last executing test programs: 4m19.73691493s ago: executing program 2 (id=1367): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='hpfs\x00', 0x200000, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0x10001, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x4, 0x7, 0x1, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xffffffff, 0x800005, 0x7, 0x3, 0x10, 0x7, 0x9, 0x9, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0x3, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0x5, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0xff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x7, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc760, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x4000001, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x1f, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x7, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x8, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x7ff, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x1, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x7, 0xa2, 0x3, 0x7fffffff, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x10000, 0xef, 0x6, 0x0, 0x40000109, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x8, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x9, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b1000, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0xea, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x4, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x76, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x76, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0xffff, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7ffb, 0x7ff, 0x9, 0x100000e, 0x5, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x426, 0x2, 0x1, 0x3, 0x23a1, 0xa, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x8, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x9, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0xfffffffe, 0x240000, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x7, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000020, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x200, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0x7, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x894, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x3fc, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x4, 0x6, 0x5, 0x3d91, 0xffffffff, 0x2dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0x7, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x9, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x80000001, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"]) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040), 0x8) listen(r4, 0x0) connect$bt_sco(r4, &(0x7f0000002100)={0x1f, @none}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xc3, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x24}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xffff, 0x8, 0x1000, 0x9fde, 0x10, 0xa, 0xe, 0x800, 0x2, 0x80, 0x110}}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$cdc_ecm(0x6, 0xc7, &(0x7f00000011c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x1, 0x41, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x13, {{0xa, 0x24, 0x6, 0x0, 0x0, "2a2befa268"}, {0x5, 0x24, 0x0, 0x6}, {0xf, 0x24, 0xf, 0x1, 0x9, 0xbe8, 0x8, 0x8}, [@obex={0x5, 0x24, 0x15, 0x9}, @country_functional={0xc, 0x24, 0x7, 0xe5, 0x5, [0x4, 0xf7, 0x0]}, @ncm={0x6, 0x24, 0x1a, 0x7, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x40}, @mdlm_detail={0x50, 0x24, 0x13, 0x5, "94a6aedc0fafe8d9812c432424002d3f328ec9d56c3ce1adcf04cc3621579df238f74be6343e1c5dcd6973acc8266d83dd6a39954ad5b78351b8e3c6b380e6341863c03e38dca542f0a7a284"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x71, 0x0, 0x9}}}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xfa, 0xce, 0x6, 0x0, 0x4}, 0x4a, &(0x7f0000001780)={0x5, 0xf, 0x4a, 0x6, [@ssp_cap={0x0, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf00f, 0x1, [0xff30, 0xc0, 0xf, 0xc000, 0xff000f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x91, 0xc, 0xfe, 0x8, 0x1}, @ptm_cap, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xf, 0x8, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x45, 0xd}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7, 0xf000, 0x7f36, [0x0]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x2452}}, {0xf9, &(0x7f0000001380)=ANY=[@ANYBLOB="f90313f89d412a2e84ee15bbe1503afd71a580afb8ec831b5889edcb7e2f433f55619483568ca8163d50885d7f37cd14c09b617ef6df1cf7bdda8b59f74a81a879b47f8e1ac0028da81c97fb08dcd016f17f60f6357ac579da044aa4be3e59dcbcd1c3d890f1adf637a97dcae41c83b58fa87dd3ff5fe0b13a1a6a642bf5ff40dee847d2df9a7c664f00be39f600089566f7bfc5b2112a202e21bc9e2f333d46713dbd6f955c60d4135507635756e2d95e3cfceafc95253811b5093188976952102fd8aed39b9e6916404af674aa3f5be0baf45d7f659f66c9139ed637b541a443a22848dfa81b021084deb562e6ebef39301e162a307ec12e"]}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x446}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000015c0)={0x14, &(0x7f0000001540)={0x40, 0xe, 0x12, {0x12, 0x7, "978b5acdeaf7f8e7cbdcd7fc128d0006"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001600)=ANY=[@ANYBLOB="001493000000b7275050c78efe872076f57c722c1f9f4352ed9fc450fb505ec79460be40ef25bfd3e9ef05432229aeefec98cee9573eb2cacfc8af90d63a293404fc4b9fd115f9ce8ec620d7d39d1e052156e068c8f104f6650cd10d50570a9f5fe4c0ab6911ed0d5d7198d2d87b85f2f24a013936a16b3b4646c971e85a8cee5f119c1f8caff7c1037c3176a89ebbccb9e6"], &(0x7f00000016c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x10}}) 4m17.698488505s ago: executing program 2 (id=1393): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x73, 0xf9, 0x3f, 0x8, 0x5a9, 0x2643, 0x4945, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0x1d, 0x3, 0x1, 0xe, 0x1, 0x0, 0x42, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m16.159175478s ago: executing program 2 (id=1423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x4a58c000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x7, 0x0, 0x4, 0x4, 0x8, 0x9, 0x80000001}, 0x1c) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x4, 0xddb842b, &(0x7f0000000240)=0x3}) 4m15.565237006s ago: executing program 2 (id=1427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r2 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002800)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) waitid(0x1, r2, 0x0, 0x4, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000}) creat(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$cgroup_int(r6, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.929662938s ago: executing program 2 (id=1434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') pread64(r4, &(0x7f0000000100)=""/133, 0x85, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xd000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x2, 0xe, 0x0, 0x3}, {0x10b002, 0xd000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$KVM_SET_MSRS(r5, 0x4140aecd, &(0x7f0000000100)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0xff) r10 = dup(r9) setsockopt$inet_group_source_req(r10, 0x0, 0x2c, 0x0, 0x0) write(r8, &(0x7f0000000240)="94", 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) madvise(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3) getcwd(0x0, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.568153167s ago: executing program 2 (id=1440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 3m59.474906955s ago: executing program 32 (id=1440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 2m6.269108975s ago: executing program 4 (id=2814): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000240000002b0000000000000718"], 0x30}, 0x4000010) (async) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000240000002b0000000000000718"], 0x30}, 0x4000010) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/70, 0x46}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000001640)=""/247, 0xf7}], 0x7, &(0x7f0000001740)=""/143, 0x8f}, 0xb}, {{&(0x7f0000001800)=@xdp, 0x80, &(0x7f0000000140)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/212, 0xd4}, {&(0x7f0000002980)=""/113, 0x71}, {&(0x7f0000002a00)=""/158, 0x9e}], 0x4, &(0x7f0000002ac0)=""/252, 0xfc}, 0xb5}, {{&(0x7f0000002bc0)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002c40)=""/255, 0xff}, {&(0x7f0000002d40)=""/222, 0xde}, {&(0x7f0000002e40)=""/142, 0x8e}], 0x3, &(0x7f0000002f00)=""/136, 0x88}, 0x7c910b4b}], 0x3, 0x40000000, &(0x7f0000003080)) 2m5.865155858s ago: executing program 4 (id=2819): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r1 = socket$inet(0x2, 0x1, 0x9) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0xb2, "8faeeccd40791d8d469f7bd585b8688bf41f17679c9f335c0a3ac50b4d693bd369f52b06bf50c3cf6509acd00cdb7c37017adaccc2cb0f1bc70acd0d56a6b592e7fa9a0cad96c671cb8013a780ebb3f5ee5be06112c0adf546e4b56b48b03513e87011cc0d078d52c58e1a8bee05c159fce1b146b2ce2a241541e7172cb7e4fc23509ebc5d9e737bed3b657c45be76d355668af430c8008741693ddd72a2679f9c7b16a237be285313f23716ec114eecbf90"}, &(0x7f0000000140)=0xd6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='$\\\x00', &(0x7f0000000200)="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", 0xfe) r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x40, 0x2f, 0xa9, {0xa9, 0x6, "a9a570a89dece7d1b5ac132682b2a38220e0e8aa784aff2440cb9916be953687ce2e0ee5558b2402222b70b8ab765b2451550809add7f12dd60e8e32a9c007728e7d03ff9e4b96c09634cbf66ce2b585754f13f203a0a7a144eeb8d1233019fcef75b127f069affbf5a54f5de46869c5b0ca6426e2237abdf6a0b20fbf1f6e5e129380014ffd3361b06f011a34e6aa8e5e5f70beb804b788c231beb4764f2a9719814b72837129"}}, &(0x7f0000000400)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "ee68f214500357919b526ceff9098d8ac8563adf02c926d674e91fb7f40905fcad8a44ef38d8383f53d52106117dcd0cfb65d19380296a7996cf21086bdb2b2cd26ca09ce98ea299e569cebfba3664db914bde47e851e4ce463d3a24a230a52dd62ad4807b003693948c6e2fddbd6ca7e7d01f71289932e29453c1b9a93e00bb6cb8c85bc84978041b5a2c87cb"}}, &(0x7f00000004c0)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x9, 0x9}, @ptm_cap={0x3}, @generic={0xd, 0x10, 0x1, "f0a083e320d90a7415e2"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x7a, 0x9, 0x9, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x5}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x7, 0xf8, "c75326db", "645c8a8b"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x63, 0x60, 0x7f, 0x2, 0x5, 0x3, 0x40}}}, 0xfffffffffffffffe) syz_usb_ep_read(r2, 0x8, 0x5d, &(0x7f00000005c0)=""/93) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000640)={'ipvs\x00'}, &(0x7f0000000680)=0x1e) syz_open_dev$hiddev(&(0x7f00000006c0), 0x81, 0x200202) r3 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x40, 0xd, 0x8d, {0x8d, 0x24, "5b9071d7867a031cfe34e91f77b736dec2ec94a647a8a89ff69396841f4a48ed730fd565870f48597253266540b9f31e8d2d86343035ed5b79578fd02a85f3b34f08044e3ae0b8d2ab93382613b341cbe0ad172578ea509a5be03ce913ddce2e68a7dc8fc3b31bb2bc6bfbf89d5992f6a55182939e3e0f72836c58bf4248bbee448f8bdae19eb4ba6ef45b"}}, &(0x7f0000000800)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "94427bdb79a308ad4cf9ff90505b21b4a451d72d9e2dad4ef59a4e506d360de93825e75a8c762bd4"}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000880)={0x0, 0x15, 0x1c, "97e478040721a12b443a4c17512ce1a775911f91fe67e03fa5868eac"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0xc0, 0x5, 0x3, "2b7cbb"}, &(0x7f0000000980)={0x40, 0x5, 0x1, "9d"}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r3, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x0, 0x23, 0xe6, {0xe6, 0xe, "bddfdfae49123107c99c0525ff27b849774dd675206717ff2080db81ff7d0442457cef414272988edaebd5b3e1ee40de6e36a8c83120ea9873fef7ceaa358c1a2b32abf0f85c434dd48c072e1cdb06b28fa2ce400157e2c159b3f01cfb793fc4f7a3bc369f8cd503116f757eb540ece7e3f9d2caccc8afa40f4239ce90a74022fb9fd09770b7b892735217248ce4579de15528e3c47e5f5b7e247df9737f577d5b7d379468c159cf71d9bec32a7f37b22dd76813782b4c39c41ba2ac49c7faad8821706a9808767e03f6594d35d42e3646026bafc33b2f80f2fada33785206d23f84f539"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000b40)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x6, 0x1, 0xfffe, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "ee90bf01172e9516e1f4e295244c5ad1"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5, 0x6, 0x3, 0x1, 0x80}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x81, 0xf, "22ae5a2f", "85762d09"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x64, 0x1, 0xe, 0x4, 0x6, 0x37, 0xc4}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x20, 0xc, 0x84, "5c41ed7bb10920ae923d29ac8c24d503430a990e39a390605eb362677e0f46be1d76c29f5bd46b386d95f5b25f323724a89961429065c5f1ba95bf018a9bc9104dd13ff44e64ae538c8aa1a69f2c0ba5f033808d798f88dedec97ffdf88642a8127df9bb450007971b366a60052e564bf458863a1570949a0e2c5c0783c01fe61b3fc645"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x8, 0x8, [0xf00]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "9889"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @random="e5c8267df6a3"}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "5982"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x3b}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r3, &(0x7f00000013c0)={0x2c, &(0x7f0000001180)={0x40, 0x1, 0x8e, {0x8e, 0x8, "6febf01ac8889d15c83aae5644d92f65637022d7e5335032a50070946a279d1adc7dd72e81f0d97846a43932da011c7e842ee7d625177f21ad2e2767d812e30eaf0aae1ea013ab62224cb1b822e251e1ad4fa23ec12205795b3f5461cebd2b54d1df510c0c4ef651f97c7af6a4ae790b181122b555b8954d1d614231f5dbc1a20fb88ef18226ce7d8e61282b"}}, &(0x7f0000001240)={0x0, 0x3, 0x85, @string={0x85, 0x3, "ceccbf7214a943076335994050aadb17b84f5266ec90e623c21c15ab6eb93ccd05de9659ba92b1a43aff6c09a401e19cdf9fafb76e65fc70ed2f207dff8b980e70e01661a3dbd0cb185f1d41fd4e810c273eebb8fa1aa026bde8282c72eeccfc68078d17d0bd336618558367985c960f695347cf3011c2f0be1b7d1e9338d731793216"}}, &(0x7f0000001300)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xda, 0x80, 0x7, 0x9, "bec4c490", "697054cf"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfb, 0x1, 0x6, 0x2, 0x1, 0x2, 0x3}}}, &(0x7f0000001880)={0x84, &(0x7f0000001400)={0x20, 0x31, 0x82, "e122f01ddeb03639f599eac692b13e44739eeb5bbf0a5b6a9f34a0d812ad511ec9e21e5c569096a32f4d2cb15e2e1e8eccbfb10fefa1ba39cbd46220cbc445b4bdbbc0011e7a9947e7c51181185581bd38853eaafc32854009c7692a0c625678a0adf16a7f18f17d33c775b32e4d2b2e2a87a0a6658fa6842d45a56c88a6399dde58"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x7}}, &(0x7f0000001580)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f00000015c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001600)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000001640)={0x40, 0xb, 0x2, "f9f6"}, &(0x7f0000001680)={0x40, 0xf, 0x2, 0xa64}, &(0x7f00000016c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001700)={0x40, 0x17, 0x6}, &(0x7f0000001740)={0x40, 0x19, 0x2, "db69"}, &(0x7f0000001780)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000017c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001800)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001840)={0x40, 0x21, 0x1, 0x8}}) r4 = syz_usb_connect$rtl8150(0x7, 0x3f, &(0x7f0000001940)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000001a00)={0x14, &(0x7f0000001980)={0x0, 0x23, 0x24, {0x24, 0x21, "dbd0fe42caf1ef0b62c711830c1b7923045e8de74b2e18fb1562ec38c49cb9a5638d"}}, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f0000001c00)={0x2c, &(0x7f0000001a40)={0x40, 0xf, 0x9d, "c6bd0f339c75f4b21f437f04a5b174faabb9e9c8d1177c9c1dcd13712bfabbe2e1e6bbaad70a97538a3e2e855f9e1343c3a0ddc7e7a2ccb8beeb3e1dba287640b0e40bacb91eefff3c3f5bd356ab9bfbe71d0a8b0d6dbfc280912e4ef5c09e18687da4454d131a6d6aa39be259df7f19ad56a489d523b877d50561fd111ba1631b1ae11d7110c824eecce7db29030c7afe93ede4c575f9c5a82daa9452"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001b80)={0xc0, 0x5, 0x4, "c1d66187"}, &(0x7f0000001bc0)={0x40, 0x5, 0x6, "6244700d9c64"}}) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000001c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000001c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) r6 = syz_usb_connect$cdc_ncm(0x4, 0x8a, &(0x7f0000001cc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0xa8, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x47e, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7, 0xfb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1b7, 0x8, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe6, 0x6, 0x4}}}}}}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x110, 0x0, 0x3, 0x6, 0x40, 0xcd}, 0xe9, &(0x7f0000001dc0)={0x5, 0xf, 0xe9, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "b4b0ac0c863abc76ea6920aa06249552"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0xe1, 0xa, 0x400, 0xd3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x30, 0x7, 0xcddd}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x2, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x4, 0x3, 0x1}, @generic={0xa6, 0x10, 0x1, "1d4f809c11200f3eb48e63c2ed32e45830ffcbc640741f15586ea7abfcf6ca85a3bbd6d6a1e68f4b65bede0db16602c92da70e69dcab6e99ec6dcb7ab20ed207c7ee1b0efd8a101a60444e1cf6573a67c93469351dbab596ac966ccd08c2deb3b88684cea95ab0de1a6faf523fe78bb7c88574efec975b3644b335e86e9e3dd2feeca85c50f3c3573039d12049cc73dbb329b87ead0dc73f9f72d5c6206617f4ba8baf"}]}, 0x4, [{0x100, &(0x7f0000001ec0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x42d}}]}) syz_usb_control_io$printer(r6, &(0x7f0000002280)={0x14, &(0x7f0000002100)={0x60, 0x9, 0x94, {0x94, 0x6, "961b4f698e08bd2e41ccfefc66c78224e94c5d7aff368f9d64e829eedbac75ccf803cbe4e1b53122ff5fe9ab08fba2d830aab9449f5515f568ec5840ba4a9893ce0c37bbdd21e88cc57e4938e6e43dd267f5e95083663ecde64ef2601ceb4301cbf3296de47b0f37c3adcae5e9abb02f9798944d0de19b351a0b44670c4574b7c45cafa9ad63913bf8352e455f349546d626"}}, &(0x7f00000021c0)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "2a7f42f94d72a9a5bc297c93a9c434840b696e597848bec6dfd2656b1ba4a52c6212a3c26b1e99857e0c56c863967c70359eac005cc44333a862fbd41e63c68383fdbe7a9204821077ca9ed0296d9c7f5a84cbaaffc3f280feb4d662c832a1d78b1cbc9e423ef3c165d074d0957490cfc08ce411ea2d87af4106c7542089d7d5310af4f5b67a14d54a64"}}}, &(0x7f0000002440)={0x34, &(0x7f00000022c0)={0x40, 0x14, 0x2d, "47bedeb4d169ac9c1b70fc4f2d303ae526ae8be05f0d60e9c4c0ed69d3833d81be1576bc99ca309617fda69b13"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002380)={0x20, 0x0, 0x14, {0x12, "13cebfac0a4fde20e5d18776419ef9933e84"}}, &(0x7f00000023c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000002400)={0x20, 0x0, 0x1, 0x41}}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000024c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000025c0)={'syztnl2\x00', &(0x7f0000002540)={'syztnl2\x00', 0x0, 0x29, 0xfd, 0x2, 0xfffffe9b, 0x29, @remote, @remote, 0x80, 0x40, 0x2, 0x70}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000026c0)={'ip_vti0\x00', &(0x7f0000002600)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0xfffffff3, 0x3, {{0x1d, 0x4, 0x3, 0x3c, 0x74, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0x7, 0x8b, [@remote]}, @rr={0x7, 0x23, 0x3d, [@multicast1, @remote, @multicast1, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @remote]}, @cipso={0x86, 0x36, 0x1, [{0x2, 0x11, "c562d4295f9bc86c3246a6f572eacf"}, {0x5, 0x2}, {0x7, 0x11, "ed6e17757b760bd7af7f9ed3d914bf"}, {0x2, 0xc, "0ddd271ca850ca9b81e0"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002780)={'tunl0\x00', &(0x7f0000002700)={'syztnl2\x00', 0x0, 0x10, 0x7, 0xb, 0x0, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @loopback, {[@generic={0x44, 0x11, "6dedb33b1aa5a41e3af229c15d8972"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000034c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003480)={&(0x7f0000002d40)={0x70c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x120}}}]}}, {{0x8, 0x1, r8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x30a0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7e27}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0xd, 0xcf}, {0x6, 0x3, 0x3, 0x101}, {0xfffa, 0x3, 0x7, 0xd}, {0xfca, 0x3, 0x0, 0x1}, {0x8, 0x80, 0x6, 0xffff}, {0xfeff, 0x7, 0x40, 0x5}, {0xb5f, 0x2, 0x1, 0x8}]}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xda}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa7c}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x70c}}, 0x40050) 2m3.665050776s ago: executing program 4 (id=2838): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[]) 2m3.6108363s ago: executing program 4 (id=2839): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) move_mount(r1, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x20) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x6}], 0xaaaaaaaaaaaad64, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) chdir(&(0x7f0000000180)='./file0/file0/../file0\x00') mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x100, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mknodat$loop(r4, &(0x7f0000000240)='./bus/file0\x00', 0x80, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mount$9p_unix(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x2210000, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d756e69782c706f736978612c63616368657461673d6c6f7765726469722c667363616368652c76657273696f6e3d3970323030302c6d73697a653d3078383030303030303030303030303030a83be65e3fa059cc312c6673757569643d00363639323761312d596364642d355930312d363331622d3032653833653365127365636c6162656c2c646f91c0e266707072616973652c00"/170]) r7 = socket$pppl2tp(0x18, 0x1, 0x1) openat(r3, &(0x7f0000000480)='./bus\x00', 0x260800, 0x101) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 2m3.409201946s ago: executing program 4 (id=2843): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffe, 0x7fffffffffffffff, 0x80, 0x4, 0xffff, 0x3, 0x7c, 0x9}, &(0x7f00000001c0)={0x5cceaf9a, 0xfffffffffffffffc, 0x2, 0x80000001, 0xc, 0x9, 0x5, 0xdff}, &(0x7f0000000200)={0xffffffffffffffc5, 0x6, 0x4779, 0x8, 0x81, 0x100000001, 0x5, 0x80000000}, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xf]}, 0x8}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1e, r1}, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0xffffffffffffffff}, 0x16, 0x1) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r6, &(0x7f0000000400)="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", 0x1f000) 2m3.343533102s ago: executing program 4 (id=2845): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = syz_clone(0x6b736725bae6523d, &(0x7f0000000000)="c9f91fcb95883da5bc325f82cb844828286567bccd13c1a2b23a4e8236e1fa103a18f8a5f130511bca0e19e34665c73ef6c2174c7a81da249bd0bad9837df8eccbd804df5b86de8b372997baea21873ee9bfacdc8af964639e12feec08eb1c8360255cf4fdbcdc2cc556acd828c310d31d38154f942cc1953f881883b28dc8c0b09ab72200cb1e7adb22e5615d0bc20d096d3bd61de76bec6c5a2439c86ee711a9179fbfb16f856f40e6b4690dbc6e97556771aaee3e3f3b81564ad3cf6eb3eb45231e75be1d1048900b8500264373878c3db647d0bb5149317df5a5d2d18b0b45113202969cb5d0c475245202", 0xed, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)="b295ad76ae771872ea660f41620cda3d4212646f7ce0aab3a384c175cfacd8cd585c1795c3d3dd220c31be8b5fa6a8a5e16fe67a7920978b4ba0bcfa153db009b818ef3aeea8f70fea672b3b75cdbe7d7235cdb98eb242d607d5e1470893354fb6a4880335390e77d2fbd452") process_vm_readv(r1, &(0x7f0000001880)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000001680)=""/244, 0xf4}, {&(0x7f0000001780)=""/225, 0xe1}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000001900)=""/237, 0xed}, {&(0x7f0000001a00)=""/201, 0xc9}], 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000140)="f390e83bcf6b0fbb65da3e1f04cc96"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = dup2(r2, r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000001b00)=""/100) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000001b80)={0x2, 