [ 138.393807][ T36] audit: type=1400 audit(2000000084.984:525): avc: denied { shutdown } for pid=6832 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.426318][ T6837] /dev/loop0: Can't lookup blockdev [ 138.432716][ T6837] overlayfs: failed to clone upperpath [ 138.636019][ T6867] tipc: Enabling of bearer rejected, failed to enable media [ 138.782183][ T6882] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 138.839094][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.846182][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.853514][ T6883] bridge_slave_0: entered allmulticast mode [ 138.859858][ T6883] bridge_slave_0: entered promiscuous mode [ 138.866248][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.873370][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.880471][ T6883] bridge_slave_1: entered allmulticast mode [ 138.886834][ T6883] bridge_slave_1: entered promiscuous mode [ 138.932381][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.939449][ T6883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.946689][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.953715][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.973857][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.981497][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.991157][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.998188][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.008318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.015354][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.022955][ T60] bridge_slave_1: left allmulticast mode [ 139.028661][ T60] bridge_slave_1: left promiscuous mode [ 139.035058][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.042488][ T60] bridge_slave_0: left allmulticast mode [ 139.048106][ T60] bridge_slave_0: left promiscuous mode [ 139.053945][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.151471][ T6905] tipc: Enabling of bearer rejected, failed to enable media [ 139.174574][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 139.184354][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 139.194120][ T6909] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 139.210448][ T60] veth1_macvtap: left promiscuous mode [ 139.216175][ T60] veth0_vlan: left promiscuous mode [ 139.257119][ T6883] veth0_vlan: entered promiscuous mode [ 139.266788][ T6883] veth1_macvtap: entered promiscuous mode [ 139.326746][ T6922] batadv_slave_0: entered promiscuous mode [ 139.340169][ T6922] batadv_slave_0: left promiscuous mode [ 139.409117][ T36] audit: type=1400 audit(2000000086.004:526): avc: denied { create } for pid=6941 comm="syz.4.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.442702][ T36] audit: type=1400 audit(2000000086.034:527): avc: denied { write } for pid=6947 comm="syz.2.2219" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.471530][ T6942] tipc: Enabling of bearer rejected, failed to enable media [ 139.492307][ T6942] overlayfs: failed to clone upperpath [ 139.589143][ T6956] rust_binder: Error in use_page_slow: ESRCH [ 139.589169][ T6956] rust_binder: use_range failure ESRCH [ 139.595282][ T6956] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 139.601099][ T6956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.616209][ T6956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:14 [ 139.640564][ T36] audit: type=1400 audit(2000000086.234:528): avc: denied { lock } for pid=6960 comm="syz.4.2223" path="socket:[25855]" dev="sockfs" ino=25855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.770029][ T6973] fuseblk: Bad value for 'group_id' [ 139.775488][ T6973] fuseblk: Bad value for 'group_id' [ 140.821591][ T6991] netlink: 'syz.4.2236': attribute type 16 has an invalid length. [ 140.829487][ T6991] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2236'. [ 140.840285][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 140.849562][ T6991] lo: MTU too low for tipc bearer [ 140.854586][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 140.866173][ T6991] 9pnet_fd: Insufficient options for proto=fd [ 140.873676][ T6991] lo: entered allmulticast mode [ 140.881021][ T6991] lo: left allmulticast mode [ 140.894753][ T6997] overlayfs: conflicting options: nfs_export=on,index=off [ 140.977973][ T7007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7007 comm=syz.4.2242 [ 141.098369][ T7017] rust_binder: 27: no such ref 0 [ 141.103715][ T7017] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 141.110974][ T7017] rust_binder: 27: no such ref 0 [ 141.126757][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2248'. [ 141.146563][ T7021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7021 comm=syz.4.2249 [ 141.197078][ T7023] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7023 comm=syz.2.2250 [ 141.262817][ T36] audit: type=1400 audit(2000000087.854:529): avc: denied { map } for pid=7037 comm="syz.4.2256" path="socket:[25544]" dev="sockfs" ino=25544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.363934][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 141.420738][ T7061] 9pnet_fd: Insufficient options for proto=fd [ 141.428315][ T7061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2263'. [ 141.508514][ T7085] x_tables: duplicate entry at hook 1 [ 141.525578][ T36] audit: type=1400 audit(2000000088.114:530): avc: denied { map } for pid=7087 comm="syz.4.2274" path="socket:[26071]" dev="sockfs" ino=26071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 141.549895][ T36] audit: type=1400 audit(2000000088.114:531): avc: denied { accept } for pid=7087 comm="syz.4.2274" path="socket:[26071]" dev="sockfs" ino=26071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 141.595764][ T7102] rust_binder: Error while translating object. [ 141.595801][ T7102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 141.602080][ T7102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:18 [ 141.612790][ T7102] netlink: 'syz.5.2275': attribute type 4 has an invalid length. [ 141.742594][ T7136] netlink: 'syz.1.2290': attribute type 4 has an invalid length. [ 141.873372][ T7158] tipc: Enabling of bearer rejected, failed to enable media [ 142.022794][ T7167] 9pnet_fd: Insufficient options for proto=fd [ 142.443363][ T7201] rust_binder: Error while translating object. [ 142.443399][ T7201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 142.450219][ T7201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 142.510269][ T7225] cgroup: noprefix used incorrectly [ 142.658729][ T7239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2326'. [ 142.855379][ T36] audit: type=1400 audit(2000000089.444:532): avc: denied { read } for pid=7262 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.245902][ T36] audit: type=1400 audit(2000000089.834:533): avc: denied { read } for pid=7284 comm="syz.5.2343" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 143.268593][ T36] audit: type=1400 audit(2000000089.834:534): avc: denied { open } for pid=7284 comm="syz.5.2343" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 143.328467][ T7290] $: renamed from bridge_slave_0 (while UP) [ 143.452952][ T7292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14355 sclass=netlink_route_socket pid=7292 comm=syz.2.2346 [ 143.475665][ T7295] overlayfs: failed to resolve './file0': -2 [ 143.483949][ T7295] overlayfs: failed to resolve './file0': -2 [ 143.498155][ T7297] fuseblk: Bad value for 'fd' [ 143.546379][ T7308] tipc: Enabling of bearer rejected, failed to enable media [ 143.624611][ T7328] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 143.633342][ T7328] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.190670][ T7387] tmpfs: Unknown parameter '' [ 144.432214][ T7400] loop2: detected capacity change from 0 to 7 [ 144.439087][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.448298][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.456246][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.465418][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.473455][ T7400] loop2: unable to read partition table [ 144.479195][ T7400] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 144.480437][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.501804][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.511862][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.515553][ T7405] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 144.521047][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.529009][ T7405] sel_write_load: 23 callbacks suppressed [ 144.529024][ T7405] SELinux: failed to load policy [ 144.536558][ T36] audit: type=1400 audit(2000000091.104:535): avc: denied { load_policy } for pid=7404 comm="syz.5.2386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 144.567662][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.576835][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.584903][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.594083][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.602149][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.611288][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 144.780097][ T7420] overlayfs: failed to clone upperpath [ 145.430584][ T7457] SELinux: syz.5.2405 (7457) set checkreqprot to 1. This is no longer supported. [ 145.430594][ T36] audit: type=1400 audit(2000000092.024:536): avc: denied { setcheckreqprot } for pid=7456 comm="syz.5.2405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 