last executing test programs: 3.951119084s ago: executing program 3 (id=43): unshare(0x60000600) io_setup(0x80000000, &(0x7f0000000040)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) fcntl$getflags(r4, 0xb) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x40, 0x0, 0x10003, 0xa, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x80, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.665481597s ago: executing program 2 (id=49): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = mmap$binder(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x3) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000002b40)={0x2020}, 0x2020) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000880)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b40)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000040)=[@decrefs, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x3}], 0x1d, 0x0, &(0x7f0000000080)="71c6683ddcaf0cc6c6fdb8335600b49e1be14a1cb02efd4ee86e7f35ae"}) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x41}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80d0) 2.659144667s ago: executing program 2 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r2 = socket$unix(0x1, 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x11, 0x7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r4, r3, 0x0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000200)={0x4, 0x4, 0x120000}, 0x20) sync_file_range(0xffffffffffffffff, 0x6e, 0x5, 0x4) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)) 2.573830104s ago: executing program 2 (id=51): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) (async) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffdbdf2509000000110001002f6465762f726e756c6c62280000000080841ad66128e785881570e7085269b5e9249c00c17dfbaa45d1dee12632e14a871522f91de87522948a60c99d5c6d34013f3dde931164c050a2fc682582d8d32a10c97a55830f18bba405d8bdeb6438af09f4745dccf556a51126bdf4f8fa091d02544cabacbf10a6b20f0803d7c737c658b5da578455c54929e03192c0a2cdf9d56cadb8f8684f57ce9ed0cb32fc691454a903e35d9af7964a6ba509658a378cca3a2c58ac2c3c15ef54e351074bf5eeae3989a9857af2f8ff3d8055ff7ad84a6805a33c3ebeeb017a43ec1e248b4e2cdc5221f9ac"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffdbdf2509000000110001002f6465762f726e756c6c62280000000080841ad66128e785881570e7085269b5e9249c00c17dfbaa45d1dee12632e14a871522f91de87522948a60c99d5c6d34013f3dde931164c050a2fc682582d8d32a10c97a55830f18bba405d8bdeb6438af09f4745dccf556a51126bdf4f8fa091d02544cabacbf10a6b20f0803d7c737c658b5da578455c54929e03192c0a2cdf9d56cadb8f8684f57ce9ed0cb32fc691454a903e35d9af7964a6ba509658a378cca3a2c58ac2c3c15ef54e351074bf5eeae3989a9857af2f8ff3d8055ff7ad84a6805a33c3ebeeb017a43ec1e248b4e2cdc5221f9ac"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) tkill(0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2f41, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2f41, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) (async) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000001a00016401010207000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000000000000000000000ffffe0000001000000003c00000002000000e00000010000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e543bc200fa8d657078aa2d00", 0xf}], 0x1, 0x0) (async) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e543bc200fa8d657078aa2d00", 0xf}], 0x1, 0x0) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz1\x00', {0x1, 0xfffb, 0x800, 0x1}, 0x22, [0x8, 0x3, 0x2, 0x80000001, 0x6, 0xe, 0x399, 0x9, 0x9, 0x8001, 0x5, 0x80, 0x3, 0x4, 0x4c, 0x40, 0x3, 0xffff0001, 0x3be, 0x97, 0x866, 0x5f804a67, 0x89, 0x7fff, 0x2, 0x3, 0x1200, 0x3, 0x3, 0x4, 0x3, 0x10, 0x7, 0x0, 0x9, 0x0, 0xbd, 0xe6, 0x7f, 0x5fd, 0x80, 0x7f, 0x7, 0x6, 0x3, 0x983, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x3ff, 0xffffa0fb, 0x3, 0xb, 0x10, 0x28, 0x9, 0x10000, 0x1, 0xe, 0x639, 0x8], [0x80000000, 0x8, 0x10000, 0x8, 0x1, 0x7c8f2e50, 0x401, 0xf, 0x7, 0x8, 0x40, 0x3, 0x3, 0x2, 0x9, 0x2, 0x8, 0x0, 0x8000, 0x9, 0x6, 0x60, 0x7, 0x7, 0x3, 0xf08c, 0x4, 0x4, 0x3, 0x5, 0x401, 0xffffffff, 0x101, 0x6, 0x1, 0x0, 0x3094, 0xc, 0x4ef, 0x4, 0x51, 0xfffffe01, 0x2000000, 0x4, 0x8, 0x7, 0xa6, 0x3, 0xb6, 0x5, 0x69c8f923, 0x5ee1, 0x5, 0x6, 0x7, 0x3, 0xd, 0xfba, 0x8, 0x9, 0x401, 0x3, 0x7, 0x5], [0x7, 0x66, 0x401, 0x40, 0xbc75, 0xc01a, 0x0, 0x7, 0xc, 0x2, 0x7, 0xfffffff8, 0x561, 0x0, 0x158, 0x7, 0x8, 0x7, 0x10, 0xcd, 0x3, 0x3ff, 0x9664f2a, 0x5, 0x7c, 0x10001, 0x2, 0x0, 0xfb, 0x3, 0x7, 0x5, 0x5, 0x100, 0x96e, 0x2, 0xaf, 0x8001, 0xf, 0x1, 0xd5b5, 0x3, 0x100, 0x1, 0x8000, 0x6, 0x2, 0x0, 0x8, 0x8, 0x3, 0x6, 0x1, 0x4fc2, 0x3, 0x7, 0x10000000, 0x5, 0x3, 0x8, 0x2, 0xff, 0x2, 0x7fff], [0x7, 0xa4, 0x6, 0x3, 0xff, 0xd16b, 0x3, 0x3, 0x5, 0x3, 0x1, 0x6f, 0x704, 0x200, 0x7fffffff, 0x8000, 0x10000, 0x3, 0x9, 0x100, 0x4, 0x694, 0x5, 0x5, 0x2, 0x1, 0x6, 0x80000001, 0x7fff, 0x9, 0xd, 0x1, 0x0, 0x5, 0xffffff52, 0x5, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x4, 0x8, 0xffffffff, 0x4, 0x2, 0xa, 0xac5, 0x9, 0x3, 0x4, 0x6, 0x5, 0x3, 0x3, 0x7, 0x0, 0x6a000, 0x1, 0xa864, 0x7, 0xff, 0x6, 0x4]}, 0x45c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r7, 0x85b83000) ftruncate(r6, 0x40) (async) ftruncate(r6, 0x40) 2.421604816s ago: executing program 2 (id=52): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff09) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000bc0)=ANY=[@ANYBLOB="ced1d981f7"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000480)=@v3={0x3000000, [{0x75c97ba1, 0x80000001}, {0x9, 0x3}], r7}, 0x18, 0x0) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, r7, &(0x7f0000000240)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r9, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r1, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0xff09) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000bc0)=ANY=[@ANYBLOB="ced1d981f7"]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x6000) (async) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000480)=@v3={0x3000000, [{0x75c97ba1, 0x80000001}, {0x9, 0x3}], r7}, 0x18, 0x0) (async) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, r7, &(0x7f0000000240)) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r9, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) (async) 2.326878594s ago: executing program 2 (id=53): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x5ae82, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x808) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x11, r0, 0x22e7c000) 2.311033145s ago: executing program 2 (id=54): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x22b01, 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xa, &(0x7f00000002c0)=[{0x4, 0x1, 0x4, 0xfffffffa}, {0x0, 0x40, 0x6}, {0x5, 0xa, 0x2, 0x80000001}, {0x7, 0xf, 0x0, 0x61}, {0xad51, 0x7d, 0x9, 0xe70}, {0x8000, 0xf4, 0x9, 0x9}, {0x5, 0x6, 0x3f, 0x19b7}, {0x4007, 0x1, 0x8, 0x9}, {0x3ff, 0x4, 0x7, 0x2}, {0x1398, 0x8, 0x52, 0xff}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) eventfd2(0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r3], 0x119) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r4, 0x4004480d, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r6, 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x3d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r9, 0xa, 0x3, 0x7) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) timer_gettime(r7, &(0x7f0000002180)) sendfile(r5, r5, 0x0, 0x7ffff000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) 2.186074325s ago: executing program 3 (id=57): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) syz_open_pts(r1, 