last executing test programs: 3.823027951s ago: executing program 0 (id=20): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) tee(r0, r0, 0x5, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) write(r0, &(0x7f0000000100)="00ca9999e7839d6822a47e38e39e00ab7fd6c0c1ed8e11474ddf23de739027af234510006878a5ac78e0a68a70660a34425b61b1991664da1ae993ac6a236e82ccdcd6c3281392c850cfb18fd692b92131ecc034d2a79a4f4e13088eb2f6ae60bef524fdb6646288e588102d451f0679e418332657aa824492821ffe49a2ca366c860164ee4ae60ac71bc6daabaf2a06e3101a2c5696208e464ce44ae9f3c37bca93aa31f053cb5d910e4d611e34d569e240f5c1f7b572c50e05aa93281eb8476c75664a7ee9d144710f6f92d003abe492791497b99d7408796f40cd3716e66c379552ce2111d554d4d9f2c9e12049e93bc140d6dbfcc07a50", 0xf9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x5, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000280)={0x1, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac1414300939"], 0x50}}], 0x1, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 3.744160374s ago: executing program 0 (id=21): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000bc00ffdbdf250100000004000180100002800c0001"], 0x28}}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x6, 0x101, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty, {[@timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x4, [{@loopback, 0x6}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x9}, {@loopback, 0x81}]}, @timestamp={0x44, 0x24, 0xe1, 0x0, 0x7, [0x0, 0x2, 0x7, 0x7f, 0xd, 0x1, 0x0, 0x4]}]}}}}}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x62, 0x9, 0xb, 0x4e, @private2, @local, 0x8000, 0x700, 0x9, 0x6}}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, r4, 0x420, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x4000) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x488, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 3.743905523s ago: executing program 0 (id=22): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r4, r9, &(0x7f00000002c0)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4000, 0x2, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x20000, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) 3.596522918s ago: executing program 0 (id=23): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8c53d9c17f0210ecc0d96072000001ea89de2b7fb0000e60080b8787b960001000000000000000005007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x95) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x6) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff7, 0xffff, 0xe76a, 0x2, 0x7, 0x3]}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.484257662s ago: executing program 0 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000000101040100000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000e10000240002800c00028005000100000000001400018008000100ac1414bb08000200e00000020800074000000000140005800e0001006674701d272d3230303030"], 0x78}}, 0x0) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010000001035121082400001020301090269000301092007080b00020108200009040000000101200009240108000a090002090401000001022000090401010101020200090501090800"], 0x0) 2.88017625s ago: executing program 2 (id=35): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0022f00180c2000000aaaaaaaaaaaa86dd694fd2cd01603afffe80000000000000000000000000000fff020000000000000009000000000001"], 0x19a) 2.850457291s ago: executing program 2 (id=37): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) exit(0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000300), 0x4) 2.295442059s ago: executing program 0 (id=40): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008895}, 0x48000) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004011) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000340)={0x0, "0c6a5ea908493ef0afb1c354117efd79"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001340)={r3, 0x9, 0x3, 0x1}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000017c0)=@req={0x28, &(0x7f0000001780)={'geneve0\x00', @ifru_settings={0x1ff, 0x1, @fr_pvc_info=&(0x7f0000001740)={0x0, 'dvmrp1\x00'}}}}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000001800)=0x4, 0x4) r4 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001840)=r4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001880)="b9e9b9ae5cab572527b67600602d4a54", 0x10) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r4, &(0x7f00000018c0), 0x4001) r5 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x5, 0xf, 0x5}, {0x9, 0x5, 0xd, 0x2, 0x8, 0x3, 0x10, 0x2}, {0x9, 0x5, 0x0, 0x3, 0x400, 0x5, 0x2, 0x2}}}}}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000001b40)={0x2c, &(0x7f0000001940)={0x20, 0xf, 0xcf, {0xcf, 0xc, "c671e90668ab65afbf6d079c26c95c7258d64a930b70d1a51e8b29e061cad2238ce9f26216c6932c2ec38778a486dde60849e709c58747a803a799ab5308042c0f152aff50be1d1cc5c9d09f2db1fff7bcb3c201084c7f200548c1f209140ec657487c66b30c6f301ce5a323f8e2f16684b17ad69926cb7670b06cc0af2365eb475dfb662c69b369b174c08394b58851ddf9f7fd3e406ef76fb1e802d70ff6b671a6cd3ab44f4355b74c1a2f7b382992da9162c8faf50dcf8298e5da44bcfb17292407028b118d34f58f20c88d"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000001a80)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x3, 0x6}]}}, &(0x7f0000001ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0xff, 0xff, "cd9911e8", "2a2ff2ce"}}, &(0x7f0000001b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x1, 0xb7, 0x2, 0x4, 0x7f}}}, &(0x7f0000002000)={0x84, &(0x7f0000001b80)={0x0, 0x0, 0x98, "b83ebf09b840dc709f4716d446fd309087001af2fedba828b08c4477391c5da0c4fc01f2b7fe437416c7be6cf6260d620a8f3fa16015549ae5e34bce0bdb153e61d14eafeb7c2d9302c575bc20cff822e510ce434af91b388c529783994f5c54b6f8d450e1a5380e421f43e0bb01dc3f61e2dc407a881c1d4dd0b53894208e0cf03fd79fba203b93148a6de08f59b400e2d363aee336b4eb"}, &(0x7f0000001c40)={0x0, 0xa, 0x1}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001cc0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x1, 0x80}}, &(0x7f0000001d40)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001d80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001dc0)={0x40, 0xb, 0x2, "b422"}, &(0x7f0000001e00)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001e40)={0x40, 0x13, 0x6}, &(0x7f0000001e80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001ec0)={0x40, 0x19, 0x2, "5212"}, &(0x7f0000001f00)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000001f40)={0x40, 0x1c, 0x1}, &(0x7f0000001f80)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001fc0)={0x40, 0x21, 0x1, 0x6}}) r6 = syz_usb_connect$uac1(0x3, 0xd6, &(0x7f00000020c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0xe, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff5e, 0x1d}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x3, "4418"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x2, 0x7, 0x2, 0xb, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x2, 0xbf}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0xbf, 0xb6, "28abee", "299c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0x2, 0x7, 0x19}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xff, 0x6, 0x3, 0x9, 0x2}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa, 0x2, 0x4, 0x81, "d957aa46180baf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x8, 0x2, {0x7, 0x25, 0x1, 0xc, 0xa, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x6, 0x8, 0x4, "1f1b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x9, 0x9, {0x7, 0x25, 0x1, 0x0, 0x7f, 0xb139}}}}}}}}]}}, &(0x7f0000002340)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x200, 0x8, 0x0, 0x6, 0x20, 0x8}, 0x82, &(0x7f0000002200)={0x5, 0xf, 0x82, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "4ac67d85737b4372bd85db7e5399eb18"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x4, 0x7}, @generic={0x55, 0x10, 0xa, "0f8c3e8ab55944a0306dc09320f8c36367ad8a68ac63d4d3c4b4aa37e116d56f88de11fe94937d7d3cd054474e1683bd7120a36ec9b7c57d272a2c5a061b3c95240921a3fed0c076e46f1a345b0e8056788d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x53, 0x5, 0x3}]}, 0x2, [{0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x4c01}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000002540)={0x14, &(0x7f0000002380)={0x20, 0x2b, 0x6b, {0x6b, 0x21, "28148b6e143ce214b87018e13832f239d059009e83421c68e86cddebc757a05f71a8ab6d59fa6cf141cbf254a73e4ce96c8357ecb284628f9ffb8df44e91ea950b990ce9c546ac825bef8f9e019f81b6017ed49412d33a3a1a543b38450d507893070df76f1aa2581a"}}, &(0x7f0000002400)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000002840)={0x44, &(0x7f0000002580)={0x20, 0xe, 0xc1, "22f2d9bb56bf98adfb8b5dc34f5335b6810e52271b18b61419fd670702befcc1c7ad09583d110b12457579740f49a77dd8bd03032262b75819384018b5c3bc68b1fb0bd9507a2c871431d89473108e2b1b3999e400f572e96b1fdd8b8575ae052b16928abc23a56c169d4f45387bef3b1c4fd486eba9d2ebd9a2365ae8bb7599da71b75d3373cd1855c1aba9b1e6ca7f6ebdb5e9e891b7158f5e432aeb10a06dcc32f335de5b5bb2c9a5c290ca7a49ed0d7db05bf283097fb362cd2e7b4909515b"}, &(0x7f0000002680)={0x0, 