0x1000, "1aee686e1d82356cbcf1b0d02d284fb7d8ef00f5b2e0c23ad70987a15c44671ccaf989a13c58b406d488661f454d3f1620174ea454c15a70089f9acc7fd9aeebde5f726926c362fbb02b4af9716f4bbde7d1ea61a6b699e785b6b5d79fe8d4cc164bb8d47c7cca15304d9bfbc2df30469d84175c136f3a73e889b65993b3abfcee9867dfe40d860ae40fb65d8752e352ea6c6f022319b0c35399be76b333045a561db6a69c0afa15d1440186527db884334be4eeb4f3fa79cef2a03f2cc9d7c39a007ce15bea0e917812fdca7efc81e3e1773ed345e8e2989625de7a3adbf677148bce01b3f2645a94e06d929a3b18d7a9c61aa6628ac73befba457c692933658822f3af614dfbc0b8809e54fb0f0b6b4dcd7b302fcd1ced8fbdbcce4a094a351835fac203bb4efe10f5f1f38dc89e8c55926870b2e56f54c685f8eb8e8533f3802ed3bc3ba928cb1af6ddd908002ff8beadcd26556ce680716e485a41017bd0bd0d155de832f3502e56720620d165c972e81d44e0c28dfc17c6e950cc875454989f69840fa91cb0215fa12944f9c2ec5ffa73a421f672f587c4b969010c14592296453c5a7f3045872676e082e5f190bafcc65b880cf1748ff1dc8dd1f239b29971fbeea6cce3356876eab02993f5133867bef95390b7c81f2a54d4d254ddc8ec75ac8e8ae970e5ced033554c35af48a972ffb0966106db475990390fd0ec2dda9e69d388e3b3c8acddcc434613e0ed7ca23fe7fadb79933ba8daff052417ff2d2826993ac284e5452b6c609b2a63ebe292aa0367b073a3733e2b8ef966855cbbe071911291e12cdc66c25cc848352c241ebc047fe613153ead5cad5c5bca4ae7261beaa88bd8a271213e768291b953c0be03c73eab6cca5ab6f7ce4a87ed30c3fb8a599c94c862857ee52e9d0b9d756ce643be466a192550bb2c2102f2e5a04cd2649a6783f22220d1be2bd94cc9fb2b0cf7ebf2f467b6fc3cfe16c857b108db72d142d7522121c22aed9e6c0139d737b1cd0f5ee13fcbbe1ed07e63d590e3ab9f47a207da9b9cd8d687db27b5a7c8355b77cfa83aadc37e8c47e789519005665f199cbb9077d81f48dfe2b6c7552079bf8d1dc7825d81bb4d1cf80d1ed67aedf8839ad2096cf1a5397259fb8708f9766bfb6b821c5a1b0a23a5a63b91a27776b0945df5cc0b0884e1d0c6c9113e2e22d587d31bdaccd0e721e32c86fbaebd4e17cd1d527ba6cc96dd0257bd67c6171763574bb8c578675f2ef0897fcdc7d189bb8106838caa7dc04caa8596e91443c32b6c3c3f0ce88fe77d6a74b4d0ff1ea340a37f686f35341c2d95352132eba34e19f8b9064d046391692cff2d551d8709406ae01ee545960d6e431ee72e2024f0f9b6b104654f39e8ab7bb925c156d177a136ddb87b91602a6048157726c1f0dd1f4469997ad02261924089e73b0fc95e7b97d24fd87f35eaf56cc9cc7be14a022cbaa1a8ac0506c9fcd6b0d5f07aef9174ad34eaaab7c6f8a5fe468c02310fe2abf2d72a8ad28c1cf90d44add950f46e23fa8555f30229eb3e79f2dcead94ce976612abffca75261141ae096b63f18cd8ca90fb7cea278aeb3652a4066e82a5f8dffc8f8cb0ee27470dc087bd466f43f3efd910d3dabbd93cc8f8bb4e2b9aa6434bee9b7f7301dbcebdaa3ec1b45cf2334bd7fce2038c5f6aad932bceafd233c5f4523667b8474e278dbf190ec7cd2ca6a04a144def07685cfdfae91e6a9de450c07a98c8bb09f4d053d8da6d45ee41f7b535346cdc7d4b8ceda19c5c336c2b8bb5f7c47d2a0e11c57814a075cc70ec242b9aced8b9cf0f31fbd19d5b1363ad656668ac7b78f7c71e90b35217e83bdbdd36f92f3cacec731b79a42b10ec7b2a05f840c15297576e5c824621b1de5ddaf294ef9b1c627aa63a4d534fa54a1864fe6f3a2c003b781b5322503446cf040ab03121cbb36d4c79b40f7d0a8ecd7b8d75aa9709114505ec6cbac724916e1d523e328d2d165bdb31be7cad88f83cedd603ba97fad6858b6e13872cb1d5759305bf891b4b5c3ffb4fe8db2a4b52a4a68a5aa08d9599af11fe6dad65f2e6aa74c3b0a7c979e0d471a51e4d098595703943621b5bd66bd4650a575595f7c58b83399c7138b35360870ebf78ad476ba1721108bb8925f2f5dae5122438fe9c5e1da035b3bc7eb7d06bd0fb18ca37df3001528bafbc0faf2ee2d5a201fea6ff3383f7b403785700c4d9ceab407f36441a274b6738573f74204b673ac70c00408df3f54d63d3c87a68aa0d62ddd9c88dd0dc3fdf392e87381e8883ca32dbd6f091d0001e7b9427b4038a27622fcf17e25b7f36d66a4bac9c13d9ec371f1ccc023db682d858e931a49da4804c41238757b26c38115ba535da3f2daad292c77b1e0783d005ac0ff73af9144f45b2b4eb6f6a343a6bc2350b15d1660c9186d485bf44318f44eb9bfa8fc13a0d34b0416c6179507d93bd27563acefbb8b2eed4b6dc04b43d233b2c3fa127ad91d35010e4235021c6758b0cb826554c55cc69b77efbc8a3b56ce0a86b297f453592a55ff79e7e91e39487ea1436ff1e935eaa31c8ffac5ca7f2c5c409eeb6873fd39ceb0d019d17e4c82eac31021ab9aa12742aec7c226c1ef09c6cb41be16bc854ec536833acb97fab353840f2888a6f75778e5f94febcf06b79f7f731072dca7fabd036ea644f356687280fa0abcaa8b82581d7001e374c7dcf8988598896e555eb4a3da88d67bc8b192a4bd90bfbf1128262e565a59d5edd00f6c19844e557e825d26cb5366c823f3fd81032a3147771a5e6fbba6374e47b8d9df878525b1a1c0e9163532ad1b729ebe4bd3f85ad96b7fbd4e2da7edb8eb020da4da21600ba355067ccf3b9eab7e7cb3602b53c85b128f001e659c655d15f80d668e811a52520e6b50a23a242fe55ea76421a4b7da2d2f8a836a21332428b6e01dae8a8a43ce0583fd74938efcec34e9c3fde53b0ee957994b08894c6b465f0e1ffa189297922cfcb969dfe4364da79c26fa9e6d68dfc8deaffb6515cef3357b3e0116e5975883faf5d9f964148a01779971623ecdfcc6e52cf6a7e6bf348dede28c47a6a65e9275bc5f127699e84c4fefdb894ffc1bc61eb8abbac72a5205ee1a4b473095ecefc4ae0c631e56c87fb882ee020c8bf8ac3fcd30e95367afdc3678c13ccca76a730cdd95729aa4b5eb73a3a0c424e923928daa3a109bdaa00132d995ae415f9d7eb832c9536a6fcea5556a48cdfb0d34cfcdb75c48789e063f7c2610bd97bdb73edeb61509df0c1a3949bec3a4e2e46bc057c645e653187e9f1e506034448b253246509bff280d5ffa2c43c99e461571bb51f0bebfd6612f9ff7e4d577be5844eb65db810ba5b3c4f62a90854fdeee5e2da4ec75f31a3b05582d4fbdeef1c69334c75797e4834e1772d7beaef3ff1b82fca089ef9ec4e340e6421685dad63b06cb76b645c82632421e51fd0338e248cea0413d7f86d465a3af1790aef246d44be1fca2f37652c2dea689fd42d3ee28ec64d5bdfdf833250d68ff2c9261dfb385b6afae7474dda9cf215d30827de6572ac2917cdf78e66180ad84f83b29327a47d8366733108c638c32a5ef69546d5387c3ac0e8d2228583fdd126eee96227a9092f6980ac2109c9203c0805041050fd715ad995d4d5827c4f319d044e95684a555d68cf9f301c6b73cebf149bb0eb00ae38073f888b8130f6d9f07642aaae96b7838212c5c6b55dde2ff23379dd3d1e84409cb77e768bbabd15cb912a0a230fdc97e46269a23ff99acbc4ef375c81ff61db83279ca09ab05f78f86483837cd2105f9141c7e9bb1182aa93ffbc1e9c093a0167f3f91346c92503e4c1696d07574ca59aa1d64bd210c3fd5112f1b5a259c2a91f708084545f759e48b14286b46ace75aaeb7620cbe268402718ed02edb7a6ae2a6565a331137bc04ea78292445eaa07ff18f5512cfadd09d60818a264e406691e121fb3adf687a4cf0369aea5a434c72b972ac79f0d7f8600170fb211b26cf6027825e2abf79c97c82bc1de96f82e4f2430bf7f10d133796b99468d27a1732ff109d94cda1c7e916809f8a1aac2fc31649c663f787b964d8e7d46038dfb938309569a5fb71955a080fe1cf5b8a0fc6fb1fd457f383f5f490205df5850df05590c42c7ab3a19fb7fd1c833700ee513c6e5431a2d869a6313a59248f4da88872f6b8d4f3dfca50100e7eb7ba1a2dabf97b978be545f863bde0c39bf4842ea219b6cf9d379fc2793a8e93ff20e2ed5a648228dc8b575cb7cf18927f1344ee424c704a4d7b464ca4689a874c650c35a7f120286e7d8d753089ba08225b72f2e62cdeff7763bab57ec4614b52c75f722f3d09855774bd1885f2788fc424c2d6bf180a70b1a6d18659d724f3624fafa7d1d57ed49b5f07f9e1d6faffffa37514321460d2bbf25872ba972fd2e3c7e31a524d9a322129f859d46dd87fd40ddea270dbd1a46cefbb3764ccd3c77ef7dac871b0d13b5879418e7556da5950e6de33a0bd60586c2c7eb7760ec4d409b4792a62c7e18ab72e406ade8aa946d892e80bd1d1b066dceab6e7d645389f83cf79b920c09422143f48bdac4f33461c8b8b0272b5c4f37ef4a0f0cac076f2643d2482f8215fdd69c037396e36898109c840d80b1396fbf2e5375d53475561cbb6e165f33c608dc9e82d5e774ea896483625a0d5be705fbaa3e91fc56ed5d09ef3d0e7bd40d6fb633485c7f553d59067adedfb9cc035118e9cb9b572697e8cb8306b6ebe19c7c1d2bd64f80b5b48b2c3902b2911b47bd42fcf713fb6e6c0732923e960b4b105f027cdc1054358f7b15d0a152481e42ebc2d5b0861d4215e0f1abe6821eee2944450e5e0922fc4cd44c2a0130197d2d753998239bb57f1d896763a55611793006b505e3a91ef0dc8593ddc2e915c62d87e1f85cf0853f40a49d0f23e17cee81b77c9d4716f4cae2d0dffbbae32f15155fdc710b1de17b55f141578159bc96dd4994a727796e55be0d4e7e94b15d788e58c571c62d7f16b520cb90ab691157967c89dca4edd8e8ea07af0195f69d8e9f43480a8b37d6f85cd5f506263d0995156fc45ff9b4ddca63271c4232173007410743303f6ff0283e7d5b1499b48601ee8119de5f971848afcfea0fc1eaebb2e64153d190a0961a6e39517d0c6d31a32ddea51bc45a2c870eee3ce9b16d08c92b17d53e28340caa5a34a79bc7d45618b6a8630ea748d544db12334dd95273af85246ea226c396a53b730937147e5d616a673b3a07b1b9151f0d83aeb4e88757865bc5ea8d0f5291fdfac2020f781def794f9a817dfa4752c74df57af95aef3a08c8766840cd63c1f75ab04da831fe3c28cad77099e2634f10eaffbf3abb65829c641c6c929eda4aa2fea886113aedcb9139dba988740619bb22b9ea2158863c5e044b353b22423c72d234969d2802a6c0c0974c9665fcca2cbeaeadc64d6855d44d5f0e5f0660d539996aee9a519945f5279346a3d65358b05f09df122a65bf61adbf6d4434db8d9ebc7b4816112ea1cbc2dfd6a788157093c2bcb3d719b918b92978d3bdc0b109e408cd69f82d410628e14b1d9aa7894a0360af866b71a05979cf823ea9fe7f7d3da69539f4c534102ba25034f1b7895b3067bc0bf9a599952ead64325e0310152c519fb234b02397b688c8920ae144d21d03cb6364478650db3c154b079b3c6d43b8e9dbfd0849088e4dd6d46173b9b0a63374b18db1bf2bb152530b0c4f6170d8884e95154c3495895169f005b19fb6d036dc7b6f27010b43832228aa0da"}) 2m3.286747866s ago: executing program 33 (id=2845): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = syz_clone(0x6b736725bae6523d, &(0x7f0000000000)="c9f91fcb95883da5bc325f82cb844828286567bccd13c1a2b23a4e8236e1fa103a18f8a5f130511bca0e19e34665c73ef6c2174c7a81da249bd0bad9837df8eccbd804df5b86de8b372997baea21873ee9bfacdc8af964639e12feec08eb1c8360255cf4fdbcdc2cc556acd828c310d31d38154f942cc1953f881883b28dc8c0b09ab72200cb1e7adb22e5615d0bc20d096d3bd61de76bec6c5a2439c86ee711a9179fbfb16f856f40e6b4690dbc6e97556771aaee3e3f3b81564ad3cf6eb3eb45231e75be1d1048900b8500264373878c3db647d0bb5149317df5a5d2d18b0b45113202969cb5d0c475245202", 0xed, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)="b295ad76ae771872ea660f41620cda3d4212646f7ce0aab3a384c175cfacd8cd585c1795c3d3dd220c31be8b5fa6a8a5e16fe67a7920978b4ba0bcfa153db009b818ef3aeea8f70fea672b3b75cdbe7d7235cdb98eb242d607d5e1470893354fb6a4880335390e77d2fbd452") process_vm_readv(r1, &(0x7f0000001880)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000001680)=""/244, 0xf4}, {&(0x7f0000001780)=""/225, 0xe1}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000001900)=""/237, 0xed}, {&(0x7f0000001a00)=""/201, 0xc9}], 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000140)="f390e83bcf6b0fbb65da3e1f04cc96"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = dup2(r2, r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000001b00)=""/100) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000001b80)={0x2, 0x1000, "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"}) 1m46.556825997s ago: executing program 5 (id=3048): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m45.589234405s ago: executing program 5 (id=3051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1b"}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) getrlimit(0x3, &(0x7f0000000040)) 1m44.66646948s ago: executing program 5 (id=3053): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m44.556533808s ago: executing program 5 (id=3055): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x110b, 0x2}, @fda={0x66646185, 0x2, 0x0, 0x22}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) r2 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x4a9) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4) (async) write(r5, &(0x7f0000000680)='N', 0x1) (async) splice(r5, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0) (async) write$binfmt_register(r2, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 1m44.448556167s ago: executing program 5 (id=3057): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x4, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 1m44.117200484s ago: executing program 5 (id=3059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000002740), 0xe1a2, 0x40040) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000002780)=[0xfffffffa, 0x7fff]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) socket$packet(0x11, 0x3, 0x300) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m44.000030964s ago: executing program 34 (id=3059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000002740), 0xe1a2, 0x40040) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000002780)=[0xfffffffa, 0x7fff]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) socket$packet(0x11, 0x3, 0x300) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m27.302568912s ago: executing program 3 (id=3255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80000001}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048040}, 0x8009) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) 1m27.238573027s ago: executing program 3 (id=3256): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x351281, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x30, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x12}}, {@default_permissions}, {@allow_other}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@uid_lt={'uid<', r2}}, {@appraise}, {@euid_lt={'euid<', r2}}, {@euid_gt={'euid>', r2}}]}}) ioctl$TCFLSH(r4, 0x400455cb, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',ro', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m27.115960877s ago: executing program 3 (id=3258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, 0x0, 0x8051) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}}, 0x4044057) 1m27.083828859s ago: executing program 3 (id=3259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) clock_adjtime(0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r4}, @increfs], 0x0, 0x0, 0x0}) 1m26.08762726s ago: executing program 3 (id=3267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, 0x0, 0x8051) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}}, 0x4044057) 1m25.501277747s ago: executing program 3 (id=3269): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.498097888s ago: executing program 35 (id=3269): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.155113255s ago: executing program 7 (id=3339): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mount(0x0, 0x0, 0x0, 0x200000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$evdev(0x0, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) waitid(0x2, r0, 0x0, 0x4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8000000c, 0x0) (async) socketpair$tipc(0x1e, 0xc0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) pwritev2(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)="7ff8b7c1a4d99402b6bf9c073b872b80a788477281e9816774cebd39077795246c48efe5d0915f3c97b9f2cd8d23b4d74ad11c7bd8c2005627f02db53d0452c3db8450b52e43c43dc066148dc3e156bcae61616f24688b865150ccaa86d7ef3ff651c6f42057ffee2fc116", 0x6b}, {&(0x7f0000000300)="82ba1d22699ac57e49781bfe40f99c4caf14a44e87d5da5cd42fb93be30e1d376ca2471e034a6ca265b3b5e25de97ae5018fb21c273a882c49eb30294fa90c5f8a6566f03c0615e0ba5e3e344e490b1cf5d872c4141f6de31896dbeca465f0e747135f7fa2dee250cf80b9176c9048dd59152f25e4d4117d2bd14d8cb22c1d8a24c5e00a0bd2e68a97182a84c720fcdcd0af83a16ab200af111b93234c7ed5d2b8610c82847742f01358149d77fe4c5090dbbdc8882babbd038db65fcaed73c97f72e9d9aacdfa55d363c30423", 0xcd}, {&(0x7f0000000400)="5c40393c07d1d5293d4da30425a9255f83f1cbff4743b167d60575ccde9fafa9cafd31c371bfac3417ef75e75933253a3c14a0ca588cb1986b9ad6e2dbd006544c88dfcc8020eb377bf53470c42a38cd128256175cd2b1af0e5db89dc55217c75ec9f29356404e56d0c08be44bc21b85850560be69fc24a660ffcb50af074c34e56fd2d66f4e0a4c037d35f7cd4e7819e1e9714f9c3ced", 0x97}, {&(0x7f00000004c0)="67baf36408eaff85479a4557c04346a4340fb342bfe6ccf9a556986f43911f695359ea6be796aa79d5343f7f395a644badab06b8b2766d7d854b985f3f1ba7dcc835995a1c1b590bee841a6d57b7429e833e071d4389d8d318a560a1d1c7cf15bc44de9977", 0x65}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000540)="caecaf68ba0e9e75bf75468589bd1a506d21568f3136fb54d0e5057625fc298c61b0ad26cb5b2593c0143979e5e92bbf0ba9ba18a838974425e41e37436164003e93d27dd840542be1bee57973a7c25d54978f196b7226ecdb4e6e72e90ad6ea7b6f49bd2870b1b22af138ec7a072225", 0x70}, {&(0x7f00000005c0)="f370b80c859a27e50af910c6ac222e734fed4b24db85dfcf1c6ab3ad080c1518c8710b2caab516511cdd0d4d1c065e39bc2c2af88f368c7f9d8367e5260a570601727ea5a4a709dbfe9739c8f8d7a0676711e35dca6e6090fc8a3df14e205f205bb8a1ad00309039d126a9173f3b001a4a102c5ddfb4d10735a6e03422c07af43978991d24449d89978f2f85a8eb849413e0b83926dcce15ba70980ace00531a", 0xa0}, {&(0x7f0000000140)="7001d57ca4dd137b082170e1363b77a51c4d6096c4a74804dc7b", 0x1a}, {&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000240)="3cbeb2208447c8db2041943e10014a102e3a66197e539c5c512ea372774aed51b6472ef3837dee52", 0x28}], 0xa, 0xa2, 0x8f44, 0x11) (async) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x0, r3}) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 32) read$eventfd(r5, &(0x7f0000000080), 0x8) (async, rerun: 32) stat(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)) (rerun: 32) 1m12.028519455s ago: executing program 7 (id=3340): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1b, 0x69, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x7808, 0x9, 0xd7}}) openat$kvm(0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001640), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250d00000006000a0003000000"], 0x1c}}, 0x2800) ioctl$TUNSETLINK(r2, 0x400454cc, 0x323) socketpair(0x23, 0x1, 0x1, &(0x7f0000000000)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000282000/0x400000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) inotify_init() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1m11.802083174s ago: executing program 7 (id=3342): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1b, 0x69, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x7808, 0x9, 0xd7}}) openat$kvm(0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001640), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250d00000006000a0003000000"], 0x1c}}, 0x2800) ioctl$TUNSETLINK(r2, 0x400454cc, 0x323) socketpair(0x23, 0x1, 0x1, &(0x7f0000000000)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000282000/0x400000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) r5 = inotify_init() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x8) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 1m11.586893211s ago: executing program 7 (id=3345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x100000000, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000039c0)={0xc, 0xb6}, 0x0) syz_clone3(&(0x7f0000003e40)={0x100100000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000140)=[@exit_looper, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 1m11.34509849s ago: executing program 7 (id=3347): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000090a00300000000000443f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000100000000000000030000000200000000000000000000000000000000000000010000000000000004000000000000000000000000000000060000000000000003000000000000000000020000000000"], 0xb8}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x2}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r4, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x0, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x0, 0x12, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="0f024a3bb690944e3de505d3fced17aab3fc6219c223664b375536c43567b24217e7515b6bcc37c8ebc93e44706d388af11f89fff5df3f3c79372812dc95f7b1ca96c12eed232568f7f9b84cdbd6ababb6ca215ace17674ec1a8a30fc08a9a897aea8220c07207c0e46eaa8c6bdd844de199c51e5083a17f977bed486827cba2971472aa5a2ccac93df1be76a576f791f9778e8342e35eea79baa2da394b8f0ae40682d3742748724a2d0d37a2c0b553f44ba8f211424765f8fc7ed0f78991b14b279f736883abe88d1ea836732a28bea1b3f719361b672e68a1839eedc6791570", 0xe1}, {&(0x7f0000000300)="45c39a1df0ce6eedfd1afba996505e109525327fc7ad1f1d11ff8310d5c00fa14f1aa76f71368f2173c2aeeb2724f689a61b1f17c142bb6c5795b6bee935c426c3a9cdf45ed2d1216941cd0ab230ac3e9be1aa2eb19c9ce96aa115c38a763b08201e78eb3969218176f826db5b09331b1fbd378f9cc844d401d6d2bbaf5c548e6a554aecca2d5f7d1d9b89107be947c930c8e0a661b972b91783be9a885d87939f3403c384", 0xa5}], 0x2}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="0f024a3bb690944e3de505d3fced17aab3fc6219c223664b375536c43567b24217e7515b6bcc37c8ebc93e44706d388af11f89fff5df3f3c79372812dc95f7b1ca96c12eed232568f7f9b84cdbd6ababb6ca215ace17674ec1a8a30fc08a9a897aea8220c07207c0e46eaa8c6bdd844de199c51e5083a17f977bed486827cba2971472aa5a2ccac93df1be76a576f791f9778e8342e35eea79baa2da394b8f0ae40682d3742748724a2d0d37a2c0b553f44ba8f211424765f8fc7ed0f78991b14b279f736883abe88d1ea836732a28bea1b3f719361b672e68a1839eedc6791570", 0xe1}, {&(0x7f0000000300)="45c39a1df0ce6eedfd1afba996505e109525327fc7ad1f1d11ff8310d5c00fa14f1aa76f71368f2173c2aeeb2724f689a61b1f17c142bb6c5795b6bee935c426c3a9cdf45ed2d1216941cd0ab230ac3e9be1aa2eb19c9ce96aa115c38a763b08201e78eb3969218176f826db5b09331b1fbd378f9cc844d401d6d2bbaf5c548e6a554aecca2d5f7d1d9b89107be947c930c8e0a661b972b91783be9a885d87939f3403c384", 0xa5}], 0x2}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xfffffffffffffffd) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtaction={0xd8, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0xc4, 0x1, [@m_ipt={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x93, 0x6, {0x3, 'raw\x00', 0x2, 0x1, "61db16556664d2dcaa609141be618651a2d1a79083937abae46816fd40fc3553c78553ffdf7cbdb6fadc5f94add5c518e9ae333cff7be3aedf445c7beef4a1d1932844dd982725c2af869f1ca91f91827363e2b92251ca18a9a36285154a216e571932a6ec04eca796"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"}) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 1m11.280279275s ago: executing program 7 (id=3348): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) ioperm(0x0, 0x5353, 0xffffffffffffff7f) iopl(0x3) iopl(0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) process_mrelease(r0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x3a) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0xffffffff, 0x210000, 0xffffffff, 0x3}, 0x1c) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 1m11.152038416s ago: executing program 36 (id=3348): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) ioperm(0x0, 0x5353, 0xffffffffffffff7f) iopl(0x3) iopl(0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) process_mrelease(r0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x3a) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0xffffffff, 0x210000, 0xffffffff, 0x3}, 0x1c) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 23.833034886s ago: executing program 0 (id=4172): r0 = socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x800) 23.792077559s ago: executing program 0 (id=4174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0x40480c0) 23.701490937s ago: executing program 0 (id=4176): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x10) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 23.65866237s ago: executing program 0 (id=4177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2, 0x4, @thr={0x0, &(0x7f0000000100)="61fc69282307df14ad5d378fe50216aef466a89c9865fbfb"}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30002001}) 22.633196553s ago: executing program 0 (id=4202): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) 22.561211879s ago: executing program 37 (id=4202): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) 9.825167227s ago: executing program 6 (id=4246): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.825093267s ago: executing program 8 (id=4247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 8.120045285s ago: executing program 1 (id=4248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@acquire={0x128, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, @in=@private=0xa010102, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x100, 0x4e20, 0x3, 0x2, 0xe0, 0x20, 0x3b, 0x0, 0xffffffffffffffff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x4e21, 0x9, 0x4e22, 0x83, 0x2, 0x90, 0x0, 0xc}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x6, 0x6, 0xb}, {0x7, 0xa0, 0x9, 0x200000000000000}, 0xba, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.116606855s ago: executing program 6 (id=4249): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 8.073073638s ago: executing program 8 (id=4250): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004e80)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffe, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x7, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0x4, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.257620385s ago: executing program 1 (id=4251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 6.253652425s ago: executing program 6 (id=4252): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = inotify_init() readv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r3, 0x0, 0x0) madvise(&(0x7f000040f000/0x4000)=nil, 0x4000, 0x4) 6.209209529s ago: executing program 8 (id=4253): io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x800, r1, 0x0, 0x0, 0x30}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.209117169s ago: executing program 1 (id=4254): mmap(&(0x7f00009b1000/0x1000)=nil, 0x1000, 0x8, 0x28131, 0xffffffffffffffff, 0xd8d9e000) 4.265589456s ago: executing program 1 (id=4255): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64]) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x118}], 0x1}}], 0x1, 0x80) r2 = fsopen(&(0x7f00000001c0)='exfat\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c001c1ef7ab7dc6fa8eda71c1a0"]) 4.261912126s ago: executing program 6 (id=4256): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003840), 0x8001, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000003880)) 4.260956156s ago: executing program 8 (id=4257): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1f, 0x4) 2.187235954s ago: executing program 1 (id=4258): r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2.179867774s ago: executing program 6 (id=4259): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 2.179730004s ago: executing program 8 (id=4260): openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) unshare(0x22020600) pipe2$9p(&(0x7f0000000240), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) socket$inet(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0xe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.12306ms ago: executing program 1 (id=4261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 969.09µs ago: executing program 6 (id=4262): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0x97}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x88101) 0s ago: executing program 8 (id=4263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB=',pcr=00000']) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) syz_fuse_handle_req(r0, &(0x7f0000007300)="982cc862c8200d8c1ff554106814d4f5a2059cd2c0d20e25e286f1377b3b202b269fdeaee1f469f3b5619e523a7d6418127b0c2f6f111846ba908d72152d095573222ade10c439c61be416918aaf249cae34f3b13df9692e01aefdd4335a4c3b0e69b98837bf5f1b581351c12e13ce1c502d84b576b214af9ae0f7a8d50e105beede20c54e42ce9999dbc5d57bed3d714f07931c169b5c76d7ee8741367aff49b62f3bfb12077dbc51d860d78760804316e904201e1d096aa5495918452336a4e679c206786432ceb64dcbc4ef68e4d98a5480e2507dfcad7ed627b7583842357a4172950d1a3c3c4d279d5cb291d1b0769f7bf00b1ffc3e778db57fb1c9f8f722e36372fae945c4dd3fdc74352c882a0db3478fbe72ddaa84d1357a2a16dbc02360385add24b03a30f0999e1b59df7b3c6f1a09d70276fa08505105411b382107dc619deded726f0c3ad06bedfc95237b63e4bc91878cd2c18c34fd5c52cc1e398f7a1e29378796f5c812a043a477937ba19cd4fc0f788483024bb1a574d6ead92a0ce8c070742cef6cc3fb907f2165b09efd7085698a75269f3b302aca742165288a9b8a576607b61bd82004a552b79337fa47a43940a97f28b61823c680229840e87feb05c34dd1d31263599fe6066bcd0a3f060e3f626d38cf320b74ab2ff34aedf94157f2a3b06e512163599ef306dbc184797b06088fb8062f68fe3eb6cc5dd53b666051998224aad36b7b8f6773283bedcddb620758b8d9e7bf35316981b560b680136a38de9c0e287265799d14e618f881b108695b34e08fe21c0088fe40f639614ab378d2391a556d4e61827a7c24a04dd641ab563136d5fdc4e42e4f43c6addd9f13acc8159d9d1130476e23d6613bf1385c691de7008ddc64d09d335a507ec966022ee52155852e098ce866e5597cfad9b62fbd7cdfd92999d59487db7c0e35be30a6593d30c5df4f67225658d9c894f38667b5b3ef0b7b50e060214cc03106035498bdd0e9e52bf1e2d14f1cf55f31ffb55d2ec97ce8716afad4e58b925882d5a7d83e330d4a2048e5fb36876703959ecec99237b0879c62a2542341d7d38bf63757e1ef908e90e841549fd07df3596fcbf6e2dc3deff6a11f75e0352eb35100a91955237cc950a40fbbbe0198b0337cc0e80e06546660b59bf3df867c2612beed5591f8919320b4cc7627793001595d892b0587b9cc1f66458366ddef1e8a929b1eeb32a66b0286eff2e197d38420ba49977efe90c8b3ecf16acf5c313f60a1728d5ab7861ce7bbdf0c0c4d6327803f600b7e362797a1662a94c5c88347696c49c3698ee8cdd5bfbd50f86c980d95c191f2328e3a8c17ac6da1b2d17703ff1c8a7c30c75433b0f2e45c02be21bd407f87d79b09828f5901dcbcfb5c05b6cfa62ba4caf2c50c6892cfab72e2fc17c20c4ace7879643815946a4a23c123f15bfba584e56a58b42cee1a368c1e887c0ccca0b7809708b355100ada94884f69f91cbd9ccaf53f968edca88a43eb7434c2906217512556883dfbd30206acfbd908262071566027b8c0ffa8a1cfa10bf5a118c67d0d9828f9915f6a98d3fcb59661abf60c50af5b2447aecdb9aba1cabcfaec9af3d7c41a65a033f070a8414d53988af328348c26032d2c8a0551e754b3f0680bcec13a466838e843de4c0287c47234b83344988c95e502e9a410ea69d01eab179ff59f63e591baed0c94be1a75ada96e5907cf2b4cbd5f1b9178140d693b5c85a76331553097808f17b7523dea2343ad6df9f08eb099e6ea43a255d8ff9086d5e921aacbefa63d265787eff031d6f3b3a40ba83e44877db7c1a3fd89b8e5e1635a38d476d3040d4e3c834d4f8f7f61645e876a7c33a538e25af78ae88168ae7aeb6546ddb10189b08d16d544f60a6969a14a5f7076d122f60a8a6eb09078d6f0b2a806e7c41b6254cce3a77596ecd970a76d9d26b8e1d3b30a6851f00f052ca2d9e88d9e51c66623aeeed9551cbca305ef17538d6a09afeeae7141f280d05872022e88f387b8c920698ccd0e6771debd9cc753cd671d045e6a577c04e121fb5fbebbfe64acfb2b854f82ff09f363bac903d29b0a666c80adcea367433b30f640ec589797df39aecaeaeda9536d0aaee9df5ee94d3dec778d9c651a7abe2a844e2ba321883016c47aaf0b269c426bda493f770977a1ae638d1ec41ffd86f367e5e532463556f0f41f69921a0088d46f5d94228c0826c6e96a50fba40b900e0739006709f9d63582f4ddb6fc41b727945345dd2b534544d035237012ed07035438e11aae97850a3b6d1acbae600b8c1d5ad51d01bb14b23598e1ea6b2381628d90f03f75517cc9ecae4893b7bae92bc2c96ccf28242d2e6ef1679a630e17ad1fbb57156ddbca65ddb2f55b6d1afaa7f0cac9625640b386616bef0b97c3b080375bcb34f04c5fc6879d32670d13668c1808af6d1622ac5bc9e431f14dbc03e0fdaea1c7ec01ab995cf15610f0bbdbc5241e74797f9bc50bc3b41bd2425d44d5167dab1aa45285253055d99fecdeecf2e2b793c430b66d3200698b9974f7bbed83793fdfdbef095b9c6f22ddde95aa2f61c1ecb55e92f2b60b85977ea0833ce45916c1c578bd9fa7560121a3388f2ed3bc7432f1f6ba93bd1fc597338ffbd23efd7d74efa81afa836a28bc126144c3fab6f8448a59f21f03c2fd1017546645edef7892aa94d5bf2101721b2f3afba3e3c7eb185abca9f6b4ab46a5d37b392398a6ad2fb3acda25b6dffb073cdf5a188116c105b685e4aced5ce73d630bfe92d097a373d04a1a5b16db2d4e96802eb089f0dfc8695ba82d3379920584571c19932ef2f13d0c68e9137f78d30b466979a6e5edc5f455560b5b880b639702718b3438264dfd6d06538f2c2d40e9e0a9ce2293b244fee80b708a849aac56a3ce00e852a0729129ddb199b84feb8ba2685a75b7864cdae9415b89096b138a201ac6a0704e19844d3dcba180f57341d10d8eeacd3975ab12b5a91734f2663b1df7bab222e718537926d15737cfd1bdd0d267ac883df47e6749c95d1189ecdc0fe7372bdf9c2b8ac0b0e314222b902a18dc3ab44a849b1fb2ba9ba98b526dc03aca0aaa1cc852225492de79a889fda2143361b7eceb8b5a07f21ef6eb026c192ae65d6db9f8dbb44d0beee85a77b2ebc3178ab02a6dc1748b5ecc91afbc18baba02913d1ae11f3ebad77219e1c225bd3f4148dc5c9ac119613a965704e61236195e1799613c0233d01fbce80d7d66d0b2fc197cfe0289a43d208db4fa1c38d8ac9029067e5ee6344a48d2f827b702ba6a0a5a19f1010e88b3d5387b7eea403948a5485723594e39db95dab77a5f7b0445fbdfeabfe5c7991f13498e559bc7b59e16e2a46779541afe98dbd96c0d92531a0ae99c6ab5ac490ae758d1c0c36945b48bc0ea26c71ccf6d70a565cd3366cb72ba1799eccc51891cb266ee9abaaa30ae54c194cb0c4913dc5161f1aaacf5a650699ec61f4fb948dce750fd3e40bc8c9de7715e3461db33740175881ea815cd5deee01466fe8334a76d0eb1e56b8f065109047a29bd17554a4b7fce03caeb52b65de55928323cdbe7b18b1d608695a1f662d9ee8a8c4e6ef386f076530b23f19132df2e5a67f287177d0d19cf4be172ce45cdb12071d3d3bf983668e249b3b8065c1a1ae647c742dd787b4b8a2d3b59d6839d880be23e1bf09ce8b7f351f586a3c24c2d45e94ea390e6f062c3def67e76d12f18110de2349f73a275bc9685a85f6d397556ac773c256e225f74196436211bf33b3ddc46d526bc801120ac4f0cae0f01787172a20611c8faaed0e0bd86e5385a88e706509fc6e754e6e40dfb7c3d3c3e8fce40b85cc9866896e411e8139d0a1bc0ae37a3326eae3f88cd0ffd8d5f0593f99b29df427d3d5e87120b8425b59519bfb0918843e48a8131dd7695a7e38cbd4ffec4dcc910e6f50b20718b251dc00802217b55916ec52a34a75d28aad4571ac6da15e65560117cdc79bf254dd7efa09926361c4093066668908236a58959f5f71ee1e65e318c29e624fa046dbb979a34fc0585821950925c0db0ea7b9b1e5ffa23cdfca05587f4ed9d06880fe4ba5bae6a471c1ec34ccffee029aea87b8f4e2e1a9ab11f552d289d91f46e31398873b7d43de1c285f8664a1676d3ce407b35e53d4c65faab5f37fefb61e597b2f66624d1bfac7d9beb80750e4be50382c5231a6daf9f70b20f76aa82acc39a921fe0a608225ab6f4a460d5a37664031e87a786765a81ad19c77fff4b3655b2181fefbac1b8f94cb222a32bba79d6f7dfcd2e068b021ba4f64b791cec87a644fba520895b48d8b91b72d79fb81518dc8ebb862752dac43279bec3687464eac69146b64f27b5485b56d69a9b848e8d833bb8030697aa6bc3aea1b74cd31f8988ae8dd41eb4363730aab15a2cb1104dbacaa0f0c36738e16d33a46df2e3a351e1de750de986713bef2746fd47f8c0f81941c4e8b6165dcf339cd1669e49c19b7ded48416e9fed6e70b88c960ae744ad758e53a35afe9c7fbf3a0043f17752d0aa51dd0441c77c68559794162b50f0e7895afe24ac0e1f633c648b4e435304ca5cd4b2dd342850e43fe45585324007542207cb953753805f80251704d4ee08ac851f12c3e562bc30a8699ad8a0ac9b4203c11997612d63be0a14acd1730c7800bc2f3a55160ddca1e18c4b315d2ae703e3803a35efc914a4a23f8408bcb0a029b6e7aa7c355ff50c33e0b846907872f149cb2540527806f7c699b55dada609b343195577b49820ee504d30d394c269c76d146cdcd3e391ff47169fbd7a9e3c356a7ad3a3113fbdc950335dd815500c4d2639f83be7fe6dc79c01a32376071e0ed008e25e0fed329e623a0339f7217f6724d7e33f5f50864ca0fce172bb04ebb2690c29889f5f841e990fcc5d51a161cd6bc9b1d7270ec31cbddc8b81b331d800cc43b6ad8ef32a3e268933892e6c01ad45eb23e0f8ced96f3a6d0cf21727af398eab7a836a753442e5788c611b4bc2d6ed0154f70031c7b7db07a199d4019232f4fa283e6821d9e159f69521dfbff27b82825255c2c6ad4d54f103f5b40aed82950361e13d1223ca99479f59ac3315a4483d8e30f38fe0a326fa5fb892c7ce240a68bbe0010a7252aae83ce118267d009310485c03b6b3c5e49bc74cbf1b69adc21235f5381bbb4a1bbaee3f7590b619c42601faf5ec03ef420ff7c64d793ad2df6cef47629d47c81d739c3fa70494a249880ce9f5b958f54c04f1500c16aa0816b2ab02f49688b6f651560e23cb52a67d09fdecf0d841f2523d7dbf40f5f243abe0d69a5e9949b34404dad37a7429f142912c6cc3ecc35edaf7efd2d3f0087f9b8d2d9180e53c4a28c60316d95cd524c8e14fd48206f5f47ce5bc7dd86e1c6c28ca0595bf7d991d4e6f1dcce9c5e91b8df31ed44d87841545e544d875e4894e50345f877d12aaed31a9773636bb5f108961999934bd72a4f0b04b7448b4e09bc35a017393b0c0890cc0d3ff642d09d2e624001c0d64c87d6757bab0ed90273a30cd655e69e058955130cd2576a71f4c2dfd4724bf4cbf5e899fc2abf016b96c006fa3365aeaf836cffb56883fbf6a849e05ac42c069950d62d2d049e5b1b8d8bb9f00c08115a7a8437cd8861275de171c828f7ee58695d0cd960fd1ad6001bc2150ad0f2bada19225b016920f4c42187ca41cbe99cb60e6b5e72750da9882f9fa24ef3b5af58b2598de31e6f452572d567ecd8de20631dc470a39be1bc50e3e31f16aee3406258e0349420e1e3a3c8835d9a22da3829a57fadaf1d1fec1c5b65f43a0acc877c5ab9f796f73457692cf3a731457555782e55a3d9b8e5de6f5edbb04e4030e69ff571c7c1267bf0a8acd9c175201a55a679b90ad59a801f760fecc0e63683de6452273fc799a6fe00caabc83222825172dac875525812f6429b4508fde8537e31758a529f86ede05ba02aa8ea096c63b8d1f302fb3e94f0ee474ed59e5ad4d32bb3ff69eb3e97062b24ce803fc037735da8c430ac997a17c22a12a5278c89aa1d0b18abcd584616379c6e3224aa2fb2f9de4a21c77640c4a1f22856ceb7e5ce1947e595126cf556f3acc82060de5f5b2ebd72a8a2e3dfd9e5a6ddf0281c2236abd282e9e185c896d6b8b482ede5ac676f977cc80088303117de7690c7401c7ed36de5cd4ad6b4528b307478bb064998bd6a0a38e4c42634df62e5d6705953d92a1abab5d5375ea330abdcf0ad8660a035d7c3cd9f9ead5dc76b398a2ad127e3e78b60bad7a426dea13edf1eae3b0f0c2fc8b07b8d5ee7ff92e5cde1c0aa03bd0045e55fe8b5c3d8f74b216ea281243a9870709f09d4022bfa07e5dab02334686c49adf042f181659e0ca99ed76f21215af2397b14ea17a989ce2194e6266e3d0cb2cbc102f403fc0c9509e7277381459ff5a504c67c59a1bd079358659a58df4656cdff8a4b62377cebd2731aeace7f1eef6512a9b0c810e47f66c82c78ffa9d5a2e54021041b3dbb677f06f816648b93a8abf3d6fc5bd8b2a8cdbf53e0a0868091e27e31317d04629fa8c85cb0ecc27d3ebc583258704c822ae2b37c60a5a24b16e7ed4754095bb7b4dac2af4e89b6f6fe9b5e51c6f3bf8723bae39f90d6d2f9260c57fe717251164ac8d3bd0519519967290fd7f780432a072319297ab28b56d9b04762b1a6512c869d0f37460f7beb55e9bf18de842327c30b6faee377b4300a4831b585d4bad8c3d96afada78eae22544839ac300f7757add8fc56b4d858382320104bbe82864258653c76877d107c5281e2925fa4687519e07cf8ae1b2cb2a48349ba46cb551d7a08d51d20e01a13969c93e1f4c507ebbb170cdffbdea331e59404130c6e335a30f968863ec5d5299e391e9ab2bdd67ce1c969371b08186ac44795c2d02936510daf26983939a54dab3b9e471f61ef68af66780427ef60a62c3cec537bf73f94a4b4391cbcbc45fcdbf9ad1173dff0295b4f2eed185358989e88cd42a6dca784ba6a8d94c08466a75ee1ce03eb28a2f9ceb8023c973ecbf7f2473d68c4a0b83ae8fee1f63137fe55102950b88f685b4025d0d688b1f3996961bcef67771c4def4b3b8f61f83bd8bf3d7d7d062d39c16025df43c12ce606642e02c27c191b23654898bbac4676d4e340dbf5fecbb7b1e3217570dcb157816fd2510c3fcfee191b8b04098f3b57a234bb95208add056bd47a250a0863a6a4b5f39acbabf84da6d184a98dfff2118ec7c897e3a68da40b15747e5bce690e9002e6af695ed97286271b5340a14c750872ba11af5b5decf9b0869309cb252e9e122da4e0556b9630ad90e11424ec18de57f756d8f9d4893f3500267cc81759177451de09eec54f95671acad09436d18de357dcf793ff3107345fb0a9979c298d85cf41f5e5d331529c8553831009bf12b6bd766cc56d8dc366651fc5eb5055e96dd4e49f914d4ae3a8ed50c5be242162821e46d95ea2708e899e85359dce28cd3985bd65942b3e9e6ded60af9457457c79f42b813b804cbc9696db3067d4fbe36fe8b6070f63dd7f1ab415e9d0d4700de00bc3def581016b49d286f2400b7f5747b8d7ed7dd58a92a96a2ad2b29712c9f9fd2c47fbbb70a453aa81ff41d74a49b1e7d8e3a12814e6647bb1f5e24b7a8be384c941c80342e8a007984ceebc7827adf604ccf526b30974b85cb029ab3f4134aec086d41a7282ebc59cc11002904ac4ebfb6ae46807e46f2f69acbb8eed83b6ad6f78bbac9bcc77318301ec9d4e3b522aed9ec8bd368314e48548e2d0417738c16d881447c39a0103fd58aa006a653ef3aac9e8bcad22671b9f3c81a89652c46681f613703d733ff81b3ddd117cb9010aec887f3b4af449f32b19f52135cf2c1b53c050bdce376c26f09c47d3223c6fc0329446dc3886a49477d1619fd251f399386f9678bf1da5eb8a9e9ac36dd96e9dfa2b5611cef1b78562e7eb7ce43f95c435dd1ab797ebb788adecfe989d77f7fbc0a96117dfd5edeb662d45b8ac2e898ddcd7ae58d9f708d9ec8ea73acde95d35910810b61c5e74a4102787465fade342168ea9fb92878399c36514d050f535cf796c7e22c0440795539bb3229157125bcfa2f888731d59ed8a3716c91eef696516ce512e32c2e7ca72254e61a5c1f664d948fcb4b7e609a8ed506d116f53a4dca2c3f3ab77702ae2182144c3dec15c95cba39d72fbe2238d976853dabf0aa3a26f70bb6206a58e09c8b073af9f6011de027f88b1437e54fa9cc3b51faebb9e6d103994820f6bbdbfaa00a506e5d9f9e52df701d39f9eecc4596322b7884025d839cabde15c680af5b148c2bc26f0f7b47659cdc7a058903cbaffb6134a1ec4522aca09595505d8183842434315176c227cfb29add3756bc81cce01419b1c164094ec3b8cd8f4ab1dc3bc621747adf52114868a12216630fb975133069ea665bb309464338d3bf1ad6c76fc279949f262167528efc614ef88949573fe6c423eeb3e70ca0c6fd8990ae36d829155027433a7dfd19316d3ca801760e2c78953b8fa30cf6fafbe2b9f655916fcad53a402646276dd662e6335c7a32824d40ea3ac5800af0ba5566a118c3a52f6405e76b8131a2b1c572f7dd6120bb44dc2eaf28bfe7ccb3dbe345762da427f93f796e77c0cf62581571c116ebb1754000f6b24cca3ae15b4aef506ba8b00db0bb8094ca6a7ce4d3afb549b6026338e5a3f7627fbe33df69517bce94bbc56af21ebe3763918127b87d891c12bc9b47f15657f84d79eb6c2d862337809e29a7d6dd4928fb64eb02a64faaa7edf36bb5e80d0f0b64aef4c6a985804d8eb93e282ce1745336b9b994b4bfb1e45c49f9a6b0f9a9e9044b30b778c07c4b40056b5d94d202cf5cf1bc2edc9a40477b285988aa84f7bb337053bb795eef18b78daa79ea742746d95ce89d9ca013641c463cb6de64ca288737bd1e1989eab35f88863574ab52b21fe7bfaf8387fc3af589cc3501c1530c8dbcfe26c594f1a174848375916f384e15665477880f4a53eff4f2ab091024b3ac41ed0ead1f9c847f486dc5c18dfd0c8ba98464c87b091199451f354b6cbc3adef16178aaf40a0e3a428d6a73dfa9f8706fe63c5a8d89610e3e87f0ccfcfa682e44a52a6fd97434e81d5c95a85fa3e79690496b8957701203c6345bc34f514b867f0196d0cc062b574907f7d1aa6c0e86bc1491a3238b19415a593989618360a859665a2a5a100f75dfde1ddae24b10ab3c0ae34255f7c307c1c24b71ae83c42366307fe79a298b0947542fba1f0fd70d54b8bc5cab7542286102cdba545e8da28c663ed0d583d28ef31d9c795809595ea8af0f9d15fb29bbe8d1dd655b6f86a0c3decc505a7585dba3c0a46e27117a4fb82aeb3ff7022e4975fa91a209f463cdb8734b6283e1f44a45866275de4a64d9f2695ad51ff5cfd0e98af013026827d20ba4752f2de1ba3a5cfa3e99514417bc10a4233e2dfbd77f5afdd236a28ec2b8682c9a084dd30f8ea2668120365b7238fda6fd3fe1aa8b209992aca6af11f0b1c18194a668b7ebbab3d3e51743e42bb5f353d5369605cc2dba71fd9bc90cebccba8b8df32ee22fc506b55b4847a8f6f239811ed7a36622cc0127cf6432ea988a96a82879759d786121699918bad77f391e68e6cf8232078e64fd3c2cb92a6485f22b6241ece9040b56992faf3eb785475c111aee92c9e01c7899ce8613310d948f5027d009514b2f174666af682acc785cf2ab56a0a1f0ae253c6b2965d254ea9363a44a2f1fc9bbf3ffd505c940ddc0b6561ffb85e80e4a86fc64d73006c1ac970082e4cfd35558671effab75c4781f91bb280d2b58e733f6920bffec5dc1d4aa3769b83fcf605c02c09f417ee094390cefb4995291b304815d7f9154fa07b425fc541ccc6619d38e6f543aa3bb9d9a36364a1faf8a4130c9e91f51c37ec32d177c0ed930a4400ebb14f5dd45c18d4ba2f6e60b8c8fe06e5cf7724842bfc73ba753f0e84be85e4028a6d02f181a8138d3f2217fe987914e958d2ce86a065dee3aa549a2d5bd8940866cded688c7a110aa93ce85ccf63a6e54802291329f6feeadb64b64fea24fcfea8674b0d133ec499f72a27dc7dc590ce152c815333c4e32b8ccda35702bab37f254e68a293cdfa9a35fc05fbf71482abeb1aa396456e35a26e526e58f6866f1581375bcd099657a4ba6ad98eff98f4e2a44845b1afc754bee5e1b7272a1248b049af0231166ad89ff957760ca6e08d646a4729945d2be5cbc5852487b46ec089ae3c35ddbc9d3fa2d80d164029c46f35e8e8266a2db9da93ebb6567f159b4ae2b088260a5eb3ad3c13aba2cc518139b0c9d5b985c1879e5783d0f23de8c1e82d4de27b893b4f8b4d29493d292d708f7d2d55d8f4108dc52ba78a89a37d53245128aa470dc95bc51421fdbdfb891eb33c283f897e374846bac2886ed67fccb4113afd87a3a2991996fbc8dfedb216e50f7b9faa7ab69be72e1c7ec181b403d8a768a7b72fca2756cabaf9c6c7787aa10353e71afb48dc2d1c50591ad38c37c9ec3ee60d8f0e99e4f7b41d3c9bf7f74ef9b26a998fdee3de4da7376b6fa2b28a68490f3fc75d764c24e89b4bc24734f59b76fc455f5664140fda3df96808419fcd62bba3bea13a364a2cc53d820799162f4ffcb0354ad666b0aa075913757e4ae125e29f83b1aeb3f5456b880c0d89dbb3027087ece67bfd50b3af2e9ec3564265babdeca88f04186d53cd651c591809fe0447f8cb2ab692eb126a16048acaa9757370ff13adea312890488581479060c3e31dc67ff9fb2d3cd40e91c73f8a0a658b8513e6960b037628224037d486b183895f81b29f15538fd60a4c9d7296196f7c7e912c22c9292651337d5afac8ed317a372e5794a90b001f5526229f0c8307d0404fa67559e6d65839b6ea37321c12ee67f937850d84bf5c6b6c26bff3f6f761fd77accda27dd677cf14e8353380a094cb62738c41a2d9f28cf34e7cfab41aeadf9ed92c50ff490bdf39f07c8bed8be80551e82dd6dda59d9a1e330977ae9867abc9bacba17b211a849558ac6961ef296b934e4a066d98d6fd93b21f5639256205a19d56bf1bf6a72abcd47f51bbacace3524ad374d0ddf277551a8b19a1b83a3924b46869586af829ab3fc8fa00915d9ada2dcd877d1cdee7c89a1d9172114b0a272532a63740e776dbe249783bd33a450bd46d346286461b6029f8bdb3ff6604e8bc022b637cd814337a0e011446c55472a2b9e7f5d0b1dbd7faae1e1a16dbc244f7b359bd2cfedc50af405349ab475abe87efbc14a85fc70f36b6eb445710750a9bd09fa480873b581f3da40272960b782d47b4d199543950c8ec0ddbe9474cfa2d9ae20c5cd2b8536bc81efe070204dae7b5596d50a326b3c52846782b71f594608211ce91c2d935152b58716102003ba79daaef225885f4380a36d2abfe6833f1c5972a563421bfdae715f1b021a864f8026acef533a192c5161e1e1d6750a1f3840abffca330fa5db3a149f1b4eb6f6f8acf190371523c21be12db2574fc1e8cdc807dc38867f3d524f8447581d3f70ea02ff6ebf016149e398cdef591", 0x2000, &(0x7f0000001880)={&(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x8000001, {0x7, 0x2b, 0x2, 0x241000, 0x96ec, 0x40, 0xff, 0x446, 0x0, 0x0, 0x4, 0xfffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') kernel console output (not intermixed with test programs): 8.159055][T10070] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 278.159070][T10070] [ 278.161049][T10070] memory: usage 307200kB, limit 307200kB, failcnt 12399 [ 278.173538][ T8208] rust_binder: 0: removing orphan mapping 0:24 [ 278.400753][ T36] audit: type=1400 audit(2000004490.735:83623): avc: denied { read write open } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.479837][T10070] memory+swap: usage 396892kB, limit 9007199254740988kB, failcnt 0 [ 278.479857][T10070] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 278.479868][T10070] Memory cgroup stats for /syz1: [ 278.507685][ T36] audit: type=1400 audit(2000004490.735:83624): avc: denied { ioctl } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.518484][T10070] cache 314277888 [ 278.563629][ T36] audit: type=1400 audit(2000004490.819:83625): avc: denied { read } for pid=10112 comm="syz.6.3238" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.583531][T10070] rss 237568 [ 278.662552][ T36] audit: type=1400 audit(2000004490.819:83626): avc: denied { read open } for pid=10112 comm="syz.6.3238" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.690832][T10070] rss_huge 0 [ 278.718581][ T36] audit: type=1400 audit(2000004490.828:83627): avc: denied { map } for pid=10112 comm="syz.6.3238" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.737757][T10070] shmem 314269696 [ 278.839340][T10070] mapped_file 0 [ 278.842912][T10070] dirty 0 [ 278.845940][T10070] writeback 0 [ 278.849223][T10070] workingset_refault_anon 28 [ 278.860667][T10070] workingset_refault_file 2882 [ 278.867460][T10070] swap 91844608 [ 278.877860][T10070] swapcached 57344 [ 278.881651][T10070] pgpgin 656483 [ 278.883029][ T36] audit: type=1400 audit(2000004490.828:83628): avc: denied { execmem } for pid=10112 comm="syz.6.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 278.899530][T10070] pgpgout 581216 [ 278.908455][T10070] pgfault 291933 [ 278.912760][T10070] pgmajfault 119 [ 278.916850][T10070] inactive_anon 212967424 [ 278.922840][T10070] active_anon 101597184 [ 278.924497][ T36] audit: type=1400 audit(2000004490.828:83629): avc: denied { read execute } for pid=10112 comm="syz.6.3238" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.933622][T10070] inactive_file 4096 [ 278.960334][ T36] audit: type=1400 audit(2000004490.838:83630): avc: denied { read write } for pid=10112 comm="syz.6.3238" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.965692][T10070] active_file 4096 [ 278.997272][T10070] unevictable 0 [ 278.998386][ T36] audit: type=1400 audit(2000004490.838:83631): avc: denied { read write open } for pid=10112 comm="syz.6.3238" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.002196][T10070] hierarchical_memory_limit 314572800 [ 279.052709][T10070] hierarchical_memsw_limit 9223372036854771712 [ 279.059533][T10070] total_cache 314277888 [ 279.075121][T10070] total_rss 237568 [ 279.078891][T10070] total_rss_huge 0 [ 279.082825][T10070] total_shmem 314269696 [ 279.088058][T10070] total_mapped_file 0 [ 279.092061][T10070] total_dirty 0 [ 279.095595][T10070] total_writeback 0 [ 279.101091][T10070] total_workingset_refault_anon 28 [ 279.106265][T10070] total_workingset_refault_file 2882 [ 279.112457][T10070] total_swap 91844608 [ 279.116448][T10070] total_swapcached 57344 [ 279.121655][T10070] total_pgpgin 656483 [ 279.125734][T10070] total_pgpgout 581216 [ 279.132214][T10070] total_pgfault 291933 [ 279.136332][T10070] total_pgmajfault 119 [ 279.140461][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 279.149822][T10070] total_inactive_anon 212967424 [ 279.155551][T10070] total_active_anon 101597184 [ 279.161152][T10070] total_inactive_file 4096 [ 279.165654][T10070] total_active_file 4096 [ 279.169891][T10070] total_unevictable 0 [ 279.174922][T10070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2259,pid=7187,uid=0 [ 279.190762][T10070] Memory cgroup out of memory: Killed process 7187 (syz.1.2259) total-vm:93680kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 279.271349][T10077] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 279.282425][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 279.282452][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.282463][T10077] Call Trace: [ 279.282469][T10077] [ 279.282477][T10077] __dump_stack+0x21/0x30 [ 279.282509][T10077] dump_stack_lvl+0x10c/0x190 [ 279.282532][T10077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 279.282553][T10077] ? ___ratelimit+0x3f7/0x5a0 [ 279.282578][T10077] dump_stack+0x19/0x20 [ 279.282598][T10077] dump_header+0xd7/0x490 [ 279.282615][T10077] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 279.282636][T10077] oom_kill_process+0x4c0/0x7e0 [ 279.282655][T10077] ? sched_clock_cpu+0x75/0x400 [ 279.282678][T10077] out_of_memory+0x7ee/0xbd0 [ 279.282699][T10077] ? __cfi_out_of_memory+0x10/0x10 [ 279.282731][T10077] ? mutex_lock_killable+0x104/0x1c0 [ 279.282750][T10077] ? __cfi_mutex_lock_killable+0x10/0x10 [ 279.282770][T10077] mem_cgroup_out_of_memory+0x279/0x350 [ 279.282789][T10077] ? drain_obj_stock+0xed0/0xed0 [ 279.282808][T10077] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 279.282826][T10077] try_charge_memcg+0x8f7/0xde0 [ 279.282850][T10077] ? __cfi_try_charge_memcg+0x10/0x10 [ 279.282872][T10077] ? __alloc_pages_noprof+0x31f/0x7b0 [ 279.282894][T10077] ? folio_unlock+0x12f/0x1a0 [ 279.282915][T10077] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 279.282939][T10077] __mem_cgroup_charge+0xf6/0x410 [ 279.282964][T10077] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 279.282988][T10077] ? do_pte_missing+0x2bdb/0x4240 [ 279.283011][T10077] shmem_alloc_and_add_folio+0x86d/0x1050 [ 279.283040][T10077] ? put_swap_device+0x130/0x130 [ 279.283059][T10077] ? shmem_huge_global_enabled+0x2da/0x360 [ 279.283079][T10077] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 279.283098][T10077] ? __kasan_check_write+0x18/0x20 [ 279.283124][T10077] ? _raw_spin_lock+0x8c/0x120 [ 279.283148][T10077] shmem_get_folio_gfp+0x5f0/0x1380 [ 279.283170][T10077] ? shmem_get_folio+0xc0/0xc0 [ 279.283187][T10077] ? follow_page_pte+0xa5c/0xb90 [ 279.283211][T10077] ? inode_to_bdi+0x6d/0x100 [ 279.283236][T10077] shmem_write_begin+0xf4/0x270 [ 279.283257][T10077] generic_perform_write+0x330/0x960 [ 279.283285][T10077] ? __cfi_generic_perform_write+0x10/0x10 [ 279.283307][T10077] ? down_write+0xe9/0x2a0 [ 279.283324][T10077] ? file_update_time+0xa3/0x220 [ 279.283343][T10077] shmem_file_write_iter+0x105/0x130 [ 279.283361][T10077] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 279.283379][T10077] __kernel_write_iter+0x392/0x830 [ 279.283397][T10077] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 279.283420][T10077] ? __cfi___kernel_write_iter+0x10/0x10 [ 279.283448][T10077] ? get_dump_page+0x160/0x220 [ 279.283469][T10077] ? __asan_memset+0x39/0x50 [ 279.283494][T10077] ? iov_iter_bvec+0xc0/0x180 [ 279.283516][T10077] dump_user_range+0xb06/0xdf0 [ 279.283535][T10077] ? __cfi_dump_emit+0x10/0x10 [ 279.283561][T10077] ? __cfi_dump_user_range+0x10/0x10 [ 279.283579][T10077] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 279.283607][T10077] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 279.283635][T10077] elf_core_dump+0x2cd9/0x3810 [ 279.283659][T10077] ? __cfi_elf_core_dump+0x10/0x10 [ 279.283687][T10077] ? dump_interrupted+0xf0/0xf0 [ 279.283717][T10077] ? filp_open+0x182/0x1d0 [ 279.283740][T10077] ? 0xffffffffff600000 [ 279.283757][T10077] do_coredump+0x1bfa/0x2bd0 [ 279.283786][T10077] ? __cfi_do_coredump+0x10/0x10 [ 279.283811][T10077] ? asm_exc_page_fault+0x2b/0x30 [ 279.283837][T10077] ? __kasan_slab_free+0x6a/0x80 [ 279.283856][T10077] ? kmem_cache_free+0x1c1/0x510 [ 279.283885][T10077] ? get_signal+0xa75/0x14f0 [ 279.283909][T10077] get_signal+0x11fd/0x14f0 [ 279.283934][T10077] arch_do_signal_or_restart+0x96/0x720 [ 279.283961][T10077] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 279.283990][T10077] irqentry_exit_to_user_mode+0x4e/0xb0 [ 279.284013][T10077] irqentry_exit+0x16/0x60 [ 279.284032][T10077] exc_page_fault+0x66/0xc0 [ 279.284051][T10077] asm_exc_page_fault+0x2b/0x30 [ 279.284068][T10077] RIP: 0033:0x7fdb6438ebf1 [ 279.284084][T10077] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 279.284102][T10077] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 279.284121][T10077] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 279.284135][T10077] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 279.284148][T10077] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 279.284161][T10077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 279.284173][T10077] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 279.284191][T10077] [ 279.284532][T10077] memory: usage 307200kB, limit 307200kB, failcnt 12934 [ 279.320496][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 279.325453][T10077] memory+swap: usage 396724kB, limit 9007199254740988kB, failcnt 0 [ 279.340669][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.365479][T10077] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 279.376574][ T64] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.389418][T10077] Memory cgroup stats for [ 279.392525][ T64] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 279.398411][T10077] /syz1 [ 279.406420][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.408201][T10077] : [ 279.414130][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.419177][T10077] cache 314294272 [ 279.425072][ T64] usb 7-1: Product: syz [ 279.430635][T10077] rss 237568 [ 279.438153][ T64] usb 7-1: Manufacturer: syz [ 279.447872][T10077] rss_huge 0 [ 279.472164][ T64] usb 7-1: SerialNumber: syz [ 279.525175][T10077] shmem 314286080 [ 279.862636][T10077] mapped_file 0 [ 279.866278][T10077] dirty 0 [ 279.869603][T10077] writeback 0 [ 279.873062][T10077] workingset_refault_anon 28 [ 279.877772][T10077] workingset_refault_file 2882 [ 279.882593][T10077] swap 91672576 [ 279.886168][T10077] swapcached 40960 [ 279.890153][T10077] pgpgin 656487 [ 279.893663][T10077] pgpgout 581220 [ 279.897232][T10077] pgfault 291934 [ 279.900990][T10077] pgmajfault 119 [ 279.904860][T10077] inactive_anon 220168192 [ 279.909448][T10077] active_anon 94396416 [ 279.913564][T10077] inactive_file 4096 [ 279.917582][T10077] active_file 4096 [ 279.921583][T10077] unevictable 0 [ 279.925440][T10077] hierarchical_memory_limit 314572800 [ 279.931132][T10077] hierarchical_memsw_limit 9223372036854771712 [ 279.937399][T10077] total_cache 314294272 [ 279.941824][T10077] total_rss 237568 [ 279.945867][T10077] total_rss_huge 0 [ 279.949633][T10077] total_shmem 314286080 [ 279.954374][T10077] total_mapped_file 0 [ 279.958474][T10077] total_dirty 0 [ 279.961966][T10077] total_writeback 0 [ 279.967243][T10077] total_workingset_refault_anon 28 [ 279.983612][T10077] total_workingset_refault_file 2882 [ 279.989073][T10077] total_swap 91672576 [ 279.994335][T10077] total_swapcached 40960 [ 279.998636][T10077] total_pgpgin 656487 [ 280.005513][T10077] total_pgpgout 581220 [ 280.009847][T10077] total_pgfault 291934 [ 280.013955][T10077] total_pgmajfault 119 [ 280.018707][T10077] total_inactive_anon 220168192 [ 280.025246][T10077] total_active_anon 94396416 [ 280.030361][T10077] total_inactive_file 4096 [ 280.036466][T10143] fuseblk: Unknown parameter '`0x0000000000000005' [ 280.043227][T10077] total_active_file 4096 [ 280.048509][T10077] total_unevictable 0 [ 280.052763][T10077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10077,uid=0 [ 280.068404][T10077] Memory cgroup out of memory: Killed process 10077 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 280.237860][T10148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3507366080 (224471429120 ns) > initial count (25249277504 ns). Using initial count to start timer. [ 280.252447][T10109] syz.1.3236 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 280.273132][T10148] kvm: Disabled LAPIC found during irq injection [ 280.403787][T10109] CPU: 0 UID: 0 PID: 10109 Comm: syz.1.3236 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 280.403823][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.403835][T10109] Call Trace: [ 280.403842][T10109] [ 280.403850][T10109] __dump_stack+0x21/0x30 [ 280.403884][T10109] dump_stack_lvl+0x10c/0x190 [ 280.403906][T10109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 280.403930][T10109] ? ___ratelimit+0x3f7/0x5a0 [ 280.403956][T10109] dump_stack+0x19/0x20 [ 280.403979][T10109] dump_header+0xd7/0x490 [ 280.403997][T10109] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 280.404036][T10109] oom_kill_process+0x4c0/0x7e0 [ 280.404059][T10109] ? sched_clock_cpu+0x75/0x400 [ 280.404085][T10109] out_of_memory+0x7ee/0xbd0 [ 