0x20000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x1589, {{0xa, 0x4e24, 0x3, @mcast2, 0x7}}, {{0xa, 0x4e22, 0x400, @empty, 0x81}}}, 0x108) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.057620785s ago: executing program 1 (id=63): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0xffffff48, &(0x7f0000000900)=[{&(0x7f0000000040)="d08e7d4d6625d9872edd147c565af7bef63750b5338d3abba0dbfcf4af", 0x1d}], 0x1, 0x0, 0x0, 0x800300}, 0x800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 2.054633706s ago: executing program 1 (id=64): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000140)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000001c0)=0x6) (async) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000001c0)=0x6) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 2.054477755s ago: executing program 1 (id=65): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) pipe(0x0) r1 = open$dir(0x0, 0x80140, 0x18f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x9, {0x21, 0x2, 0x2, 0xd, 0x65c0fb7}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.054237436s ago: executing program 1 (id=66): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000300)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f00000004c0)=[@enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000540)="4108048c"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '', [], 0xa, "2db1e85532"}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) quotactl_fd$Q_SYNC(r0, 0x1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0x5, 0xb, 0xa, 0x2, 0x0, 0x70bd23}, 0x10}}, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)="8b0b4c40"}) 2.033143658s ago: executing program 1 (id=67): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1380, 0x3}) 2.022270678s ago: executing program 1 (id=68): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000540)={{0xdddd0000, 0x5000, 0xe, 0xee, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x2, 0x7, 0x6}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x13, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xdddd0000, 0xe6e50002, 0x9, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x7, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x3, 0x46, 0x2, 0xd, 0x3, 0x3, 0xfc, 0x1}, {0x4, 0x100000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x8}, {0x2, 0xd000, 0xc, 0x7, 0x4, 0x6e, 0x1, 0xff, 0x8, 0x80, 0x0, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0xd6, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x3, 0x5, 0x3, 0x3, 0xa, 0x49, 0x54, 0x6, 0x2, 0x8}, {0x80a0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x1, 0x0, 0xeeee0000, [0x2, 0x401, 0x7, 0x4]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c0202"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r4 = socket(0x8, 0x3, 0xfffffff0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000440)={0x5, 0x200, 0x7, {r6, r7/1000+10000}, {0x0, 0xea60}, {0x2, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x18, 0x1, 0x0, 0x0, "46b5088a15d91c0141b602760614d94b0863280f9b125b540bd598542fc60429ac29a5d164276e91df5334af46df2dcd51c2ba00e4e21396569b221b4da64f04"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x9) 1.733573291s ago: executing program 0 (id=69): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in=@empty, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x84}, {0x0, 0x0, 0x0, 0xd07}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '\xef|JS\xb4#\v\xbd\x94\x82\xb5\x98OL#\xb6B~\xbc\xa9\xc9\xf0\x15\xba\x12}\x12A\xee\x8e\'*'}}, {@debug={'debug', 0x3d, 0x6}}], [{@appraise}]}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) 1.297222416s ago: executing program 3 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x404c005) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20008011) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8080) bind$netlink(r1, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r8 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000500)="0f01c926670f01c8660f381daa00880000b805000000b9832100000f01c166ba6100b0f4ee0f01cb0fc77b052e0f0866baf80cb818bb2484ef66bafc0cb808000000effc", 0x44}], 0x1, 0x2, &(0x7f00000005c0)=[@dstype0={0x6, 0x2}, @efer={0x2, 0x8801}], 0x2) io_setup(0x9, &(0x7f0000000600)=0x0) io_submit(r9, 0x4, &(0x7f00000037c0)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f0000000640)="b8e5467e3f63314ce1fbcd42c0322a723fdc56f99e14e64d4f316a1991363f6e463b6f75151c93ecb938f6cfde9613cd6b56abd6ca144d48760dec819167584a5b12cd1750112faa1a9ad6f277434d664515fefaa47d90bca85a3b653ace5ac0e5513c6a67ba9c315571d6b0b894c6382dbd6df627", 0x75, 0x1, 0x0, 0x1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000700)="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", 0x1000, 0x25, 0x0, 0x3, r1}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x8, 0xe8f4, r4, &(0x7f0000001740)="c97841690541734b3fdde36257f27d6b57172ddf3dfd3b83b5081fa5455b6a59ec0c31e872e934753a4e61056c5d92810df92500dfe0e754bf4f95e18da2473276a8cf19748102715b9586f8d1fdbc0702ab84fc43247e43120c7b32f11504b08edc1fd2a140563a8b1103c698d1150ec6c84a2148058bc768b25a78c0b56694f8a24b0150e4dc2fe4285df076e7a6d5b0ac3a6d28c657c523b01a1306a5df272316ce753d9fee465f58f5400049d572b1338fe36325ecf5098b896eb6985aab089c958c030207afe1397e17e64428ddeb6cccc38157f8d495790ee424da33b471a0814219c165ccaffaf34c66e2bf775db1437bd609579f22c95d4f27e0c435e95f121853ed862fa105032b6aae183d8a55c8e8c8cc6d1b2c70790220f00daa1c715924a052aed5a658fc96bfa28f41892a9c68288b700e9b99873546dc1dede40eae8e87342aa07c851ce290b963124c56c41802799ed01ba03fdf4071882c111931597ebfc0d44c6a5671ecd6efd9028df40133b2ae3de13ea625312f9603e0d368a9ae88c6a6c403b68c205ea2f46d6de256050600fd25592e7372e51edc646ed900e70e031b3a8ab31f78695d19fbef1e60b979c08dd8c1264d67481a65685cf265fe42ed040dda23775aa4d58bf954d4a7cd42a600f286c567cedd3123bd2fe957ccab35418d985c3dd4b3a6c39f1cd2b75719b0df2a2ef95d12af5a15697f16fea844330561bd9f3ed20e90bcc66d2a70605abd27b33c51f78545eefe062355a8b3c860e4e177a857d901d95121176647d57949162f70f76cc163561d951877873252fa2fa817df576e7eff1b7a594137a44b191415af1cd5a0147c2c8a8dbfca5a76c5ddadff0296d1bedce0433ef96f56ba4276dd6c0f9bcc562fdce6337566eb6727e98c43441382c4b0a3fc06d4478996dd85f65ae5432e6791189d3d8656d707785b93ac5200712eec2188e86b1c2465511627b6bda4357d19ebf61bc1c0a10fb34b9edc87be1f7d56e02db27e3a6b890955b76752e32cc039ce2e4456258ba9728b284f763c4f74b3e2d0f79c111d237059f1a7ab63e3b3dac9d96e911056455f0f371f6ff9a6e8210c48f8637923953a3c90eb2c56d72cb998595bfa2e7267099e603254373bae23d96ad2e6d600ab9cf65def5bcd310db54af1a25a80093b46f81123bc5e4f80dbb3cfd9934e918af21cf80666063832b3e97a8c7194242a7bbb1a19db8783b952068152768796c891f14e26022286de69f8519d6399c1058fe8ced903cf3d5c98b907829b9df15b75c38213798befa0b194b2aa955c7cb337590b133c75fd9179de6f625689cf76d894fbd28b9371fa5afe3ab941e9dbe53a9d807d27a97b24571c78ea1df472504c958a4501b9eeb58037b4955c2dc33130ce596df47242cfb5a63b119b5b2c8ca798e557c3e8216d511750aaf78320213fabe4a5c724cc40ccd6b8f8cf4a8916d338d05e6dd642c14d8a693b5e62bc109a4716b46286faadb8b2ed2d03c8711867fb25269a22156dd2e108542ab28235ed2a8eba2d3080d8d05566c459b199b91b70270a80cf0daa954433e5d73c92c48f54d998443915c8ef7957a5fdd2efe2522ff76b1060cd72b7582ad7fa294ff7ad7368f67ddb2360308a10b8e439130b1cbe58c646c433947a2ed17f09cef0ec8b1eda626be709efbb2cedf4e239a895c84c0827e9dc8a79bd046b2e2cb00094548693fe685d524ddb9e3c332898a31e5b170a9018f400aa013d4fed50085c9a39d8d8cf59847d9f587d3e89dde5c3a1b726283eb122dad3e853e4c1677263a4e83a44385734170e8edaffbbc61be971386661a14afca2e62bc2f27ab870593d627214581c8c5399a17b3de776c9ebc56651af69988f46347be7f744538f72e3a4904b9c62e997c850a3d8a56647d6f28fdfd23a1e11e35aa1a9c3f8d4b0f7f9c85290960427b72eb6de3c975ffbd2cc00203f05ef1c65ce6149d552d36