0xa, 0x1, 0x68}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002700)={0x20, 0x81, 0x3, "abdadd"}, &(0x7f0000002740)={0x20, 0x82, 0x2, "f0c4"}, &(0x7f0000002780)={0x20, 0x83, 0x1, '9'}, &(0x7f00000027c0)={0x20, 0x84, 0x2, "9b8a"}, &(0x7f0000002800)={0x20, 0x85, 0x3, "69df50"}}) r7 = syz_pidfd_open(r4, 0x0) preadv(r2, &(0x7f0000003a00)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/38, 0x26}, {&(0x7f0000003900)=""/37, 0x25}, {&(0x7f0000003940)=""/192, 0xc0}], 0x4, 0x0, 0x1) close_range(r0, r0, 0x0) process_madvise(r7, &(0x7f0000003f40)=[{&(0x7f0000003a40)="b48f6385dfc3e50e7c972a70afc834da9933908570a4e52fffe5b3ae3b5f6406e8576b0cc1ffefbbc6825173449e4d5a64d7c6f7ff154a6ab7b2673ae26ce021f4df6bea9c4c524428b1053855d2adb7c9a990d950abf05ecadc301f538e1560f68432ca21027d4e237dc0fe415e9c667c099cf468e9d332a5b9a6032f4949601654d83c92a657d23425bcb9aee64dd4a334f9ef1ffa3823ef6973536848ea5cd678c521b63479218aa9ed07658684", 0xaf}, {&(0x7f0000003b00)="75d5f1171281677d8a746aaa04fef0fb3b415cba7692d005e1b62a691f4cd6a4028dc896fcfb57236a02bcb7859e8559b34a2d4762069b136dbcd778a273c1caa5ffd4fe8375ef97e807519c15669ffa5f005b35a96b6370c42fb8387e77cefbe98c355743f970caa1f7f83ffce22f67e0c6a8637da185be7e61a9c7bc28553b8c218dcf5116d6de38668c4205545d23d387bead1ea2a8c8bd798057e655303e87e8c35a4f56678b685e518d13c66d8d65f88a4cb6caae4409b8338466aad306125ee55a9c624e18efa9", 0xca}, {&(0x7f0000003c00)="27ebf2b8a21f7e7c5eeec95e1219cd988f9891441458e27bddbdddf7a893501ca7bd5ea992c991b2955663378ca82af3930dbc43459074ea620a1b61", 0x3c}, {&(0x7f0000003c40)="c9ae3b326ae2a1230b475fc2d83d3d106c94c86b44284fd96bd284540e616a8c364dc720ad53e80e8b2653ad260f5f171350703c15cc14d9213fa06e92e2ad9b8ca523b9035f18a2e81f00fad10b6dba7b662704233e479bc3c93ff122ce26ceed40be591e2f7d3d70227e7bc5181d7c3c21d14e27e1a309a240ca5fd502c029b5a98ba01cb626a1c839498c03d840ebecefb64e706e4a26dcdefc63ae5d9f9a079ae494c366aba869cbee91fb17268568acfafd13d59c707cb6af61f34517988b4f02", 0xc3}, {&(0x7f0000003d40)="5dd41562e59f8c3348b7bba1ffb2e9b7b76ae933105603407ef9ee8d6e037ce160ab27a38ec2164c7a4108e6504d37fa3ebaef7d7286828a1bbd8aea173f8664470ec20ddfca1aa262342a46b8d726d2cc7556b00106c60886877082e8a1a8d6cfa6aba0f7410dbc47b761d981c10fcc4e21317b90c7008f584973eac9365ecc018dfbabe98e76f76931ebae6f988ef4762b234f9d8a6f3cb672b86b6162467ff9be2e94ce20a84d37451ac4e4c0e6e6c57a38c746e97d82d0a21ac17b8598552906103e54371cac7b639d7773309ff0b5a916b7", 0xd4}, {&(0x7f0000003e40)="547456528ce9164fcca3f4913f4fc19267951d11d695cd21f8beefa1d9968f88f45623689714dac3bb381a1201742dc29c0cd3c0e08a8f60a0a4afebec411d0619754e0b18c4d33aa865d50c92fccecf8498654f1fcbf6ec3f3bb0028e2ef62067d98d087574b545c247f5849dc17c3eb60f82685ef02a9e6bbee4701026cf7483039e5c15387079465148d3447a5f18dfd51f", 0x93}, {&(0x7f0000003f00)="2db500b94a83697eefe9a10d645e1e382b53d9", 0x13}], 0x7, 0x10, 0x0) r8 = accept$inet6(r0, &(0x7f0000003fc0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000004000)=0x1c) setsockopt$inet6_int(r8, 0x29, 0x13, &(0x7f0000004040)=0x8, 0x4) write(r2, &(0x7f0000004080)="95586491b3e8dd8113da6e93e2e49114cff551a08b756df8dd99e4f38afd9152ac2f4a46b0ace61aca470708c0307690b8929ec916b1a23d010fefbc79910c54966767bdd031718fb935835dd02fb4fc9e352e111f555ca8a670924439e53bbc67c5db5adc60493083c6c27d4c81a74586416ce9347945f54605623dc267354185ce41b309f5ab2c6e1e", 0x8a) r9 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000004140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r9, &(0x7f0000004280)={0x14, &(0x7f0000004180)={0x0, 0xa, 0x6b, {0x6b, 0x21, "e49b7da097d9c4ad850c900e16ace0ee122c943b64e3164aaf6c702592944d7e290e61526f664436f5c12d70c3fc02f9cfcfe1edf343e57899fe08ac47a46e327489d87e4e33bda4ee227e7d5a3c040589f4f69ac8ca3b4814a3f45d63f126cc305375fc51260dcebc"}}, &(0x7f0000004200)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "2af62f3f23de83fc33b57758bf6b07e4b6ed66a120def373c85b1edcd78c4e5596fb8cf1dabfc7ff50474191169bc2186ef65808d2de79498b54c0bf7e91e56dd519ae147df6abe6633af17d20"}}}, &(0x7f0000004440)={0x2c, &(0x7f00000042c0)={0x40, 0x15, 0x40, "26d9b601e579608102ca8812c18c2f769501d4871b87897e1380a91f656a55d94edd3743c4fc44c52062c151ce290f7b5cf9fda3a3ab2bc18873b7cc780a46d7"}, &(0x7f0000004340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000043c0)={0xc0, 0x5, 0x3, "28e378"}, &(0x7f0000004400)={0x40, 0x5, 0x2, "c6af"}}) syz_usb_ep_write(r6, 0x1f, 0x13, &(0x7f0000004480)="a2271f5f992fa76d13209f4465f1929ffbb109") r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000044c0), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000004580)={0xfffffffffffffffd, 0x0, &(0x7f0000004540)={&(0x7f0000004500)={0x3c, r10, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0x17, 0x34, @random="a6e69013b9fa6bc501af775d3c165251112bc0"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x81) 1.956121269s ago: executing program 2 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4", 0xb) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (async) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) shutdown(r2, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r5 = socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) socket$netlink(0x10, 0x3, 0x0) (async) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r6, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x5, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x5, 0x1, "345716cde04b"}]}}}}}}}, 0x1a2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) (async) setsockopt$inet_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "82eb6691dd44ce63", "111311d37f860cf39eeafd685531bc0c", "312b58a7", "6f2c78e8c2c1c531"}, 0x28) (async) close(r0) 1.804360674s ago: executing program 2 (id=42): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffffe8ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) 1.413300176s ago: executing program 1 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)) 1.214774062s ago: executing program 1 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x50000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0xeeee0000, 0xe, 0xeb, 0x2, 0x1, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x4000, 0xa, 0x4, 0x6d, 0x0, 0x7, 0x4}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x25000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) 1.214515562s ago: executing program 1 (id=45): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) tee(r0, r0, 0x5, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 1.198279293s ago: executing program 1 (id=46): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x1}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000180)={'veth0_vlan\x00', 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r8, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x66) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x66) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r10, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) ioctl$TIOCMGET(r9, 0x5423, &(0x7f0000007000)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) (async) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) sync_file_range(r11, 0xf1ad, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x0) 581.616561ms ago: executing program 2 (id=50): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4080) (async, rerun: 32) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf) (rerun: 32) r3 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000001400000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) (async) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="12017002000000088205160040920102030109026f0003010500f70904000000010100000a240108000a000201000904010101010200000724010406021008240201000104020905010920000609050725010c7f0900090402"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 468.230605ms ago: executing program 3 (id=51): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r4, r9, &(0x7f00000002c0)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x4000, 0x2, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x2000000, 0x0, 0x0, {0x6}, 0x0, r8, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) 328.289469ms ago: executing program 3 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)) 183.177504ms ago: executing program 3 (id=53): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) getpeername(r1, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffe, 0x1e67e3) syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x187642) (async) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) sendmsg$tipc(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)="1316e5904b0997ae98bbc8941a6b49ee0a794ad5374c4def8088a032d5e37342f40bea1faf7231a69ec5ec92fe5192db41de25104d311d9321530dd047d04118caaf1f547394a7814be8f7930777ce2b23920520065d281d960c6692ea9c55ee0745ca0a4986af2a22f0ceac", 