last executing test programs: 2m46.720207524s ago: executing program 3 (id=539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x2e3}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003d2000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000015, 0x0, 0x4000) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) ptrace(0x8, r3) io_setup(0x400, &(0x7f0000000500)=0x0) io_submit(r4, 0x0, &(0x7f0000000300)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) pread64(r7, &(0x7f0000000080)=""/178, 0xb2, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0)={0x20000000}) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x1c0, 0x1, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_PAYLOAD={0x6d, 0xa, "e3f0b549965bd23dea7cf07abbcc0ad6fe2e2e32499b08defa70e4fb87c035c4585aa65ee9e8c138711d609c72f467ddde25d6c41f2aa69997be9733c7ba28c16f6ee8622dbde0c55d067e2fbe51b46e631cb69b789bf5d347c5bb770d830d6b1e8a2faec15943e15c"}, @NFQA_CT={0x8, 0xb, 0x0, 0x1, [@CTA_LABELS={0x4}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe452}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xe7, 0xa, "7bf3494c4556398ecdc24e3c4c8ed8df17b6053279a06f9367c44ebd54c8d93dfcf8ec9e0b5352c5198e0b3e580c922eb7ba40029f6ae2374ac96da27241c5b2370f016b35e62c336a8b729c96bda73002b8f294347aad8d9345e666589a55080049eba0fac532dd345afea3b6213205259f00f7cab3c17de6234b35d3829f99e37ab32824add91184f8b590b198a00894ede8c97b46975dedd504b52633fa0e41d60ae5d7362a008368b64174644ecbd46a6be617599a94d5e62fd73f548c1295aab1674d4f3ff05aabf182811aa1a895d3e59b19f547b58c4f3c5977fe2f028ba8b7"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) mmap(&(0x7f0000a09000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x0) r8 = socket(0x25, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200016d9bffffff000000000a"], 0x18}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) socket$inet_udplite(0x2, 0x2, 0x88) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x50, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}, @release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death, @acquire], 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 2m46.696577685s ago: executing program 3 (id=540): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x11, 0x8, 0x0, &(0x7f0000000680)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) (async) sendto$inet6(r3, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xfdef) (async) sendto$inet6(r3, &(0x7f0000000280)="46a3864e29bf22939044d846d352770b", 0x10, 0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000001c0)) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001e00b90e87497000000000000a000000", @ANYBLOB="6c72022b8c", @ANYRES8, @ANYRESOCT=r0, @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES16, @ANYRES8=r0], 0x30}}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) 2m46.646859725s ago: executing program 3 (id=542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = dup2(r0, r0) (async) mmap$binder(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x1) (rerun: 32) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="04015d8b43f6070000007be008a54d0000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x0, 0x0, 0x0, r6}, {0x0, 0x2000000000, 0x0, 0x0, 0x840, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0xfffffffd, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) (async) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa) 2m46.646627195s ago: executing program 3 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) setuid(0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4011) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m46.645093635s ago: executing program 3 (id=545): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000500)=0xe8) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000380)=@sr0, r2, &(0x7f0000000580)) r3 = socket$inet6(0x10, 0x80000, 0xffffbfff) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = syz_open_procfs(r1, &(0x7f0000000180)='sched\x00') r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b343"], 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r11, 0xc018480d, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="200110418ae99f4206"], 