f39f881b2614ca34c0ff14c222b10adfad5eced0a63c4c3afe8d9aa222c6a39ee745a042de2152496450e47490865cd9b58e20884244169a31abdd936b95f8806642350e266e3af6c95dc803f56e2b6c3789286a3ad9620ef3bbb462d3b9fcdea9d32062af10d605651986408bfeb8b4264d25dbcec525a48242f330b28d3e65998fbfac23965b4aeb354b157b53a4b37e93b39e40dd0cbc92f710cc99340a5a200240fb8e4894ac521f902a4ac0f6f2ac1a6d2edb816120b41d4d15611991439fa1b94c0bfa3dcda5efcdbb6f892a07f1b197c89e80e858356e9dfa04dcf298669159e73849a5eeb51af315aa192425ec7ca3199b1fd6d47e805b920199bf91b0c6c1417d4a18ceac91e814e76d81b4588a1f4a6d9fc6eb8b9e1d2557655c33030c3167bc591f44488b82e11e6861cd3a78fcb2b3863e53140db537b2fdfa2605fe737e21d687a7e6b093631dbb63178e9b652484e76447cdf4d35aa16510c06ba2505ef9a2a7144506c4657e620d8e0f5baf15ff038d193eacbc73588c9ba7b2ef0f0371e57396438df5b21ff0a0c8eee614703ea22423e2871581d86e2ea4bcc3ec1cde2762d1d170a1048fdbcd949c05c3c1a49fd7e4a7022365291fd18cbc4fb7fabbc119a8faa99520fe0ee7ed8dab242bdff71c5b7ae464fbf785f0503240354c0c140439c91e5c3de5c14eb12f8a17c0014cf9601d27d7223d45a039c9c293d46f2cd89c1e08a81f6078f64e4e173bec3816d30d31e44057993ca678d282c323f423be506800984aafadc9d9923bfa3e9b5e4a2d79e2962f109bb3613cc70e25bc23d8b9d60f7b990128edb742d600876e80c85e04dcc520c84ae256b706a69b494f1c2546d2b6f60bbc44ce1f2a83069b35eda5a1dfa8e72c21f0e4d3af9e7d47515cf16a23215cf9b5564135e3774147987fa532112151581881171b13f43aee7998fd81ba9b1afff3ca563dd52e16e63026569d95d384be8caa6777bc7872e27a954cfe3d42bf63e1d407d9e21b76bfd175abebedea57ae2c64717d3d5747c22b320790b609e04f9c396ef3e5de761918c09720e9dae571f02b6ec37075a618a5f94b8fad4211f334384c5426f17f55c04d9ca96b2e192901cc95f0076337e665e478fcff9fbfe0c334983a7a5b51b4dc8be3cef60aad27a236206afc133288314cff487d08304844c1afddefe0a9358308573a31917d32b0caae7e14178dc1774f64efece1bc9e59ff3ad0d651042b003aa7c353f80e6b57ef47ca50924f6faa8a262124c0c75f9def3b6dd052520385a460ff2f5ae44ae3db5c4fb9519917df306665d5844f1cbb300fa28038892242c166e265053c7010b436088e3417c99d447b6d51fb51e6bc0aa9c316d277866f93d3f9aaa0ab3bff8996f6d8e59d6c2367b939e1a00a485ef5536781bd85e9f65f248eb647e24e6e40f632e002acad8beaa207d1ee6ac13f84b77497321a35e08aa04da3127b31c4c0f49c0c21ad306f6948364e8c1c1810ef5a311433333ef2c15f6d61fb9735d11366d87fc65765b91645021b33e07e666365aa82cc248f71a15a171f9f4585e88e9b6271b44fd61e2f166fe24101f638ff18c5a9f04f949484715930448ae934c2d1cda40a4537e950a2a86baea7bc25218183c48f3d9da9c80418c753d15302ff2bf26c060e75ec3f7a607ab86c1d38ab2e224030c019d02d35333b064c89ff11f716491b81d83e780849a95b10e8c4ded3509b94cf5da742f65b06492773d7a0ee59619429d8d3610df72b079a508240bf7a7e2a3d25ebd8a9ca5b42f822d96600675bcc9c0f82f3e0df19c147e618c47edb5106f8dcd3d27837eb66ace76ba6fc73fd0a1494db3d78dd8052865d15dc9ad6a772d18eb60b553620963a388c926c97985bf56e60fa520577423b337f40175ca6f5ef603640473edd00a5d099d526d62028d4ca78bd210769319279be24d2b253e11a0013bac8818dfb7a03c2ceef2038e1e6a5791d7170f8e0254e1ddd0d4c18f5bf21b3cd1fa8b318c649e2559c8d96f7076eeaa9108110f79c2624a2dd0bd3154b917e3369abf1e7fb1cd7e7193249ce023769451d2224e7a4967939f2cd675d468202d64b5c31a7b668d81ca933f2daf469d7dd742b1bdd98b553130ecebbb397af7d34502d520f428e3bee8068dc07320c66424e8f5e9a5fb352e91880afd4eeeec0e9e645e4564158aa4edd0d1f68c086214f4fda333d4d68f2156a034664908428af27237e3b9e85e6acc373cc44df04f66f4546d62aee993ddff9fe551e45fbbd9589185d5980a9747572f76f53936b5ae858291d47c1e5654159ce184a6ec54518fad429d473673ab2b0ded4012179796be1171d9a138af31d0003536c10e976c88ad36c8026066184a57d12706b683808df3adc93872cad58001f49cb86790044c03020568d74a4b0154ec022eb69b094934bfcf3ee241be0bcc3328962a6cbdaae4d66afd0e9694b0796c7bc953fe2b58eb6fae953eb9a69906db320789e31ebe63b7efd209bb48f057ac4ca3983def794dad5be1c8b295a10d0999c2112399b7579859b245ec549ff51ac21ad2d66c9238fa0f54f16277daf7891dec667d9179a46135aa12509e06ecba7703d63e526a6422b088c10c69627319df97abaed90399099de4dc7ff3e4755caf11dc8efae74a2d9953fa97df340d3fe5830674dd320338fba2f3d8c51b546c82cdf49f2cdf68b36a0218933d5996851b58fd784de9211bd47d2901d6fb4985f58da81d3c8ddf22597b3954688d15c62f1e0a1b88f37bc3b82741101d43e20481e860f36315c2961b2d03b998772793fda230f148916114766f7a0f30b00e5b5193edbb44d4b973d8bfdfeb66697208c86de58fcf25e31cfc133463126e73764ca9f6347426d07330b13554e818ae890105bb7b748a396b2d0daf462429c5a9eabd38a5746bdaa612a31ad98b80766bef2b3bff3b2256537576e1722c0b1924386489e354d32b613ac00043808af2a8f4f1fba984543f8517d96c80f570ef348d005d10d2c1f883af981a0a117cef73ab9efeeb2c5e458f92aedd9e85af0604cbeee51b68dad5370cd231142e6650bbb58a0f7f929f164b6c5261826075965bd30ba7646ca15683cabe10070175e09b6a54498176ce12b5bb641381ac97040aff66d4b8a00a854f40d67d9625b92467ab6d3db182105760dd51a1afe5a56567a51539c7b05a023ab5ae1face030e5451d5f2a5a44f10a82753826f735be3a990f7ff1651dc2d3ad546ede0ae313620f2eb439fa807728d5db07fc80563d05b0b7b7a1c4c5a94909aa104e6d51f15cee3f142af650594244a32139ae8904edf13542296758269204e9b42f880c33e64c2bc248a7a2b88a1a34447c4834d8373e4c8c2feb23d1029b67df8b0222027a89f79e24f7c7295a5235f4846eaa0796b28e7d746a7e645855e3831055787c3823f0326b77950d3b0ae21f22cf1b1b20c7bf8cc962e9f7c2c7d42e5fcae4d48f75f27fb9816706abf468a63e03eb76d28fad47e24369c0fcab08b5fcf2b5b9d7e98d06dab1eba44281f133ae43b17926a6349f0d6a90ebc3c263f6e4df097c2b80bfa38e87b0d175d7b8dfb0f5a729b6dbd2c57d67e8231464feaf8d8e854b846ab81a9a795998868bd4967efb4dc618e3f88fa79c0f430e4303dfc194f87dd00353e8a9ea5627bdc078241f7e1e604cae812dcf6ecb0acc1b04820ca018fb0db65f1ad2f98c3b438e181e1842f67fa933f522f7bdce722bbbcc6a986461e26138430708a4755c3d2fa81626", 0x1000, 0x0, 0x0, 0x1, r8}, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000002780)="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", 0x1000, 0x75ab45d5, 0x0, 0x1}]) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000003800)={0x3, 0xfffffffffffffffb}) syz_genetlink_get_family_id$nfc(&(0x7f0000003840), r6) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000821}, 0x4840) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000003a80)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x28, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9d, 0x5}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000884) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000003ac0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x1}}, 0x30) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003b40), r1) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000003c80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x8c, r11, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "53f7fa348b4bcadab16723a76de6b0188e0e228acc0f2a61c362252e5d9ed41dd126"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x712}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb62}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000004100)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000040c0)={&(0x7f0000003d00)={0x3b4, 0x1e, 0x300, 0x70bd26, 0x25dfdbfd, {0x14}, [@generic="f4541a882ed7e6da90bd295b6343e3adec6747b8aa1cb4fbe5186972bf77f8e7c7c604c74838943daa0ab4c0c605086248f01fa4880a53a80521b89a307d9827b6fc782d22", @generic, @typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @nested={0x31a, 0x51, 0x0, 0x1, [@nested={0x4, 0x112}, @generic="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", @generic="89a961f52d1e2e4969c6b6c54ec7fdb6004747190ec5200cfacd00634dd4bb8a545e7630d1053a2687a4408cf042278e22a1bdd113d44784dc0447dc174e43169acb5c73411de91cc63494412927f86d9828ebb966669d06f779bb71360ba17684006f5e65f3990be49dd2c4607c8639ff2b6a076937747702ac3bdd0947254384631869b7a4b886d45e7f09e9d7709943f6497a94044c09f9a58d7533b31a9218f3bba683faaa00fb862e6062ab7f6cee4962be3e20284dd49c184f817a52d1148126d230064833b53e5e0708ad4d1502d06361871d", @typed={0x4, 0x99, 0x0, 0x0, @binary}, @nested={0x4, 0x5d}, @typed={0x61, 0x71, 0x0, 