0x6c}, {&(0x7f0000000280)="831a5a3dc2936c5ddc14da0e0b0c6739fb4b11c59cddda0c16432b3ca1cbc8f8b2a4ef8b42bd9b3ec4d1ed831f5d67f791bf7606fad4106335", 0x39}, {&(0x7f00000002c0)="9ddc5b241c7c47904e38f8ed6c1913b0caf323e8610b3ad93baa5498b2", 0x1d}, {&(0x7f0000000480)="72921997fc5f13ebae8eee74dfb14249628771ddc1221729329ea5c6a26ad16f75e0960bf7567259551752526637750e72e62defe50b7e102d5aee73871a94f742f332695a5e4712920af69cc53a5b14975d9353d673b07a50c210143c03b3a13fe4df6fc420237c2bfa2ce1a31ea735b325240c73988a52060b3e2d45cbd5ae80bde1db25df2bfc505870805a785e36292f0caa8fbcf65e4c4399bb666523833b08330642ab635159c7eae9647ee3ce128bdf1a71e92ba8b4573b70d521a2b6ffb8ddae748908ec226c061a542399dce4648fc22e0da2b6b61d23db8f591b7140acf8f1491b89655f439286bed081132e80ec1b", 0xf4}, {&(0x7f0000000580)="71bf2c813d5e5b7c3c89a15768d10d623267be7bfa5d40cfacaf21af4843b799f96d77f9c85a86bcb1c3debf39497173d68ba0792b2a546a3b3cf58162e6a6d3ec5ad551e1459ad4bbf90cc06a9bccaa17018085f6d15d8410a344bd636f7a68de", 0x61}, {&(0x7f0000000600)="7629f43aee4024c97d948cb6e56c66277cdaf681dd4d1903705a8b812d3a09b325e1b4b460d743e888056ff1050a08f7e803bd62c297f43c4eef3cc5bb475af01f181640f2519578fab40906cb959891883cef0556581e7b76fa4d968300ccf99088296b76cc641dbb5c4f0e3bf6e675cf91292f72fecffaf67824a85d5fb71487663c1a2ce35b33bbe6c013c3bd134641719bbfad5cdc01e6f88ee693afe6f2bda9af9f2ea565b96f36948e23042c8a5e5138698849f1da52", 0xb9}, {&(0x7f00000006c0)="ff0f41ca923e897c7178781961ed3242dbb609b5be9a4809db0e2ad650f9c0776dab9b03ae65dc72081898199ddf2d37222553c3bdfb584a9eae1df52275d6a5e6c1561938c02e51f6a2bddbbac38266176d21a798276c3d9c76b2018ba0abb6e883122dcae7ab65f7bde425fbc7cde4d7448d5b1a5c57c227470432cd94847f1f5ff97b7f0398b4a4b5c95e96ac364e58c63df6b55a732bd850e4e84f6e6584578ea6adcd8cef90453a378e40971ecac27d2dae9cae2f5f1e9cf1719154e6a215463414ba9a67d8af2fdfab1fd6a320f9b6d0", 0xd3}, {&(0x7f00000007c0)="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", 0xff}, {&(0x7f00000008c0)="6fa36c2d9b5b9c5f6753a6f04f8540b7c4d9d5ebbacc7ea8b4f898df0a9caceb77193105de9129dfe0", 0x29}, {&(0x7f0000000900)="5880a6034b16d841dc7a679c3329f00f2d89af66ed383b1d187484182ead809dc25bd00448bd0ac32108", 0x2a}], 0xa, &(0x7f0000000a00)="401b56e0d763152788ed14", 0xb, 0x44894}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') read$FUSE(r3, 0x0, 0x0) (async) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001e40)={0xd4, 0x0, &(0x7f0000001c40)=[@request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000ac0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x9, 0x2, 0x1e}, @fda={0x66646185, 0xa, 0x1, 0x3a}}, &(0x7f0000000b40)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001b80)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000b80)=""/4096, 0x1000, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000001c00)={0x0, 0x18, 0x40}}, 0x1000}, @dead_binder_done, @exit_looper, @dead_binder_done, @register_looper, @acquire_done={0x40106309, 0x1}], 0xc5, 0x0, &(0x7f0000001d40)="9f3c886995c31d7ce3673eabaa94615e96cce45af4bc947eceffe4ef9d87ce146039c3cd3bfe27e25bfddaeec2ebffd219a50acc80708e93716e8dfb3658f0d0d01b866dcd4c25c1dfe2bf3884d649eb4004656a33f577f9442eaa8e84666556d85bb47a22833aac320dc1883d39037346314771f267304b336bfe4e298b2431e303ef59cb66d7d00b8523916be18dd20ec75eef5abdad4bcb9a2931953f572f979d1be3a04dcc4bbbeb8e3437c0a9e8ad0e0948a216aad395ca40419f5d19cbf1c9098fdc"}) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000340)={r5, 0xfffffff7, {0x0, 0x0, 0x0, 0x10001, 0x9, 0x0, 0x0, 0x9, 0xc, "0b42db5bd63de83c3aa257d5cacbffd5883f233f0b87f6b5351474b6d160f02723ff5d29e22e3ffaf1c653394b676dcce534b19779a2f9bba69d5deccdcbae7f", "613ea07445cc6933cf3d865c7dbb3936ca994a1e82d5d9de2a00e3403723ce07c7249ad0d41b4c9f2c1591b903ce92d76299db0ac5073c6ed8f6e1bb384931a3", "2ecf099b702b12d4074b9c5220de14dddd06e674eab285ec0da191a148df67f8", [0x5, 0x8]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) (async) sendmsg$netlink(r6, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001e80)={0x10, 0x26, 0x723, 0x0, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) rt_sigpending(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8000, 0x8, 0x101, 0xd66}}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2c", 0x9a}], 0x1}, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1000e3ff5500000e0000000000000000"], 0x10}], 0x1, 0x0, 0x0, 0xea}, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r9, 0x0, r9, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @multicast}, 0x10) 104.183016ms ago: executing program 3 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x50000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0xeeee0000, 0xe, 0xeb, 0x2, 0x1, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xeeef0000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x4000, 0xa, 0x4, 0x1, 0x0, 0x7, 0x1c}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x25000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) 103.872156ms ago: executing program 1 (id=55): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000001000010000000000002a4f2913efaa0357000000060a0b040000000000000000020000004c0004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000851c0001800a00090071756575650000000c000280060001"], 0xa0}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x30}], 0x1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) 103.495336ms ago: executing program 1 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x21, 0xc5, {0xc5, 0x0, "2dec5a1cd634f0c97f3f63693efc71223904b57faf59c5044c80d4ea48c963a39ae21816474f9480ec6ed8209568d1d5c4f47a4930cb4e4323163a12a939b6fe0c475f8b9ea5d8a2b3975d49dca39fb504f3ea991df1511bd3e463e5aa72c70277575a703cf64594a0f5d8bba79b38b183f960ab25e7ff21fedb80bfec65b8bf8d8dc61129e513a0c118ebd9a73c41f72464f6e40450cf2c404df5f9835b13d740f2a0d51e4d69d78b8889256d926b8fc87719ae4086d158604b9fcb67cf2408f1e672"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x15, 0xd0, "7800fe5931adf3e19415931ca27c67da225e6ac1c5d190d92e5358d0f4d43e4d725e4b7adea08b74bbc1a681168d3a25f2a78bc99807d3f154812753d6bf03e11b2c1266d6f2b64fdbd50766da31a121c431475971eeb5fa8b6c84b026c307c4cc1e90898d591f66b739ddfa33e7b32f130fb9afc0f996e698347659377eadda6a37d8b01bae75706f2344f204e1503218c3a849a94fff567b3b08652f81ba36c36f43218334e096a5fb1089fa982cc4341024e0a9b83bef395421314935a41c5fb906ae0ebfefc04457ac6cb357a4b6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x9, 0x401, 0x7, 0x2, 0xa0, 0x5, 0xf, 0x2, 0x21a, 0x60, 0x2, 0xa}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0xfda7c143}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x4e}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0x2, 0x4e21, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0xf2, 0x0, 0x0, @str='\xd4T\xe6#{\x00'}, @nested={0x4, 0x19}]}, 0x20}], 0x1}, 0x0) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = dup(r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) 63.138708ms ago: executing program 3 (id=57): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sysinfo(&(0x7f0000000140)=""/4096) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x24080011, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000001140), 0x4) 52.359938ms ago: executing program 3 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000580)={@val={0xa, 0x22f0}, @void, @eth={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x168, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x1ff, 0x2000008, 0x54, [{0x22, 0x1f, "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"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df1452683d7ef1d3e5f8120ca548f878"}, {0x1f, 0x1, "782203ffddb1"}]}}}}}}}, 0x1a2) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000100)=0x23, 0x4) (async) setrlimit(0x4, &(0x7f0000000100)={0x3, 0xa447}) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) r4 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0x342, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='\n', @ANYBLOB="4c92900a4a6799a15d56df2c760a4e8c88f1517a06418de3b417263307e5a6bff253aa93934cbf442c720174cdfbd574fa883623138a9c33895a9483338fc32cae24ad6e66190a0bd6693971db61443dca1e410f61713bb58bffce"], 0x0) (rerun: 32) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca, 0x0, r4}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x295, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r4}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) (async) getrlimit(0xe, &(0x7f00000002c0)) 0s ago: executing program 2 (id=59): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x81000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x9, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@empty, @in6=@local, 0x4e20, 0x190e, 0x4e23, 0x401, 0xa, 0x0, 0x0, 0xc, 0x0, r4}, {0x2, 0x7, 0x9, 0xfffffffffffffffc, 0x96b4a5, 0x74de, 0x8, 0x20000000}, {0xe4, 0x4, 0x0, 0x184}, 0x1, 