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @broadcast}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="03062fbd7000fcdbdf25030000000c00018008000100c1d7e644b35a02b51e4292dbc4cc334d2ede53cb46058db357b6ebac3c6938f92e96a85706be837cc8cfb2d7b875bbe1f0c1f75c6b606f4b5542ff", @ANYRES32=r13, @ANYBLOB="0500030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) sendto$packet(r6, &(0x7f0000000080)="3d7103bcd6c97f0661659f", 0xb, 0x20000890, &(0x7f0000000100)={0x11, 0x5, r13, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000001c0)=0x200) 2m46.084502789s ago: executing program 3 (id=548): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20341, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)='A', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d75134e9989e31e6ea0707380494f5d89f5d9a1772e0a34a8ddf134bf6ef391ea335160b082143bf9f5e7241d2263714a08443f6bffac24d4e50006d66a22348b91970473673b2d7048a1ced727537f80b2182fb11d862abc5c939d9a272469ff34ec84e2f66cefddc7ce47eeddb68ce18bbb817f37ca06be002cc74d816db4c297bd0f6d7d903234f699c5280df7ca8da72cba7914b93148c24221eb48f7b921562", 0xa2}, {&(0x7f0000000380)="ec6d267fdd630e2ee9f53b79b8c30ad8583ba798994cc678829de67524421217ab82eff10c7d2e9177e5ffcfbcf63fe6a9dc9a7c0d9512c7f92705e6439d47f69a170c8821f6aeeaf9c56a59082273a737a009d6b2af0a596281cc511f0af1", 0x5f}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000000000002bf400000000000001", @ANYRES32, @ANYBLOB="0000000014000000000000002900000043000000020000000000000060"], 0xa0}}], 0x1, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d75134e9989e31e6ea0707380494f5d89f5d9a1772e0a34a8ddf134bf6ef391ea335160b082143bf9f5e7241d2263714a08443f6bffac24d4e50006d66a22348b91970473673b2d7048a1ced727537f80b2182fb11d862abc5c939d9a272469ff34ec84e2f66cefddc7ce47eeddb68ce18bbb817f37ca06be002cc74d816db4c297bd0f6d7d903234f699c5280df7ca8da72cba7914b93148c24221eb48f7b921562", 0xa2}, {&(0x7f0000000380)="ec6d267fdd630e2ee9f53b79b8c30ad8583ba798994cc678829de67524421217ab82eff10c7d2e9177e5ffcfbcf63fe6a9dc9a7c0d9512c7f92705e6439d47f69a170c8821f6aeeaf9c56a59082273a737a009d6b2af0a596281cc511f0af1", 0x5f}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000000000002bf400000000000001", @ANYRES32, @ANYBLOB="0000000014000000000000002900000043000000020000000000000060"], 0xa0}}], 0x1, 0x8) r3 = dup(r2) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r6, 0x0, r4}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) (async) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) (async) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 2m30.741377124s ago: executing program 32 (id=548): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20341, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)='A', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d75134e9989e31e6ea0707380494f5d89f5d9a1772e0a34a8ddf134bf6ef391ea335160b082143bf9f5e7241d2263714a08443f6bffac24d4e50006d66a22348b91970473673b2d7048a1ced727537f80b2182fb11d862abc5c939d9a272469ff34ec84e2f66cefddc7ce47eeddb68ce18bbb817f37ca06be002cc74d816db4c297bd0f6d7d903234f699c5280df7ca8da72cba7914b93148c24221eb48f7b921562", 0xa2}, {&(0x7f0000000380)="ec6d267fdd630e2ee9f53b79b8c30ad8583ba798994cc678829de67524421217ab82eff10c7d2e9177e5ffcfbcf63fe6a9dc9a7c0d9512c7f92705e6439d47f69a170c8821f6aeeaf9c56a59082273a737a009d6b2af0a596281cc511f0af1", 0x5f}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000000000002bf400000000000001", @ANYRES32, @ANYBLOB="0000000014000000000000002900000043000000020000000000000060"], 0xa0}}], 0x1, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d75134e9989e31e6ea0707380494f5d89f5d9a1772e0a34a8ddf134bf6ef391ea335160b082143bf9f5e7241d2263714a08443f6bffac24d4e50006d66a22348b91970473673b2d7048a1ced727537f80b2182fb11d862abc5c939d9a272469ff34ec84e2f66cefddc7ce47eeddb68ce18bbb817f37ca06be002cc74d816db4c297bd0f6d7d903234f699c5280df7ca8da72cba7914b93148c24221eb48f7b921562", 0xa2}, {&(0x7f0000000380)="ec6d267fdd630e2ee9f53b79b8c30ad8583ba798994cc678829de67524421217ab82eff10c7d2e9177e5ffcfbcf63fe6a9dc9a7c0d9512c7f92705e6439d47f69a170c8821f6aeeaf9c56a59082273a737a009d6b2af0a596281cc511f0af1", 0x5f}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000000000002bf400000000000001", @ANYRES32, @ANYBLOB="0000000014000000000000002900000043000000020000000000000060"], 0xa0}}], 0x1, 0x8) r3 = dup(r2) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r6, 