0x0, @binary="53c3c7d06331cc2441b4a0328e1743f1090f1ee70c00e2def54e7129ffb66d6c86c153f04d3bc65f518992f4b660c601dec5dab4cfac9b1e5cfe1cef9b9d6ca5b6c7ed034fc6253fde11384116260d62018c3cc4a6d1939867cb117a04"}, @nested={0x4, 0xf3}, @generic="2d0a1331bc13c618ea23fa6d658a44691b972a0b2f4c72515ad3e53a6be7c95595d31716ee90818fe4edbad58c06641c354645", @generic="3781bbfb27a8f344cfbd70a580686ea32b7e32a2837347ad6f761ca1d0e5b2a39389f8132cdc2d2e8eaeae56e905a30f8079b2a6329ff8b39b12e8718574a8e89b7e726082cbcbfd1c1485d6a4a80506969845cd047c0e28416b9e41b06bca106f030b4b0b711042d11dbe871f33ede17c10845c7aa77855cb350deee747e003fa8256ac72559004514dc7977d63adcb4c339dc5f468ac7a14e4"]}, @generic="8b9c8d3f99e3bd8325303f4613b88b460667014861e729d9888040e7e4ecabed", @typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@remote}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000004140)=@x86={0x0, 0x3, 0xc, 0x0, 0x9, 0xff, 0x2, 0x7, 0x3, 0x6, 0x1, 0x40, 0x0, 0xffff, 0x40, 0x20, 0x6, 0xa, 0x4a, '\x00', 0x1, 0x400}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000004700)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000046c0)={&(0x7f00000041c0)={0x4e8, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_IE={0xed, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x7ff, @val=0x9, @void, @val="258a16875b679fc332f0f30a93fa32d4"}}, @random_vendor={0xdd, 0xcf, "57818d3538c42ad1932ae089b30bb4994b7ff81609c75a424302f0343c81489d0141b4a151f9ed3ab03be4ab668069f980c9eaee07db76efa6f1d5564535d49284258940c0884969143bedbbf5e3cb5323e2e310dc43d81830f6ebb56b3913f255828d661cae091c846e05cfa6a7f61652bfa06c0dea87ffea4a5d25d940b90d6293f2cb3090cc63a2721e2ca9665cc04016e3f54807d760c83fdfbc166315ad72b3a545e704604247b7c7c04f0fc60e9cd740a98216fd44368d66534a6c88e481e9444668d0acd3b4c2d7e2211c93"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x350, 0x84, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x505c61d}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="cbc33181fab409853341173c2d0d4eaa4282000ad1d2f3876421"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x80000001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xa}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf4c8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x15ab}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x90000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x73f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0de67d999721"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="88579fcdd01d"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="aeb081c4780c869a6ca8"}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x61b3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xa0000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5c3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="98a9c97805b5"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="ea66"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x817}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x6fe}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x6747}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x60000}, @NL80211_BAND_LC={0x8, 0x5, 0xaaf5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x23}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2af}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101}, @NL80211_BAND_LC={0x8, 0x5, 0x48}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xfffff988}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, @random="4380f608063cb18d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="592f0e2ad3a47d20d1"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0xb}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xebba}]}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0x24, 0x0, @random="12cc31a87183ea494a606e59e0d6cf6f907ad9041d87d7e5731cdad4a8669a4d"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x9, 0x0, @random="5df68e2579"}]}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x1c, 0x0, @random="ff7de41aa2eda9cabafc872404116610ef55947b32398161"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x404c04c}, 0xc841) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x70, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3a}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000004880)={0x2e, 0x4, 0x0, {0x3, 0xfffffffffffffff9, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) 1.228723462s ago: executing program 3 (id=71): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYRESDEC], 0x180}}, 0x0) read(r1, &(0x7f0000002440)=""/4103, 0x1007) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000000825bd7000fedbdf25ff000000ff010000000000000000000000000001ac14140d0000002203ff0a00202011000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x240008d7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6414608, 0x1000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xf8, 0x0, &(0x7f0000000980)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r2}, @fd, @flat=@handle={0x73682a85, 0x1001, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0x6, 0x2, 0x2b}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x3d}}, &(0x7f0000000800)={0x0, 0x20, 0x38}}}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x4, 0xffffffffffffffff, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/100, 0x64, 0x1, 0x1a}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}], 0x136, 0x0, &(0x7f0000000400)="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"}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KDENABIO(r3, 0x4b36) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x91, 0x240000000008b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = fsopen(&(0x7f0000000080)='incremental-fs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001c480)=""/102390, 0x18ff6) r5 = timerfd_create(0x1, 0x0) r6 = gettid() timer_create(0x5, &(0x7f0000000300)={0x0, 0x20, 0x1, @tid=r6}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r7, 0x29, 0x11, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 889.285409ms ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@huge_advise}]}) r0 = fsopen(&(0x7f0000000000)='ext4\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)=']\x00', &(0x7f0000000140)='./file0\x00', r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 888.891379ms ago: executing program 0 (id=73): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e", 0xa, 0x800, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 888.024039ms ago: executing program 0 (id=74): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x119, 0x75, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}, @generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf07015b904d89c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d3152396176", @nested={0x64, 0x425, 0x0, 0x1, [@nested={0x5d, 0x5b, 0x0, 0x1, [@nested={0x4, 0x38}, @generic="31ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea05", @nested={0x1a, 0xe8, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @uid}, @generic="8cda759849b5a66f654f3e332a3d"]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x804) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000080)) r4 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x2c82c0, 0x0) r6 = signalfd4(r1, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8, 0x80800) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000002c0)='/dev/kvm\x00', &(0x7f0000000300)='./file0\x00', r6) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='async\x00', 0x0, 0x0) 848.212712ms ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x50281, 0x0, 0x8}, 