0x6e6bbc, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x4d4, 0x33}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x99, 0x5, 0xf, 0xa212}}, 0xe8) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r11, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 22.309840][ T36] audit: type=1400 audit(1780306315.730:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.310929][ T286] cgroup: Unknown subsys name 'net' [ 22.332492][ T36] audit: type=1400 audit(1780306315.730:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.359774][ T36] audit: type=1400 audit(1780306315.770:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.359990][ T286] cgroup: Unknown subsys name 'devices' [ 22.484852][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.490451][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.583888][ T36] audit: type=1400 audit(1780306316.010:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.607066][ T36] audit: type=1400 audit(1780306316.010:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.619530][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.631964][ T36] audit: type=1400 audit(1780306316.010:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.663472][ T36] audit: type=1400 audit(1780306316.070:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.670835][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.688854][ T36] audit: type=1400 audit(1780306316.070:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.723236][ T36] audit: type=1400 audit(1780306316.090:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.748766][ T36] audit: type=1400 audit(1780306316.090:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.523695][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.530764][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.537884][ T295] bridge_slave_0: entered allmulticast mode [ 23.544079][ T295] bridge_slave_0: entered promiscuous mode [ 23.556443][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.563507][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.570534][ T295] bridge_slave_1: entered allmulticast mode [ 23.576844][ T295] bridge_slave_1: entered promiscuous mode [ 23.648062][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.655206][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.662268][ T296] bridge_slave_0: entered allmulticast mode [ 23.668622][ T296] bridge_slave_0: entered promiscuous mode [ 23.676898][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.683966][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.691013][ T296] bridge_slave_1: entered allmulticast mode [ 23.697251][ T296] bridge_slave_1: entered promiscuous mode [ 23.729528][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.736658][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.743787][ T293] bridge_slave_0: entered allmulticast mode [ 23.749977][ T293] bridge_slave_0: entered promiscuous mode [ 23.759215][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.766312][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.773449][ T293] bridge_slave_1: entered allmulticast mode [ 23.779630][ T293] bridge_slave_1: entered promiscuous mode [ 23.795633][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.802696][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.809964][ T294] bridge_slave_0: entered allmulticast mode [ 23.816177][ T294] bridge_slave_0: entered promiscuous mode [ 23.833223][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.840287][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.847591][ T294] bridge_slave_1: entered allmulticast mode [ 23.853880][ T294] bridge_slave_1: entered promiscuous mode [ 23.945908][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.952988][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.960263][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967309][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.020347][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.027437][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.034735][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.041767][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.058297][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.065413][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.072714][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.079773][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.093558][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100642][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.108028][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.115093][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.130824][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.138213][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.146000][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.154023][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.161227][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.168495][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.175780][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.182972][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.204270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.211324][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.219022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.226055][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.260544][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.267635][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.281584][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.288649][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.298312][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.305384][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.327184][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.334358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.354502][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.361563][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.373295][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.380362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.402443][ T295] veth0_vlan: entered promiscuous mode [ 24.414314][ T293] veth0_vlan: entered promiscuous mode [ 24.425122][ T296] veth0_vlan: entered promiscuous mode [ 24.446449][ T293] veth1_macvtap: entered promiscuous mode [ 24.457120][ T295] veth1_macvtap: entered promiscuous mode [ 24.469028][ T296] veth1_macvtap: entered promiscuous mode [ 24.488514][ T294] veth0_vlan: entered promiscuous mode [ 24.525511][ T294] veth1_macvtap: entered promiscuous mode [ 24.535207][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.593219][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 24.650247][ T325] fuse: Bad value for 'fd' [ 24.673588][ T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.699199][ T328] FAULT_INJECTION: forcing a failure. [ 24.699199][ T328] name failslab, interval 1, probability 0, space 0, times 1 [ 24.722957][ T328] CPU: 0 UID: 0 PID: 328 Comm: syz.3.6 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 24.722991][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 24.723003][ T328] Call Trace: [ 24.723009][ T328] [ 24.723017][ T328] __dump_stack+0x21/0x30 [ 24.723051][ T328] dump_stack_lvl+0x140/0x1c0 [ 24.723077][ T328] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.723106][ T328] dump_stack+0x19/0x20 [ 24.723131][ T328] should_fail_ex+0x3d7/0x530 [ 24.723150][ T328] should_failslab+0xac/0x100 [ 24.723173][ T328] __kmalloc_node_noprof+0x6c/0x4f0 [ 24.723194][ T328] ? __kvmalloc_node_noprof+0x128/0x300 [ 24.723213][ T328] __kvmalloc_node_noprof+0x128/0x300 [ 24.723230][ T328] ? percpu_ref_init+0xde/0x4d0 [ 24.723249][ T328] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 24.723277][ T328] ? tokenize_frame_descr+0x20/0xc0 [ 24.723296][ T328] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 24.723316][ T328] io_ring_ctx_alloc+0x362/0x1d60 [ 24.723334][ T328] ? up_read+0x26/0x1c0 [ 24.723360][ T328] ? __x64_sys_io_uring_enter+0x110/0x110 [ 24.723385][ T328] io_uring_create+0x2e0/0x13d0 [ 24.723403][ T328] ? __kasan_check_write+0x18/0x20 [ 24.723421][ T328] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 24.723444][ T328] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 24.723462][ T328] ? __x64_sys_io_uring_setup+0x80/0x80 [ 24.723489][ T328] ? __kasan_check_read+0x15/0x20 [ 24.723508][ T328] __x64_sys_io_uring_setup+0x5f/0x80 [ 24.723533][ T328] x64_sys_call+0x22c0/0x2ee0 [ 24.723552][ T328] do_syscall_64+0x57/0xf0 [ 24.723571][ T328] ? clear_bhb_loop+0x50/0xa0 [ 24.723600][ T328] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.723628][ T328] RIP: 0033:0x7fa68d39ce59 [ 24.723646][ T328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.723661][ T328] RSP: 002b:00007fa68e23bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 