280.404105][T10109] ? __cfi_out_of_memory+0x10/0x10 [ 280.404126][T10109] ? mutex_lock_killable+0x92/0x1c0 [ 280.404145][T10109] ? __cfi_mutex_lock_killable+0x10/0x10 [ 280.404170][T10109] mem_cgroup_out_of_memory+0x279/0x350 [ 280.404191][T10109] ? drain_obj_stock+0xed0/0xed0 [ 280.404209][T10109] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 280.404227][T10109] try_charge_memcg+0x8f7/0xde0 [ 280.404249][T10109] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 280.404277][T10109] ? __cfi_try_charge_memcg+0x10/0x10 [ 280.404301][T10109] ? __alloc_pages_noprof+0x31f/0x7b0 [ 280.404324][T10109] __mem_cgroup_charge+0xf6/0x410 [ 280.404350][T10109] ? filemap_get_entry+0x3fb/0x460 [ 280.404372][T10109] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 280.404397][T10109] filemap_add_folio+0x57/0x2d0 [ 280.404417][T10109] __filemap_get_folio+0x597/0x9d0 [ 280.404439][T10109] ? __cfi___filemap_get_folio+0x10/0x10 [ 280.404461][T10109] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 280.404485][T10109] filemap_fault+0xb41/0x16b0 [ 280.404509][T10109] ? __cfi_filemap_fault+0x10/0x10 [ 280.404531][T10109] ? __cfi_filemap_map_pages+0x10/0x10 [ 280.404554][T10109] ? __switch_to_asm+0x3d/0x70 [ 280.404580][T10109] ? __schedule+0x132a/0x1df0 [ 280.404604][T10109] do_pte_missing+0x298c/0x4240 [ 280.404627][T10109] ? __sched_text_start+0x10/0x10 [ 280.404732][T10109] ? enqueue_hrtimer+0x12f/0x2e0 [ 280.404756][T10109] ? hrtimer_start_range_ns+0x1720/0x2190 [ 280.404777][T10109] ? pte_marker_clear+0x1b0/0x1b0 [ 280.404799][T10109] ? hrtimer_try_to_cancel+0x3fe/0x6b0 [ 280.404819][T10109] ? __pte_offset_map+0x1b0/0x230 [ 280.404844][T10109] ? pte_offset_map_rw_nolock+0xba/0x110 [ 280.404869][T10109] handle_mm_fault+0x1166/0x1b90 [ 280.404891][T10109] ? __cfi_handle_mm_fault+0x10/0x10 [ 280.404909][T10109] ? lock_vma_under_rcu+0x49d/0x530 [ 280.404932][T10109] do_user_addr_fault+0x96c/0x1200 [ 280.404960][T10109] exc_page_fault+0x59/0xc0 [ 280.404979][T10109] asm_exc_page_fault+0x2b/0x30 [ 280.404998][T10109] RIP: 0033:0x7fdb6426549f [ 280.405015][T10109] Code: 22 eb 2f 0f 1f 84 00 00 00 00 00 bf a0 86 01 00 48 83 c5 01 e8 b2 96 12 00 e8 4d c5 ff ff 48 39 dd 74 0f 48 8b 05 f1 02 e8 00 <8b> 40 08 83 f8 3f 76 d9 48 81 c4 e8 01 00 00 5b 5d 41 5c 41 5d 41 [ 280.405032][T10109] RSP: 002b:00007ffe5fcb2340 EFLAGS: 00010293 [ 280.405050][T10109] RAX: 0000001b2f124000 RBX: 0000000000000005 RCX: 00007fdb635f9000 [ 280.405064][T10109] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fdb645b5f40 [ 280.405078][T10109] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000001e5fcb262f [ 280.405092][T10109] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fdb645b5fac [ 280.405105][T10109] R13: 00007fdb645b5fa0 R14: ffffffffffffffff R15: 00007ffe5fcb2450 [ 280.405122][T10109] [ 280.405131][T10109] memory: usage 306280kB, limit 307200kB, failcnt 13929 [ 280.780386][T10109] memory+swap: usage 379728kB, limit 9007199254740988kB, failcnt 0 [ 280.788431][T10109] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 280.795599][T10109] Memory cgroup stats for /syz1: [ 280.795753][T10109] cache 296906752 [ 280.804387][T10109] rss 237568 [ 280.807664][T10109] rss_huge 0 [ 280.816534][T10109] shmem 296902656 [ 280.820251][T10109] mapped_file 0 [ 280.824750][T10109] dirty 0 [ 280.827995][T10109] writeback 0 [ 280.831536][T10109] workingset_refault_anon 28 [ 280.836314][T10109] workingset_refault_file 2882 [ 280.841789][T10109] swap 91656192 [ 280.845462][T10109] swapcached 40960 [ 280.849215][T10109] pgpgin 660931 [ 280.853676][T10109] pgpgout 589909 [ 280.857407][T10109] pgfault 292212 [ 280.861739][T10109] pgmajfault 119 [ 280.865554][T10109] inactive_anon 87769088 [ 280.869802][T10109] active_anon 209371136 [ 280.875291][T10109] inactive_file 0 [ 280.879128][T10109] active_file 4096 [ 280.898174][T10109] unevictable 0 [ 280.914139][T10109] hierarchical_memory_limit 314572800 [ 280.920103][T10109] hierarchical_memsw_limit 9223372036854771712 [ 280.931499][T10109] total_cache 296906752 [ 280.936401][T10109] total_rss 237568 [ 280.940395][T10109] total_rss_huge 0 [ 280.944141][T10109] total_shmem 296902656 [ 280.949284][T10109] total_mapped_file 0 [ 280.953887][T10109] total_dirty 0 [ 280.958111][T10109] total_writeback 0 [ 280.961920][T10109] total_workingset_refault_anon 28 [ 280.967040][T10109] total_workingset_refault_file 2882 [ 280.973706][T10109] total_swap 91656192 [ 280.977971][T10109] total_swapcached 40960 [ 280.983102][T10109] total_pgpgin 660931 [ 280.987102][T10109] total_pgpgout 589909 [ 280.993279][T10109] total_pgfault 292212 [ 280.997641][T10109] total_pgmajfault 119 [ 281.002579][T10109] total_inactive_anon 87769088 [ 281.007568][T10109] total_active_anon 209371136 [ 281.019161][T10109] total_inactive_file 0 [ 281.024891][T10155] __vm_enough_memory: pid: 10155, comm: syz.3.3254, bytes: 18014402804453376 not enough memory for the allocation [ 281.042411][T10109] total_active_file 4096 [ 281.046691][T10109] total_unevictable 0 [ 281.050676][T10109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10064,uid=0 [ 281.079274][T10109] Memory cgroup out of memory: Killed process 10064 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 281.473825][T10173] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 281.528442][T10168] rust_binder: Write failure EINVAL in pid:700 [ 281.643658][T10071] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 281.706424][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 281.706459][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.706471][T10071] Call Trace: [ 281.706478][T10071] [ 281.706486][T10071] __dump_stack+0x21/0x30 [ 281.706523][T10071] dump_stack_lvl+0x10c/0x190 [ 281.706546][T10071] ? __cfi_dump_stack_lvl+0x10/0x10 [ 281.706569][T10071] ? ___ratelimit+0x3f7/0x5a0 [ 281.706595][T10071] dump_stack+0x19/0x20 [ 281.706617][T10071] dump_header+0xd7/0x490 [ 281.706635][T10071] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 281.706659][T10071] oom_kill_process+0x4c0/0x7e0 [ 281.706681][T10071] ? sched_clock_cpu+0x75/0x400 [ 281.706707][T10071] out_of_memory+0x7ee/0xbd0 [ 281.706727][T10071] ? __cfi_out_of_memory+0x10/0x10 [ 281.706747][T10071] ? mutex_lock_killable+0x92/0x1c0 [ 281.706766][T10071] ? __cfi_mutex_lock_killable+0x10/0x10 [ 281.706786][T10071] mem_cgroup_out_of_memory+0x279/0x350 [ 281.706804][T10071] ? drain_obj_stock+0xed0/0xed0 [ 281.706824][T10071] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 281.706842][T10071] try_charge_memcg+0x8f7/0xde0 [ 281.706866][T10071] ? __cfi_try_charge_memcg+0x10/0x10 [ 281.706889][T10071] ? __alloc_pages_noprof+0x31f/0x7b0 [ 281.706912][T10071] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 281.706934][T10071] ? __folio_batch_add_and_move+0x2ab/0x370 [ 281.706957][T10071] __mem_cgroup_charge+0xf6/0x410 [ 281.706983][T10071] ? _raw_spin_lock+0x8c/0x120 [ 281.707004][T10071] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 281.707031][T10071] shmem_alloc_and_add_folio+0x86d/0x1050 [ 281.707052][T10071] ? finish_task_switch+0x1de/0x780 [ 281.707075][T10071] ? put_swap_device+0x130/0x130 [ 281.707095][T10071] ? shmem_huge_global_enabled+0x2da/0x360 [ 281.707115][T10071] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 281.707134][T10071] ? __kasan_check_write+0x18/0x20 [ 281.707159][T10071] ? _raw_spin_lock+0x8c/0x120 [ 281.707182][T10071] shmem_get_folio_gfp+0x5f0/0x1380 [ 281.707204][T10071] ? shmem_get_folio+0xc0/0xc0 [ 281.707222][T10071] ? follow_page_pte+0xa5c/0xb90 [ 281.707245][T10071] ? inode_to_bdi+0x6d/0x100 [ 281.707268][T10071] shmem_write_begin+0xf4/0x270 [ 281.707288][T10071] generic_perform_write+0x330/0x960 [ 281.707315][T10071] ? __cfi_generic_perform_write+0x10/0x10 [ 281.707342][T10071] ? down_write+0xe9/0x2a0 [ 281.707362][T10071] ? file_update_time+0xa3/0x220 [ 281.707383][T10071] shmem_file_write_iter+0x105/0x130 [ 281.707405][T10071] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 281.707427][T10071] __kernel_write_iter+0x392/0x830 [ 281.707444][T10071] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 281.707466][T10071] ? __cfi___kernel_write_iter+0x10/0x10 [ 281.707493][T10071] ? get_dump_page+0x160/0x220 [ 281.707525][T10071] ? __asan_memset+0x39/0x50 [ 281.707559][T10071] ? iov_iter_bvec+0xc0/0x180 [ 281.707581][T10071] dump_user_range+0xb06/0xdf0 [ 281.707601][T10071] ? __cfi_dump_emit+0x10/0x10 [ 281.707629][T10071] ? __cfi_dump_user_range+0x10/0x10 [ 281.707647][T10071] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 281.707676][T10071] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 281.707702][T10071] elf_core_dump+0x2cd9/0x3810 [ 281.707723][T10071] ? irqentry_exit+0x4a/0x60 [ 281.707742][T10071] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 281.707763][T10071] ? __cfi_elf_core_dump+0x10/0x10 [ 281.707789][T10071] ? dump_interrupted+0xf0/0xf0 [ 281.707814][T10071] ? filp_open+0x182/0x1d0 [ 281.707837][T10071] ? 0xffffffffff600000 [ 281.707851][T10071] do_coredump+0x1bfa/0x2bd0 [ 281.707880][T10071] ? __cfi_do_coredump+0x10/0x10 [ 281.707905][T10071] ? asm_exc_page_fault+0x2b/0x30 [ 281.707929][T10071] ? __kasan_slab_free+0x6a/0x80 [ 281.707949][T10071] ? kmem_cache_free+0x1c1/0x510 [ 281.707974][T10071] ? get_signal+0xa75/0x14f0 [ 281.707998][T10071] get_signal+0x11fd/0x14f0 [ 281.708028][T10071] arch_do_signal_or_restart+0x96/0x720 [ 281.708057][T10071] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 281.708087][T10071] irqentry_exit_to_user_mode+0x4e/0xb0 [ 281.708107][T10071] irqentry_exit+0x16/0x60 [ 281.708126][T10071] exc_page_fault+0x66/0xc0 [ 281.708144][T10071] asm_exc_page_fault+0x2b/0x30 [ 281.708161][T10071] RIP: 0033:0x7fdb6438ebf1 [ 281.708178][T10071] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 281.708195][T10071] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 281.708212][T10071] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 281.708227][T10071] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 281.708240][T10071] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.708253][T10071] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 281.708266][T10071] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 281.708283][T10071] [ 281.709976][T10071] memory: usage 307200kB, limit 307200kB, failcnt 17544 [ 281.898695][ T64] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 281.938308][T10177] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 281.951541][T10071] memory+swap: usage 396940kB, limit 9007199254740988kB, failcnt 0 [ 281.960518][T10177] rust_binder: Error while translating object. [ 281.962093][T10071] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 281.962111][T10071] Memory cgroup stats for [ 281.968111][T10177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 281.973962][T10071] /syz1: [ 282.015331][T10177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 282.017401][T10071] cache 314359808 [ 282.269679][T10071] rss 212992 [ 282.273187][ T64] cdc_ncm 7-1:1.0: bind() failure [ 282.279490][ T64] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 282.286690][ T64] cdc_ncm 7-1:1.1: bind() failure [ 282.319109][ T64] usb 7-1: USB disconnect, device number 5 [ 282.339121][T10071] rss_huge 0 [ 282.342517][T10071] shmem 314351616 [ 282.346598][T10071] mapped_file 0 [ 282.357406][T10071] dirty 0 [ 282.360794][T10071] writeback 0 [ 282.364554][T10071] workingset_refault_anon 28 [ 282.369893][T10071] workingset_refault_file 3525 [ 282.376155][T10071] swap 91893760 [ 282.380364][T10071] swapcached 0 [ 282.384193][T10071] pgpgin 674433 [ 282.388019][T10071] pgpgout 599166 [ 282.392529][T10071] pgfault 293160 [ 282.396821][T10071] pgmajfault 138 [ 282.400868][T10071] inactive_anon 257945600 [ 282.405424][T10071] active_anon 56619008 [ 282.409691][T10071] inactive_file 8192 [ 282.414295][T10071] active_file 0 [ 282.419779][T10071] unevictable 0 [ 282.424115][T10071] hierarchical_memory_limit 314572800 [ 282.429808][T10071] hierarchical_memsw_limit 9223372036854771712 [ 282.443498][T10071] total_cache 314359808 [ 282.447966][T10071] total_rss 212992 [ 282.453203][T10071] total_rss_huge 0 [ 282.457232][T10071] total_shmem 314351616 [ 282.462676][T10071] total_mapped_file 0 [ 282.475610][T10071] total_dirty 0 [ 282.480776][T10071] total_writeback 0 [ 282.497021][T10071] total_workingset_refault_anon 28 [ 282.503037][T10071] total_workingset_refault_file 3525 [ 282.529084][T10071] total_swap 91893760 [ 282.533405][T10071] total_swapcached 0 [ 282.538569][T10071] total_pgpgin 674433 [ 282.572391][T10071] total_pgpgout 599166 [ 282.577109][T10071] total_pgfault 293160 [ 282.593284][T10071] total_pgmajfault 138 [ 282.598453][T10071] total_inactive_anon 257945600 [ 282.614644][T10071] total_active_anon 56619008 [ 282.619561][T10071] total_inactive_file 8192 [ 282.624430][T10071] total_active_file 0 [ 282.646732][T10071] total_unevictable 0 [ 282.651042][T10071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10073,uid=0 [ 282.688999][T10071] Memory cgroup out of memory: Killed process 10073 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53560kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 282.783889][ T13] bridge_slave_1: left allmulticast mode [ 282.789686][ T13] bridge_slave_1: left promiscuous mode [ 282.795365][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.814410][ T13] bridge_slave_0: left allmulticast mode [ 282.839232][ T13] bridge_slave_0: left promiscuous mode [ 282.844926][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.991688][ T13] veth1_macvtap: left promiscuous mode [ 282.997698][ T13] veth0_vlan: left promiscuous mode [ 283.319409][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.339314][T10193] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.363383][T10193] bridge_slave_0: entered allmulticast mode [ 283.385163][T10193] bridge_slave_0: entered promiscuous mode [ 283.408011][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.436733][T10193] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.451895][T10193] bridge_slave_1: entered allmulticast mode [ 283.469243][T10193] bridge_slave_1: entered promiscuous mode [ 283.502371][ T36] kauditd_printk_skb: 223 callbacks suppressed [ 283.502390][ T36] audit: type=1400 audit(2000004495.700:83855): avc: denied { sys_module } for pid=10193 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.550024][ T36] audit: type=1400 audit(2000004495.728:83856): avc: denied { sys_module } for pid=10193 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.619963][ T36] audit: type=1400 audit(2000004495.737:83857): avc: denied { sys_module } for pid=10193 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.643433][ T36] audit: type=1400 audit(2000004495.737:83858): avc: denied { sys_module } for pid=10193 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.686412][ T36] audit: type=1400 audit(2000004495.774:83859): avc: denied { sys_module } for pid=10193 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.726951][ T36] audit: type=1400 audit(2000004495.774:83860): avc: denied { sys_module } for pid=10193 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.751031][ T36] audit: type=1400 audit(2000004495.905:83861): avc: denied { create } for pid=10193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.780431][ T36] audit: type=1400 audit(2000004495.905:83862): avc: denied { write } for pid=10193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.817304][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.824420][T10193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.831843][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.838945][T10193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.855299][ T36] audit: type=1400 audit(2000004495.905:83863): avc: denied { read } for pid=10193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.887364][ T36] audit: type=1400 audit(2000004495.905:83864): avc: denied { read } for pid=10193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.910810][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.923543][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.010727][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.017865][ T9672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.063281][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.070511][ T9672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.247300][T10193] veth0_vlan: entered promiscuous mode [ 284.331309][T10193] veth1_macvtap: entered promiscuous mode [ 284.432572][T10080] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 284.471288][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 284.471323][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.471336][T10080] Call Trace: [ 284.471343][T10080] [ 284.471353][T10080] __dump_stack+0x21/0x30 [ 284.471384][T10080] dump_stack_lvl+0x10c/0x190 [ 284.471404][T10080] ? __cfi_dump_stack_lvl+0x10/0x10 [ 284.471423][T10080] ? ___ratelimit+0x3f7/0x5a0 [ 284.471449][T10080] dump_stack+0x19/0x20 [ 284.471472][T10080] dump_header+0xd7/0x490 [ 284.471490][T10080] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 284.471515][T10080] oom_kill_process+0x4c0/0x7e0 [ 284.471537][T10080] ? sched_clock_cpu+0x75/0x400 [ 284.471563][T10080] out_of_memory+0x7ee/0xbd0 [ 284.471582][T10080] ? __cfi_out_of_memory+0x10/0x10 [ 284.471601][T10080] ? mutex_lock_killable+0x92/0x1c0 [ 284.471620][T10080] ? __cfi_mutex_lock_killable+0x10/0x10 [ 284.471640][T10080] mem_cgroup_out_of_memory+0x279/0x350 [ 284.471657][T10080] ? drain_obj_stock+0xed0/0xed0 [ 284.471673][T10080] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 284.471692][T10080] try_charge_memcg+0x8f7/0xde0 [ 284.471717][T10080] ? __cfi_try_charge_memcg+0x10/0x10 [ 284.471741][T10080] ? __alloc_pages_noprof+0x31f/0x7b0 [ 284.471765][T10080] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 284.471788][T10080] ? __folio_batch_add_and_move+0x2ab/0x370 [ 284.471811][T10080] __mem_cgroup_charge+0xf6/0x410 [ 284.471836][T10080] ? _raw_spin_lock+0x8c/0x120 [ 284.471859][T10080] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 284.471886][T10080] shmem_alloc_and_add_folio+0x86d/0x1050 [ 284.471910][T10080] ? put_swap_device+0x130/0x130 [ 284.471930][T10080] ? shmem_huge_global_enabled+0x2da/0x360 [ 284.471950][T10080] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 284.471969][T10080] ? __kasan_check_write+0x18/0x20 [ 284.471991][T10080] ? _raw_spin_lock+0x8c/0x120 [ 284.472012][T10080] shmem_get_folio_gfp+0x5f0/0x1380 [ 284.472031][T10080] ? shmem_get_folio+0xc0/0xc0 [ 284.472048][T10080] ? follow_page_pte+0xa5c/0xb90 [ 284.472071][T10080] ? inode_to_bdi+0x6d/0x100 [ 284.472095][T10080] shmem_write_begin+0xf4/0x270 [ 284.472116][T10080] generic_perform_write+0x330/0x960 [ 284.472150][T10080] ? __cfi_generic_perform_write+0x10/0x10 [ 284.472174][T10080] ? down_write+0xe9/0x2a0 [ 284.472194][T10080] ? file_update_time+0xa3/0x220 [ 284.472219][T10080] shmem_file_write_iter+0x105/0x130 [ 284.472242][T10080] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 284.472264][T10080] __kernel_write_iter+0x392/0x830 [ 284.472282][T10080] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 284.472306][T10080] ? __cfi___kernel_write_iter+0x10/0x10 [ 284.472334][T10080] ? get_dump_page+0x160/0x220 [ 284.472352][T10080] ? __asan_memset+0x39/0x50 [ 284.472372][T10080] ? iov_iter_bvec+0xc0/0x180 [ 284.472392][T10080] dump_user_range+0xb06/0xdf0 [ 284.472410][T10080] ? __cfi_dump_emit+0x10/0x10 [ 284.472436][T10080] ? __cfi_dump_user_range+0x10/0x10 [ 284.472454][T10080] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 284.472482][T10080] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 284.472509][T10080] elf_core_dump+0x2cd9/0x3810 [ 284.472533][T10080] ? __cfi_elf_core_dump+0x10/0x10 [ 284.472560][T10080] ? dump_interrupted+0xf0/0xf0 [ 284.472585][T10080] ? filp_open+0x182/0x1d0 [ 284.472608][T10080] ? 0xffffffffff600000 [ 284.472624][T10080] do_coredump+0x1bfa/0x2bd0 [ 284.472653][T10080] ? __cfi_do_coredump+0x10/0x10 [ 284.472678][T10080] ? asm_exc_page_fault+0x2b/0x30 [ 284.472703][T10080] ? __kasan_slab_free+0x6a/0x80 [ 284.472720][T10080] ? kmem_cache_free+0x1c1/0x510 [ 284.472744][T10080] ? get_signal+0xa75/0x14f0 [ 284.472766][T10080] get_signal+0x11fd/0x14f0 [ 284.472790][T10080] arch_do_signal_or_restart+0x96/0x720 [ 284.472817][T10080] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 284.472845][T10080] irqentry_exit_to_user_mode+0x4e/0xb0 [ 284.472866][T10080] irqentry_exit+0x16/0x60 [ 284.472885][T10080] exc_page_fault+0x66/0xc0 [ 284.472904][T10080] asm_exc_page_fault+0x2b/0x30 [ 284.472922][T10080] RIP: 0033:0x7fdb6438ebf1 [ 284.472939][T10080] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 284.472954][T10080] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 284.472972][T10080] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 284.472985][T10080] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 284.472998][T10080] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 284.473011][T10080] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 284.473024][T10080] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 284.473041][T10080] [ 284.946780][T10080] memory: usage 307200kB, limit 307200kB, failcnt 26982 [ 284.988356][T10211] binder: Unknown parameter 'defcontext01777777777777777777777' [ 285.013838][T10080] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 285.039615][T10080] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 285.061698][T10080] Memory cgroup stats for /syz1: [ 285.061841][T10080] cache 314388480 [ 285.070986][T10080] rss 184320 [ 285.074316][T10080] rss_huge 0 [ 285.077665][T10080] shmem 314368000 [ 285.081395][T10080] mapped_file 0 [ 285.085085][T10080] dirty 0 [ 285.088123][T10080] writeback 0 [ 285.092383][T10080] workingset_refault_anon 28 [ 285.097040][T10080] workingset_refault_file 4235 [ 285.102023][T10080] swap 127995904 [ 285.105586][T10080] swapcached 0 [ 285.109380][T10080] pgpgin 692455 [ 285.113210][T10080] pgpgout 617188 [ 285.116807][T10080] pgfault 294408 [ 285.120409][T10080] pgmajfault 171 [ 285.124289][T10080] inactive_anon 233074688 [ 285.128962][T10080] active_anon 81477632 [ 285.133156][T10080] inactive_file 20480 [ 285.137211][T10080] active_file 0 [ 285.140735][T10080] unevictable 0 [ 285.144396][T10080] hierarchical_memory_limit 314572800 [ 285.149831][T10080] hierarchical_memsw_limit 9223372036854771712 [ 285.156028][T10080] total_cache 314388480 [ 285.160301][T10080] total_rss 184320 [ 285.164064][T10080] total_rss_huge 0 [ 285.167795][T10080] total_shmem 314368000 [ 285.172822][T10080] total_mapped_file 0 [ 285.176833][T10080] total_dirty 0 [ 285.180302][T10080] total_writeback 0 [ 285.184623][T10080] total_workingset_refault_anon 28 [ 285.189765][T10080] total_workingset_refault_file 4235 [ 285.195159][T10080] total_swap 127995904 [ 285.199691][T10080] total_swapcached 0 [ 285.203664][T10080] total_pgpgin 692455 [ 285.207693][T10080] total_pgpgout 617188 [ 285.211893][T10080] total_pgfault 294408 [ 285.216126][T10080] total_pgmajfault 171 [ 285.220316][T10080] total_inactive_anon 233074688 [ 285.225252][T10080] total_active_anon 81477632 [ 285.229925][T10080] total_inactive_file 20480 [ 285.234474][T10080] total_active_file 0 [ 285.238560][T10080] total_unevictable 0 [ 285.242677][T10080] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10066,uid=0 [ 285.258129][T10080] Memory cgroup out of memory: Killed process 10066 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53564kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 285.309462][T10084] syz.1.3231 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 285.358922][T10084] CPU: 0 UID: 0 PID: 10084 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 285.358976][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.358989][T10084] Call Trace: [ 285.358996][T10084] [ 285.359004][T10084] __dump_stack+0x21/0x30 [ 285.359032][T10084] dump_stack_lvl+0x10c/0x190 [ 285.359049][T10084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 285.359067][T10084] ? ___ratelimit+0x3f7/0x5a0 [ 285.359090][T10084] dump_stack+0x19/0x20 [ 285.359109][T10084] dump_header+0xd7/0x490 [ 285.359127][T10084] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 285.359152][T10084] oom_kill_process+0x4c0/0x7e0 [ 285.359182][T10084] ? sched_clock_cpu+0x75/0x400 [ 285.359208][T10084] out_of_memory+0x7ee/0xbd0 [ 285.359229][T10084] ? __cfi_out_of_memory+0x10/0x10 [ 285.359249][T10084] ? mutex_lock_killable+0x104/0x1c0 [ 285.359269][T10084] ? __cfi_mutex_lock_killable+0x10/0x10 [ 285.359289][T10084] mem_cgroup_out_of_memory+0x279/0x350 [ 285.359308][T10084] ? drain_obj_stock+0xed0/0xed0 [ 285.359326][T10084] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 285.359357][T10084] try_charge_memcg+0x8f7/0xde0 [ 285.359381][T10084] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 285.359409][T10084] ? __cfi_try_charge_memcg+0x10/0x10 [ 285.359431][T10084] ? __alloc_pages_noprof+0x31f/0x7b0 [ 285.359455][T10084] __mem_cgroup_charge+0xf6/0x410 [ 285.359480][T10084] ? filemap_get_entry+0x3fb/0x460 [ 285.359503][T10084] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 285.359529][T10084] filemap_add_folio+0x57/0x2d0 [ 285.359549][T10084] __filemap_get_folio+0x597/0x9d0 [ 285.359572][T10084] ? __cfi___filemap_get_folio+0x10/0x10 [ 285.359594][T10084] ? mm_trace_rss_stat+0x20/0x130 [ 285.359618][T10084] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 285.359643][T10084] filemap_fault+0xb41/0x16b0 [ 285.359666][T10084] ? __cfi_filemap_fault+0x10/0x10 [ 285.359689][T10084] ? __cfi_filemap_map_pages+0x10/0x10 [ 285.359712][T10084] ? __cfi_lru_add+0x10/0x10 [ 285.359732][T10084] ? folio_rotate_reclaimable+0x130/0x130 [ 285.359754][T10084] do_pte_missing+0x298c/0x4240 [ 285.359776][T10084] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 285.359798][T10084] ? pte_marker_clear+0x1b0/0x1b0 [ 285.359819][T10084] ? put_swap_device+0x130/0x130 [ 285.359839][T10084] ? __pte_offset_map+0x1b0/0x230 [ 285.359863][T10084] ? pte_offset_map_rw_nolock+0xba/0x110 [ 285.359888][T10084] handle_mm_fault+0x1166/0x1b90 [ 285.359907][T10084] ? __kasan_check_write+0x18/0x20 [ 285.359936][T10084] ? __cfi_handle_mm_fault+0x10/0x10 [ 285.359955][T10084] ? follow_page_pte+0x2bd/0xb90 [ 285.359978][T10084] ? gup_must_unshare+0x1e0/0x1e0 [ 285.360000][T10084] ? vma_is_secretmem+0x11/0x50 [ 285.360024][T10084] __get_user_pages+0x1169/0x22d0 [ 285.360047][T10084] ? __kasan_check_write+0x18/0x20 [ 285.360073][T10084] ? populate_vma_page_range+0x230/0x230 [ 285.360094][T10084] ? __kernel_write_iter+0x66b/0x830 [ 285.360112][T10084] get_dump_page+0x107/0x220 [ 285.360132][T10084] ? __cfi_get_dump_page+0x10/0x10 [ 285.360151][T10084] ? __asan_memset+0x39/0x50 [ 285.360180][T10084] dump_user_range+0x181/0xdf0 [ 285.360196][T10084] ? __cfi_dump_emit+0x10/0x10 [ 285.360222][T10084] ? __cfi_dump_user_range+0x10/0x10 [ 285.360239][T10084] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 285.360268][T10084] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 285.360293][T10084] elf_core_dump+0x2cd9/0x3810 [ 285.360317][T10084] ? __cfi_elf_core_dump+0x10/0x10 [ 285.360350][T10084] ? dump_interrupted+0xf0/0xf0 [ 285.360375][T10084] ? filp_open+0x182/0x1d0 [ 285.360397][T10084] ? 