145.678258][ T425] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.828242][ T425] usb 6-1: Using ep0 maxpacket: 8 [ 145.834334][ T425] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 145.845440][ T425] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 145.854693][ T425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.076747][ T7457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 146.077394][ T425] usb 6-1: string descriptor 0 read error: -71 [ 146.093992][ T425] hub 6-1:32.0: USB hub found [ 146.099229][ T425] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 146.128572][ T425] usb 6-1: USB disconnect, device number 2 [ 146.346448][ T7478] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 146.354250][ T7478] netlink: 'syz.2.2413': attribute type 2 has an invalid length. [ 146.369469][ T36] audit: type=1400 audit(2000000092.964:537): avc: denied { execute } for pid=7479 comm="syz.2.2414" path="/dev/rnullb0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.839044][ T7547] overlay: ./file0 is not a directory [ 146.845352][ T36] audit: type=1400 audit(2000000093.434:538): avc: denied { mounton } for pid=7546 comm="syz.4.2437" path="/437/file0" dev="tmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.912059][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 146.968759][ T7563] netlink: 'syz.4.2444': attribute type 4 has an invalid length. [ 147.143317][ T7614] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 147.215067][ T7628] tipc: Enabled bearer , priority 10 [ 147.223860][ T7628] overlayfs: failed to clone upperpath [ 147.281993][ T36] audit: type=1400 audit(2000000093.874:539): avc: denied { execute_no_trans } for pid=7649 comm="syz.2.2475" path="/96/file1" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.305880][ T7651] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.314436][ T7651] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 147.322985][ T7651] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.332322][ T7651] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 147.338336][ T7660] 9pnet_fd: Insufficient options for proto=fd [ 147.344217][ T36] audit: type=1400 audit(2000000093.934:540): avc: denied { accept } for pid=7655 comm="syz.1.2476" path=0000204E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 147.803208][ T7697] tipc: Enabling of bearer rejected, failed to enable media [ 148.199566][ T7729] overlayfs: missing 'workdir' [ 148.300032][ T36] audit: type=1400 audit(2000000094.894:541): avc: denied { lock } for pid=7743 comm="syz.1.2508" path="socket:[27962]" dev="sockfs" ino=27962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.324378][ T7740] incfs: Options parsing error. -22 [ 148.328271][ T425] tipc: Node number set to 4144032988 [ 148.329916][ T7740] incfs: mount failed -22 [ 148.408361][ T36] audit: type=1400 audit(2000000095.004:542): avc: denied { accept } for pid=7754 comm="syz.5.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.433759][ T36] audit: type=1400 audit(2000000095.024:543): avc: denied { map } for pid=7754 comm="syz.5.2511" path="socket:[27975]" dev="sockfs" ino=27975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.592624][ T31] rust_binder: 0: removing orphan mapping 0:24 [ 148.689470][ T7786] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 148.745231][ T36] audit: type=1400 audit(2000000095.334:544): avc: denied { relabelfrom } for pid=7787 comm="syz.5.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.792661][ T36] audit: type=1400 audit(2000000095.334:545): avc: denied { relabelto } for pid=7787 comm="syz.5.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.986584][ T7805] 9pnet_fd: Insufficient options for proto=fd [ 149.015631][ T7811] $: renamed from bridge_slave_0 (while UP) [ 149.023453][ T7811] fuseblk: Bad value for 'fd' [ 149.040790][ T7814] overlayfs: failed to clone lowerpath [ 149.148258][ T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.299331][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.311332][ T45] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 149.320444][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.329193][ T45] usb 6-1: config 0 descriptor?? [ 149.889703][ T7856] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2547'. [ 150.012076][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 150.024540][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 150.042304][ T45] usb 6-1: USB disconnect, device number 3 [ 150.292129][ T7886] 9pnet_fd: Insufficient options for proto=fd [ 150.785589][ T7898] binder: Bad value for 'max' [ 150.919437][ T7920] tipc: Enabling of bearer rejected, failed to enable media [ 151.864542][ T7946] overlay: Unknown