0x18) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpid() r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000000)={0xd}, 0x20) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90, 0x0, 0x191}]}) syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000040)={0x3, 0x400009}) sendfile(r0, r0, 0x0, 0x7ffff000) 381.11917ms ago: executing program 3 (id=76): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) (async) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$setflags(r3, 0x2, 0x0) (async) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000140)=0x40) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000200)) (async) r7 = dup3(r1, r4, 0x6700000000000000) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) unshare(0x64000600) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f00000006c0)={'mangle\x00', 0x0, [0x95e, 0x2, 0x5, 0x400, 0x306a]}, &(0x7f0000000180)=0x54) r10 = signalfd4(r4, &(0x7f0000000400)={[0x4]}, 0x8, 0xc00) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) bind$packet(r10, &(0x7f00000003c0)={0x11, 0x10, r11, 0x1, 0x8}, 0x14) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000000200)) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 273.587758ms ago: executing program 3 (id=77): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x33, &(0x7f00000002c0)=@string={0x33, 0x3, "5973edc7eb25c63d79b5aaeb50100e428d5858b6a477073f711502d1595c8ba4fd11931ca52922c8320e53d06621a83d58"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43f}}]}) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x4283cafe) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="da952abd7000fddbdf25100000003800018006000400d24fce0e0a32b390770000000c0007003b000000040000000800050000000000080005000100000008000b007369700087d1338ae57ce22e70a035d7f602f5faa8b9e4a852abd0d7ff9de376ca280de6cb2a9259d31ad9bd6c006df9c6d54b375be9501d1c99e9f5bce4801017b82a24085af0727584fe3f6b699ee37c4bd467ba9d1b3a331c813abd1c07df6b15031886da00ec705f5a3ce0a8b864ca655e38227ef051983fad3ce12813793671bf4339d7"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="30020000", @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf257a00000008000300", @ANYRES32=r2, @ANYRES64=r4], 0x230}, 0x1, 0x0, 0x0, 0x8d0}, 0x1) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x5, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r0, 0xb085c000) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) 0s ago: executing program 0 (id=78): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) syz_clone(0x23080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x23080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) socket$packet(0x11, 0x2, 0x300) ptrace$cont(0x20, r1, 0x0, 0x0) (async) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x2b, @rand_addr=0x64010102, 0x4e23, 0x1, 'wrr\x00', 0x20, 0x37b, 0x43}, 0x2c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) kernel console output (not intermixed with test programs): [ 12.348142][ T36] audit: type=1400 audit(1756458788.080:62): avc: denied { rlimitinh } for pid=229 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.351493][ T36] audit: type=1400 audit(1756458788.080:63): avc: denied { siginh } for pid=229 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 19.779563][ T36] audit: type=1400 audit(1756458795.520:64): avc: denied { mounton } for pid=253 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.780861][ T253] cgroup: Unknown subsys name 'net' [ 19.782934][ T36] audit: type=1400 audit(1756458795.520:65): avc: denied { mount } for pid=253 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.787007][ T36] audit: type=1400 audit(1756458795.530:66): avc: denied { unmount } for pid=253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.787170][ T253] cgroup: Unknown subsys name 'devices' [ 19.866238][ T253] cgroup: Unknown subsys name 'hugetlb' [ 19.872021][ T253] cgroup: Unknown subsys name 'rlimit' [ 20.004758][ T36] audit: type=1400 audit(1756458795.750:67): avc: denied { setattr } for pid=253 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.028902][ T36] audit: type=1400 audit(1756458795.750:68): avc: denied { mounton } for pid=253 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.053818][ T36] audit: type=1400 audit(1756458795.750:69): avc: denied { mount } for pid=253 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.083412][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.092766][ T36] audit: type=1400 audit(1756458795.830:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.118752][ T36] audit: type=1400 audit(1756458795.830:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.149945][ T36] audit: type=1400 audit(1756458795.890:72): avc: denied { read } for pid=253 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.176847][ T36] audit: type=1400 audit(1756458795.890:73): avc: denied { open } for pid=253 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.176908][ T253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.998009][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.005149][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.012336][ T288] bridge_slave_0: entered allmulticast mode [ 21.018861][ T288] bridge_slave_0: entered promiscuous mode [ 21.028937][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.036114][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.043178][ T290] bridge_slave_0: entered allmulticast mode [ 21.049587][ T290] bridge_slave_0: entered promiscuous mode [ 21.057151][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.064312][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.071458][ T288] bridge_slave_1: entered allmulticast mode [ 21.077720][ T288] bridge_slave_1: entered promiscuous mode [ 21.088838][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.095911][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.103080][ T290] bridge_slave_1: entered allmulticast mode [ 21.109580][ T290] bridge_slave_1: entered promiscuous mode [ 21.150704][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.157793][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.164890][ T291] bridge_slave_0: entered allmulticast mode [ 21.171170][ T291] bridge_slave_0: entered promiscuous mode [ 21.180386][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.187654][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.195033][ T289] bridge_slave_0: entered allmulticast mode [ 21.201279][ T289] bridge_slave_0: entered promiscuous mode [ 21.207887][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.214963][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.222017][ T289] bridge_slave_1: entered allmulticast mode [ 21.228305][ T289] bridge_slave_1: entered promiscuous mode [ 21.234453][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.241615][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.249086][ T291] bridge_slave_1: entered allmulticast mode [ 21.255335][ T291] bridge_slave_1: entered promiscuous mode [ 