0xffffffffff600000 [ 285.360412][T10084] do_coredump+0x1bfa/0x2bd0 [ 285.360440][T10084] ? __cfi_do_coredump+0x10/0x10 [ 285.360465][T10084] ? asm_exc_page_fault+0x2b/0x30 [ 285.360490][T10084] ? __kasan_slab_free+0x6a/0x80 [ 285.360509][T10084] ? kmem_cache_free+0x1c1/0x510 [ 285.360537][T10084] ? get_signal+0xa75/0x14f0 [ 285.360560][T10084] get_signal+0x11fd/0x14f0 [ 285.360584][T10084] arch_do_signal_or_restart+0x96/0x720 [ 285.360612][T10084] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 285.360641][T10084] irqentry_exit_to_user_mode+0x4e/0xb0 [ 285.360662][T10084] irqentry_exit+0x16/0x60 [ 285.360681][T10084] exc_page_fault+0x66/0xc0 [ 285.360700][T10084] asm_exc_page_fault+0x2b/0x30 [ 285.360717][T10084] RIP: 0033:0x7fdb6438ebf1 [ 285.360734][T10084] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 285.360750][T10084] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 285.360768][T10084] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 285.360783][T10084] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 285.360795][T10084] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 285.360808][T10084] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 285.360821][T10084] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 285.360838][T10084] [ 285.360847][T10084] memory: usage 286480kB, limit 307200kB, failcnt 27216 [ 285.502345][ T64] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 285.505850][T10084] memory+swap: usage 406044kB, limit 9007199254740988kB, failcnt 0 [ 285.673470][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 285.801809][ T329] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 285.836569][ T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.898050][ T64] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.898272][T10084] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 285.907799][ T64] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.917749][ T64] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.935124][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.944575][ T64] usb 8-1: Product: syz [ 285.948763][ T64] usb 8-1: Manufacturer: syz [ 285.953465][ T64] usb 8-1: SerialNumber: syz [ 286.049542][T10084] Memory cgroup stats for /syz1: [ 286.049722][T10084] cache 314335232 [ 286.058376][T10084] rss 217088 [ 286.063697][T10084] rss_huge 0 [ 286.068238][T10084] shmem 314318848 [ 286.071838][ T329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.073779][T10084] mapped_file 0 [ 286.082186][ T329] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.087279][T10084] dirty 0 [ 286.098739][T10084] writeback 4096 [ 286.101312][ T329] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.112401][T10084] workingset_refault_anon 40 [ 286.117045][T10084] workingset_refault_file 5823 [ 286.121901][T10084] swap 127954944 [ 286.123393][ T329] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 286.134729][ T329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.143214][T10084] swapcached 40960 [ 286.147469][T10084] pgpgin 702505 [ 286.150985][T10084] pgpgout 627238 [ 286.155335][ T329] hub 7-1:1.0: bad descriptor, ignoring hub [ 286.161403][ T329] hub 7-1:1.0: probe with driver hub failed with error -5 [ 286.168660][T10084] pgfault 294815 [ 286.172510][ T329] cdc_wdm 7-1:1.0: skipping garbage [ 286.178689][T10084] pgmajfault 200 [ 286.182348][T10084] inactive_anon 62451712 [ 286.186877][ T329] cdc_wdm 7-1:1.0: skipping garbage [ 286.192146][ T329] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 286.201445][T10084] active_anon 251580416 [ 286.205626][T10084] inactive_file 0 [ 286.211655][T10084] active_file 0 [ 286.215140][T10084] unevictable 0 [ 286.218605][T10084] hierarchical_memory_limit 314572800 [ 286.225488][T10084] hierarchical_memsw_limit 9223372036854771712 [ 286.233564][T10084] total_cache 314335232 [ 286.237865][T10084] total_rss 217088 [ 286.248691][T10084] total_rss_huge 0 [ 286.259502][T10084] total_shmem 314318848 [ 286.270294][T10084] total_mapped_file 0 [ 286.274887][T10084] total_dirty 0 [ 286.278346][T10084] total_writeback 4096 [ 286.293371][T10084] total_workingset_refault_anon 40 [ 286.304204][T10084] total_workingset_refault_file 5823 [ 286.315039][T10084] total_swap 127954944 [ 286.325868][T10084] total_swapcached 40960 [ 286.330153][T10084] total_pgpgin 702505 [ 286.347250][T10084] total_pgpgout 627238 [ 286.351581][T10084] total_pgfault 294815 [ 286.355645][T10084] total_pgmajfault 200 [ 286.368757][T10084] total_inactive_anon 62451712 [ 286.380129][T10084] total_active_anon 251580416 [ 286.390540][T10084] total_inactive_file 0 [ 286.394729][T10084] total_active_file 0 [ 286.398859][T10084] total_unevictable 0 [ 286.403244][T10084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10070,uid=0 [ 286.418230][T10084] Memory cgroup out of memory: Killed process 10070 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53536kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 286.550538][ T329] usb 7-1: USB disconnect, device number 6 [ 286.911284][ T64] cdc_ncm 8-1:1.0: SET_CRC_MODE failed [ 286.938082][ T64] cdc_ncm 8-1:1.0: SET_NTB_FORMAT failed [ 286.957145][ T64] cdc_ncm 8-1:1.0: bind() failure [ 286.968779][ T64] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 286.975674][ T64] cdc_ncm 8-1:1.1: bind() failure [ 286.990913][ T64] usb 8-1: USB disconnect, device number 2 [ 287.033572][T10075] syz.1.3231 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 287.095907][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 287.095941][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.095954][T10075] Call Trace: [ 287.095961][T10075] [ 287.095969][T10075] __dump_stack+0x21/0x30 [ 287.096001][T10075] dump_stack_lvl+0x10c/0x190 [ 287.096025][T10075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 287.096048][T10075] ? ___ratelimit+0x3f7/0x5a0 [ 287.096076][T10075] dump_stack+0x19/0x20 [ 287.096098][T10075] dump_header+0xd7/0x490 [ 287.096125][T10075] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 287.096152][T10075] oom_kill_process+0x4c0/0x7e0 [ 287.096176][T10075] ? sched_clock_cpu+0x75/0x400 [ 287.096202][T10075] out_of_memory+0x7ee/0xbd0 [ 287.096222][T10075] ? __cfi_out_of_memory+0x10/0x10 [ 287.096242][T10075] ? mutex_lock_killable+0x92/0x1c0 [ 287.096261][T10075] ? __cfi_mutex_lock_killable+0x10/0x10 [ 287.096281][T10075] mem_cgroup_out_of_memory+0x279/0x350 [ 287.096301][T10075] ? drain_obj_stock+0xed0/0xed0 [ 287.096320][T10075] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 287.096337][T10075] try_charge_memcg+0x8f7/0xde0 [ 287.096361][T10075] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 287.096389][T10075] ? __cfi_try_charge_memcg+0x10/0x10 [ 287.096413][T10075] ? __alloc_pages_noprof+0x31f/0x7b0 [ 287.096437][T10075] __mem_cgroup_charge+0xf6/0x410 [ 287.096462][T10075] ? filemap_get_entry+0x3fb/0x460 [ 287.096484][T10075] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 287.096511][T10075] filemap_add_folio+0x57/0x2d0 [ 287.096531][T10075] __filemap_get_folio+0x597/0x9d0 [ 287.096554][T10075] ? __cfi___filemap_get_folio+0x10/0x10 [ 287.096576][T10075] ? mm_trace_rss_stat+0x20/0x130 [ 287.096601][T10075] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 287.096625][T10075] filemap_fault+0xb41/0x16b0 [ 287.096649][T10075] ? __cfi_filemap_fault+0x10/0x10 [ 287.096670][T10075] ? __cfi_filemap_map_pages+0x10/0x10 [ 287.096691][T10075] ? __cfi_lru_add+0x10/0x10 [ 287.096709][T10075] ? folio_rotate_reclaimable+0x130/0x130 [ 287.096731][T10075] do_pte_missing+0x298c/0x4240 [ 287.096753][T10075] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 287.096778][T10075] ? pte_marker_clear+0x1b0/0x1b0 [ 287.096798][T10075] ? put_swap_device+0x130/0x130 [ 287.096816][T10075] ? __pte_offset_map+0x1b0/0x230 [ 287.096837][T10075] ? pte_offset_map_rw_nolock+0xba/0x110 [ 287.096859][T10075] handle_mm_fault+0x1166/0x1b90 [ 287.096875][T10075] ? __kasan_check_write+0x18/0x20 [ 287.096904][T10075] ? __cfi_handle_mm_fault+0x10/0x10 [ 287.096923][T10075] ? follow_page_pte+0x2bd/0xb90 [ 287.096947][T10075] ? gup_must_unshare+0x1e0/0x1e0 [ 287.096969][T10075] ? vma_is_secretmem+0x11/0x50 [ 287.096995][T10075] __get_user_pages+0x1169/0x22d0 [ 287.097017][T10075] ? __kasan_check_write+0x18/0x20 [ 287.097045][T10075] ? populate_vma_page_range+0x230/0x230 [ 287.097086][T10075] ? __kernel_write_iter+0x66b/0x830 [ 287.097105][T10075] get_dump_page+0x107/0x220 [ 287.097132][T10075] ? __cfi_get_dump_page+0x10/0x10 [ 287.097153][T10075] ? __asan_memset+0x39/0x50 [ 287.097178][T10075] dump_user_range+0x181/0xdf0 [ 287.097198][T10075] ? __cfi_dump_emit+0x10/0x10 [ 287.097226][T10075] ? __cfi_dump_user_range+0x10/0x10 [ 287.097244][T10075] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 287.097273][T10075] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 287.097301][T10075] elf_core_dump+0x2cd9/0x3810 [ 287.097325][T10075] ? __cfi_elf_core_dump+0x10/0x10 [ 287.097352][T10075] ? dump_interrupted+0xf0/0xf0 [ 287.097378][T10075] ? filp_open+0x182/0x1d0 [ 287.097402][T10075] ? 0xffffffffff600000 [ 287.097417][T10075] do_coredump+0x1bfa/0x2bd0 [ 287.097446][T10075] ? __cfi_do_coredump+0x10/0x10 [ 287.097472][T10075] ? asm_exc_page_fault+0x2b/0x30 [ 287.097497][T10075] ? __kasan_slab_free+0x6a/0x80 [ 287.097517][T10075] ? kmem_cache_free+0x1c1/0x510 [ 287.097545][T10075] ? get_signal+0xa75/0x14f0 [ 287.097569][T10075] get_signal+0x11fd/0x14f0 [ 287.097594][T10075] arch_do_signal_or_restart+0x96/0x720 [ 287.097622][T10075] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 287.097647][T10075] irqentry_exit_to_user_mode+0x4e/0xb0 [ 287.097667][T10075] irqentry_exit+0x16/0x60 [ 287.097684][T10075] exc_page_fault+0x66/0xc0 [ 287.097701][T10075] asm_exc_page_fault+0x2b/0x30 [ 287.097716][T10075] RIP: 0033:0x7fdb6438ebf1 [ 287.097730][T10075] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 287.097743][T10075] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 287.097758][T10075] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 287.097770][T10075] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 287.097782][T10075] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 287.097795][T10075] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 287.097806][T10075] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 287.097822][T10075] [ 287.097830][T10075] memory: usage 307016kB, limit 307200kB, failcnt 31682 [ 287.483014][T10228] overlayfs: failed to clone upperpath [ 287.484584][T10075] memory+swap: usage 406300kB, limit 9007199254740988kB, failcnt 0 [ 287.620789][T10075] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 287.627675][T10075] Memory cgroup stats for /syz1: [ 287.627816][T10075] cache 290050048 [ 287.636514][T10075] rss 143360 [ 287.639717][T10075] rss_huge 0 [ 287.643287][T10075] shmem 287109120 [ 287.646946][T10075] mapped_file 2625536 [ 287.710907][T10233] devpts: called with bogus options [ 287.728685][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 287.761694][T10075] dirty 8192 [ 287.764943][T10075] writeback 36864 [ 287.768594][T10075] workingset_refault_anon 59 [ 287.803101][T10075] workingset_refault_file 6746 [ 287.808067][T10075] swap 127819776 [ 287.811846][T10075] swapcached 176128 [ 287.817327][T10075] pgpgin 705304 [ 287.820974][T10075] pgpgout 635950 [ 287.850927][T10075] pgfault 294979 [ 287.862266][T10239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3283'. [ 287.900812][T10229] overlayfs: failed to clone upperpath [ 287.910780][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'. [ 287.919545][T10075] pgmajfault 218 [ 287.924398][T10075] inactive_anon 34725888 [ 287.956273][T10075] active_anon 251887616 [ 287.985843][T10075] inactive_file 0 [ 287.993643][T10075] active_file 2940928 [ 288.015071][T10075] unevictable 0 [ 288.058116][T10075] hierarchical_memory_limit 314572800 [ 288.077489][T10075] hierarchical_memsw_limit 9223372036854771712 [ 288.090577][ T64] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 288.121741][T10075] total_cache 290050048 [ 288.127945][T10075] total_rss 143360 [ 288.133829][T10075] total_rss_huge 0 [ 288.143799][T10075] total_shmem 287109120 [ 288.148833][T10075] total_mapped_file 2625536 [ 288.153431][T10075] total_dirty 8192 [ 288.158121][T10075] total_writeback 36864 [ 288.162374][T10075] total_workingset_refault_anon 59 [ 288.169570][T10075] total_workingset_refault_file 6746 [ 288.174931][T10075] total_swap 127819776 [ 288.180084][T10075] total_swapcached 176128 [ 288.184788][T10075] total_pgpgin 705304 [ 288.194193][T10075] total_pgpgout 635950 [ 288.199071][T10075] total_pgfault 294979 [ 288.204266][T10075] total_pgmajfault 218 [ 288.210363][T10075] total_inactive_anon 34725888 [ 288.215234][T10075] total_active_anon 251887616 [ 288.221017][T10075] total_inactive_file 0 [ 288.225271][T10075] total_active_file 2940928 [ 288.230469][T10075] total_unevictable 0 [ 288.234513][T10075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10081,uid=0 [ 288.249606][T10075] Memory cgroup out of memory: Killed process 10081 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53564kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 288.266764][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 288.278221][ T64] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.295986][ T64] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.315217][ T64] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 288.331079][ T64] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.343719][T10067] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 288.368641][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.379338][ T64] usb 8-1: Product: syz [ 288.383533][ T64] usb 8-1: Manufacturer: syz [ 288.399032][ T64] usb 8-1: SerialNumber: syz [ 288.478746][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 288.478793][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.478806][T10067] Call Trace: [ 288.478814][T10067] [ 288.478824][T10067] __dump_stack+0x21/0x30 [ 288.478857][T10067] dump_stack_lvl+0x10c/0x190 [ 288.478881][T10067] ? __cfi_dump_stack_lvl+0x10/0x10 [ 288.478904][T10067] ? ___ratelimit+0x3f7/0x5a0 [ 288.478932][T10067] dump_stack+0x19/0x20 [ 288.478954][T10067] dump_header+0xd7/0x490 [ 288.478973][T10067] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 288.478998][T10067] oom_kill_process+0x4c0/0x7e0 [ 288.479027][T10067] ? sched_clock_cpu+0x75/0x400 [ 288.479052][T10067] out_of_memory+0x7ee/0xbd0 [ 288.479074][T10067] ? __cfi_out_of_memory+0x10/0x10 [ 288.479094][T10067] ? mutex_lock_killable+0x104/0x1c0 [ 288.479113][T10067] ? __cfi_mutex_lock_killable+0x10/0x10 [ 288.479134][T10067] mem_cgroup_out_of_memory+0x279/0x350 [ 288.479153][T10067] ? drain_obj_stock+0xed0/0xed0 [ 288.479173][T10067] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 288.479191][T10067] try_charge_memcg+0x8f7/0xde0 [ 288.479216][T10067] ? __cfi_try_charge_memcg+0x10/0x10 [ 288.479239][T10067] ? __alloc_pages_noprof+0x31f/0x7b0 [ 288.479263][T10067] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 288.479286][T10067] ? __folio_batch_add_and_move+0x2ab/0x370 [ 288.479309][T10067] __mem_cgroup_charge+0xf6/0x410 [ 288.479336][T10067] ? _raw_spin_lock+0x8c/0x120 [ 288.479359][T10067] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 288.479386][T10067] shmem_alloc_and_add_folio+0x86d/0x1050 [ 288.479410][T10067] ? put_swap_device+0x130/0x130 [ 288.479430][T10067] ? shmem_huge_global_enabled+0x2da/0x360 [ 288.479450][T10067] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 288.479470][T10067] ? __kasan_check_write+0x18/0x20 [ 288.479495][T10067] ? _raw_spin_lock+0x8c/0x120 [ 288.479517][T10067] shmem_get_folio_gfp+0x5f0/0x1380 [ 288.479539][T10067] ? shmem_get_folio+0xc0/0xc0 [ 288.479556][T10067] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 288.479581][T10067] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 288.479607][T10067] ? inode_to_bdi+0x6d/0x100 [ 288.479631][T10067] shmem_write_begin+0xf4/0x270 [ 288.479652][T10067] generic_perform_write+0x330/0x960 [ 288.479679][T10067] ? __cfi_generic_perform_write+0x10/0x10 [ 288.479703][T10067] ? down_write+0xe9/0x2a0 [ 288.479723][T10067] ? mnt_get_write_access_file+0x1af/0x3b0 [ 288.479747][T10067] ? mnt_put_write_access_file+0xc2/0x100 [ 288.479769][T10067] ? file_update_time+0x1ef/0x220 [ 288.479792][T10067] shmem_file_write_iter+0x105/0x130 [ 288.479814][T10067] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 288.479837][T10067] __kernel_write_iter+0x392/0x830 [ 288.479854][T10067] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 288.479878][T10067] ? __cfi___kernel_write_iter+0x10/0x10 [ 288.479905][T10067] ? get_dump_page+0x160/0x220 [ 288.479928][T10067] ? __asan_memset+0x39/0x50 [ 288.479952][T10067] ? iov_iter_bvec+0xc0/0x180 [ 288.479974][T10067] dump_user_range+0xb06/0xdf0 [ 288.479993][T10067] ? __cfi_dump_emit+0x10/0x10 [ 288.480024][T10067] ? __cfi_dump_user_range+0x10/0x10 [ 288.480042][T10067] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 288.480070][T10067] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 288.480096][T10067] elf_core_dump+0x2cd9/0x3810 [ 288.480121][T10067] ? __cfi_elf_core_dump+0x10/0x10 [ 288.480149][T10067] ? dump_interrupted+0xf0/0xf0 [ 288.480174][T10067] ? filp_open+0x182/0x1d0 [ 288.480197][T10067] ? 0xffffffffff600000 [ 288.480213][T10067] do_coredump+0x1bfa/0x2bd0 [ 288.480241][T10067] ? __cfi_do_coredump+0x10/0x10 [ 288.480266][T10067] ? asm_exc_page_fault+0x2b/0x30 [ 288.480292][T10067] ? __kasan_slab_free+0x6a/0x80 [ 288.480312][T10067] ? kmem_cache_free+0x1c1/0x510 [ 288.480338][T10067] ? get_signal+0xa75/0x14f0 [ 288.480360][T10067] get_signal+0x11fd/0x14f0 [ 288.480385][T10067] arch_do_signal_or_restart+0x96/0x720 [ 288.480414][T10067] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 288.480444][T10067] irqentry_exit_to_user_mode+0x4e/0xb0 [ 288.480466][T10067] irqentry_exit+0x16/0x60 [ 288.480485][T10067] exc_page_fault+0x66/0xc0 [ 288.480503][T10067] asm_exc_page_fault+0x2b/0x30 [ 288.480521][T10067] RIP: 0033:0x7fdb6438ebf1 [ 288.480538][T10067] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 288.480555][T10067] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 288.480574][T10067] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 288.480589][T10067] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 288.480602][T10067] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.480616][T10067] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 288.480628][T10067] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 288.480645][T10067] [ 288.480653][T10067] memory: usage 290920kB, limit 307200kB, failcnt 32834 [ 288.865169][ T36] kauditd_printk_skb: 317 callbacks suppressed [ 288.865189][ T36] audit: type=1400 audit(2000004500.711:84182): avc: denied { ioctl } for pid=10236 comm="syz.7.3282" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.868682][T10067] memory+swap: usage 426792kB, limit 9007199254740988kB, failcnt 0 [ 288.877909][ T36] audit: type=1400 audit(2000004500.711:84183): avc: denied { ioctl } for pid=10236 comm="syz.7.3282" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.878558][T10067] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 288.894355][ T36] audit: type=1400 audit(2000004500.711:84184): avc: denied { ioctl } for pid=10236 comm="syz.7.3282" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.933490][T10067] Memory cgroup stats for [ 288.982333][ T36] audit: type=1400 audit(2000004500.711:84185): avc: denied { ioctl } for pid=10236 comm="syz.7.3282" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.115462][T10067] /syz1: [ 289.115597][T10067] cache 314163200 [ 289.124977][T10067] rss 90112 [ 289.129005][T10067] rss_huge 0 [ 289.132350][T10067] shmem 314159104 [ 289.136131][T10067] mapped_file 0 [ 289.141200][T10067] dirty 0 [ 289.144277][T10067] writeback 196608 [ 289.161751][T10067] workingset_refault_anon 66 [ 289.166477][ T36] audit: type=1400 audit(2000004500.767:84186): avc: denied { execmem } for pid=10267 comm="syz.0.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 289.174464][T10067] workingset_refault_file 8323 [ 289.186084][ T36] audit: type=1400 audit(2000004500.767:84187): avc: denied { execute } for pid=10267 comm="syz.0.3293" path="/dev/rnullb0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.193853][T10067] swap 127655936 [ 289.218327][T10067] swapcached 339968 [ 289.218798][ T36] audit: type=1400 audit(2000004500.767:84188): avc: denied { create } for pid=10267 comm="syz.0.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.222796][T10067] pgpgin 724481 [ 289.244514][ T36] audit: type=1400 audit(2000004500.767:84189): avc: denied { create } for pid=10267 comm="syz.0.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 289.249427][T10067] pgpgout 649214 [ 289.267220][ T36] audit: type=1400 audit(2000004500.767:84190): avc: denied { setopt } for pid=10267 comm="syz.0.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 289.271797][T10067] pgfault 295478 [ 289.291053][ T36] audit: type=1400 audit(2000004500.777:84191): avc: denied { getopt } for pid=10267 comm="syz.0.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.295416][T10067] pgmajfault 228 [ 289.318429][T10067] inactive_anon 227676160 [ 289.325364][T10067] active_anon 86630400 [ 289.329710][T10067] inactive_file 0 [ 289.333447][T10067] active_file 0 [ 289.337891][T10067] unevictable 0 [ 289.341985][T10067] hierarchical_memory_limit 314572800 [ 289.347363][T10067] hierarchical_memsw_limit 9223372036854771712 [ 289.353915][T10067] total_cache 314163200 [ 289.358090][T10067] total_rss 90112 [ 289.361736][T10067] total_rss_huge 0 [ 289.365953][T10067] total_shmem 314159104 [ 289.370463][T10067] total_mapped_file 0 [ 289.374519][T10067] total_dirty 0 [ 289.378286][T10067] total_writeback 196608 [ 289.382548][T10067] total_workingset_refault_anon 66 [ 289.387732][T10067] total_workingset_refault_file 8323 [ 289.393360][T10067] total_swap 127655936 [ 289.397504][T10067] total_swapcached 339968 [ 289.402027][T10067] total_pgpgin 724481 [ 289.406948][T10067] total_pgpgout 649214 [ 289.411072][T10067] total_pgfault 295478 [ 289.415160][T10067] total_pgmajfault 228 [ 289.421351][T10067] total_inactive_anon 227676160 [ 289.426488][T10067] total_active_anon 86630400 [ 289.432355][T10067] total_inactive_file 0 [ 289.436531][T10067] total_active_file 0 [ 289.441846][T10067] total_unevictable 0 [ 289.443550][ T64] cdc_ncm 8-1:1.0: SET_NTB_FORMAT failed [ 289.446007][T10067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10071,uid=0 [ 289.468599][T10067] Memory cgroup out of memory: Killed process 10071 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:53656kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 289.470467][ T64] cdc_ncm 8-1:1.0: bind() failure [ 289.491783][ T64] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 289.499889][ T64] cdc_ncm 8-1:1.1: bind() failure [ 289.523871][ T64] usb 8-1: USB disconnect, device number 3 [ 289.584870][T10075] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 289.641360][T10075] CPU: 0 UID: 0 PID: 10075 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 289.641401][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.641414][T10075] Call Trace: [ 289.641421][T10075] [ 289.641430][T10075] __dump_stack+0x21/0x30 [ 289.641464][T10075] dump_stack_lvl+0x10c/0x190 [ 289.641488][T10075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.641512][T10075] ? ___ratelimit+0x3f7/0x5a0 [ 289.641540][T10075] dump_stack+0x19/0x20 [ 289.641563][T10075] dump_header+0xd7/0x490 [ 289.641582][T10075] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 289.641607][T10075] oom_kill_process+0x4c0/0x7e0 [ 289.641629][T10075] ? sched_clock_cpu+0x75/0x400 [ 289.641656][T10075] out_of_memory+0x7ee/0xbd0 [ 289.641676][T10075] ? __cfi_out_of_memory+0x10/0x10 [ 289.641696][T10075] ? mutex_lock_killable+0x92/0x1c0 [ 289.641715][T10075] ? __cfi_mutex_lock_killable+0x10/0x10 [ 289.641735][T10075] mem_cgroup_out_of_memory+0x279/0x350 [ 289.641754][T10075] ? drain_obj_stock+0xed0/0xed0 [ 289.641773][T10075] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 289.641792][T10075] try_charge_memcg+0x8f7/0xde0 [ 289.641816][T10075] ? __cfi_try_charge_memcg+0x10/0x10 [ 289.641841][T10075] ? __alloc_pages_noprof+0x31f/0x7b0 [ 289.641865][T10075] ? folio_unlock+0x12f/0x1a0 [ 289.641886][T10075] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 289.641911][T10075] __mem_cgroup_charge+0xf6/0x410 [ 289.641944][T10075] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 289.641968][T10075] ? do_pte_missing+0x2bdb/0x4240 [ 289.641992][T10075] shmem_alloc_and_add_folio+0x86d/0x1050 [ 289.642016][T10075] ? put_swap_device+0x130/0x130 [ 289.642036][T10075] ? shmem_huge_global_enabled+0x2da/0x360 [ 289.642056][T10075] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 289.642075][T10075] ? __kasan_check_write+0x18/0x20 [ 289.642102][T10075] ? _raw_spin_lock+0x8c/0x120 [ 289.642126][T10075] shmem_get_folio_gfp+0x5f0/0x1380 [ 289.642148][T10075] ? shmem_get_folio+0xc0/0xc0 [ 289.642166][T10075] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 289.642191][T10075] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 289.642216][T10075] ? inode_to_bdi+0x6d/0x100 [ 289.642237][T10075] shmem_write_begin+0xf4/0x270 [ 289.642253][T10075] generic_perform_write+0x330/0x960 [ 289.642277][T10075] ? __cfi_generic_perform_write+0x10/0x10 [ 289.642297][T10075] ? down_write+0xe9/0x2a0 [ 289.642316][T10075] ? mnt_get_write_access_file+0x1af/0x3b0 [ 289.642341][T10075] ? mnt_put_write_access_file+0xc2/0x100 [ 289.642381][T10075] ? file_update_time+0x1ef/0x220 [ 289.642407][T10075] shmem_file_write_iter+0x105/0x130 [ 289.642431][T10075] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 289.642454][T10075] __kernel_write_iter+0x392/0x830 [ 289.642472][T10075] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 289.642495][T10075] ? __cfi___kernel_write_iter+0x10/0x10 [ 289.642521][T10075] ? get_dump_page+0x160/0x220 [ 289.642543][T10075] ? __asan_memset+0x39/0x50 [ 289.642569][T10075] ? iov_iter_bvec+0xc0/0x180 [ 289.642591][T10075] dump_user_range+0xb06/0xdf0 [ 289.642611][T10075] ? __cfi_dump_emit+0x10/0x10 [ 289.642639][T10075] ? __cfi_dump_user_range+0x10/0x10 [ 289.642656][T10075] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 289.642683][T10075] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 289.642710][T10075] elf_core_dump+0x2cd9/0x3810 [ 289.642735][T10075] ? __cfi_elf_core_dump+0x10/0x10 [ 289.642761][T10075] ? dump_interrupted+0xf0/0xf0 [ 289.642788][T10075] ? filp_open+0x182/0x1d0 [ 289.642811][T10075] ? 