parameter 'hash' [ 151.894089][ T7951] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 151.902244][ T7953] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 152.483761][ T7980] cgroup: Invalid name [ 152.483761][ T7981] cgroup: Invalid name [ 152.555738][ T7992] netlink: 'syz.5.2595': attribute type 1 has an invalid length. [ 152.592914][ T8002] netlink: 'syz.4.2598': attribute type 4 has an invalid length. [ 152.617776][ T8004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.617810][ T8004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 152.732430][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2610'. [ 152.783374][ T8037] netlink: 'syz.5.2610': attribute type 22 has an invalid length. [ 152.946909][ T8052] FAT-fs (rnullb0): bogus number of reserved sectors [ 152.954755][ T8052] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 152.976470][ T8052] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.2616'. [ 153.005183][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.015439][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.022858][ T8050] bridge_slave_0: entered allmulticast mode [ 153.029221][ T8050] bridge_slave_0: entered promiscuous mode [ 153.035802][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.042918][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.051488][ T8050] bridge_slave_1: entered allmulticast mode [ 153.057882][ T8050] bridge_slave_1: entered promiscuous mode [ 153.108502][ T8063] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 153.126886][ T36] audit: type=1400 audit(2000000099.714:546): avc: denied { relabelto } for pid=8058 comm="syz.2.2618" name="133" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 153.134963][ T8067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.155929][ T36] audit: type=1400 audit(2000000099.714:547): avc: denied { associate } for pid=8058 comm="syz.2.2618" name="133" dev="tmpfs" ino=738 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 153.189327][ T36] audit: type=1400 audit(2000000099.724:548): avc: denied { execheap } for pid=8058 comm="syz.2.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 153.214798][ T36] audit: type=1400 audit(2000000099.764:549): avc: denied { write } for pid=6883 comm="syz-executor" name="133" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 153.240770][ T36] audit: type=1400 audit(2000000099.764:550): avc: denied { remove_name } for pid=6883 comm="syz-executor" name="binderfs" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 153.267994][ T36] audit: type=1400 audit(2000000099.764:551): avc: denied { rmdir } for pid=6883 comm="syz-executor" name="133" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 153.324077][ T60] bridge_slave_1: left allmulticast mode [ 153.329775][ T60] bridge_slave_1: left promiscuous mode [ 153.335350][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.342820][ T60] bridge_slave_0: left allmulticast mode [ 153.348559][ T60] bridge_slave_0: left promiscuous mode [ 153.354151][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.424336][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.431437][ T8050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.438746][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.445780][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.475426][ T60] veth1_macvtap: left promiscuous mode [ 153.481357][ T60] veth0_vlan: left promiscuous mode [ 153.515414][ T8100] netlink: 'syz.2.2629': attribute type 1 has an invalid length. [ 153.528166][ T60] vcan0 (unregistering): left allmulticast mode [ 153.537345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.544865][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.555072][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.562138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.587179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.594291][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.623088][ T8050] veth0_vlan: entered promiscuous mode [ 153.637269][ T8050] veth1_macvtap: entered promiscuous mode [ 153.736888][ T8122] rust_binder: Write failure EFAULT in pid:4 [ 154.588649][ T8162] overlayfs: failed to clone upperpath [ 154.639638][ T8174] bridge0: entered allmulticast mode [ 154.646713][ T8175] tipc: Started in network mode [ 154.651742][ T8175] tipc: Node identity ca07796d23f, cluster identity 4711 [ 154.659060][ T8175] tipc: Enabled bearer , priority 0 [ 154.669838][ T8175] tipc: Disabling bearer [ 154.869430][ T36] audit: type=1400 audit(2000000101.464:552): avc: denied { unlink } for pid=8195 comm="syz.5.2660" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.011287][ T8216] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 155.019645][ T8216] rust_binder: Write failure EINVAL in pid:191 [ 155.028401][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.188273][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 155.194561][ T45] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 155.203012][ T45] usb 2-1: config 0 has no interface number 0 [ 155.209382][ T45] usb 2-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 155.219726][ T45] usb 2-1: config 0 interface 214 has no altsetting 0 [ 155.228806][ T45] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 155.237871][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.246012][ T45] usb 2-1: Product: syz [ 155.250253][ T45] usb 2-1: Manufacturer: syz [ 155.254841][ T45] usb 2-1: SerialNumber: syz [ 155.260103][ T45] usb 2-1: config 0 descriptor?? [ 155.265324][ T8186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.469106][ T36] audit: type=1326 audit(2000000102.064:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.4.2667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8ebe9 code=0x0 [ 155.492580][ T8184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.507212][ T8229] /dev/loop0: Can't lookup blockdev [ 155.839758][ T8233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 155.839788][ T8233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:196 [ 155.850022][ T36] audit: type=1400 audit(2000000102.444:554): avc: denied { setattr } for pid=8231 comm="syz.5.2670" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.248263][ T330] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.399286][ T330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 156.405930][ T330] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 156.415105][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.423916][ T330] usb 6-1: config 0 descriptor?? [ 156.429875][ T330] usb 6-1: selecting invalid altsetting 1 [ 156.438324][ T330] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 156.440140][ T6694] udevd[6694]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.558680][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.565745][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.572977][ T8255] bridge_slave_0: entered allmulticast mode [ 156.579211][ T8255] bridge_slave_0: entered promiscuous mode [ 156.585480][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.592528][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.600391][ T8255] bridge_slave_1: entered allmulticast mode [ 156.607046][ T8255] bridge_slave_1: entered promiscuous mode [ 156.615895][ T13] bridge_slave_1: left allmulticast mode [ 156.621582][ T13] bridge_slave_1: left promiscuous mode [ 156.627220][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.635129][ T13] $: left allmulticast mode [ 156.636997][ T425] usb 6-1: USB disconnect, device number 4 [ 156.642422][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 156.647180][ T13] $: left promiscuous mode [ 156.659579][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 156.662039][ T13] bridge0: port 1($) entered disabled state [ 156.672440][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 156.689699][ T13] tipc: Resetting bearer [ 156.704029][ T13] tipc: Disabling bearer [ 156.790854][ T13] tipc: Left network mode [ 156.792835][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.802232][ T8255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.809518][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.816537][ T8255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.826348][ T13] veth1_macvtap: left promiscuous mode [ 156.831911][ T13] veth0_vlan: left promiscuous mode [ 156.894455][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.896608][ T8268] overlayfs: failed to clone lowerpath [ 156.907183][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.921205][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.928305][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.937443][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.944596][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.966546][ T8255] veth0_vlan: entered promiscuous mode [ 156.978113][ T8255] veth1_macvtap: entered promiscuous mode [ 157.009762][ T8271] SELinux: policydb string does not match my string SE Linux [ 157.019907][ T8271] SELinux: failed to load policy [ 157.150498][ T8273] cgroup: Unknown subsys name 'fsname' [ 157.277886][ T8281] bridge0: entered allmulticast mode [ 157.288389][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2685'. [ 157.297478][ T8282] bridge_slave_1: left allmulticast mode [ 157.297613][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 157.303240][ T8282] bridge_slave_1: left promiscuous mode [ 157.317474][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 