21.411075][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.418230][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.425721][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.432747][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.449228][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.456323][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.464221][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.471240][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.485136][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.492193][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.499650][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.506702][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.536286][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.543356][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.550659][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.557795][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.570344][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.577767][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.585194][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.592526][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.600456][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.608258][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.615778][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.623133][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.643848][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.651025][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.660799][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.668052][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.685556][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.692617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.700484][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.707727][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.715926][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.722981][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.737724][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.744820][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.779102][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.786534][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.795195][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.802252][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.815838][ T291] veth0_vlan: entered promiscuous mode [ 21.843172][ T290] veth0_vlan: entered promiscuous mode [ 21.853062][ T288] veth0_vlan: entered promiscuous mode [ 21.866660][ T291] veth1_macvtap: entered promiscuous mode [ 21.882333][ T288] veth1_macvtap: entered promiscuous mode [ 21.896567][ T290] veth1_macvtap: entered promiscuous mode [ 21.906805][ T289] veth0_vlan: entered promiscuous mode [ 21.939565][ T289] veth1_macvtap: entered promiscuous mode [ 21.947072][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.005455][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.041777][ T340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 22.060369][ T340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 22.060419][ T340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 22.085514][ T342] rust_binder: Write failure EFAULT in pid:4 [ 22.344057][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.361232][ T369] binder: Bad value for 'max' [ 22.513966][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 22.520720][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 22.529701][ T31] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 22.538464][ T31] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 22.549079][ T31] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 22.558640][ T31] usb 3-1: config 128 has no interface number 0 [ 22.565164][ T31] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 22.577656][ T31] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 22.589496][ T31] usb 3-1: config 128 interface 127 has no altsetting 0 [ 22.599031][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 22.613983][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.622167][ T31] usb 3-1: Product: syz [ 22.626598][ T31] usb 3-1: Manufacturer: syz [ 22.631296][ T31] usb 3-1: SerialNumber: syz [ 22.694652][ T383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.694686][ T383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.844237][ T346] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 22.864125][ T346] rust_binder: Error while translating object. [ 22.882183][ T346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.894838][ T346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 22.895691][ T400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 22.918410][ T400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 22.947885][ T31] usb 3-1: USB disconnect, device number 2 [ 22.990722][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.007253][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.165009][ T45] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 23.173310][ T45] usb 2-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 23.185107][ T45] usb 2-1: config 0 has no interface number 0 [ 23.198894][ T45] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 23.217767][ T45] usb 2-1: config 0 interface 189 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.232554][ T45] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 23.241863][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.254332][ T45] usb 2-1: Product: syz [ 23.260235][ T45] usb 2-1: Manufacturer: syz [ 23.265324][ T45] usb 2-1: SerialNumber: syz [ 23.273209][ T45] usb 2-1: config 0 descriptor?? [ 23.479708][ T388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.507895][ T45] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 23.556741][ T45] usb 2-1: USB disconnect, device number 2 [ 23.582681][ T419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 23.617502][ T431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.617541][ T431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 23.643984][ T431] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 23.653060][ T431] rust_binder: Read failure Err(EFAULT) in pid:25 [ 23.975757][ T444] rust_binder: Error while translating object. [ 23.982324][ T444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 23.988927][ T444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:30 [ 24.004011][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.089646][ T450] rust_binder: Error while translating object. [ 24.089693][ T450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 24.096239][ T450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 24.144483][ T45] usb 3-1: device descriptor read/64, error -71 [ 24.404020][ T45] usb 3-1: device descriptor read/64, error -71 [ 24.664001][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 24.794030][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.033989][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.144815][ T45] usb usb3-port1: attempt power cycle [ 25.418458][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 25.418476][ T36] audit: type=1400 audit(1756458801.160:168): avc: denied { ioctl } for pid=469 comm="syz.3.41" path="socket:[4554]" dev="sockfs" ino=4554 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.449515][ T36] audit: type=1400 audit(1756458801.160:169): avc: denied { bind } for pid=469 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 25.454157][ T473] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 25.484002][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 25.504942][ T45] usb 3-1: device descriptor read/8, error -71 [ 25.635128][ T45] usb 3-1: device descriptor read/8, error -71 [ 25.784556][ T330] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.873984][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 25.895335][ T45] usb 3-1: device descriptor read/8, error -71 [ 25.935053][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.946301][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.960456][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.960589][ T478] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.974117][ T478] rust_binder: Read failure Err(EFAULT) in pid:29 [ 