24.723683][ T328] RAX: ffffffffffffffda RBX: 0000200000000948 RCX: 00007fa68d39ce59 [ 24.723698][ T328] RDX: 00002000000009c8 RSI: 0000200000000948 RDI: 000000000000001c [ 24.723710][ T328] RBP: 0000200000000940 R08: 0000000000000008 R09: 0000000000000000 [ 24.723722][ T328] R10: 00002000000009d0 R11: 0000000000000206 R12: 00002000000009c8 [ 24.723734][ T328] R13: 00002000000009d0 R14: 00007fa68e23bfd8 R15: 0000000000000002 [ 24.723749][ T328] [ 24.852952][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.980776][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.002607][ T336] syzkaller1: entered promiscuous mode [ 25.008175][ T336] syzkaller1: entered allmulticast mode [ 25.134189][ T31] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 25.142361][ T311] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 25.151075][ T311] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 25.160607][ T31] usb 3-1: config 0 has no interface number 0 [ 25.166851][ T31] usb 3-1: config 0 interface 41 has no altsetting 0 [ 25.173676][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.187632][ T31] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 25.197383][ T311] usb 1-1: config 0 descriptor?? [ 25.204160][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.214069][ T311] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 25.222138][ T31] usb 3-1: Product: syz [ 25.226500][ T31] usb 3-1: Manufacturer: syz [ 25.231214][ T31] usb 3-1: SerialNumber: syz [ 25.238107][ T31] usb 3-1: config 0 descriptor?? [ 25.377238][ T401] netlink: 'syz.1.16': attribute type 27 has an invalid length. [ 25.391334][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.398546][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.431243][ T320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.439985][ T320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.463391][ T65] usb 1-1: USB disconnect, device number 2 [ 25.502963][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.652919][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 25.659348][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.667987][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.678295][ T311] usb 4-1: config 1 interface 1 has no altsetting 0 [ 25.686315][ T311] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=92.40 [ 25.695405][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.703447][ T311] usb 4-1: Product: syz [ 25.707618][ T311] usb 4-1: Manufacturer: syz [ 25.712207][ T311] usb 4-1: SerialNumber: syz [ 25.793210][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.922591][ T311] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 25.931155][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 25.937462][ T311] usb 4-1: 1:1 : invalid channels 0 [ 25.942693][ T311] usb 4-1: selecting invalid altsetting 0 [ 25.948614][ T311] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 25.957568][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 25.964177][ T311] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 25.972750][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 25.978930][ T311] usb 4-1: 1:1 : invalid channels 0 [ 25.984419][ T311] usb 4-1: selecting invalid altsetting 0 [ 25.990304][ T311] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 25.990422][ T310] usb 2-1: config 0 interface 0 altsetting 134 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 26.012133][ T311] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 26.020732][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 26.027123][ T311] usb 4-1: 1:1 : invalid channels 0 [ 26.032398][ T311] usb 4-1: selecting invalid altsetting 0 [ 26.038235][ T310] usb 2-1: config 0 interface 0 altsetting 134 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.051988][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.059044][ T310] usb 2-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.00 [ 26.068981][ T311] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 26.079069][ T311] usb 4-1: USB disconnect, device number 2 [ 26.081168][ T319] netlink: 'syz.2.3': attribute type 25 has an invalid length. [ 26.086642][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.103173][ T310] usb 2-1: config 0 descriptor?? [ 26.110261][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.113147][ T319] syzkaller1: entered promiscuous mode [ 26.132506][ T319] syzkaller1: entered allmulticast mode [ 26.158370][ T31] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 26.171703][ T31] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 26.181573][ T31] usb 3-1: USB disconnect, device number 2 [ 26.516482][ T440] netlink: 'syz.3.26': attribute type 27 has an invalid length. [ 26.532021][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.539244][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.702949][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.852901][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 26.861472][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.878400][ T311] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.894002][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 26.925438][ T311] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 26.937007][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.951348][ T311] usb 1-1: Product: syz [ 26.960022][ T311] usb 1-1: Manufacturer: syz [ 26.967931][ T311] usb 1-1: SerialNumber: syz [ 27.116563][ T469] netlink: 'syz.3.36': attribute type 27 has an invalid length. [ 27.183883][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.200737][ T311] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 27.228130][ T311] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 27.246696][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.260684][ T311] usb 1-1: USB disconnect, device number 3 [ 27.282466][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.532917][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.707389][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 27.715578][ T9] usb 4-1: config 0 has no interface number 0 [ 27.721694][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 27.729968][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 27.739117][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.747138][ T9] usb 4-1: Product: syz [ 27.751414][ T9] usb 4-1: Manufacturer: syz [ 27.756035][ T9] usb 4-1: SerialNumber: syz [ 27.761451][ T9] usb 4-1: config 0 descriptor?? [ 27.932935][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.084016][ T31] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 28.096283][ T31] usb 1-1: config 1 has no interface number 0 [ 28.102557][ T31] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 28.112734][ T31] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 8 [ 28.122587][ T31] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 28.135000][ T31] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 28.144215][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.152290][ T31] usb 1-1: Product: syz [ 28.156545][ T31] usb 1-1: Manufacturer: syz [ 28.161209][ T31] usb 1-1: SerialNumber: syz [ 28.169112][ T484] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.177164][ T484] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.442947][ T482] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.569150][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 28.575800][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 28.590019][ T481] netlink: 'syz.3.39': attribute type 25 has an invalid length. [ 28.593983][ T482] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.599036][ T310] usb 2-1: USB disconnect, device number 2 [ 28.611011][ T482] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.625778][ T481] syzkaller1: entered promiscuous mode [ 28.631282][ T481] syzkaller1: entered allmulticast mode [ 28.637818][ T482] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.646976][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 28.659211][ T482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.667304][ T482] usb 3-1: SerialNumber: syz [ 28.672231][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 28.683970][ T9] usb 4-1: USB disconnect, device number 3 [ 28.738538][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.747181][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.757517][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.769603][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.798653][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 28.798670][ T36] audit: type=1400 audit(1780306322.220:161): avc: denied { setopt } for pid=499 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.824428][ T36] audit: type=1400 audit(1780306322.220:162): avc: denied { connect } for pid=499 