0x0, r4}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) (async) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) (async) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 2m6.781288196s ago: executing program 2 (id=1081): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x8, 0x0, &(0x7f00000001c0)=0x2b) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r5) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x10001, &(0x7f00000004c0)={[{@stats}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@stats}], [{@euid_eq={'euid', 0x3d, r0}}, {@appraise_type}, {@euid_lt={'euid<', r5}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '.\t\x00\x00\x00\x00\x9aMs\x9a\xb4\xf5PW\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'binder\x00'}}]}) 2m6.778848686s ago: executing program 2 (id=1083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_mrelease(r9, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc010000190001000000000000000000fe8000000000000000000000000000bbfc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="01ddb076de22e6777811233a6acf64e5224fbff79008a2e7ef38db6f330016f180488903d3229380be643595595f0c467e6c3085bc6a89f111dc516b53a195904ca0cb7e8e572b136c25a0b9496121107fbb4cf2afd50708c10ff49d89ba316267cd6f27fd59b4aedd6a605691f30d93d008478a3a7c6a8180e7d560db945ad3834c24b1a4a197", @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000100000000000000040105007f000001000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000040000000fc000000000000000000000000000000000000003300000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000002b00000000000000ac1414aa0000000000002937ebad9c06f7b10752d3"], 0x1bc}}, 0x0) r10 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r10) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0) waitid(0x1, r10, 0x0, 0x4, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f00000009c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000f00)="f48ed488b79c19020b12c847a2b2bd6910d9e9dde186c648318dcc169dff39a3990286898efed16221dab719543a20fc028c0d910d5faa93e1681842fa9c6d5fe96a168e3320464326fbfd8a129db351f0d5f9a328a4358e5c0334de68436dd2b6c2502f45f248d2a7f0ebaafd021a8b306e63dd563b492896f4c09e6d5dc738b5bdc947bc7d209c1b04445155481e33fc1ef3329e34267522cae90ee707e7cbb9ca3065d53f2e86949582355a7b2cca99e1504cb2ff0c6ad674e7ceb632351c38ff3aacd22c389c43bcfeb4a4cbec9d41813f520eace7e54347a8dc9e44cd8687a97ce0ed8a2ced68318e8b8361db585ed78e80b2f7af86e42d9b8bf132a33d851e", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000002300)="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", 0x2af}, {&(0x7f0000001040)="81dbdb5d382f075ace28f8675cdb5187ef5adf1ed88c9b9b41e8819c468fe2f74985fff24da25e93f80650209e1ef12817c3eb786c6360174e9de2208590c64bcfd190b72cb7505ca3509d8af28474650ca8f6fd3aca94ef8a9d0108f50551fe866333ab91f863e49da80d92d0a93a05baff8697b9ab53e2378c673a256f3dc43decd225d0f127a6d8a21a6e8778067e1813d6b85cc2840544577431a22d513f4e1ae94166f84be351626096ae1a5e9c56015fb0629c36ee1000d2d10672f52276e515810135d7a2bc30efec64985953f94a6d10182f30ed91fc4bb6f4e91feae786028cf83036a69393829735cc0a1cdad0e23e6258d14e690c25105fb6cf842e5206294e5f7357b32dda9d24d4dec65e42afd3a433cb72a8e91a0e2081519ca38cee845ee7886d46a7f3837565b65c470b8a712a1a86ac4bc70bf7817c98230999906a4733e17856f375ad057049692dc2c51cc1c963ff1edd9861477666e3e757e92119b25b465a12b067b60691a0cce424f287b696b06970120be20b2c1b2c2a8b39e0e5b6e0722c6dd05f87b9f5d09a6130060c66d28db5da617e98640eabba6bff5a30f86d1e1de31549a0d2dac3c8c706b025c6a20bb222932c1d77ba39607a9e6c2323ded6e2f67e1466e6cbe04d119fe22a49ac233f85b6974ecdae64b577aa8f1c927d509cdaa12d9e8cb7e4f4b027e9bcc0a4d211c3b384d9b7eb573d675a383f05324b1e5b096ef4f9d5fcc51ae2b43fe6c4ede42ea79616e36f472d4ddf7d8e3ee4f232d1288ab2760d1a00b0b55c2f9ecb9f6378e949dca81967c894722b95f9245a58a4948bbe3682b8d9290d6fbcd15e46dbaa315757d6cb440920fe4cc82432281745f53d99fd563dc676c1aeb44d9d2edcaff7f798fedb26ccd77195e5498eb7b991b029d43444df17a3f89d40fc057e544df26126d289c660518de8566909222b40cde5f2fd71b7a2b8a5c9ef20830a2025d91b9b9f583ef77358ff1309634a1945f33d662232b9c0f83349bf065b6b3e1d1bee512a23b7b272e19009d1224f3dae0c2e9dcce5c13a6dd36c1421d6d4c5cd7dce7ededbd2cd35172035a0120632a871cde3750eecb7edcaf66f2d15331df0627c641770ba12471c178be1a3f4ddd19340f069dcbab43d660fae7ccfe13