157.320160][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.331095][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 157.348544][ T8282] bridge_slave_0: left allmulticast mode [ 157.348655][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 157.354242][ T8282] bridge_slave_0: left promiscuous mode [ 157.365278][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 157.371113][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.382981][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 157.399887][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 157.411164][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 157.422313][ T8282] bridge0 (unregistering): left allmulticast mode [ 157.422362][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 157.440247][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 157.451823][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 157.463650][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 157.475464][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.486648][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 157.498869][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.510322][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 157.521374][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.532654][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 157.544010][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 157.555382][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 157.566578][ T45] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 157.581009][ T45] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 8e:5d:32:bd:3c:10 [ 157.601757][ T45] usb 2-1: USB disconnect, device number 9 [ 157.608095][ T45] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 157.615604][ T36] audit: type=1400 audit(2000000104.194:555): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 157.814781][ T8319] binder: Bad value for 'stats' [ 157.910354][ T8329] overlayfs: missing 'lowerdir' [ 158.368310][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.468256][ T425] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 158.519178][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.529343][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.538918][ T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.547958][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.556001][ T31] usb 6-1: SerialNumber: syz [ 158.579739][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 158.579754][ T36] audit: type=1400 audit(2000000105.174:557): avc: denied { search } for pid=8362 comm="syz.2.2711" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 158.580506][ T8363] tipc: Enabling of bearer rejected, failed to enable media [ 158.628660][ T425] usb 7-1: Using ep0 maxpacket: 32 [ 158.635096][ T425] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 158.643421][ T425] usb 7-1: config 0 has no interface number 0 [ 158.651121][ T425] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.660220][ T425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.668381][ T425] usb 7-1: Product: syz [ 158.672655][ T425] usb 7-1: Manufacturer: syz [ 158.677355][ T425] usb 7-1: SerialNumber: syz [ 158.683605][ T425] usb 7-1: config 0 descriptor?? [ 158.689626][ T425] smsc95xx v2.0.0 [ 158.941903][ T8379] rust_binder: Write failure EFAULT in pid:50 [ 159.090519][ T425] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 159.107421][ T425] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.287777][ T36] audit: type=1400 audit(2000000105.874:558): avc: denied { execute } for pid=8387 comm="syz.5.2719" path="/dev/rnullb0" dev="devtmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 159.353029][ T8393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.404719][ T8394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 159.550446][ T8402] 9pnet_fd: Insufficient options for proto=fd [ 159.717308][ T8412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8412 comm=syz.2.2729 [ 159.785864][ T8424] overlayfs: lower data-only dirs require metacopy support. [ 159.931745][ T8356] rust_binder: Error while translating object. [ 159.931787][ T8356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.937995][ T8356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 159.948317][ T425] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 159.969202][ T425] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 159.978365][ T425] usb 7-1: USB disconnect, device number 2 [ 160.194677][ T8438] tmpfs: Unknown parameter '' [ 160.210965][ T8442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.211810][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.226917][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.235409][ T8442] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 160.516808][ T8446] loop2: detected capacity change from 0 to 7 [ 160.523288][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.532460][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.540535][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.549711][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.557551][ T8446] loop2: unable to read partition table [ 160.563316][ T8446] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 160.568295][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.585905][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.591925][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 160.595264][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.612157][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.620259][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.629393][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.637426][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.646563][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.656034][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.665208][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 160.729959][ T8462] overlayfs: failed to clone upperpath [ 160.746341][ T8467] netlink: 'syz.6.2748': attribute type 1 has an invalid length. [ 160.756341][ T8467] ./cgroup/file0: Can't lookup blockdev [ 160.795031][ T8476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 161.459366][ T8500] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.2760'. [ 161.696180][ T36] audit: type=1400 audit(2000000108.284:559): avc: denied { shutdown } for pid=8512 comm="syz.6.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.950764][ T8532] tipc: Started in network mode [ 161.955707][ T8532] tipc: Node identity f63cbbc2ee12, cluster identity 4711 [ 161.963224][ T8532] tipc: Enabled bearer , priority 0 [ 161.970615][ T36] audit: type=1400 audit(2000000108.564:560): avc: denied { create } for pid=8531 comm="syz.5.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 161.991422][ T8532] tipc: Disabling bearer [ 162.022035][ T8536] binder: Bad value for 'stats' [ 162.226061][ T8554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.285926][ T36] audit: type=1326 audit(2000000108.874:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.2783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7bd8ebe9 code=0x0 [ 162.387329][ T8570] /dev/rnullb0: Can't lookup blockdev [ 162.401647][ T8572] /dev/rnullb0: Can't lookup blockdev [ 162.497723][ T8577] cgroup: No subsys list or none specified [ 162.499521][ T36] audit: type=1400 audit(2000000109.084:562): avc: denied { mounton } for pid=8575 comm="syz.5.2787" path="/93/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.533997][ T8581] __vm_enough_memory: pid: 8581, comm: syz.5.2788, bytes: 18014402804453376 not enough memory for the allocation [ 162.749382][ T36] audit: type=1400 audit(2000000109.344:563): avc: denied { map } for pid=8594 comm="syz.5.2794" path="socket:[32213]" dev="sockfs" ino=32213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.889569][ T8600] rust_binder: 295: no such ref 5 [ 162.894669][ T8600] rust_binder: Write failure EINVAL in pid:295 [ 163.024082][ T36] audit: type=1400 audit(2000000109.614:564): avc: denied { unmount } for pid=6819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.131308][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.139901][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.150731][ T8615] tipc: Enabling of bearer rejected, failed to enable media [ 163.151248][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.168377][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.337249][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2807'. [ 163.358288][ T64] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.519876][ T64] usb 2-1: config 1 interface 0 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.539764][ T64] usb 2-1: config 1 interface 0 has no altsetting 0 [ 163.547889][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.557018][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.565057][ T64] usb 2-1: Product: syz [ 163.569250][ T64] usb 2-1: Manufacturer: Ⰱ [ 163.573847][ T64] usb 2-1: SerialNumber: syz [ 163.579430][ T8611] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 163.619779][ T31] usb 6-1: 0:2 : does not exist [ 163.723248][ T8660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.724150][ T8660] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 163.792716][ T64] usb 2-1: USB disconnect, device number 10 [ 163.968554][ T8672] netlink: 'syz.5.2819': attribute type 1 has an invalid