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.884925][ T482] usb 3-1: 0:2 : does not exist [ 28.895282][ T482] usb 3-1: USB disconnect, device number 3 [ 28.902731][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.304604][ T507] syzkaller1: entered promiscuous mode [ 29.310159][ T507] syzkaller1: entered allmulticast mode [ 29.406231][ T510] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 29.415451][ T510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 29.475073][ T36] audit: type=1400 audit(1780306322.900:163): avc: denied { read open } for pid=517 comm="syz.3.51" path="cgroup:[4026532829]" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.806106][ T36] audit: type=1400 audit(1780306323.230:164): avc: denied { append } for pid=522 comm="syz.3.53" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.849258][ T530] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 29.857195][ T531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'. [ 29.947666][ T36] audit: type=1400 audit(1780306323.370:165): avc: denied { append } for pid=539 comm="syz.2.59" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.983711][ T36] audit: type=1400 audit(1780306323.410:166): avc: denied { read } for pid=539 comm="syz.2.59" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.985120][ T540] rust_binder: Got transaction with invalid offset. [ 30.006157][ C0] BUG: TASK stack guard page was hit at ffffc9000dbefff8 (stack is ffffc9000dbf0000..ffffc9000dbf8000) [ 30.006188][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 30.006205][ C0] CPU: 0 UID: 0 PID: 540 Comm: syz.2.59 Not tainted syzkaller #0 29c6904b08c3b1e8518f4116e2e8016f6159917e [ 30.006226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 30.006236][ C0] RIP: 0010:kasan_check_range+0x1b/0x2b0 [ 30.006266][ C0] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 4c 8d 04 37 49 39 f8 0f 82 29 02 00 00 49 89 f9 49 c1 e9 2f 41 [ 30.006279][ C0] RSP: 0018:ffffc9000dbf0000 EFLAGS: 00010002 [ 30.006295][ C0] RAX: f3f3f3f8f1f1f101 RBX: ffff8881f6f4fa00 RCX: ffffffff85aa50b5 [ 30.006308][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881f6f4fa00 [ 30.006319][ C0] RBP: ffffc9000dbf0020 R08: 0000000000000003 R09: 0000000000000004 [ 30.006331][ C0] R10: dffffc0000000000 R11: fffff52001b7e010 R12: 1ffff92001b7e008 [ 30.006335][ T36] audit: type=1400 audit(1780306323.410:167): avc: denied { open } for pid=539 comm="syz.2.59" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.006346][ C0] R13: 1ffff110206cc982 R14: ffffc9000dbf0060 R15: dffffc0000000000 [ 30.006361][ C0] FS: 00007fc5e9e646c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.006378][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.006390][ C0] CR2: ffffc9000dbefff8 CR3: 0000000115908000 CR4: 00000000003526b0 [ 30.006409][ C0] Call Trace: [ 30.006414][ C0] [ 30.006422][ C0] __kasan_check_write+0x18/0x20 [ 30.006441][ C0] _raw_spin_lock+0x85/0x120 [ 30.006459][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.006475][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.006492][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.006510][ C0] __task_rq_lock+0x8e/0x270 [ 30.006526][ C0] try_to_wake_up+0x148/0x1fa0 [ 30.006546][ C0] ? __kasan_check_write+0x18/0x20 [ 30.006562][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.006579][ C0] ? __cfi_try_to_wake_up+0x10/0x10 [ 30.006599][ C0] swake_up_one+0x75/0x160 [ 30.006616][ C0] swake_up_one_online+0x4d/0xf0 [ 30.006648][ C0] __rcu_report_exp_rnp+0x1a9/0x1b0 [ 30.006666][ C0] rcu_report_exp_cpu_mult+0x123/0x2c0 [ 30.006684][ C0] rcu_preempt_deferred_qs_irqrestore+0x1da/0xb10 [ 30.006709][ C0] rcu_note_context_switch+0x1b4/0x1210 [ 30.006734][ C0] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 30.006758][ C0] __schedule+0x1de/0x2100 [ 30.006777][ C0] ? __sched_text_start+0x10/0x10 [ 30.006798][ C0] preempt_schedule_common+0x2d/0x60 [ 30.006817][ C0] preempt_schedule+0xc5/0xe0 [ 30.006834][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 30.006853][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.006873][ C0] preempt_schedule_thunk+0x1a/0x40 [ 30.006891][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.006911][ C0] is_module_text_address+0xe4/0x120 [ 30.006932][ C0] kernel_text_address+0x9d/0xe0 [ 30.006954][ C0] __kernel_text_address+0x11/0x40 [ 30.006975][ C0] unwind_get_return_address+0x51/0x90 [ 30.006995][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.007014][ C0] arch_stack_walk+0x10a/0x170 [ 30.007032][ C0] stack_trace_save+0xaa/0x100 [ 30.007051][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 30.007070][ C0] ? _RNvMNtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB2_8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoE12container_ofBT_+0xdb/0x380 [ 30.007102][ C0] ? __cfi__RNvMNtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB2_8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoE12container_ofBT_+0x10/0x10 [ 30.007133][ C0] kasan_save_track+0x3e/0x80 [ 30.007150][ C0] ? kasan_save_track+0x3e/0x80 [ 30.007167][ C0] ? kasan_save_free_info+0x4a/0x60 [ 30.007190][ C0] ? __kasan_slab_free+0x5f/0x80 [ 30.007208][ C0] ? kfree+0x158/0x440 [ 30.007223][ C0] ? krealloc_noprof+0xfa/0x130 [ 30.007240][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 30.007290][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 30.007316][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 30.007344][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 30.007378][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 30.007404][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 30.007429][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x1b97/0x3e50 [ 30.007453][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 30.007475][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 30.007493][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 30.007512][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.007530][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 30.007546][ C0] ? do_syscall_64+0x57/0xf0 [ 30.007563][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.007586][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 30.007615][ C0] kasan_save_free_info+0x4a/0x60 [ 30.007701][ C0] __kasan_slab_free+0x5f/0x80 [ 30.007720][ C0] kfree+0x158/0x440 [ 30.007735][ C0] ? krealloc_noprof+0xfa/0x130 [ 30.007753][ C0] krealloc_noprof+0xfa/0x130 [ 30.007770][ C0] _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 30.007820][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x10/0x10 [ 30.007868][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 30.007948][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 30.007985][ C0] ? __kasan_check_write+0x18/0x20 [ 30.008001][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.008017][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.008034][ C0] _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 30.008063][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 30.008095][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.008117][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.008133][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.008221][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 30.008253][ C0] ? __kasan_check_write+0x18/0x20 [ 30.008270][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.008286][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.008303][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 30.008335][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.008351][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 30.008382][ C0] ? __cfi__RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 30.008412][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.008434][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.008450][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 30.008473][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 30.008496][ C0] ? __kasan_check_write+0x18/0x20 [ 30.008512][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.008529][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x30c/0x5dd0 [ 30.008557][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.008573][ C0] _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 30.008606][ C0] ? kernel_text_address+0xa9/0xe0 [ 30.008647][ C0] ? __kernel_text_address+0x11/0x40 [ 30.008668][ C0] ? unwind_get_return_address+0x51/0x90 [ 30.008691][ C0] ? __cfi__RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 30.008719][ C0] ? stack_depot_save_flags+0x38/0x800 [ 30.008737][ C0] ? kasan_save_track+0x4f/0x80 [ 30.008755][ C0] ? kasan_save_track+0x4f/0x80 [ 30.008773][ C0] ? kasan_save_track+0x3e/0x80 [ 30.008790][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 30.008812][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 