ee9c511a99c5d931c8ca8e693d5325e21faaeb653f983ea4907f7cbfde462307f68044b5a4364d5bf02776ce214848b2178ce05361e350df4dcc531173bcc1c422665778e35a0e32b4ad4a836229345225f255caef546e6b13d018c1b929556c2b1122dc1f73edd6f82ea2b7fb953f8f4015263ab90004c8c7d12574c5688e7bb8c88434cd5e4c8a0c3d15725357a96bb88dbe0ad3c6c3d62eafb0f95c473d45d2427fe69824e5c44f9d819ffa07887d80f7ca2a746fabe19e379eef6db5fd7299f2ca493ac78a02c3ac804658240f3b7da171ea159a1a399d3e53ce6d7abc528c6d48f459dae6f66555aed1a4d03f8299b04c8632ff7bdccb12a46613704e27a9368e10e9ece91325fcc82a12bcc6cbce016639e61805143447665a637a84421d47e876d3e51c151a44036d02f2f818b89d7f944303f2af0a1b7b653a60169bac90fe4e9a665625ad35a536ffc2efeed6ab017ed9b4fa193e1a7044701c2f6bd0ca80205c75d0f7b236997853fecedfb563cd16344af17067cf1a6fddd002ea22659aa3a76d50a6c8ac9db7b7f7e9f2cb0c92141a313ab3f617186a5c2645646b37f74de88633915d47fe158247c2d650d4efc33ae6266003d971915041fcdd5ca70a375310d5b0fa6cccf5700fd8a18f7851fa204631a58d103b724e88d611991f5b3bef9979917f2d3f9464922c50a1b033bb177566f679a9e1af475b94215448a56f287e7aa30ad4133188387429086c106adf35f09ff06cbe1a478ff913a3aaf944179334e875b64ab05b93ddaed93a261fd7c2a08af1b9baf63e6624d71ee063b11b4eb52720cb94297f69bde3a4d09ff4ec6601aa0c0e308cf3fdd6de8b27c5ab44a2f6c2d3cc73ad97a60e3f16bc2fcfc88b1a71672ef677ce7706b55ffa19714c81a6f1a7ee9d4ba826921a7702c90c96f83c9e632bce116489bc0c691275856e2863ff5140aa8a9380786b66b102e69246f147716609b73ed7a3ede783b10f3718cd1e8ea6816d369fc13ce272e1c33767d99d922fe1826dfe7b817a03ad1f587cc04dd2a2828ed9f7e48e9f571a2f02b37fa83120168bdba1d7fea321a6dbe00d49a6840b39ebb6cfd915191e7319ded45008ea99b380f775bb1e2bd2b55b225938c43c80a3063e46cb76c515850ede31dcd216d984b83b17e65a1c122e8feaceb915d0909b5fd67de8ce976b6696a0971b7039c531a7a9cd91571a22e189e1d5893796d4384339cab9a4dfe161abb359c72b1a3a16e7182bf82b86ff3303a4d4a034b57a8c096ab68fcf52df8e6c754f20a10d1343c7abceb23eab65515362fd2de9c40852bdd4547882b76a814f4a6831a209d1852a96b2fc5925f6e15f5c634ea38e0aee5db60db75951a499e55a388934eda9166f4d3979f3a28d268920880ea23a3fe7998a47f1369e1c17b7508320c664fb1cdeb51f5c4fc6969502b53644cce02f45a8d39e7838d392e4e1b2066d5d7005ac9a2da39d25cc2355c63aa4855a75a78f3380d0173a867dcce59163fec5d467f2f19f045854862051749857d35c0f566de94a5778981a4fdd460541b532bfc24fd2bb6a9f4d173cda8f052b3a16545cf6b9e02df699c33a9dc0cfe265799454ee7fd322de5d4fd935894ef8323ce154fa727ae5cac155bd1f0ac6555f91fe6070ba6f9f9daeafb68099ab2a66517c914cc32169a2670f4b6a4db9749729f7f49556bbbb22f3ba7d05d5f2313b056e7d7f2cc094f2030545b6a9ea76e4a5c27482acc4bcc307537b25e666f12a21137ae4ce85df43e1066b89cd816d1661ddf8415c1336545a59139185efb48282071f75a06f2d7ac300c97d3759b67db622e9e68480878c6fbc84922bfa7f24fc040162d329fee08fa8bde68d3e1442178a5739fd320c61914e239d155261b1d16866f6cce97392f7aba05f54280800047c15e2499b22461bb9c12bbd535ef8493de9adf6a2848fa86b8a56b953652414a007ddfe3f9b3c127c8885b01a08a6920a475b2cc69e99a372d4d813bb2bca5916660d259a514fe6d3843cf9c98f6b303299c04738586e251a064d3120c69aa016be48f690b2b0bc99f0c55c1332ac3dfe2047cf11655002d51c28c92fc96c454f85549748b8b0790238596b7e8abb9a205e7dfd63547c15e6e1d79b3597a237445742808d481def5657befcbabf46ea7a20b625a08bc90bc4da62dbee11568c638c3a1c536b7690c9e228d9aa985a0bc111479c8237e0ee145669fc6483a412952a70b00c93e2831cdf3707053cc68c5761f0b4352332ffad55eaeda8832816dc7545abec45c3599e40b3048a6cd4e033c1beb5d8035b19aeaea2ddc3c0ac784eda73dbaa4fba5bcbb150816de8bfa9bc3f4b5ece56d5b290396e172418ce8b0a0d38ea312ef32fc3c449706b8e77c9af745f578d02f96a26a0da324b8eb21b02726c8bb1c7a57551e495525c6adceefd1d782914875c73f727b1853e88bc4082eca01ae1ffc29fdc0a9577b152064daa4a07df7d037a162611432fb0de2caa0a9118ed8cf0f31bdc678b82b5abf92ed8912a73ea3faf1d3ab0a5786151d94eef0f8761d0d38f7388caa0650d2926c509e2a90aa1457e8be6809c03508f4e2c7043be0c49454f34593a4cd0ed9eb4b79d79e8f68f5084e8fe969cc8642bae948498be13ea898d8c033eebcaa22b152f264225b4d95718d4230b780ccb0822f7da1a464f4d646317ae40daad5ce8bca089b1bd9dda9acf5309b23e8e95a0003a00f62c7d5b2fe813d62d5ec078d5fa36f1f0ca226dd4169ec0231861887b92f3ef81bdea89c32ea32b526e2d8143c7e004a0791f00417000ffa89de8b7808f8cf6cb0ba7b44099c90c7ce7cb8de51ab687ee1966b98ba34574a41e50938bab1ca3b76f9230ccea5daa631b1caf2c0e5f33cae84145fb160d221998ac49504c0fed1187bb36aaec391df01cb8bb1d8fd77f26dea8d720d6549fb183d02e797e764a6e79e1b361ce80c44fec0a9e0c197e7afe312150c56b261630c572789fc