length. [ 164.010053][ T8679] /dev/nullb0: Can't lookup blockdev [ 164.308543][ T8694] ------------[ cut here ]------------ [ 164.314034][ T8694] WARNING: CPU: 1 PID: 8694 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 164.323457][ T8694] Modules linked in: [ 164.327352][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.1.2828 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 164.338983][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.349190][ T8694] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 164.355196][ T8694] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 69 41 ee 05 00 0f 85 be 00 00 00 c6 05 5c 41 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 164.359742][ T8695] ./cgroup: Can't lookup blockdev [ 164.374875][ T8694] RSP: 0018:ffffc90001e2f580 EFLAGS: 00010246 [ 164.386079][ T8694] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 164.394068][ T8694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90001e2f638 [ 164.402062][ T8694] RBP: ffffc90001e2f6c0 R08: ffffc90001e2f637 R09: 0000000000000000 [ 164.410072][ T8694] R10: ffffc90001e2f620 R11: fffff520003c5ec7 R12: ffffc90001e2f5c0 [ 164.418055][ T8694] R13: dffffc0000000000 R14: 1ffff920003c5eb4 R15: 0000000000000000 [ 164.426061][ T8694] FS: 00007f2f7cc326c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 164.435109][ T8694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.441732][ T8694] CR2: 0000200000004000 CR3: 000000011ee86000 CR4: 00000000003526b0 [ 164.449732][ T8694] Call Trace: [ 164.453014][ T8694] [ 164.455942][ T8694] ? vfs_write+0x3c3/0xe80 [ 164.460362][ T8694] ? ksys_write+0x141/0x250 [ 164.464873][ T8694] ? x64_sys_call+0x271c/0x2ee0 [ 164.469789][ T8694] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 164.475526][ T8694] ? hashtab_init+0xdb/0x1f0 [ 164.480187][ T8694] ___kmalloc_large_node+0xb5/0x250 [ 164.485400][ T8694] ? hashtab_init+0xdb/0x1f0 [ 164.490200][ T8694] __kmalloc_large_node_noprof+0x1e/0xe0 [ 164.495858][ T8694] ? hashtab_init+0xdb/0x1f0 [ 164.500463][ T8694] __kmalloc_noprof+0x26d/0x450 [ 164.505325][ T8694] hashtab_init+0xdb/0x1f0 [ 164.509749][ T8694] ? common_read+0x16d/0x480 [ 164.514346][ T8694] symtab_init+0x44/0x70 [ 164.518606][ T8694] common_read+0x1de/0x480 [ 164.523034][ T8694] ? __cfi_common_read+0x10/0x10 [ 164.527978][ T8694] ? hashtab_init+0x105/0x1f0 [ 164.532661][ T8694] policydb_read+0xaa8/0x28c0 [ 164.537345][ T8694] ? kasan_save_alloc_info+0x40/0x50 [ 164.542650][ T8694] ? __cfi_policydb_read+0x10/0x10 [ 164.547770][ T8694] ? security_load_policy+0x128/0x12f0 [ 164.553244][ T8694] security_load_policy+0x162/0x12f0 [ 164.558564][ T8694] ? irqentry_exit+0x4a/0x60 [ 164.563153][ T8694] ? exc_page_fault+0x66/0xc0 [ 164.567814][ T8694] ? asm_exc_page_fault+0x2b/0x30 [ 164.572850][ T8694] ? __cfi_security_load_policy+0x10/0x10 [ 164.578602][ T8694] ? rep_movs_alternative+0x4a/0xa0 [ 164.583810][ T8694] sel_write_load+0x298/0x5e0 [ 164.588505][ T8694] ? futex_wait+0x29a/0x7a0 [ 164.593025][ T8694] ? __cfi_sel_write_load+0x10/0x10 [ 164.598260][ T8694] ? __cfi_futex_wait+0x10/0x10 [ 164.603121][ T8694] ? bpf_lsm_file_permission+0xd/0x20 [ 164.608554][ T8694] ? __cfi_sel_write_load+0x10/0x10 [ 164.613757][ T8694] vfs_write+0x3c3/0xe80 [ 164.618009][ T8694] ? __cfi_vfs_write+0x10/0x10 [ 164.622776][ T8694] ? __kasan_check_write+0x18/0x20 [ 164.627899][ T8694] ? mutex_lock+0x92/0x1c0 [ 164.632329][ T8694] ? __cfi_mutex_lock+0x10/0x10 [ 164.637176][ T8694] ? __fget_files+0x2c5/0x340 [ 164.641870][ T8694] ksys_write+0x141/0x250 [ 164.646197][ T8694] ? __cfi_ksys_write+0x10/0x10 [ 164.651188][ T8694] ? __kasan_check_write+0x18/0x20 [ 164.656296][ T8694] ? fpregs_restore_userregs+0x11d/0x260 [ 164.661965][ T8694] __x64_sys_write+0x7f/0x90 [ 164.666564][ T8694] x64_sys_call+0x271c/0x2ee0 [ 164.671281][ T8694] do_syscall_64+0x58/0xf0 [ 164.675706][ T8694] ? clear_bhb_loop+0x50/0xa0 [ 164.680394][ T8694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.686316][ T8694] RIP: 0033:0x7f2f7bd8ebe9 [ 164.690735][ T8694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.710369][ T8694] RSP: 002b:00007f2f7cc32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.718808][ T8694] RAX: ffffffffffffffda RBX: 00007f2f7bfc5fa0 RCX: 00007f2f7bd8ebe9 [ 164.726784][ T8694] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000007 [ 164.734819][ T8694] RBP: 00007f2f7be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 164.742814][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.750800][ T8694] R13: 00007f2f7bfc6038 R14: 00007f2f7bfc5fa0 R15: 00007ffc56118eb8 [ 164.758799][ T8694] [ 164.761810][ T8694] ---[ end trace 0000000000000000 ]--- [ 164.767361][ T8694] SELinux: failed to load policy