30.008831][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 30.008849][ C0] ? krealloc_noprof+0x8d/0x130 [ 30.008866][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 30.008894][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 30.008926][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x4031/0x9460 [ 30.008952][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 30.008977][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x1b97/0x3e50 [ 30.009000][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 30.009022][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 30.009041][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 30.009060][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 30.009078][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 30.009094][ C0] ? do_syscall_64+0x57/0xf0 [ 30.009111][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.009132][ C0] ? __kasan_check_write+0x18/0x20 [ 30.009148][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.009164][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.009180][ C0] ? __kasan_check_write+0x18/0x20 [ 30.009196][ C0] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xc1/0x260 [ 30.009222][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 30.009249][ C0] ? _raw_spin_unlock+0x45/0x60 [ 30.009265][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 30.009289][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.009305][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 30.009329][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 30.009353][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 30.009377][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 30.009400][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x17cc/0x2c70 [ 30.009428][ C0] ? desc_read+0x202/0x3e0 [ 30.009447][ C0] ? __kasan_check_write+0x18/0x20 [ 30.009463][ C0] ? desc_read+0x1ab/0x3e0 [ 30.009480][ C0] ? prb_first_seq+0x109/0x1d0 [ 30.009499][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 30.009516][ C0] ? __kasan_check_write+0x18/0x20 [ 30.009532][ C0] ? desc_read+0x1ab/0x3e0 [ 30.009549][ C0] ? __kasan_check_read+0x15/0x20 [ 30.009565][ C0] ? this_cpu_in_panic+0x56/0x90 [ 30.009584][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 30.009603][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.009620][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.009650][ C0] ? update_curr+0xf8/0x9e0 [ 30.009666][ C0] ? xfd_validate_state+0x68/0x140 [ 30.009689][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 30.009708][ C0] ? __kasan_check_write+0x18/0x20 [ 30.009724][ C0] ? __switch_to+0xc4f/0x1300 [ 30.009748][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 30.009771][ C0] ? __cfi___switch_to+0x10/0x10 [ 30.009794][ C0] ? psi_task_switch+0xad/0xa10 [ 30.009814][ C0] ? _raw_spin_unlock+0x45/0x60 [ 30.009831][ C0] ? finish_task_switch+0x139/0x760 [ 30.009851][ C0] ? __switch_to_asm+0x3d/0x70 [ 30.009867][ C0] ? __schedule+0x14d6/0x2100 [ 30.009886][ C0] ? __sched_text_start+0x10/0x10 [ 30.009904][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.009921][ C0] ? up+0x10a/0x1b0 [ 30.009941][ C0] ? __cfi_up+0x10/0x10 [ 30.009961][ C0] ? __kasan_check_write+0x18/0x20 [ 30.009977][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 30.010003][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 30.010030][ C0] ? __cfi_llist_add_batch+0x10/0x10 [ 30.010052][ C0] ? preempt_schedule_common+0x2d/0x60 [ 30.010071][ C0] ? preempt_schedule+0xc5/0xe0 [ 30.010088][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 30.010107][ C0] ? krealloc_noprof+0xfa/0x130 [ 30.010124][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 30.010149][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 30.010182][ C0] ? irq_work_queue+0xc2/0x160 [ 30.010204][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 30.010237][ C0] ? vprintk_emit+0x3e3/0x650 [ 30.010257][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 30.010276][ C0] ? _RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 30.010317][ C0] ? __cfi__RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 30.010346][ C0] ? vprintk_default+0x2a/0x40 [ 30.010366][ C0] ? vprintk+0x93/0xa0 [ 30.010381][ C0] ? _printk+0xde/0x140 [ 30.010401][ C0] ? __cfi__printk+0x10/0x10 [ 30.010421][ C0] _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 30.010451][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c47/0x9460 [ 30.010478][ C0] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 30.010515][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 30.010585][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 30.010610][ C0] ? kernel_text_address+0xa9/0xe0 [ 30.010639][ C0] ? __kasan_check_write+0x18/0x20 [ 30.010655][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.010671][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.010690][ C0] ? _raw_spin_lock_bh+0x101/0x130 [ 30.010707][ C0] ? stack_depot_save_flags+0x399/0x800 [ 30.010727][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 30.010755][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 30.010778][ C0] ? kernel_text_address+0xa9/0xe0 [ 30.010801][ C0] ? _raw_spin_lock_bh+0x101/0x130 [ 30.010819][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 30.010842][ C0] ? kernel_text_address+0xa9/0xe0 [ 30.010863][ C0] ? __kasan_check_write+0x18/0x20 [ 30.010879][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.010896][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.010918][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.010937][ C0] ? _raw_spin_lock_bh+0x101/0x130 [ 30.010953][ C0] ? stack_depot_save_flags+0x399/0x800 [ 30.010971][ C0] _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 30.010998][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 30.011014][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.011034][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 30.011062][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 30.011085][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 30.011104][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 30.011122][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10e/0x720 [ 30.011165][ C0] ? __asan_memset+0x39/0x50 [ 30.011180][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x2c5/0x720 [ 30.011221][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10/0x10 [ 30.011262][ C0] ? avc_has_perm_noaudit+0x2bd/0x360 [ 30.011282][ C0] ? avc_has_perm+0x1ec/0x240 [ 30.011299][ C0] ? avc_has_perm+0x211/0x240 [ 30.011316][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 30.011339][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 30.011364][ C0] ? __kasan_check_write+0x18/0x20 [ 30.011380][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.011395][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.011411][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 30.011432][ C0] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x1b97/0x3e50 [ 30.011456][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 30.011480][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 30.011509][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 30.011546][ C0] ? __kasan_check_write+0x18/0x20 [ 30.011563][ C0] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 30.011597][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 30.011661][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 30.011684][ C0] ? kernel_text_address+0xa9/0xe0 [ 30.011706][ C0] ? __kernel_text_address+0x11/0x40 [ 30.011727][ C0] ? unwind_get_return_address+0x51/0x90 [ 30.011747][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.011767][ C0] ? arch_stack_walk+0x10a/0x170 [ 30.011785][ C0] ? stack_depot_save_flags+0x38/0x800 [ 30.011803][ C0] ? kasan_save_track+0x4f/0x80 [ 30.011820][ C0] ? kasan_save_track+0x3e/0x80 [ 30.011837][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 30.011860][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 30.011878][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 30.011896][ C0] ? krealloc_noprof+0x8d/0x130 [ 30.011913][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x920/0x1aa0 [ 30.011940][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 30.011969][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 30.011987][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 30.012017][ C0] ? __kasan_check_write+0x18/0x20 [ 30.012032][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 30.012055][ C0] ? __kasan_check_write+0x18/0x20 [ 30.012070][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.012086][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.012103][ C0] ? _raw_spin_unlock+0x45/0x60 [ 30.012119][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 30.012150][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 