5f91ed00a763e9d3fdb40ad834777bb0628b54abe5eafb3954266761ac9ec08b778ab606e89205ff7d2c64be512a51503f41911b6c8772e42877e183d3f2100fb51cafa61ba31cd2ddc3240b943bb5c2c579c01aa61909e2f8579c11b075390fcc6bc37aca668313da4df732792de5d5bd6b5ae4795fde4eccd51de2021fe3dbc16ca788c135ecaad4bb25029fbd1772a4bcc3229d9fe99f32a027a840be44c6014b3c0d84a85acab6709be2489ef0b454a91031eeca52a27110e74a5569b513710c1a046aa18eb6067e1b77bf517164f392d554aac32832ed350cf754b31776e12c41f41c098a9c0b26f3539452224b718b0523df6f53d87f492076face8bab6240f93ebce1253d1378d91b38b2e61beae9a3943f4a5edba7a9be625f49940f9e5384cac9f222f372e1d16db27f302cdc15b546b1fde9edbee53525f3591f3418437d72e001db662abb1bae92addd5c888dbb3f0f10ac6b61c72cf092d7f69e0b0e05a1594fb2e2a32c4558bbd3268c02318d1fc760d711550b0478fe29b015535f0fbed84fa60fc9b1e2c7b8d1abade35c8781656ae1e2db6fdf0decfabd1b12b31e8bf74f9e6bdd957613b0ce1de8352158df3462eac4b7b8a222facf5720f34dc4eed98bfc3dd52637ca2369a63413bb13abf56eb88fc60108f90337596a335f4390d0efccc5c2b50489b03205c3df5f0dd75fb4c4bef35568d85ccc0dd416ad02fe47eb3ef9b2257ad241ec8f709e9fef7d531b93850f351264e0cdb6a71abb011e47aaf9216c86aa8aee1122928691c06e583c00883c6efa0e6f9916179182fd5362e719d2f902e4f5ced31bb61cc8278f88ec578dc88ec773d61baa3ded768e62a2f8e4aa1f6ca061670d87582a5fbaea8c548806090a8df2f67b5f9e16b83775b1cc5f553db9ca56a3507aef56e57a7c454a34ce87aa34b6b9c8e160c99303a325813dbfa5ff7b7449a1bd8294d2cdc5a5013296c279a62689eadee953f99b2345b775c511afeb1c50dfa5158b4d313e4db7dac913f30939e9064567a1bb44d5e0e2198c4aeb03a8b61aa9fd26f782e030b98eff66e95e4448f5f9070f1c6c9280ba7f7b2f8f38b0764d81627d26def1c9998eaf099a6fd03bf700007db9a4591ee2d29a042bacd1b65231aa39ef0face170dce757797eff3e058703bec885dc78e3d80bae30c18e6192e488a296a6dcc2b6bf981b1a78dec35a7e7df71506e371ad2a6b06a2aaff26bc379426910bcdad01d48b53dece00aafc1d26abae2a83ddaf48fbe7db77407127a83bb4cbffe8729bba1e3a72debdafc2859233d3575a7e21b15e89a359c66497246aed85d212b4d1ec9e86d1f00d4b3f40c8909974261457e4d5c308d261fab076e01be01863841dc8cbd11628ea4600f5f9749b0c098ef4c7a37af6bac20b95b329c4293daa40c2c4f4fc2af9f0a27335bcb145827a30ce246c94dcfd0e1365dd2f2867fba0f46b7e3734d1b13280ce6e74af4215b77cc5d764d64064923ae22b14bc906599c8d771989b0c24b0080fbc65097c80df9bae369e9c5b032e3244c86762cca0e5913ca2cc6116081e5a6e66fb35a595edc801af72be96ecbacb53ca", 0xfff}], 0x7) sendmsg$nl_xfrm(r7, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, 0x1, ["", ""]}, 0x14}}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendmmsg$unix(r2, &(0x7f0000008e80)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000300)="209b35251c98dcd7aa8fd70d7ce099f0f7c0", 0x12}, {&(0x7f0000000740)="0fd8727441cb2c93a7111e7598c6e9a56064a8bf9b806f8b042e075a6de7528e36524905b250efce679cde8501f1f2fd576ce27718064b83fd355bf94d3ee44ac8f26de2f9098340286a5381b26055726d4e1e2f0c60e7bea2dc90f2f1186d03ac47049ea15118a669e7dd6a30a3643ec8ab9637b907aab082a5acaad0b84ffc95129ddfc01d603f215397496a30017df5394bcc95ce6dd016ead9e6b7190bc5b7027cb8b09064f296cdd70b0a5775a68953307a5c50344ad70a94dd635164c8fe906eb09cf444cece6bbcd7f104bdd7cc3fe389afc3b79025330977fd5fb234", 0xe0}, {&(0x7f0000000340)="b7b524945b91f328f4d99827a1ee939aaf6d602e5e35a56271573eba959676a795acea857fef2a5b2c7635eed4e958d37ef65696ce7be42f84265baa3d91e49569f80c834f767abdd804fad3f61830ffeda03cee7470ab7a0a372b301efc308bc2b29ae3eaa39fff8b36d540c2fa3fd18fc97081956363d422e59882a43264de27d1f44f209911109108e398b58daf1b263222107cdbff413c777721d06e4d6700c0ab198702edf84e3f6005f0c814a1f50ad48986dfdb9cf86b7a", 0xbb}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r4]}}], 0x88}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000002040)="d24217c2b485d10e533f04e9103a2b8bb74c9217f7311341bf874dffd942025da6044d411aef00220a223c6db7e2bd09e11a383ec97a7b21e170b188edc7eea0d3979c9b4de52c0f8eac02f5e6b1e75e843256fecea872330042b4fa4597f834085ef8b5e4964911ef46ea7d8afe5be9ea0e94d51dcf9e140fea69af3861e3e47e0dbdcf8c9e170acf9afa67e06330f0277121c20faa02480a", 0x99}, {&(0x7f0000002100)="c46c35e414409726a425eb5a1a58ca43f078e44ed04652406e3dcd064e233e6ebbff33744718c11bc92d9f7d9b813b5128cd03b8a605f100d20ea7c5050320d2c62a29f7e14036624876dd26b07b3af3a384469b1232bc3fc7e30ce789c9e7037dd9c9f00f33bd7f16b3a0a286ca002228bae5a8e64090d97213b0c7e77d2da03b890374b3bedd2bdf6a438603b96f2ea78a4f161ec7415099910b92374f5d7d930ae96a0a3ca4ab3c21a7dd73afc5a6d0c92ff99c0fb895a0256ffc7a", 