25.975846][ T330] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.998422][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.008305][ T330] usb 4-1: config 0 descriptor?? [ 26.024965][ T45] usb 3-1: device descriptor read/8, error -71 [ 26.038278][ T36] audit: type=1400 audit(1756458801.780:170): avc: denied { write } for pid=479 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.042017][ T480] netlink: 68 bytes leftover after parsing attributes in process `syz.0.45'. [ 26.067679][ T480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'. [ 26.080944][ T36] audit: type=1400 audit(1756458801.820:171): avc: denied { map } for pid=479 comm="syz.0.45" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.134058][ T45] usb usb3-port1: unable to enumerate USB device [ 26.447514][ T330] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 26.456830][ T330] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 26.484008][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.635317][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.646572][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.656502][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.669939][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.679179][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.688350][ T9] usb 1-1: config 0 descriptor?? [ 26.705922][ T475] Zero length message leads to an empty skb [ 26.776926][ T36] audit: type=1400 audit(1756458802.520:172): avc: denied { write } for pid=489 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.875077][ T36] audit: type=1400 audit(1756458802.620:173): avc: denied { write } for pid=493 comm="syz.2.50" name="ip6_tables_targets" dev="proc" ino=4026532619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.899546][ T45] rust_binder: 493: removing orphan mapping 0:24 [ 26.908482][ T36] audit: type=1400 audit(1756458802.650:174): avc: denied { bind } for pid=496 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.912804][ T498] netlink: 68 bytes leftover after parsing attributes in process `syz.2.51'. [ 26.928815][ T36] audit: type=1400 audit(1756458802.650:175): avc: denied { append } for pid=496 comm="syz.2.51" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.959166][ T36] audit: type=1400 audit(1756458802.650:176): avc: denied { open } for pid=496 comm="syz.2.51" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.982485][ T36] audit: type=1400 audit(1756458802.650:177): avc: denied { ioctl } for pid=496 comm="syz.2.51" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.026521][ T502] pim6reg1: entered promiscuous mode [ 27.031915][ T502] pim6reg1: entered allmulticast mode [ 27.099623][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.108440][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.117534][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 27.128704][ T9] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 27.282630][ T330] usb 4-1: USB disconnect, device number 2 [ 27.324420][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.332944][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.697462][ T391] usb 1-1: USB disconnect, device number 2 [ 28.306675][ T556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 28.307426][ T556] incfs: Backing dir is not set, filesystem can't be mounted. [ 28.324756][ T556] incfs: mount failed -2 [ 28.381537][ T557] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 28.573758][ T563] binder: Unknown parameter 'fscontext?}' [ 29.413975][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.482310][ T349] ------------[ cut here ]------------ [ 29.487869][ T349] WARNING: CPU: 1 PID: 349 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 29.496078][ T349] Modules linked in: [ 29.499989][ T349] CPU: 1 UID: 0 PID: 349 Comm: syz.0.7 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 29.511480][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.521571][ T349] RIP: 0010:drop_nlink+0xce/0x110 [ 29.526632][ T349] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 29.546330][ T349] RSP: 0018:ffffc9000ba07860 EFLAGS: 00010293 [ 29.552387][ T349] RAX: ffffffff81edc76e RBX: ffff8881189ad308 RCX: ffff888108fa8000 [ 29.553955][ T9] usb 4-1: device descriptor read/64, error -71 [ 29.560388][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.574646][ T349] RBP: ffffc9000ba07888 R08: 0000000000000003 R09: 0000000000000004 [ 29.582652][ T349] R10: dffffc0000000000 R11: fffff52001740efc R12: dffffc0000000000 [ 29.590655][ T349] R13: 1ffff11023135a6a R14: ffff8881189ad350 R15: 0000000000000000 [ 29.599114][ T349] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.608102][ T349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.614823][ T349] CR2: 00007ffc4120dcf8 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 29.622815][ T349] Call Trace: [ 29.626122][ T349] [ 29.629071][ T349] shmem_rmdir+0x5f/0x90 [ 29.633396][ T349] vfs_rmdir+0x3e0/0x560 [ 29.637686][ T349] incfs_kill_sb+0x109/0x230 [ 29.642296][ T349] deactivate_locked_super+0xd5/0x2a0 [ 29.647796][ T349] deactivate_super+0xb8/0xe0 [ 29.652570][ T349] cleanup_mnt+0x3f1/0x480 [ 29.657016][ T349] __cleanup_mnt+0x1d/0x40 [ 29.661464][ T349] task_work_run+0x1e3/0x250 [ 29.666576][ T349] ? __cfi_task_work_run+0x10/0x10 [ 29.671792][ T349] ? free_nsproxy+0x223/0x290 [ 29.676512][ T349] do_exit+0x9bc/0x2630 [ 29.680685][ T349] ? __sched_text_start+0x10/0x10 [ 29.685774][ T349] ? __cfi_do_exit+0x10/0x10 [ 29.690515][ T349] ? __kasan_check_write+0x18/0x20 [ 29.695684][ T349] ? _raw_spin_lock_irq+0x8d/0x120 [ 29.700814][ T349] ? __kasan_check_read+0x15/0x20 [ 29.705957][ T349] ? cgroup_update_frozen+0x160/0x990 [ 29.711496][ T349] do_group_exit+0x22a/0x300 [ 29.716109][ T349] ? cgroup_leave_frozen+0x16c/0x2b0 [ 29.721481][ T349] get_signal+0x139d/0x14f0 [ 29.726070][ T349] arch_do_signal_or_restart+0x96/0x720 [ 29.731899][ T349] ? common_nsleep+0x93/0xb0 [ 29.736529][ T349] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 29.742690][ T349] ? __se_sys_clock_nanosleep+0x300/0x390 [ 29.748627][ T349] ? __kasan_check_read+0x15/0x20 [ 29.753787][ T349] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 29.759883][ T349] syscall_exit_to_user_mode+0x58/0xb0 [ 29.765367][ T349] do_syscall_64+0x64/0xf0 [ 29.769961][ T349] ? clear_bhb_loop+0x50/0xa0 [ 29.774673][ T349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.780615][ T349] RIP: 0033:0x7f212cbc14a5 [ 29.785063][ T349] Code: Unable to access opcode bytes at 0x7f212cbc147b. [ 29.792512][ T349] RSP: 002b:00007f212d96af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 29.800942][ T349] RAX: fffffffffffffdfc RBX: 00007f212cdb5fa0 RCX: 00007f212cbc14a5 [ 29.809303][ T349] RDX: 00007f212d96afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.817488][ T349] RBP: 00007f212cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 29.823979][ T9] usb 4-1: device descriptor read/64, error -71 [ 29.825523][ T349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 29.839844][ T349] R13: 00007f212cdb6038 R14: 00007f212cdb5fa0 R15: 00007ffd728d32a8 [ 29.847934][ T349] [ 29.850945][ T349] ---[ end trace 0000000000000000 ]--- [ 29.856740][ T349] ================================================================== [ 29.864834][ T349] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 29.871084][ T349] Write of size 4 at addr 0000000000000168 by task syz.0.7/349 [ 29.878631][ T349] [ 29.880960][ T349] CPU: 1 UID: 0 PID: 349 Comm: syz.0.7 Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 29.880987][ T349] Tainted: [W]=WARN [ 29.880991][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.881017][ T349] Call Trace: [ 29.881022][ T349] [ 29.881028][ T349] __dump_stack+0x21/0x30 [ 29.881047][ T349] dump_stack_lvl+0x10c/0x190 [ 29.881060][ T349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.881074][ T349] print_report+0x3d/0x70 [ 29.881085][ T349] kasan_report+0x163/0x1a0 [ 29.881096][ T349] ? ihold+0x24/0x70 [ 29.881107][ T349] ? _raw_spin_unlock+0x45/0x60 [ 29.881120][ T349] ? ihold+0x24/0x70 [ 29.881130][ T349] kasan_check_range+0x299/0x2a0 [ 29.881141][ T349] __kasan_check_write+0x18/0x20 [ 29.881155][ T349] ihold+0x24/0x70 [ 29.881165][ T349] vfs_rmdir+0x26a/0x560 [ 29.881178][ T349] incfs_kill_sb+0x109/0x230 [ 29.881193][ T349] deactivate_locked_super+0xd5/0x2a0 [ 29.881206][ T349] deactivate_super+0xb8/0xe0 [ 29.881218][ T349] cleanup_mnt+0x3f1/0x480 [ 29.881229][ T349] __cleanup_mnt+0x1d/0x40 [ 29.881239][ T349] task_work_run+0x1e3/0x250 [ 29.881253][ T349] ? __cfi_task_work_run+0x10/0x10 [ 29.881265][ T349] ? free_nsproxy+0x223/0x290 [ 29.881278][ T349] do_exit+0x9bc/0x2630 [ 29.881291][ T349] ? __sched_text_start+0x10/0x10 [ 29.881305][ T349] ? __cfi_do_exit+0x10/0x10 [ 29.881317][ T349] ? __kasan_check_write+0x18/0x20 [ 29.881330][ T349] ? _raw_spin_lock_irq+0x8d/0x120 [ 29.881343][ T349] ? __kasan_check_read+0x15/0x20 [ 29.881356][ T349] ? cgroup_update_frozen+0x160/0x990 [ 29.881367][ T349] do_group_exit+0x22a/0x300 [ 29.881378][ T349] ? cgroup_leave_frozen+0x16c/0x2b0 [ 29.881388][ T349] get_signal+0x139d/0x14f0 [ 29.881402][ T349] arch_do_signal_or_restart+0x96/0x720 [ 29.881417][ T349] ? common_nsleep+0x93/0xb0 [ 29.881426][ T349] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 29.881440][ T349] ? __se_sys_clock_nanosleep+0x300/0x390 [ 29.881456][ T349] ? __kasan_check_read+0x15/0x20 [ 29.881469][ T349] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 29.881481][ T349] syscall_exit_to_user_mode+0x58/0xb0 [ 29.881492][ T349] do_syscall_64+0x64/0xf0 [ 29.881504][ T349] ? clear_bhb_loop+0x50/0xa0 [ 29.881515][ T349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.881525][ T349] RIP: 0033:0x7f212cbc14a5 [ 29.881534][ T349] Code: Unable to access opcode bytes at 0x7f212cbc147b. [ 29.881539][ T349] RSP: 002b:00007f212d96af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 29.881551][ T349] RAX: fffffffffffffdfc RBX: 00007f212cdb5fa0 RCX: 00007f212cbc14a5 [ 29.881559][ T349] RDX: 00007f212d96afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.881565][ T349] RBP: 00007f212cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 29.881572][ T349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 29.881578][ T349] R13: 00007f212cdb6038 R14: 00007f212cdb5fa0 R15: 00007ffd728d32a8 [ 29.881587][ T349] [ 29.881591][ T349] ================================================================== [ 30.183124][ T349] Disabling lock debugging due to kernel taint [ 30.186228][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.189399][ T349] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 30.204748][ T349] #PF: supervisor write access in kernel mode [ 30.210992][ T349] #PF: error_code(0x0002) - not-present page [ 30.216980][ T349] PGD 8000000116f59067 P4D 8000000116f59067 PUD 0 [ 30.223766][ T349] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 30.229860][ T349] CPU: 1 UID: 0 PID: 349 Comm: syz.0.7 Tainted: G B W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 30.242916][ T349] Tainted: [B]=BAD_PAGE, [W]=WARN [ 30.247954][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.258028][ T349] RIP: 0010:ihold+0x2a/0x70 [ 30.262560][ T349] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 30.282359][ T349] RSP: 0018:ffffc9000ba078a0 EFLAGS: 00010246 [ 30.288482][ T349] RAX: ffff888108fa8000 RBX: 0000000000000000 RCX: ffff888108fa8000 [ 30.296602][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.304682][ T349] RBP: ffffc9000ba078b0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 30.312683][ T349] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff8881189ad314 [ 30.320857][ T349] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.328875][ T349] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.337949][ T349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.344554][ T349] CR2: 0000000000000168 CR3: 0000000134cd0000 CR4: 00000000003526b0 [ 30.352721][ T349] Call Trace: [ 30.356100][ T349] [ 30.359124][ T349] vfs_rmdir+0x26a/0x560 [ 30.363563][ T349] incfs_kill_sb+0x109/0x230 [ 30.368171][ T349] deactivate_locked_super+0xd5/0x2a0 [ 30.373595][ T349] deactivate_super+0xb8/0xe0 [ 30.378476][ T349] cleanup_mnt+0x3f1/0x480 [ 30.382995][ T349] __cleanup_mnt+0x1d/0x40 [ 30.387422][ T349] task_work_run+0x1e3/0x250 [ 30.392022][ T349] ? __cfi_task_work_run+0x10/0x10 [ 30.394033][ T9] usb 4-1: device descriptor read/64, error -71 [ 30.397184][ T349] ? free_nsproxy+0x223/0x290 [ 30.408663][ T349] do_exit+0x9bc/0x2630 [ 30.412848][ T349] ? __sched_text_start+0x10/0x10 [ 30.417906][ T349] ? __cfi_do_exit+0x10/0x10 [ 30.422521][ T349] ? __kasan_check_write+0x18/0x20 [ 30.427771][ T349] ? _raw_spin_lock_irq+0x8d/0x120 [ 30.433743][ T349] ? __kasan_check_read+0x15/0x20 [ 30.439086][ T349] ? cgroup_update_frozen+0x160/0x990 [ 30.444768][ T349] do_group_exit+0x22a/0x300 [ 30.449738][ T349] ? cgroup_leave_frozen+0x16c/0x2b0 [ 30.455157][ T349] get_signal+0x139d/0x14f0 [ 30.459938][ T349] arch_do_signal_or_restart+0x96/0x720 [ 30.466028][ T349] ? common_nsleep+0x93/0xb0 [ 30.470668][ T349] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 30.477218][ T349] ? __se_sys_clock_nanosleep+0x300/0x390 [ 30.483257][ T349] ? __kasan_check_read+0x15/0x20 [ 30.488384][ T349] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 30.494461][ T349] syscall_exit_to_user_mode+0x58/0xb0 [ 30.499924][ T349] do_syscall_64+0x64/0xf0 [ 30.504442][ T349] ? clear_bhb_loop+0x50/0xa0 [ 30.509170][ T349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.515158][ T349] RIP: 0033:0x7f212cbc14a5 [ 30.519794][ T349] Code: Unable to access opcode bytes at 0x7f212cbc147b. [ 30.527180][ T349] RSP: 002b:00007f212d96af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 30.535684][ T349] RAX: fffffffffffffdfc RBX: 00007f212cdb5fa0 RCX: 00007f212cbc14a5 [ 30.543742][ T349] RDX: 00007f212d96afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.551870][ T349] RBP: 00007f212cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 30.559838][ T349] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 30.567987][ T349] R13: 00007f212cdb6038 R14: 00007f212cdb5fa0 R15: 00007ffd728d32a8 [ 30.575966][ T349] [ 30.578980][ T349] Modules linked in: [ 30.583232][ T349] CR2: 0000000000000168 [ 30.587631][ T349] ---[ end trace 0000000000000000 ]--- [ 30.593080][ T349] RIP: 0010:ihold+0x2a/0x70 [ 30.598463][ T349] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 30.618497][ T349] RSP: 0018:ffffc9000ba078a0 EFLAGS: 00010246 [ 30.624575][ T349] RAX: ffff888108fa8000 RBX: 0000000000000000 RCX: ffff888108fa8000 [ 30.632645][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.640609][ T349] RBP: ffffc9000ba078b0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 30.648577][ T349] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff8881189ad314 [ 30.656574][ T349] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 30.664581][ T349] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.673522][ T349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.680104][ T349] CR2: 0000000000000168 CR3: 0000000134cd0000 CR4: 00000000003526b0 [ 30.688131][ T349] Kernel panic - not syncing: Fatal exception [ 30.694675][ T349] Kernel Offset: disabled [ 30.699019][ T349] Rebooting in 86400 seconds..