0xffffffffff600000 [ 289.642828][T10075] do_coredump+0x1bfa/0x2bd0 [ 289.642857][T10075] ? __cfi_do_coredump+0x10/0x10 [ 289.642882][T10075] ? asm_exc_page_fault+0x2b/0x30 [ 289.642908][T10075] ? __kasan_slab_free+0x6a/0x80 [ 289.642933][T10075] ? kmem_cache_free+0x1c1/0x510 [ 289.642960][T10075] ? get_signal+0xa75/0x14f0 [ 289.642984][T10075] get_signal+0x11fd/0x14f0 [ 289.643008][T10075] arch_do_signal_or_restart+0x96/0x720 [ 289.643039][T10075] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 289.643069][T10075] irqentry_exit_to_user_mode+0x4e/0xb0 [ 289.643091][T10075] irqentry_exit+0x16/0x60 [ 289.643110][T10075] exc_page_fault+0x66/0xc0 [ 289.643129][T10075] asm_exc_page_fault+0x2b/0x30 [ 289.643147][T10075] RIP: 0033:0x7fdb6438ebf1 [ 289.643165][T10075] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 289.643182][T10075] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 289.643201][T10075] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 289.643215][T10075] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 289.643229][T10075] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 289.643242][T10075] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 289.643255][T10075] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 289.643273][T10075] [ 289.643282][T10075] memory: usage 291432kB, limit 307200kB, failcnt 34311 [ 290.170737][T10075] memory+swap: usage 413308kB, limit 9007199254740988kB, failcnt 0 [ 290.260564][T10075] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 290.292104][T10075] Memory cgroup stats for /syz1: [ 290.292258][T10075] cache 299311104 [ 290.302868][T10075] rss 94208 [ 290.306990][T10075] rss_huge 0 [ 290.310236][T10075] shmem 294854656 [ 290.314020][T10075] mapped_file 4325376 [ 290.319468][T10075] dirty 0 [ 290.322471][T10075] writeback 614400 [ 290.341958][T10075] workingset_refault_anon 68 [ 290.346773][T10075] workingset_refault_file 9427 [ 290.353641][T10075] swap 127254528 [ 290.357220][T10075] swapcached 741376 [ 290.362406][T10075] pgpgin 734452 [ 290.366072][T10075] pgpgout 662712 [ 290.370918][T10075] pgfault 295597 [ 290.374483][T10075] pgmajfault 234 [ 290.378402][T10075] inactive_anon 125325312 [ 290.385283][T10075] active_anon 169783296 [ 290.390847][T10075] inactive_file 0 [ 290.432738][T10075] active_file 4456448 [ 290.440390][T10075] unevictable 0 [ 290.454438][T10075] hierarchical_memory_limit 314572800 [ 290.460224][T10075] hierarchical_memsw_limit 9223372036854771712 [ 290.474721][T10075] total_cache 299311104 [ 290.484534][T10075] total_rss 94208 [ 290.507898][T10075] total_rss_huge 0 [ 290.535017][T10075] total_shmem 294854656 [ 290.550515][T10075] total_mapped_file 4325376 [ 290.555580][T10075] total_dirty 0 [ 290.560143][T10075] total_writeback 614400 [ 290.571832][T10075] total_workingset_refault_anon 68 [ 290.581052][T10075] total_workingset_refault_file 9427 [ 290.598665][T10075] total_swap 127254528 [ 290.602830][T10075] total_swapcached 741376 [ 290.610092][T10075] total_pgpgin 734452 [ 290.614103][T10075] total_pgpgout 662712 [ 290.630643][T10075] total_pgfault 295597 [ 290.635679][T10075] total_pgmajfault 234 [ 290.649039][T10075] total_inactive_anon 125325312 [ 290.654701][T10075] total_active_anon 169783296 [ 290.659532][T10075] total_inactive_file 0 [ 290.663838][T10075] total_active_file 4456448 [ 290.668555][T10075] total_unevictable 0 [ 290.673043][T10075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10076,uid=0 [ 290.689340][T10075] Memory cgroup out of memory: Killed process 10076 (syz.1.3231) total-vm:90104kB, anon-rss:952kB, file-rss:56012kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 290.689705][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 290.715526][T10298] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 290.730001][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.822941][T10301] fido_id[10301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.288452][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 291.473025][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.484153][ T10] usb 8-1: config 0 has no interfaces? [ 291.497165][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 291.513041][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 291.521211][ T10] usb 8-1: Product: syz [ 291.525438][ T10] usb 8-1: Manufacturer: syz [ 291.530080][ T10] usb 8-1: SerialNumber: syz [ 291.546101][ T10] usb 8-1: config 0 descriptor?? [ 291.786797][ T64] usb 8-1: USB disconnect, device number 4 [ 291.822192][T10314] overlayfs: failed to clone upperpath [ 292.000536][T10318] overlayfs: failed to clone upperpath [ 292.818169][T10332] batadv_slave_0: entered promiscuous mode [ 292.824100][T10332] batadv_slave_0: entered allmulticast mode [ 292.875068][ T38] oom_reaper: reaped process 10076 (syz.1.3231), now anon-rss:4kB, file-rss:53468kB, shmem-rss:0kB [ 292.906948][T10333] overlayfs: statfs failed on './file0' [ 292.908100][T10336] rust_binder: Error while translating object. [ 292.912675][T10336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 292.921521][T10083] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 292.955646][T10336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:121 [ 293.010669][T10083] CPU: 0 UID: 0 PID: 10083 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 293.010709][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.010721][T10083] Call Trace: [ 293.010729][T10083] [ 293.010738][T10083] __dump_stack+0x21/0x30 [ 293.010773][T10083] dump_stack_lvl+0x10c/0x190 [ 293.010797][T10083] ? __cfi_dump_stack_lvl+0x10/0x10 [ 293.010821][T10083] ? ___ratelimit+0x3f7/0x5a0 [ 293.010848][T10083] dump_stack+0x19/0x20 [ 293.010870][T10083] dump_header+0xd7/0x490 [ 293.010889][T10083] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 293.010915][T10083] oom_kill_process+0x4c0/0x7e0 [ 293.010937][T10083] ? sched_clock_cpu+0x75/0x400 [ 293.010963][T10083] out_of_memory+0x7ee/0xbd0 [ 293.010984][T10083] ? __cfi_out_of_memory+0x10/0x10 [ 293.011004][T10083] ? mutex_lock_killable+0x92/0x1c0 [ 293.011023][T10083] ? __cfi_mutex_lock_killable+0x10/0x10 [ 293.011043][T10083] mem_cgroup_out_of_memory+0x279/0x350 [ 293.011063][T10083] ? drain_obj_stock+0xed0/0xed0 [ 293.011081][T10083] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 293.011099][T10083] try_charge_memcg+0x8f7/0xde0 [ 293.011123][T10083] ? __cfi_try_charge_memcg+0x10/0x10 [ 293.011146][T10083] ? __alloc_pages_noprof+0x31f/0x7b0 [ 293.011170][T10083] ? __switch_to+0xc7b/0x1310 [ 293.011195][T10083] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 293.011218][T10083] __mem_cgroup_charge+0xf6/0x410 [ 293.011244][T10083] ? pick_next_task_fair+0x900/0x990 [ 293.011267][T10083] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 293.011292][T10083] ? _raw_spin_lock+0x8c/0x120 [ 293.011316][T10083] shmem_alloc_and_add_folio+0x86d/0x1050 [ 293.011339][T10083] ? put_swap_device+0x130/0x130 [ 293.011359][T10083] ? shmem_huge_global_enabled+0x2da/0x360 [ 293.011386][T10083] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 293.011405][T10083] ? __kasan_check_write+0x18/0x20 [ 293.011431][T10083] ? _raw_spin_lock+0x8c/0x120 [ 293.011453][T10083] shmem_get_folio_gfp+0x5f0/0x1380 [ 293.011473][T10083] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 293.011502][T10083] ? shmem_get_folio+0xc0/0xc0 [ 293.011519][T10083] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 293.011544][T10083] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 293.011568][T10083] ? inode_to_bdi+0x6d/0x100 [ 293.011592][T10083] shmem_write_begin+0xf4/0x270 [ 293.011613][T10083] generic_perform_write+0x330/0x960 [ 293.011638][T10083] ? __cfi_generic_perform_write+0x10/0x10 [ 293.011661][T10083] ? down_write+0xe9/0x2a0 [ 293.011679][T10083] ? mnt_get_write_access_file+0x1af/0x3b0 [ 293.011702][T10083] ? mnt_put_write_access_file+0xc2/0x100 [ 293.011725][T10083] ? file_update_time+0x1ef/0x220 [ 293.011748][T10083] shmem_file_write_iter+0x105/0x130 [ 293.011770][T10083] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 293.011792][T10083] __kernel_write_iter+0x392/0x830 [ 293.011809][T10083] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 293.011832][T10083] ? __cfi___kernel_write_iter+0x10/0x10 [ 293.011859][T10083] ? get_dump_page+0x160/0x220 [ 293.011880][T10083] ? __asan_memset+0x39/0x50 [ 293.011904][T10083] ? iov_iter_bvec+0xc0/0x180 [ 293.011925][T10083] dump_user_range+0xb06/0xdf0 [ 293.011943][T10083] ? __cfi_dump_emit+0x10/0x10 [ 293.011969][T10083] ? __cfi_dump_user_range+0x10/0x10 [ 293.011987][T10083] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 293.012013][T10083] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 293.012040][T10083] elf_core_dump+0x2cd9/0x3810 [ 293.012063][T10083] ? __cfi_elf_core_dump+0x10/0x10 [ 293.012088][T10083] ? dump_interrupted+0xf0/0xf0 [ 293.012107][T10083] ? filp_open+0x182/0x1d0 [ 293.012125][T10083] ? 0xffffffffff600000 [ 293.012140][T10083] do_coredump+0x1bfa/0x2bd0 [ 293.012167][T10083] ? __cfi_do_coredump+0x10/0x10 [ 293.012192][T10083] ? asm_exc_page_fault+0x2b/0x30 [ 293.012217][T10083] ? __kasan_slab_free+0x6a/0x80 [ 293.012236][T10083] ? kmem_cache_free+0x1c1/0x510 [ 293.012262][T10083] ? get_signal+0xa75/0x14f0 [ 293.012284][T10083] get_signal+0x11fd/0x14f0 [ 293.012308][T10083] arch_do_signal_or_restart+0x96/0x720 [ 293.012334][T10083] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 293.012363][T10083] irqentry_exit_to_user_mode+0x4e/0xb0 [ 293.012461][T10083] irqentry_exit+0x16/0x60 [ 293.012480][T10083] exc_page_fault+0x66/0xc0 [ 293.012498][T10083] asm_exc_page_fault+0x2b/0x30 [ 293.012516][T10083] RIP: 0033:0x7fdb6438ebf1 [ 293.012535][T10083] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 293.012552][T10083] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 293.012571][T10083] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 293.012585][T10083] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 293.012598][T10083] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 293.012611][T10083] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 293.012623][T10083] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 293.012639][T10083] [ 293.012647][T10083] memory: usage 307200kB, limit 307200kB, failcnt 46075 [ 293.331226][ T64] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 293.336818][T10083] memory+swap: usage 431608kB, limit 9007199254740988kB, failcnt 0 [ 293.491655][ T64] usb 8-1: device descriptor read/64, error -71 [ 293.494352][T10083] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 293.549371][T10083] Memory cgroup stats for /syz1: [ 293.549549][T10083] cache 313913344 [ 293.564610][T10083] rss 180224 [ 293.567884][T10083] rss_huge 0 [ 293.571249][T10083] shmem 313909248 [ 293.576080][T10083] mapped_file 0 [ 293.581498][T10083] dirty 0 [ 293.584710][T10083] writeback 0 [ 293.588073][T10083] workingset_refault_anon 96 [ 293.596659][T10083] workingset_refault_file 9427 [ 293.601511][T10083] swap 127393792 [ 293.605232][T10083] swapcached 577536 [ 293.609051][T10083] pgpgin 739145 [ 293.617974][T10083] pgpgout 663878 [ 293.628058][T10083] pgfault 295699 [ 293.631766][T10083] pgmajfault 256 [ 293.635612][T10083] inactive_anon 263983104 [ 293.640170][T10083] active_anon 50585600 [ 293.650928][T10083] inactive_file 0 [ 293.654635][T10083] active_file 4096 [ 293.658611][T10083] unevictable 0 [ 293.662133][T10083] hierarchical_memory_limit 314572800 [ 293.669113][T10083] hierarchical_memsw_limit 9223372036854771712 [ 293.681019][T10083] total_cache 313913344 [ 293.686301][T10083] total_rss 180224 [ 293.690066][T10083] total_rss_huge 0 [ 293.693837][T10083] total_shmem 313909248 [ 293.698998][T10083] total_mapped_file 0 [ 293.702987][T10083] total_dirty 0 [ 293.708410][T10083] total_writeback 0 [ 293.716241][T10083] total_workingset_refault_anon 96 [ 293.728005][T10083] total_workingset_refault_file 9427 [ 293.737619][T10083] total_swap 127393792 [ 293.741882][T10083] total_swapcached 577536 [ 293.754928][T10083] total_pgpgin 739145 [ 293.759125][ T64] usb 8-1: device descriptor read/64, error -71 [ 293.765445][T10083] total_pgpgout 663878 [ 293.770335][T10083] total_pgfault 295699 [ 293.774717][T10083] total_pgmajfault 256 [ 293.778912][T10083] total_inactive_anon 263983104 [ 293.785178][T10083] total_active_anon 50585600 [ 293.790143][T10083] total_inactive_file 0 [ 293.794426][T10083] total_active_file 4096 [ 293.801301][T10355] fuse: Unknown parameter '۱)}3ݸa`|? ݖ\mAF..цS0MF5j1(&[ [ 293.801301][T10355] s.s>O}V#' [ 293.815185][T10083] total_unevictable 0 [ 293.819197][T10083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10074,uid=0 [ 293.834585][T10083] Memory cgroup out of memory: Killed process 10074 (syz.1.3231) total-vm:90104kB, anon-rss:1080kB, file-rss:55872kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 294.015680][ T64] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 294.165445][ T64] usb 8-1: device descriptor read/64, error -71 [ 294.284606][ T36] kauditd_printk_skb: 307 callbacks suppressed [ 294.284624][ T36] audit: type=1400 audit(2000004505.788:84499): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.325846][ T36] audit: type=1400 audit(2000004505.788:84500): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.352471][ T36] audit: type=1400 audit(2000004505.788:84501): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.388449][ T36] audit: type=1400 audit(2000004505.788:84502): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.413596][ T36] audit: type=1400 audit(2000004505.788:84503): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.439810][ T36] audit: type=1400 audit(2000004505.788:84504): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.464890][ T64] usb 8-1: device descriptor read/64, error -71 [ 294.471240][ T36] audit: type=1400 audit(2000004505.788:84505): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.496342][ T36] audit: type=1400 audit(2000004505.872:84506): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.583078][ T64] usb usb8-port1: attempt power cycle [ 294.591351][ T36] audit: type=1400 audit(2000004506.069:84507): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.646731][ T36] audit: type=1400 audit(2000004506.069:84508): avc: denied { ioctl } for pid=10338 comm="syz.7.3319" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.834249][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 294.859937][T10374] overlayfs: failed to clone upperpath [ 294.967582][ T64] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 294.991746][ T64] usb 8-1: device descriptor read/8, error -71 [ 295.153848][ T64] usb 8-1: device descriptor read/8, error -71 [ 295.416772][ T64] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 295.442819][ T64] usb 8-1: device descriptor read/8, error -71 [ 295.591450][ T64] usb 8-1: device descriptor read/8, error -71 [ 295.717313][ T64] usb usb8-port1: unable to enumerate USB device [ 295.918828][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 295.936412][T10381] netlink: 'syz.0.3336': attribute type 12 has an invalid length. [ 296.038068][ T38] oom_reaper: reaped process 10074 (syz.1.3231), now anon-rss:28kB, file-rss:53312kB, shmem-rss:0kB [ 296.065479][T10072] syz.1.3231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 296.075321][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.1.3231 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 296.075355][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.075366][T10072] Call Trace: [ 296.075375][T10072] [ 296.075384][T10072] __dump_stack+0x21/0x30 [ 296.075415][T10072] dump_stack_lvl+0x10c/0x190 [ 296.075432][T10072] ? __cfi_dump_stack_lvl+0x10/0x10 [ 296.075450][T10072] ? ___ratelimit+0x3f7/0x5a0 [ 296.075476][T10072] dump_stack+0x19/0x20 [ 296.075494][T10072] dump_header+0xd7/0x490 [ 296.075513][T10072] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 296.075538][T10072] oom_kill_process+0x4c0/0x7e0 [ 296.075561][T10072] ? sched_clock_cpu+0x75/0x400 [ 296.075582][T10072] out_of_memory+0x7ee/0xbd0 [ 296.075599][T10072] ? __cfi_out_of_memory+0x10/0x10 [ 296.075615][T10072] ? mutex_lock_killable+0x92/0x1c0 [ 296.075634][T10072] ? __cfi_mutex_lock_killable+0x10/0x10 [ 296.075655][T10072] mem_cgroup_out_of_memory+0x279/0x350 [ 296.075674][T10072] ? drain_obj_stock+0xed0/0xed0 [ 296.075694][T10072] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 296.075709][T10072] try_charge_memcg+0x8f7/0xde0 [ 296.075733][T10072] ? __cfi_try_charge_memcg+0x10/0x10 [ 296.075757][T10072] ? __alloc_pages_noprof+0x31f/0x7b0 [ 296.075782][T10072] ? folio_add_new_anon_rmap+0x475/0x910 [ 296.075802][T10072] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 296.075825][T10072] __mem_cgroup_charge+0xf6/0x410 [ 296.075852][T10072] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 296.075880][T10072] shmem_alloc_and_add_folio+0x86d/0x1050 [ 296.075905][T10072] ? put_swap_device+0x130/0x130 [ 296.075925][T10072] ? shmem_huge_global_enabled+0x2da/0x360 [ 296.075945][T10072] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 296.075965][T10072] ? __kasan_check_write+0x18/0x20 [ 296.075992][T10072] ? _raw_spin_lock+0x8c/0x120 [ 296.076016][T10072] shmem_get_folio_gfp+0x5f0/0x1380 [ 296.076038][T10072] ? shmem_get_folio+0xc0/0xc0 [ 296.076055][T10072] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 296.076081][T10072] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 296.076105][T10072] ? inode_to_bdi+0x6d/0x100 [ 296.076129][T10072] shmem_write_begin+0xf4/0x270 [ 296.076157][T10072] generic_perform_write+0x330/0x960 [ 296.076185][T10072] ? __cfi_generic_perform_write+0x10/0x10 [ 296.076209][T10072] ? down_write+0xe9/0x2a0 [ 296.076227][T10072] ? mnt_get_write_access_file+0x1af/0x3b0 [ 296.076252][T10072] ? mnt_put_write_access_file+0xc2/0x100 [ 296.076275][T10072] ? file_update_time+0x1ef/0x220 [ 296.076300][T10072] shmem_file_write_iter+0x105/0x130 [ 296.076322][T10072] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 296.076344][T10072] __kernel_write_iter+0x392/0x830 [ 296.076363][T10072] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 296.076386][T10072] ? __cfi___kernel_write_iter+0x10/0x10 [ 296.076413][T10072] ? __asan_memset+0x39/0x50 [ 296.076436][T10072] ? iov_iter_bvec+0xc0/0x180 [ 296.076458][T10072] dump_user_range+0xb06/0xdf0 [ 296.076477][T10072] ? __cfi_dump_emit+0x10/0x10 [ 296.076504][T10072] ? __cfi_dump_user_range+0x10/0x10 [ 296.076522][T10072] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 296.076548][T10072] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 296.076575][T10072] elf_core_dump+0x2cd9/0x3810 [ 296.076600][T10072] ? __cfi_elf_core_dump+0x10/0x10 [ 296.076627][T10072] ? dump_interrupted+0xf0/0xf0 [ 296.076652][T10072] ? filp_open+0x182/0x1d0 [ 296.076676][T10072] ? 0xffffffffff600000 [ 296.076692][T10072] do_coredump+0x1bfa/0x2bd0 [ 296.076721][T10072] ? __cfi_do_coredump+0x10/0x10 [ 296.076742][T10072] ? asm_exc_page_fault+0x2b/0x30 [ 296.076762][T10072] ? __kasan_slab_free+0x6a/0x80 [ 296.076781][T10072] ? kmem_cache_free+0x1c1/0x510 [ 296.076808][T10072] ? get_signal+0xa75/0x14f0 [ 296.076831][T10072] get_signal+0x11fd/0x14f0 [ 296.076852][T10072] arch_do_signal_or_restart+0x96/0x720 [ 296.076874][T10072] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 296.076896][T10072] irqentry_exit_to_user_mode+0x4e/0xb0 [ 296.076913][T10072] irqentry_exit+0x16/0x60 [ 296.076927][T10072] exc_page_fault+0x66/0xc0 [ 296.076943][T10072] asm_exc_page_fault+0x2b/0x30 [ 296.076961][T10072] RIP: 0033:0x7fdb6438ebf1 [ 296.076977][T10072] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 296.076995][T10072] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 296.077013][T10072] RAX: 0000000000000000 RBX: 00007fdb645b5fa0 RCX: 00007fdb6438ebe9 [ 296.077027][T10072] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000023a40080 [ 296.077041][T10072] RBP: 00007fdb64411e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.077054][T10072] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 296.077068][T10072] R13: 00007fdb645b6038 R14: 00007fdb645b5fa0 R15: 00007ffe5fcb21d8 [ 296.077086][T10072] [ 296.077381][T10072] memory: usage 307200kB, limit 307200kB, failcnt 61373 [ 296.133732][T10385] overlayfs: failed to clone upperpath [ 296.134831][T10072] memory+swap: usage 431604kB, limit 9007199254740988kB, failcnt 0 [ 296.426708][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3340'. [ 296.430717][T10072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 296.585593][T10072] Memory cgroup stats for /syz1: [ 296.585789][T10072] cache 313925632 [ 296.594403][T10072] rss 90112 [ 296.599346][T10072] rss_huge 0 [ 296.602707][T10072] shmem 313925632 [ 296.606842][T10072] mapped_file 0 [ 296.610672][T10072] dirty 0 [ 296.613655][T10072] writeback 0 [ 296.617040][T10072] workingset_refault_anon 96 [ 296.621630][T10072] workingset_refault_file 9428 [ 296.626576][T10072] swap 127389696 [ 296.630214][T10072] swapcached 577536 [ 296.634017][T10072] pgpgin 739150 [ 296.637519][T10072] pgpgout 663883 [ 296.645583][T10072] pgfault 295699 [ 296.649285][T10072] pgmajfault 257 [ 296.653267][T10072] inactive_anon 220561408 [ 296.659096][T10072] active_anon 94011392 [ 296.663500][T10072] inactive_file 0 [ 296.667143][T10072] active_file 0 [ 296.675760][T10072] unevictable 0 [ 296.679827][T10072] hierarchical_memory_limit 314572800 [ 296.686273][T10072] hierarchical_memsw_limit 9223372036854771712 [ 296.692923][T10072] total_cache 313925632 [ 296.697299][T10072] total_rss 90112 [ 296.706091][T10072] total_rss_huge 0 [ 296.708038][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3342'. [ 296.710117][T10072] total_shmem 313925632 [ 296.723553][T10072] total_mapped_file 0 [ 296.727728][T10072] total_dirty 0 [ 296.731474][T10072] total_writeback 0 [ 296.748320][T10072] total_workingset_refault_anon 96 [ 296.759441][T10072] total_workingset_refault_file 9428 [ 296.769522][T10072] total_swap 127389696 [ 296.775709][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 296.778363][T10072] total_swapcached 577536 [ 296.799474][T10072] total_pgpgin 739150 [ 296.803732][T10072] total_pgpgout 663883 [ 296.812597][T10072] total_pgfault 295699 [ 296.817512][T10072] total_pgmajfault 257 [ 296.822305][T10072] total_inactive_anon 220561408 [ 296.827457][T10072] total_active_anon 94011392 [ 296.832344][T10072] total_inactive_file 0 [ 296.836571][T10072] total_active_file 0 [ 296.841251][T10072] total_unevictable 0 [ 296.845285][T10072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3231,pid=10080,uid=0 [ 296.862222][T10072] Memory cgroup out of memory: Killed process 10080 (syz.1.3231) total-vm:90104kB, anon-rss:1080kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 297.009814][T10415] rust_binder: Write failure EFAULT in pid:52 [ 297.113316][ T13] bridge_slave_1: left allmulticast mode [ 297.125274][ T13] bridge_slave_1: left promiscuous mode [ 297.138724][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.161454][ T13] bridge_slave_0: left allmulticast mode [ 297.170747][ T13] bridge_slave_0: left promiscuous mode [ 297.176414][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.489966][ T13] veth1_macvtap: left promiscuous mode [ 297.502937][ T13] veth0_vlan: left promiscuous mode [ 297.672438][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.696321][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.703523][T10427] bridge_slave_0: entered allmulticast mode [ 297.723159][T10427] bridge_slave_0: entered promiscuous mode [ 297.726961][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 297.738727][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.745848][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.759044][T10427] bridge_slave_1: entered allmulticast mode [ 297.776248][T10427] bridge_slave_1: entered promiscuous mode [ 297.791809][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 297.812270][T10437] overlayfs: failed to clone upperpath [ 297.902831][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.923840][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.942525][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.956207][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.972906][ T10] usb 7-1: SerialNumber: syz [ 297.979917][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.987084][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.994411][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.001710][T10427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.070184][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.089704][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.108467][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.115648][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.137479][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.144574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.216797][ T10] usb 7-1: 0:2 : does not exist [ 298.223051][ T10] usb 7-1: unit 5: unexpected type 0x0a [ 298.233735][ T10] usb 7-1: USB disconnect, device number 7 [ 298.295615][T10427] veth0_vlan: entered promiscuous mode [ 298.313286][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.344704][T10427] veth1_macvtap: entered promiscuous mode [ 298.820555][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 298.855057][T10458] 9pnet_fd: Insufficient options for proto=fd [ 298.999678][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 299.014587][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.031949][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.046358][ T10] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.068544][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.081779][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.118047][ T10] usb 9-1: Product: syz [ 299.122251][ T10] usb 9-1: Manufacturer: syz [ 299.148184][ T10] usb 9-1: SerialNumber: syz [ 299.596610][T10472] rust_binder: Write failure EINVAL in pid:140 [ 299.662955][ T36] kauditd_printk_skb: 661 callbacks suppressed [ 299.662988][ T36] audit: type=1400 audit(2000004510.819:85170): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.711771][ T36] audit: type=1400 audit(2000004510.819:85171): avc: denied { read write open } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.737827][ T36] audit: type=1400 audit(2000004510.819:85172): avc: denied { ioctl } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.765342][ T36] audit: type=1400 audit(2000004510.856:85173): avc: denied { read append } for pid=10481 comm="syz.6.3367" name="binder0" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 299.795524][ T36] audit: type=1400 audit(2000004510.856:85174): avc: denied { read append open } for pid=10481 comm="syz.6.3367" path="/dev/binderfs/binder0" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 299.822128][ T10] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 299.822939][ T36] audit: type=1400 audit(2000004510.856:85175): avc: denied { create } for pid=10481 comm="syz.6.