30.012180][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 30.012213][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 30.012246][ C0] ? __kasan_check_write+0x18/0x20 [ 30.012262][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.012277][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.012294][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x11f1/0x1aa0 [ 30.012321][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.012336][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 30.012358][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x127e/0x1aa0 [ 30.012388][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x10/0x10 [ 30.012415][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 30.012445][ C0] ? __wake_up+0x169/0x190 [ 30.012462][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 30.012492][ C0] ? __kasan_check_write+0x18/0x20 [ 30.012508][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.012523][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.012540][ C0] ? _raw_spin_unlock+0x45/0x60 [ 30.012556][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 30.012577][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 30.012603][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 30.012634][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 30.012652][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.012668][ C0] ? __kasan_check_write+0x18/0x20 [ 30.012684][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 30.012716][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 30.012748][ C0] ? avc_has_perm+0x155/0x240 [ 30.012766][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 30.012790][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 30.012814][ C0] ? __kasan_check_write+0x18/0x20 [ 30.012829][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.012845][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.012866][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 30.012889][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.012905][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 30.012927][ C0] ? __kernel_text_address+0x11/0x40 [ 30.012950][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0x10/0x10 [ 30.012971][ C0] ? stack_trace_save+0xaa/0x100 [ 30.012991][ C0] ? __kasan_check_write+0x18/0x20 [ 30.013006][ C0] ? _raw_spin_lock+0x92/0x120 [ 30.013022][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.013039][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x113c/0x5c20 [ 30.013058][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.013077][ C0] _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 30.013098][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 30.013116][ C0] ? _raw_spin_unlock+0x45/0x60 [ 30.013132][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 30.013155][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 30.013175][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 30.013198][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 30.013217][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 30.013240][ C0] ? kernel_text_address+0xa9/0xe0 [ 30.013262][ C0] ? __kernel_text_address+0x11/0x40 [ 30.013283][ C0] ? __kasan_check_write+0x18/0x20 [ 30.013299][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.013316][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 30.013334][ C0] ? stack_trace_save+0xaa/0x100 [ 30.013352][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.013369][ C0] ? stack_depot_save_flags+0x399/0x800 [ 30.013387][ C0] ? kasan_save_track+0x4f/0x80 [ 30.013404][ C0] ? kasan_save_track+0x3e/0x80 [ 30.013422][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 30.013444][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 30.013463][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 30.013480][ C0] ? krealloc_noprof+0x8d/0x130 [ 30.013497][ C0] ? kvrealloc_noprof+0x59/0x120 [ 30.013513][ C0] ? _RNvCs2tVsXcF29le_11rust_binder16rust_binder_mmap+0x78b/0x11f0 [ 30.013532][ C0] ? mmap_region+0x1579/0x1d60 [ 30.013548][ C0] ? do_mmap+0xb85/0x13c0 [ 30.013563][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 30.013581][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 30.013600][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 30.013619][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 30.013643][ C0] ? unwind_get_return_address+0x51/0x90 [ 30.013663][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.013683][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 30.013703][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.013724][ C0] ? update_curr+0x50c/0x9e0 [ 30.013742][ C0] ? update_load_avg+0x506/0x1990 [ 30.013762][ C0] ? __calc_delta+0x280/0x280 [ 30.013779][ C0] ? dequeue_entity+0x33f/0x1380 [ 30.013801][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 30.013822][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 30.013840][ C0] ? update_curr+0xf8/0x9e0 [ 30.013856][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.013878][ C0] ? update_curr+0xf8/0x9e0 [ 30.013894][ C0] ? xfd_validate_state+0x68/0x140 [ 30.013916][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 30.013935][ C0] ? __kasan_check_write+0x18/0x20 [ 30.013951][ C0] ? __switch_to+0xc4f/0x1300 [ 30.013974][ C0] ? __cfi___switch_to+0x10/0x10 [ 30.013997][ C0] ? psi_task_switch+0x59e/0xa10 [ 30.014018][ C0] ? _raw_spin_unlock+0x45/0x60 [ 30.014035][ C0] ? finish_task_switch+0x139/0x760 [ 30.014054][ C0] ? __switch_to_asm+0x3d/0x70 [ 30.014070][ C0] ? __schedule+0x14d6/0x2100 [ 30.014089][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 30.014107][ C0] ? __asan_memcpy+0x5a/0x80 [ 30.014123][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 30.014142][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 30.014163][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 30.014183][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 30.014203][ C0] ? schedule+0xc5/0x240 [ 30.014221][ C0] ? futex_unqueue+0x136/0x160 [ 30.014244][ C0] ? ioctl_has_perm+0x39a/0x500 [ 30.014259][ C0] ? __kasan_check_read+0x15/0x20 [ 30.014275][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 30.014291][ C0] ? futex_wait+0x2ac/0x7b0 [ 30.014306][ C0] ? __cfi_futex_wait+0x10/0x10 [ 30.014323][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 30.014346][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 30.014365][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 30.014388][ C0] ? do_futex+0x32a/0x510 [ 30.014409][ C0] ? __cfi_do_futex+0x10/0x10 [ 30.014430][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 30.014447][ C0] ? __fget_files+0x2c5/0x340 [ 30.014466][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.014486][ C0] ? security_file_ioctl+0x3e/0x110 [ 30.014509][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 30.014528][ C0] __se_sys_ioctl+0x132/0x1b0 [ 30.014547][ C0] __x64_sys_ioctl+0x7f/0xa0 [ 30.014566][ C0] x64_sys_call+0x1878/0x2ee0 [ 30.014582][ C0] do_syscall_64+0x57/0xf0 [ 30.014599][ C0] ? clear_bhb_loop+0x50/0xa0 [ 30.014618][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.014643][ C0] RIP: 0033:0x7fc5e8f9ce59 [ 30.014659][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.014672][ C0] RSP: 002b:00007fc5e9e64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.014692][ C0] RAX: ffffffffffffffda RBX: 00007fc5e9215fa0 RCX: 00007fc5e8f9ce59 [ 30.014705][ C0] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000007 [ 30.014716][ C0] RBP: 00007fc5e9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 30.014727][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.014738][ C0] R13: 00007fc5e9216038 R14: 00007fc5e9215fa0 R15: 00007ffdf3905578 [ 30.014752][ C0] [ 30.014758][ C0] Modules linked in: [ 30.014768][ C0] ---[ end trace 0000000000000000 ]--- [ 30.014776][ C0] RIP: 0010:kasan_check_range+0x1b/0x2b0 [ 30.014799][ C0] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 4c 8d 04 37 49 39 f8 0f 82 29 02 00 00 49 89 f9 49 c1 e9 2f 41 [ 30.014811][ C0] RSP: 0018:ffffc9000dbf0000 EFLAGS: 00010002 [ 30.014825][ C0] RAX: f3f3f3f8f1f1f101 RBX: ffff8881f6f4fa00 RCX: ffffffff85aa50b5 [ 30.014838][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881f6f4fa00 [ 30.014848][ C0] RBP: ffffc9000dbf0020 R08: 0000000000000003 R09: 0000000000000004 [ 30.014859][ C0] R10: dffffc0000000000 R11: fffff52001b7e010 R12: 1ffff92001b7e008 [ 30.014871][ C0] R13: 1ffff110206cc982 R14: ffffc9000dbf0060 R15: dffffc0000000000 [ 30.014883][ C0] FS: 00007fc5e9e646c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.014898][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.014910][ C0] CR2: ffffc9000dbefff8 CR3: 0000000115908000 CR4: 00000000003526b0 [ 30.014929][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 30.024305][ C0] Kernel Offset: disabled