0xbd}, {&(0x7f0000000e00)="ee8f0b8bc165c9dfdb2fe3dcc81aeaad04ca5ea5", 0x14}, {&(0x7f00000021c0)="8705f4d76df93d3995c2c1944aadd40e6a5cc9537e72489aa01e8d77a0f582ecc28af48e4619b4f27de1687c4a9e2e8685fcd2adcb9c3b93ca9022a8e69d35df7e5bb41f89fa252add87553e058db766f7d3bc3341e852d2fb287e9f6ac2af64ce55e39d1566b57ddb8059e7adde33b5cc9933c74fcba105d6bd3d1026f2f49a98a9038af430766630354696e11d579717d3a0b90bd0c817db03514af508ba72e8aeaf24", 0xa4}, {&(0x7f00000025c0)="025571efa037a9e26ce0f5b67d7022a7eef79359314d6922cd7786f48ec32c3c7f5b5e08dafd410d5ecd093848eee4732c3eca83521325780656c8ec18ea2b69a9bc653963023cb3d16c1b7133c23c7e367c4e191ac2d8547dc111ef70a3631519c4ef062704aaa381bf770616e19035abf0777fcb7564e613d8e5d8ea35ef23d088670c2e4b37921e39a8b7031df31caad92fc8c6017df42d552d6f06ad0e5036d9618857b04495eac414a5c50ed0e4a2b5dce23f2914218d83c772d1422c52020b5d0c621e777f7ff06d6ded6db0611c5d3eb04a0e1e00f6c5769b7bd2567f5fca42f2212467891b3fbd94", 0xec}, {&(0x7f00000026c0)="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", 0x1000}], 0x6, &(0x7f0000005840)=[@rights={{0x1c, 0x1, 0x1, [r1, r6, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r6]}}, @cred={{0x1c}}], 0xc0, 0x4008010}}, {{&(0x7f0000005900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d40), 0x0, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r5, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r7]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r1, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x4000880}}], 0x3, 0x24044001) 2m6.353173439s ago: executing program 2 (id=1097): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x1013c3, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x11, 0x1d, &(0x7f0000000000)="a17475b14a8aa0d918af2cf17ce3fd83537520f6b7467bc586a69c49d2"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x403, 0x5, 0x40, 0x0, 0x3, 0x8000000, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x9, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x42, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x1c50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001704abe763a8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000600)={0x0, 0xe, 0x4, "a9136ed6"}, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1e0, 0x32}}, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "04ed"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x40}, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a00b"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x4, 0x4000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) syz_io_uring_setup(0xe46, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100)) 2m5.769864883s ago: executing program 2 (id=1098): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x2}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000024c0)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x5, "59337916"}, @local=@item_4={0x3, 0x2, 0x3, "0876a3b6"}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c9c"], 0x8) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8931, &(0x7f00000000c0)={'tunl0\x00'}) r5 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x8, 0x4, 0xaa, 0x9}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xc0, 0x5, 0x6}, {0x9, 0x5, 0x80, 0x3, 0x10, 0x3, 0x8}}}}}}]}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b8120500000f23c40f301b8154fea900c1210680320000c4e28dc182fd3f0000c8b950020000b801000400b9a608000066ba6100ed26b87a9feabbc9c9bbc9000f302f300fc79d53bf0000c4b9e16dc38fe978c7d8220f01c3", 0x95}], 0x1, 0x52, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) syz_usb_control_io$sierra_net(r5, &(0x7f00000001c0)={0x14, &(0x7f0000002240)={0x20, 0x23, 0xf6, {0xf6, 0x3, "5a5d615756b548499825815d82858d2706060ba935dab64ef6635755716a7720b20dddf73b57854f0087b9b2f79389d8eddffadac75b13b043056d72df107a8be8a0709d857564051a3d3d1c267ffcef8548b0094fd18c08cbd8ce6cb11674b2229607d8d0da2b3965045713dc64f471632dd0353276120a29afbfcd97db72200f25a9185c2ad92ad5ee1042c00c4f563dc9c730f96cd91fe75f347be67fd6cba86e52445da58b8041157aeaa9d192f0819c3f347688f38646778be55aefb7e34b5487f77e32d0badb77609a407f5b100e94c62e8bfeae34d6742672204f71e86c5119d7169a9b1cf0359db054f08bb46eaf3501"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000002480)={0x1c, &(0x7f0000002340)={0x0, 