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.836834][ T10] cdc_ncm 9-1:1.0: bind() failure [ 299.876649][ T36] audit: type=1400 audit(2000004510.856:85176): avc: denied { write } for pid=10481 comm="syz.6.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.877928][ T10] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 299.902731][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3369'. [ 299.925366][ T10] cdc_ncm 9-1:1.1: bind() failure [ 299.935798][ T10] usb 9-1: USB disconnect, device number 2 [ 299.945231][ T36] audit: type=1400 audit(2000004510.856:85177): avc: denied { read } for pid=10481 comm="syz.6.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.969764][ T36] audit: type=1400 audit(2000004510.856:85178): avc: denied { read } for pid=10481 comm="syz.6.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.036003][ T36] audit: type=1400 audit(2000004510.856:85179): avc: denied { nlmsg_read } for pid=10481 comm="syz.6.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 300.189368][T10503] incfs: Options parsing error. -22 [ 300.194760][T10503] incfs: mount failed -22 [ 300.334518][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 301.178164][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 301.229555][T10538] 9pnet_fd: Insufficient options for proto=fd [ 301.415743][T10550] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 301.423132][T10550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 301.480054][T10558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.489402][T10558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 301.532106][T10562] /dev/rnullb0: Can't open blockdev [ 301.624567][T10568] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3399'. [ 301.840133][T10570] rust_binder: Error while translating object. [ 301.840174][T10570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.847282][T10570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 302.116584][T10589] netlink: 'syz.6.3405': attribute type 16 has an invalid length. [ 302.197658][ T64] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 302.373241][T10599] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.380636][T10599] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.390168][T10599] bridge0: entered promiscuous mode [ 302.395451][ T64] usb 9-1: Using ep0 maxpacket: 16 [ 302.411452][T10599] bridge0: entered allmulticast mode [ 302.420332][T10599] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.427465][T10599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.434839][T10599] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.441905][T10599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.451974][ T64] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 302.462414][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.475838][ T64] usb 9-1: config 0 descriptor?? [ 302.487059][ T64] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 302.684392][T10610] overlayfs: failed to clone upperpath [ 302.706551][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.721882][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3412'. [ 302.736844][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.756283][ T64] usb 9-1: Detected FT232A [ 302.762428][ T64] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 302.989581][T10580] /dev/rnullb0: Can't open blockdev [ 302.995914][ T64] usb 9-1: USB disconnect, device number 3 [ 303.004304][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 303.015064][ T64] ftdi_sio 9-1:0.0: device disconnected [ 303.238229][T10621] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 303.304959][T10619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 303.308652][ T64] rust_binder: 10618: removing orphan mapping 0:24 [ 303.324805][ T64] rust_binder: 0: removing orphan mapping 24:1112 [ 303.487704][T10625] random: crng reseeded on system resumption [ 303.642517][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3420'. [ 303.684800][T10633] overlayfs: failed to resolve './file1': -2 [ 304.037105][ T64] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 304.197555][ T64] usb 9-1: Using ep0 maxpacket: 32 [ 304.204588][ T64] usb 9-1: config index 0 descriptor too short (expected 1033, got 92) [ 304.212921][ T64] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.223097][ T64] usb 9-1: config 0 has no interfaces? [ 304.231728][ T64] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.240844][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.248832][ T64] usb 9-1: Product: syz [ 304.254854][ T64] usb 9-1: Manufacturer: syz [ 304.259641][ T64] usb 9-1: SerialNumber: syz [ 304.266542][ T64] usb 9-1: config 0 descriptor?? [ 304.498019][ T64] usb 9-1: USB disconnect, device number 4 [ 304.558201][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3431'. [ 304.700232][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 304.860636][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 304.868828][ T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 304.878071][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.887622][ T10] usb 7-1: config 0 descriptor?? [ 304.895626][ T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 305.034394][ T36] kauditd_printk_skb: 509 callbacks suppressed [ 305.034415][ T36] audit: type=1400 audit(2000004515.839:85689): avc: denied { create } for pid=10675 comm="syz.0.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.035898][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 305.076506][ T36] audit: type=1400 audit(2000004515.877:85690): avc: denied { ioctl } for pid=10675 comm="syz.0.3437" path="socket:[50042]" dev="sockfs" ino=50042 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.102116][ T36] audit: type=1400 audit(2000004515.877:85691): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.129152][ T10] usb 7-1: Detected FT232A [ 305.131393][ T36] audit: type=1400 audit(2000004515.877:85692): avc: denied { read write open } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.156155][ T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 305.165572][T10676] overlayfs: failed to clone upperpath [ 305.213553][ T36] audit: type=1400 audit(2000004515.877:85693): avc: denied { ioctl } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.248941][ T36] audit: type=1400 audit(2000004515.924:85694): avc: denied { ioctl } for pid=10647 comm="syz.6.3426" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.294967][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 305.314872][T10687] netlink: 'syz.8.3441': attribute type 27 has an invalid length. [ 305.325635][ T36] audit: type=1400 audit(2000004515.924:85695): avc: denied { ioctl } for pid=10647 comm="syz.6.3426" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.359432][ T36] audit: type=1400 audit(2000004515.942:85696): avc: denied { create } for pid=10675 comm="syz.0.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.386364][ T36] audit: type=1400 audit(2000004515.942:85697): avc: denied { write } for pid=10675 comm="syz.0.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.454791][T10689] rust_binder: Error while translating object. [ 305.454844][T10689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.460798][ T36] audit: type=1400 audit(2000004515.942:85698): avc: denied { read } for pid=10675 comm="syz.0.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.462202][T10689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 305.666465][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3448'. [ 305.691146][T10707] overlayfs: failed to clone upperpath [ 305.786605][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3451'. [ 306.185925][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'. [ 306.472088][T10759] devpts: called with bogus options [ 306.622684][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3467'. [ 306.712559][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 306.765016][T10775] overlayfs: failed to clone upperpath [ 307.158709][T10794] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3474'. [ 307.246219][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 307.346880][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 307.364112][T10804] overlayfs: failed to clone upperpath [ 307.620955][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 307.637879][T10833] overlayfs: failed to clone upperpath [ 307.714128][ T31] usb 7-1: USB disconnect, device number 8 [ 307.753938][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.790226][ T31] ftdi_sio 7-1:0.0: device disconnected [ 308.165450][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 308.175103][T10847] netlink: 'syz.0.3495': attribute type 4 has an invalid length. [ 308.182987][T10847] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.3495'. [ 308.220953][T10849] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3496'. [ 308.328085][ T31] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.328382][T10854] veth1_macvtap: left promiscuous mode [ 308.337871][ T31] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.343539][T10854] macsec0: entered allmulticast mode [ 308.355030][ T31] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.367147][T10854] veth1_macvtap: entered promiscuous mode [ 308.374131][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.375713][T10854] veth1_macvtap: entered allmulticast mode [ 308.384999][ T64] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 308.391842][T10854] macsec0: left allmulticast mode [ 308.398578][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.404156][T10854] veth1_macvtap: left allmulticast mode [ 308.412077][ T31] usb 7-1: Product: syz [ 308.421754][ T31] usb 7-1: Manufacturer: syz [ 308.426434][ T31] usb 7-1: SerialNumber: syz [ 308.492593][T10857] overlayfs: failed to resolve './file0': -2 [ 308.586443][ T64] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.597126][ T64] usb 9-1: config 0 has no interfaces? [ 308.606761][ T64] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 308.616100][ T64] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 308.624296][ T64] usb 9-1: Product: syz [ 308.630560][ T64] usb 9-1: Manufacturer: syz [ 308.635211][ T64] usb 9-1: SerialNumber: syz [ 308.642594][ T64] usb 9-1: config 0 descriptor?? [ 308.721643][ T31] usb 7-1: USB disconnect, device number 9 [ 308.771157][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 308.881323][ T8208] usb 9-1: USB disconnect, device number 5 [ 308.931435][T10881] overlayfs: failed to resolve './file0': -2 [ 309.037458][T10884] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 309.044949][T10884] rust_binder: Write failure EINVAL in pid:66 [ 309.397235][T10899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=10899 comm=syz.1.3515 [ 309.479809][T10905] overlayfs: failed to resolve './file0': -2 [ 309.546973][T10911] overlayfs: failed to clone upperpath [ 309.583642][T10913] 9pnet_fd: Insufficient options for proto=fd [ 310.189119][T10927] overlayfs: failed to resolve './file1': -2 [ 310.302762][T10937] rust_binder: Read failure Err(EFAULT) in pid:198 [ 310.390081][ T36] kauditd_printk_skb: 556 callbacks suppressed [ 310.390100][ T36] audit: type=1400 audit(2000004520.842:86255): avc: denied { read } for pid=10940 comm="syz.6.3531" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.435726][ T36] audit: type=1400 audit(2000004520.879:86256): avc: denied { read open } for pid=10940 comm="syz.6.3531" path="net:[4026532312]" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.459912][ T36] audit: type=1400 audit(2000004520.879:86257): avc: denied { create } for pid=10940 comm="syz.6.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.481594][ T36] audit: type=1400 audit(2000004520.879:86258): avc: denied { read } for pid=10940 comm="syz.6.3531" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.506955][ T36] audit: type=1400 audit(2000004520.879:86259): avc: denied { read open } for pid=10940 comm="syz.6.3531" path="net:[4026532312]" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.532180][ T36] audit: type=1400 audit(2000004520.879:86260): avc: denied { create } for pid=10940 comm="syz.6.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.554100][ T36] audit: type=1400 audit(2000004520.879:86261): avc: denied { read write } for pid=10940 comm="syz.6.3531" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.577574][ T36] audit: type=1400 audit(2000004520.879:86262): avc: denied { read open } for pid=10940 comm="syz.6.3531" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.606674][ T36] audit: type=1400 audit(2000004520.879:86263): avc: denied { read write } for pid=10940 comm="syz.6.3531" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.631729][ T36] audit: type=1400 audit(2000004520.879:86264): avc: denied { read write open } for pid=10940 comm="syz.6.3531" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.689478][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 310.862956][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.873539][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.885429][ T31] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 310.895300][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.904022][ T31] usb 7-1: SerialNumber: syz [ 311.129989][ T31] usb 7-1: 0:2 : does not exist [ 311.137544][ T31] usb 7-1: USB disconnect, device number 10 [ 311.179394][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 311.402203][T10969] __nla_validate_parse: 7 callbacks suppressed [ 311.402224][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 311.767140][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3546'. [ 311.848268][T10989] rust_binder: 88: no such ref 3 [ 312.069314][T10994] fuse: Bad value for 'user_id' [ 312.074351][T10994] fuse: Bad value for 'user_id' [ 312.120115][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 312.283070][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 312.292496][ T31] usb 9-1: unable to get BOS descriptor or descriptor too short [ 312.303881][ T31] usb 9-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 312.315556][ T31] usb 9-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.329681][ T31] usb 9-1: config 1 interface 0 has no altsetting 0 [ 312.343294][ T31] usb 9-1: string descriptor 0 read error: -22 [ 312.350917][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 312.361218][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.373712][T10989] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 312.396778][T10989] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 312.629324][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 312.633144][T10989] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 312.646387][T11036] overlayfs: failed to clone upperpath [ 312.674067][ T31] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 312.688167][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 312.708124][ T31] usb 9-1: USB disconnect, device number 6 [ 312.721381][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 312.744997][T11039] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 312.763014][ T31] usblp0: removed [ 312.961187][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3573'. [ 312.990460][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 313.006711][T11065] overlayfs: failed to clone upperpath [ 313.094824][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 313.095976][ T493] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 313.279915][ T493] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.290999][ T493] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.301451][ T493] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.314443][ T493] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.324813][ T493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.344197][ T493] usb 7-1: config 0 descriptor?? [ 313.415475][T11086] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 313.745010][T11095] fuse: Bad value for 'rootmode' [ 313.788982][ T493] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 313.801950][ T493] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 314.006692][ T64] usb 7-1: USB disconnect, device number 11 [ 314.712539][T11115] netlink: 'syz.1.3592': attribute type 11 has an invalid length. [ 314.913397][T11122] rust_binder: Error while translating object. [ 314.913446][T11122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 314.920838][T11122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 314.960118][T11124] tmpfs: Unknown parameter 'h ge' [ 315.191455][T11129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.206163][T11129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.463306][T11147] rust_binder: Error while translating object. [ 315.463353][T11147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 315.469722][T11147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 315.591686][T11152] rust_binder: Error while translating object. [ 315.601000][T11153] rust_binder: Error while translating object. [ 315.603396][T11152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 315.607210][T11153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 315.607234][T11153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:230 [ 315.632850][T11152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:230 [ 316.167419][ T36] kauditd_printk_skb: 520 callbacks suppressed [ 316.167439][ T36] audit: type=1400 audit(2000004526.246:86785): avc: denied { create } for pid=11159 comm="syz.1.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.168572][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 316.205082][ T36] audit: type=1400 audit(2000004526.274:86786): avc: denied { ioctl } for pid=11159 comm="syz.1.3608" path="socket:[52920]" dev="sockfs" ino=52920 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.210447][T11160] overlayfs: failed to resolve './file0': -2 [ 316.231539][ T36] audit: type=1400 audit(2000004526.274:86787): avc: denied { create } for pid=11159 comm="syz.1.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.257230][ T36] audit: type=1400 audit(2000004526.274:86788): avc: denied { write } for pid=11159 comm="syz.1.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.278914][ T36] audit: type=1400 audit(2000004526.274:86789): avc: denied { read } for pid=11159 comm="syz.1.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.311084][T11162] audit: audit_backlog=66 > audit_backlog_limit=64 [ 316.311084][T11163] audit: audit_lost=109 audit_rate_limit=0 audit_backlog_limit=64 [ 316.311107][T11163] audit: backlog limit exceeded [ 316.311396][T11163] audit: audit_backlog=66 > audit_backlog_limit=64 [ 316.319149][T11162] audit: audit_lost=110 audit_rate_limit=0 audit_backlog_limit=64 [ 316.406331][T11173] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3612'. [ 316.452341][T11175] overlayfs: failed to clone upperpath [ 316.553123][T11185] overlayfs: failed to resolve './file0': -2 [ 316.845663][T11196] __nla_validate_parse: 2 callbacks suppressed [ 316.845688][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3622'. [ 317.030517][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 317.047286][T11207] overlayfs: failed to resolve './file0': -2 [ 317.132847][T11215] rust_binder: pid 11215 performed invalid decrement on ref [ 317.300683][T11227] fuse: Bad value for 'fd' [ 317.708870][T11247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273 [ 317.840917][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3643'. [ 317.924149][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3647'. [ 318.037683][ T64] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 318.210904][ T64] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.220669][ T64] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.231124][ T64] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.263214][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 318.281985][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 318.290167][ T64] usb 7-1: Product: syz [ 318.295538][ T64] usb 7-1: Manufacturer: syz [ 318.300153][ T64] usb 7-1: SerialNumber: syz [ 318.527802][ T64] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 319.446339][ T31] usb 7-1: USB disconnect, device number 12 [ 319.474836][ T31] usblp0: removed [ 319.487774][T11323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 319.539414][ T10] rust_binder: 11322: removing orphan mapping 0:24 [ 320.122658][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 320.133028][T11373] usb usb6: usbfs: process 11373 (syz.6.3681) did not claim interface 0 before use [ 320.283088][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 320.290675][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.301669][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.314485][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.323576][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.333098][ T10] usb 9-1: config 0 descriptor?? [ 320.552295][T11375] overlayfs: failed to clone lowerpath [ 320.782164][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 320.795493][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 320.808107][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 320.822170][ T10] usb 9-1: USB disconnect, device number 7 [ 320.953706][T11390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11390 comm=syz.1.3686 [ 320.971881][T11392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11392 comm=syz.1.3686 [ 321.577652][ T36] kauditd_printk_skb: 1004 callbacks suppressed [ 321.577672][ T36] audit: type=1400 audit(2000004531.304:87791): avc: denied { ioctl } for pid=11404 comm="syz.6.3691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.615881][ T36] audit: type=1400 audit(2000004531.332:87792): avc: denied { create } for pid=11412 comm="syz.1.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.636139][ T36] audit: type=1400 audit(2000004531.332:87793): avc: denied { bind } for pid=11412 comm="syz.1.3694" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.642981][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 321.656725][ T36] audit: type=1400 audit(2000004531.332:87794): avc: denied { name_bind } for pid=11412 comm="syz.1.3694" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 321.687241][ T36] audit: type=1400 audit(2000004531.332:87795): avc: denied { node_bind } for pid=11412 comm="syz.1.3694" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 321.710591][ T36] audit: type=1400 audit(2000004531.407:87796): avc: denied { ioctl } for pid=11404 comm="syz.6.3691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.737154][ T36] audit: type=1400 audit(2000004531.426:87797): avc: denied { ioctl } for pid=11404 comm="syz.6.3691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.763174][ T36] audit: type=1400 audit(2000004531.426:87798): avc: denied { ioctl } for pid=11404 comm="syz.6.3691" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.797016][ T36] audit: type=1400 audit(2000004531.426:87799): avc: denied { mounton } for pid=11414 comm="syz.1.3695" path="/425" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.821114][ T36] audit: type=1400 audit(2000004531.426:87800): avc: denied { mount } for pid=11414 comm="syz.1.3695" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 321.865946][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 321.873791][ T64] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 321.883747][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.895166][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.913869][ T64] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.923581][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.932762][ T64] usb 7-1: Product: syz [ 321.937061][ T64] usb 7-1: Manufacturer: syz [ 321.942763][ T64] usb 7-1: SerialNumber: syz [ 322.079879][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 322.240321][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 322.248173][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.260072][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.272966][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 322.282015][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.292476][ T9] usb 9-1: config 0 descriptor?? [ 322.383617][ T64] usb 7-1: 0:2 : does not exist [ 322.627268][T11437] netlink: 'syz.1.3703': attribute type 30 has an invalid length. [ 322.729994][T11440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3704'. [ 322.754721][T11440] tmpfs: Unsupported parameter 'mpol' [ 322.755474][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 322.771067][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0013/input/input21 [ 322.808574][ T9] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 323.288505][ T64] usb 7-1: USB disconnect, device number 13 [ 323.317516][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 324.136845][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 324.539781][ T1049] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 324.700179][ T1049] usb 7-1: Using ep0 maxpacket: 16 [ 324.708160][ T1049] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 324.719723][ T1049] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.733498][ T1049] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.734473][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3714'. [ 324.751668][ T1049] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.760316][ T1049] usb 7-1: Product: syz [ 324.764633][ T1049] usb 7-1: Manufacturer: syz [ 324.769447][ T1049] usb 7-1: SerialNumber: syz [ 324.998360][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.011671][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.021806][ T1049] usb 7-1: 0:2 : does not exist [ 325.031007][ T1049] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 325.047067][ T1049] usb 7-1: USB disconnect, device number 14 [ 325.084915][ T7798] udevd[7798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 325.383242][ T64] usb 9-1: USB disconnect, device number 8 [ 326.010426][T11526] SELinux: policydb version 646093934 does not match my version range 15-33 [ 326.029029][T11526] SELinux: failed to load policy [ 326.080197][T11533] __vm_enough_memory: pid: 11533, comm: syz.1.3747, bytes: 21200608223232 not enough memory for the allocation [ 326.472459][T11556] /dev/loop0: Can't lookup blockdev [ 326.526552][ T1049] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 326.689084][ T1049] usb 9-1: Using ep0 maxpacket: 8 [ 326.696798][ T1049] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 326.716161][ T1049] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 326.725515][ T1049] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.737215][ T1049] usb 9-1: config 0 descriptor?? [ 326.950626][ T36] kauditd_printk_skb: 409 callbacks suppressed [ 326.950773][ T36] audit: type=1400 audit(2000004536.313:88210): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.018075][ T36] audit: type=1400 audit(2000004536.313:88211): avc: denied { read write open } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.055798][ T36] audit: type=1400 audit(2000004536.313:88212): avc: denied { ioctl } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.082664][ T36] audit: type=1400 audit(2000004536.313:88213): avc: denied { read write } for pid=11587 comm="syz.6.3773" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 327.119890][ T36] audit: type=1400 audit(2000004536.313:88214): avc: denied { read write open } for pid=11587 comm="syz.6.3773" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 327.150722][ T36] audit: type=1400 audit(2000004536.313:88215): avc: denied { ioctl } for pid=11587 comm="syz.6.3773" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 327.212860][ T36] audit: type=1400 audit(2000004536.368:88216): avc: denied { ioctl } for pid=11544 comm="syz.8.3753" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.252465][ T1049] hid-generic 0003:1B1C:1B09.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.8-1/input0 [ 327.266070][ T36] audit: type=1400 audit(2000004536.368:88217): avc: denied { ioctl } for pid=11544 comm="syz.8.3753" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.300650][ T36] audit: type=1400 audit(2000004536.368:88218): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.326291][ T36] audit: type=1400 audit(2000004536.368:88219): avc: denied { read write open } for pid=9557 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.461665][ T1049] usb 9-1: USB disconnect, device number 9 [ 328.029122][T11649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:359 [ 328.493898][T11671] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.3811' sets config #4 [ 328.582703][T11682] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3816'. [ 328.593023][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3816'. [ 328.939450][T11710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3830'. [ 329.886463][T11782] 9pnet_fd: Insufficient options for proto=fd [ 330.145178][ T1049] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 330.307662][ T1049] usb 9-1: Using ep0 maxpacket: 32 [ 330.322451][ T1049] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.335134][ T1049] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.362179][ T1049] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.383143][ T1049] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.405608][ T1049] usb 9-1: config 0 descriptor?? [ 330.424652][ T1049] hub 9-1:0.0: USB hub found [ 330.632718][ T1049] hub 9-1:0.0: 1 port detected [ 330.913725][T11842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3893'. [ 331.291953][ T1049] hub 9-1:0.0: activate --> -90 [ 331.418453][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 331.531951][ T49] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 331.696965][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.709008][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.719532][ T49] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.728678][ T10] usb 9-1: USB disconnect, device number 10 [ 331.734101][ T49] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.753727][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.771610][ T49] usb 7-1: config 0 descriptor?? [ 332.226440][ T49] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x3 [ 332.234168][ T49] plantronics 0003:047F:FFFF.0015: unbalanced collection at end of report description [ 332.244044][ T49] plantronics 0003:047F:FFFF.0015: parse failed [ 332.250571][ T49] plantronics 0003:047F:FFFF.0015: probe with driver plantronics failed with error -22 [ 332.429166][ T36] kauditd_printk_skb: 484 callbacks suppressed [ 332.429183][ T36] audit: type=1400 audit(2000004541.362:88704): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.482337][ T1049] kernel write not supported for file /register (pid: 1049 comm: kworker/0:5) [ 332.485552][ T49] usb 7-1: USB disconnect, device number 15 [ 332.501125][ T36] audit: type=1400 audit(2000004541.362:88705): avc: denied { read write open } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.533933][ T36] audit: type=1400 audit(2000004541.362:88706): avc: denied { ioctl } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.626243][ T36] audit: type=1400 audit(2000004541.389:88707): avc: denied { create } for pid=11927 comm="syz.8.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.658360][ T36] audit: type=1400 audit(2000004541.398:88708): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.683851][ T36] audit: type=1400 audit(2000004541.398:88709): avc: denied { read write open } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.723006][T11939] syz.1.3941(11939): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 332.757737][ T36] audit: type=1400 audit(2000004541.398:88710): avc: denied { ioctl } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.787465][ T36] audit: type=1400 audit(2000004541.417:88711): avc: denied { mounton } for pid=11929 comm="syz.8.3936" path="/82" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 332.809988][ T36] audit: type=1400 audit(2000004541.454:88712): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.839421][ T36] audit: type=1400 audit(2000004541.454:88713): avc: denied { read write open } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 334.781967][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.803120][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.818240][T12014] bridge_slave_0: entered allmulticast mode [ 334.830401][T12014] bridge_slave_0: entered promiscuous mode [ 334.843666][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.851001][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.859690][T12014] bridge_slave_1: entered allmulticast mode [ 334.890970][T12014] bridge_slave_1: entered promiscuous mode [ 335.077858][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.085064][T12014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.092389][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.099534][T12014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.161228][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.180784][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.220475][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.227724][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.262109][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.269201][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.432390][T12014] veth0_vlan: entered promiscuous mode [ 335.523717][T12014] veth1_macvtap: entered promiscuous mode [ 335.845590][ T331] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 336.035546][ T331] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 336.056810][ T331] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.074292][ T331] usb 9-1: Product: syz [ 336.082352][ T331] usb 9-1: Manufacturer: syz [ 336.091725][ T331] usb 9-1: SerialNumber: syz [ 336.105532][ T331] usb 9-1: config 0 descriptor?? [ 336.559082][ T331] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 336.721599][ T331] usb 7-1: Using ep0 maxpacket: 8 [ 336.729181][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.740535][ T331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.750591][ T331] usb 7-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 336.759764][ T331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.769418][ T331] usb 7-1: config 0 descriptor?? [ 337.859010][ T36] kauditd_printk_skb: 565 callbacks suppressed [ 337.859029][ T36] audit: type=1400 audit(2000004546.373:89279): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 337.887982][ T36] audit: type=1400 audit(2000004546.383:89280): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 337.911195][ T36] audit: type=1400 audit(2000004546.392:89281): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 337.934112][ T36] audit: type=1400 audit(2000004546.429:89282): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 337.957345][ T36] audit: type=1400 audit(2000004546.429:89283): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 337.980412][ T36] audit: type=1400 audit(2000004546.438:89284): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.004326][ T36] audit: type=1400 audit(2000004546.456:89285): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.031744][ T36] audit: type=1400 audit(2000004546.456:89286): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.054464][ T36] audit: type=1400 audit(2000004546.456:89287): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.077596][ T36] audit: type=1400 audit(2000004546.475:89288): avc: denied { execute } for pid=12124 comm="syz.0.4020" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 338.825039][ T49] usb 9-1: USB disconnect, device number 11 [ 338.832453][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4039'. [ 339.381480][T12193] loop2: detected capacity change from 0 to 7 [ 339.472588][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'. [ 339.562550][ T331] usbhid 7-1:0.0: can't add hid device: -71 [ 339.568630][ T331] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 339.600679][ T331] usb 7-1: USB disconnect, device number 16 [ 339.646782][ T49] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 339.787415][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 339.830964][ T49] usb 9-1: Using ep0 maxpacket: 8 [ 339.841818][ T49] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.870143][ T49] usb 9-1: config 179 has no interface number 0 [ 339.879288][ T49] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 339.906793][ T49] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 339.939297][ T49] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.964831][ T49] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 339.992889][ T49] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.034677][ T49] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.069313][ T49] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.084202][T12195] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 340.106555][ T49] xpad 9-1:179.65: probe with driver xpad failed with error -5 [ 340.190215][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4078'. [ 340.324347][ T31] usb 9-1: USB disconnect, device number 12 [ 341.033571][ T331] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 341.209018][ T331] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 341.220923][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 341.232823][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 341.250850][ T331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 341.268376][ T331] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 341.283754][ T331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.301678][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.313750][ T331] usb 1-1: SerialNumber: syz [ 341.321982][T12289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.334414][T12289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.587055][ T10] usb 1-1: USB disconnect, device number 19 [ 341.694216][T12345] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4125'. [ 342.138670][ T49] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 342.313875][ T49] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.327156][ T49] usb 9-1: config 1 interface 0 has no altsetting 0 [ 342.337771][ T49] usb 9-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.40 [ 342.347522][ T49] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.356290][ T49] usb 9-1: Product: syz [ 342.360474][ T49] usb 9-1: Manufacturer: 㻪ﯩ뼿帐ꓽ畠ꃥ咘퓴鉛卶鼸ᡵਐ棭！薊᫡㸴蟂㸵ꉰ셩步푣壥몼㦩ⓗࡺ쬆况샅衲碌⬲됃뛥쭑꽶說帢ጅ砐Ꮀ퓂䩞뢺鼾涠驄ꂆ度婯ꐆ뗚橈䀚뢸ῤ⪌㡄쾱䰫ࠃ厩뿨쳋ᩦ쐮䲮耬㟋᷎䨥Ⴍ絁굡ꃁ⟱ꖈ [ 342.394207][ T49] usb 9-1: SerialNumber: syz [ 342.633411][ T49] usbhid 9-1:1.0: can't add hid device: -71 [ 342.647900][ T49] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 342.658127][ T49] usb 9-1: USB disconnect, device number 13 [ 343.178744][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 343.276821][ T36] kauditd_printk_skb: 721 callbacks suppressed [ 343.276839][ T36] audit: type=1400 audit(2000004551.385:90010): avc: denied { ioctl } for pid=12408 comm="syz.0.4154" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.319652][ T36] audit: type=1400 audit(2000004551.413:90011): avc: denied { unmount } for pid=10427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 343.360763][ T36] audit: type=1400 audit(2000004551.422:90012): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.389314][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.400443][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.412249][ T36] audit: type=1400 audit(2000004551.422:90013): avc: denied { read write open } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.437479][ T1049] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 343.449984][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.466198][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.475938][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.484748][ T36] audit: type=1400 audit(2000004551.422:90014): avc: denied { ioctl } for pid=10427 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.512948][ T10] usb 7-1: config 0 descriptor?? [ 343.518213][ T36] audit: type=1400 audit(2000004551.459:90015): avc: denied { ioctl } for pid=12408 comm="syz.0.4154" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.567596][ T36] audit: type=1400 audit(2000004551.487:90016): avc: denied { ioctl } for pid=12388 comm="syz.6.4144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.599206][ T36] audit: type=1400 audit(2000004551.487:90017): avc: denied { ioctl } for pid=12388 comm="syz.6.4144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.625770][ T36] audit: type=1400 audit(2000004551.487:90018): avc: denied { ioctl } for pid=12388 comm="syz.6.4144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.651084][ T1049] usb 1-1: Using ep0 maxpacket: 16 [ 343.658008][ T36] audit: type=1400 audit(2000004551.487:90019): avc: denied { ioctl } for pid=12388 comm="syz.6.4144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.688362][ T1049] usb 1-1: config 5 has an invalid interface number: 8 but max is 0 [ 343.696893][ T1049] usb 1-1: config 5 has no interface number 0 [ 343.703142][ T1049] usb 1-1: config 5 interface 8 altsetting 255 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 343.717690][ T1049] usb 1-1: config 5 interface 8 has no altsetting 0 [ 343.728176][ T1049] usb 1-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=9f.35 [ 343.738691][ T1049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.747526][ T1049] usb 1-1: Product: syz [ 343.751773][ T1049] usb 1-1: Manufacturer: syz [ 343.757488][ T1049] usb 1-1: SerialNumber: syz [ 343.989038][ T1049] usb 1-1: USB disconnect, device number 20 [ 343.996397][ T10] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 344.017136][ T10] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 344.045261][ T10] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 344.224476][ T1049] usb 7-1: USB disconnect, device number 17 [ 344.280938][T12431] fido_id[12431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 344.904732][T12466] input: syz0 as /devices/virtual/input/input25 [ 345.544403][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4192'. [ 345.565052][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'. [ 345.585601][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4192'. [ 348.966084][ T36] kauditd_printk_skb: 241 callbacks suppressed [ 348.966105][ T36] audit: type=1400 audit(2000004556.637:90261): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 349.282644][ T36] audit: type=1400 audit(2000004556.914:90262): avc: denied { execmem } for pid=12559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 349.314180][ T36] audit: type=1400 audit(2000004556.923:90263): avc: denied { nlmsg_read } for pid=12561 comm="syz.6.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=0 [ 349.336731][ T36] audit: type=1400 audit(2000004556.923:90264): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 349.361033][ T36] audit: type=1400 audit(2000004556.951:90265): avc: denied { read write } for pid=12564 comm="syz.8.4225" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 349.863959][ T36] audit: type=1400 audit(2000004557.468:90266): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 350.264731][ T36] audit: type=1400 audit(2000004557.837:90267): avc: denied { execmem } for pid=12566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 350.292212][ T36] audit: type=1400 audit(2000004557.846:90268): avc: denied { create } for pid=12568 comm="syz.6.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 350.314703][ T36] audit: type=1400 audit(2000004557.846:90269): avc: denied { create } for pid=12568 comm="syz.6.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 350.336103][ T36] audit: type=1400 audit(2000004557.874:90270): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 355.348457][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 355.348478][ T36] audit: type=1400 audit(2000004562.526:90290): avc: denied { execmem } for pid=12595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 355.396522][ T36] audit: type=1400 audit(2000004562.535:90291): avc: denied { create } for pid=12596 comm="syz.1.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 355.418454][ T36] audit: type=1400 audit(2000004562.563:90292): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 355.444173][ T36] audit: type=1400 audit(2000004562.572:90293): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 355.468668][ T36] audit: type=1400 audit(2000004562.600:90294): avc: denied { create } for pid=12602 comm="syz.1.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 355.489154][ T36] audit: type=1400 audit(2000004562.600:90295): avc: denied { create } for pid=12602 comm="syz.1.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 355.509908][ T36] audit: type=1400 audit(2000004562.600:90296): avc: denied { create } for pid=12602 comm="syz.1.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 356.906326][ T36] audit: type=1400 audit(2000004563.957:90297): avc: denied { execmem } for pid=12604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 356.934494][ T36] audit: type=1400 audit(2000004563.984:90298): avc: denied { read write } for pid=12608 comm="syz.8.4244" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 356.959572][ T36] audit: type=1400 audit(2000004563.984:90299): avc: denied { mounton } for pid=12607 comm="syz.6.4243" path="/237/file1" dev="tmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 362.151651][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 362.151672][ T36] audit: type=1400 audit(2000004568.802:90315): avc: denied { execmem } for pid=12625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 362.330408][ T36] audit: type=1400 audit(2000004568.968:90316): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 362.525780][ T36] audit: type=1400 audit(2000004569.144:90317): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 364.148996][ T36] audit: type=1400 audit(2000004570.648:90318): avc: denied { execmem } for pid=12638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 364.197166][ T36] audit: type=1400 audit(2000004570.658:90319): avc: denied { write } for pid=12640 comm="syz.6.4256" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 364.220750][ T36] audit: type=1400 audit(2000004570.667:90320): avc: denied { read write } for pid=9557 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 364.245250][ T36] audit: type=1400 audit(2000004570.667:90321): avc: denied { name_bind } for pid=12639 comm="syz.1.4255" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 364.267478][ T36] audit: type=1400 audit(2000004570.676:90322): avc: denied { mounton } for pid=12639 comm="syz.1.4255" path="/613/file1" dev="tmpfs" ino=3319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 364.290772][ T36] audit: type=1400 audit(2000004570.676:90323): avc: denied { create } for pid=12643 comm="syz.8.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 364.311609][ T36] audit: type=1400 audit(2000004570.685:90324): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 366.238931][T12651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12651 comm=syz.6.4259 [ 368.410092][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 368.410120][ T36] audit: type=1400 audit(2000004574.571:90332): avc: denied { execmem } for pid=12652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 368.465854][ T36] audit: type=1400 audit(2000004574.571:90333): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[572]" dev="pipefs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.525899][ T36] audit: type=1400 audit(2000004574.571:90334): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[572]" dev="pipefs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.570575][ T9932] veth0: left promiscuous mode [ 368.575828][ T36] audit: type=1400 audit(2000004574.571:90335): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[572]" dev="pipefs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.655113][ T36] audit: type=1400 audit(2000004574.571:90336): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[572]" dev="pipefs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.699840][ T36] audit: type=1400 audit(2000004574.590:90337): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[572]" dev="pipefs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 368.747547][ T36] audit: type=1400 audit(2000004574.599:90338): avc: denied { read write } for pid=12655 comm="syz.8.4263" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 368.775259][ T36] audit: type=1400 audit(2000004574.608:90339): avc: denied { mounton } for pid=12655 comm="syz.8.4263" path="/162/file0" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 368.800201][ T36] audit: type=1400 audit(2000004574.617:90340): avc: denied { execmem } for pid=12653 comm="syz.1.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 368.821147][ T36] audit: type=1400 audit(2000004574.626:90341): avc: denied { read write } for pid=10427 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.864693][ T330] bridge_slave_1: left allmulticast mode [ 368.870562][ T330] bridge_slave_1: left promiscuous mode [ 368.876665][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.885281][ T330] bridge_slave_0: left allmulticast mode [ 368.899331][ T330] bridge_slave_0: left promiscuous mode [ 368.905048][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.031244][ T330] veth1_macvtap: left promiscuous mode [ 369.036971][ T330] veth0_vlan: left promiscuous mode [ 369.357392][ T330] bridge_slave_1: left allmulticast mode [ 369.363058][ T330] bridge_slave_1: left promiscuous mode [ 369.369093][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.376848][ T330] bridge_slave_0: left allmulticast mode [ 369.382506][ T330] bridge_slave_0: left promiscuous mode [ 369.388158][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.395939][ T330] bridge_slave_1: left allmulticast mode [ 369.401642][ T330] bridge_slave_1: left promiscuous mode [ 369.407301][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.415189][ T330] bridge_slave_0: left allmulticast mode [ 369.420964][ T330] bridge_slave_0: left promiscuous mode [ 369.426656][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.627187][ T330] tipc: Left network mode [ 369.634423][ T330] veth1_macvtap: left promiscuous mode [ 369.640051][ T330] veth0_vlan: left promiscuous mode [ 369.645529][ T330] veth1_macvtap: left promiscuous mode [ 369.651252][ T330] veth0_vlan: left promiscuous mode