0xb, 0xd6, "ab2d5dda35ad63aaf1c5d38922760f9179472a7c3d897c3aab6bdcb38a472b2fb59b3ac6184346c20db2efe345830dd1b7674a258a343b854de46487cfff133dd6abeb779df86e674c80c1a853017b6ba6e1d022d4336fba155eba2998d443f6952d2c8811d435cad5241a0e32b6776c0f60739312fcf289980bbed3f8742e47a7e1adf07f1649ee7c3dc6e3c71f4cc029f32c54ac081079b5f12a982d6cac8e6fbe36f8dd78c5b4199a9ae8ee8effa7522a28cc95f3de964704f19345058c919e1d5814e0f339c1115ddf24bfcf124dc87995bd1909"}, &(0x7f00000047c0)={0xa1, 0x1, 0x400, "f680605785918bf59a8b963f6040e20f20ada03faeed8922db04b19889304b6bfd0c79eb96a287a560f7b016bde55fb8ebd623b897ace2f8d322b96805b2ce2a44432bcf0efdf32f2c6422c8e244d82815de24d29347d14eb7645c4a016025598d9ca6a37b80aaf11ec677e5c3bb0a75aca74a6e2689ab9886626ab02334c1aae219ff094ac504cb622da55ac096c01c69645f738a91edf98581fa7c4b557ce2021149893bc66c961a258aa686ca767706999a5487de8aac4f20d09090d4d61dad63693c8351db6730497b2b0500fffda233e7fef9b45a488da3a9f3ed78d6b0a172b9c9b9390c56823ba9f9e850fa74d427c5bb1897ba4ddd26acbb665ad03707f780e9a93d22b789d77e2658aab01183267acd31a478eb2a157115152be95162640b45cb2e2e9e9cc5ad822b7ab2e8aa318202de1de8ff314651a0cea030b440e3555688528859586d6238c416c162f172ce297e42d467559f85713acab02942ecf4be6eaf3706eb67b94dd6b6ced48e8fcee9c39f135f9653039d9676c5baa259c58b51d1b60973bc10cd5b14fa9433048f0e9ac30c2e48a0b721956c029cd0f4ab8ba2402d27c09dc4403e58086bc64795575bf32eb6bba459c62cd3afdbffd598ad915d897624ec183ef7dd5498c60165e5a82a33ab8a057ceae51b5fba273a072af58ee286d09f77dfbdc29cf1bed4283035c89a7fea94389b83805bb847cd9bf302bf79683e5d3cf5aae397971bce17ccaad3304f0c36df8e9f0e9cdaaab193265ba162aee3078e37c92fc6833a50f20bed1e59566b31b98c19727fa47bf0370f937c3a411411398b61dffe10d800b268a451cb1d177276b7ab0cd2b8e352ca54ba09386ef2ecdfe5b21ddad0d7e22ca2abf8d2120b9dff437e2221cce1087a658b4a457357466ac182f52fb090c5115d3833c9892b2c2415802a3f3ed85ed49e0c8ef239936a6999666d94177bf4c73ed2738ee48c1de8c6a164b296086dea11d706e54c7d33891d8136485c824944be373df610d98e9d3b73b88736b2c50bafaaacf596d92f603c80a638c91e86ae92bce2886707cb1bc23539a59e02085e64f7a15fb4a5743bbe66f9f86151e22123d28d6cc8880eedccc9810145fa850a9b1d863a61988762e58f9f0c3e0e92b08cdbb6e9ef518dfa7bafa0e068f5f319ac44fa74db92152ba1dc13e654cb41ab4fa64eca1867c1cda0e53117050758e95ca5c70855f49598cf625c1e55de5d1ffbf833f462846401f5119b6e3c35e228f8d1d9976ed8b91f2abd310accfd630a5982744a76b9a9e63861b3aa7093e51c99afc08c22f78e65e92b418d30b1a68852e1e1f548d918dba3641697d7036fb336ee097a7a4c466abe7c70384125d656aeb1ea657ba081d11f9446f0eab548d4958fee4669cce95cf9506e4dbb3a41d4a572b7db3d369051f5a8824308"}, &(0x7f0000002500)=ANY=[@ANYBLOB="60c48270464dfa435c194fe8000000002f125e2ec01c86174b89e9"]}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x0) (async) r9 = open(0x0, 0x40001, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x24004040) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) sync_file_range(r10, 0xf1ad, 0x2, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in6=@private1, 0x4e23, 0x18, 0x4e24, 0x2a4f, 0xa, 0xa0, 0x20, 0x6}, {0x10ad, 0x7ff, 0x6, 0x4, 0xcb, 0x4, 0x2, 0x35d}, {0x930c, 0x9, 0xe61, 0x9b7b}, 0x8, 0xfae, 0x0, 0x0, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x32}, 0xa, @in6=@remote, 0x3502, 0x3, 0x0, 0x9, 0x2, 0x80000000, 0x6d}}, 0xe8) (async) socket(0x10, 0x3, 0x0) 2m5.637228834s ago: executing program 2 (id=1099): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000280)={0x0, 0xfffffffffffffff2, [0x2, 0x1, 0x3, 0x1, 0x1, 0x1ff]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x8000000, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x4008) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x13) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 2m5.636495274s ago: executing program 2 (id=1100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0x114, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x3}}]}, 0x114}}, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c6be7797a6c2519b6018277f1899c7fca62c2fd04cbfbbcc7cd000000000000000000000000000000000000000025b2c975666fb398ef4f49f3adef48e87a90b62c1351b898daf1b0b194b66bdda60e71c5100a5a790e2c2d0c51e755e2ebcce0305687c7c7e99e65c150b3a2b3a30307338b3facb5faa69315727b19cb2afa3570af13e0a41b71464a5a57653d2a34c908cd2200"/158]) read$FUSE(r6, &(0x7f0000000740)={0x2020}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000004900010036560000000000000a0000800000200000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xb, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r10 = socket(0x26, 0x800, 0x0) sendto$inet(r10, 0x0, 0x0, 0xc011, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m50.869322325s ago: executing program 0 (id=1261): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x802c2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 1m50.867299165s ago: executing program 0 (id=1262): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9c9046, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = accept(r0, &(0x7f0000000080)=@hci, &(0x7f0000000180)=0x80) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006e80)="325dd3e449af4b26d8a093aef75eb476190a9f16401c82f7482b4649d5af4805f313a77dee31d96c54077084b5ea4bc7e3d5695a4d1359de0b3f5eb5720614c295c1f80a82f10660cc9ac42d267c07717bbc1d740965b3b48062ecdd327b5cbd4b93fa4c226e6eb79325934162b0105f2151d405f42010f6fec60343970309bea4fe32b4abb4d216682d8911d59b93ec39b3fc066b452b8c5419a144804f1a5cfeb63c6249e0981da9a310480649c7cb26ea09626a7df3c8a3393fbd4058c3eb9599507400a4107247bce003babe98092426ffed71ec30070353bf1162c2009d1fa857cfdd9d33b3f03d0707b9dc1b6df6497b20170b5f625edd4690ceab7d7885b33a02ed6836649a932f8e9a9a1e72af0c43004acd07bec69543799448edb7714c1d29995b83e912827f22d0239e4439c8f94c9c8e68c5dbff7646e7861b06137fe24f4c06d51a4a9cbfa43ca4fc8bd753a2c151c9bd8c32f612dd96dc0e33ae4022515ad2ebcf0b7db8f78d943f77c5cbaca7088ee425d0188e1e8d5503d269bd42e2c32ec50275802733acec3cbc6a56c47584f96d9c6389ed70084bb4f33584f41bdbf23b96ff24b2c686396c44ffd5a625dcbbfbc60fb6fa1809d145cab0b99fcb5a47019c0ca5cb0c70bc83e5328d6431db1a352d6baf12c85a099a1fc25aacf03a78523bc034958a73bc3195aa7d8708b1f1a90c02c1327b13d2e155b040c0e5fa4c508f07bfb852e1ecdab8e63fcf1f8da030d43df17c5981350d5026bc6c2f9b7a5d9bbc19aad4a429a3b75d470735b71ec3442f2f1fe4646edba88917a07b2b916fd1ae6a60ea007c745b7bfcb1c44dabd52b5947c3380b593e2fe8aa38ec719cef952dc6a4093b4b52273e4d57626eddc934fa52c68da7d599338a6c499ad8e2fa392c419d4308d81ce7a7d2178ff61c0dd042d3359939c1afd27d636147668b59393727b714ed10bc30af53f8fe818fa6bcf8eb02e441e2f7b8d8f921c9934a738feba3f75cc81a31671c85bf94ec6a3eff6310e9620f797a28e465420fe6ae309e5af4c0e864edf6d4d3bf6118366604a754627816da8d19304ce7dfd0e94a0f53af130939c5da9d0840b9a32b63ee15f3c9477df9aba4d8705236b4d0c39d1278911df436181a3f317626a9dd1bcb8160ee7b2b0c97a5c6c360b516e5d3ebd2b4813736d8c07fdbd2f10537b7878bf4ceaef5fb2f957ef4fa0eb5fe9f2c830f6fbf88d55dd22acced3b2bab83b9785ab52a703f38522903c4735b77f1bef1c6dcb67a7497b1451ad3fb83b9e62940a7d539a38784c924df30668a226496cb37576c0177723d354c86251f25b31023188c2f4a044ef0fb436b71d2a453d16c5eb239b0e38f79815abc8484a02a57787043a779c185b1ccec9a245e6782c2b16db37f8a43964e4b35e57fa9dac709544b93284865c93318e02b59c8db3d0a72fc04cb0628ff5046d21806f30cbc8ce5101e0aa92b120b0aa54ec2e085fd72648a22999453edb52e8a0afeb6688feaf9ca7d27a3e64f40b33a018c2216e4566e06429584059ec9c83a7140e7bdc8d77df7d576b3b349aaa2d58b13b1ea3204d81afb8d6747dc1b7037da3addd58c405c584c613be25793df7af3a9a75b46fd171417cfd545e461f6e1600b7b902f0f8236f60bd65ed8058ceda4ea9bffe47798125640998e88003e7f5a2d174e6f0f6bf7919e303983cb7c6535315e0c965000b84553d4544099432281b9c83512309aa15904003e8a6513b4e529cd1f790c52b19d8444bcca5dceb3946d3cee5d9fd082af86b5247d58fe1eb249e0f04052628d82badf5c52d9f049907f52c65cccb12ef4efceeb6ae147feab1227bca0070074fbc20106f42c3c72c1d481747168b064ee3283f7636630566e6f40c54f3d1a972572e78c4a3c37870dc1ed3a4d4a5a155ba40e9bdf2be2f9875920b8a612e6d0a7e880ed782348ab1545b6dc4d201acce4420a61f280f3e08911eead982952d5e96a5672fa72d211f019528577127f770392fae1dc8928b941152260641ae236b72d42ae1f57e15fdfa92253866f6b66c14b3bc92406f5388d102cb77bf31edab619748e0bad9869a060dce1c60fabb6e3b6920ca6699c0795dc30b9f304f67757d37998f0d080e6af68e2b348bab428ea400bc986ee3cfe191f8fa08429d727efb0fd2762b3a48444d26e9401636aefbdccbf2d4c4e1d5bba6223a598c82a6468a5d35e65eb3b03822fb352141977441b758387b7c119d6961f3b043723d563e379761946af9b16d5174a07cfa389aec06dd7b1bf631d63e1d59c2a45bf475ee162cd0deb26fdfbff7a66dd458b2305da511492f883c9976ef5cab34fb2ab3c657896f716210afede3f7a7d9892f4d0fc8d50a5b3adacd49d133036dbe518c10d889898aaa5c399fa29d2ea38e112b7ad6ae08c59c22c6d72909455585e8a67f3289317e4943ecf736be5b8f7d84b6a3bf2fccb21eb278b1248bb23dfdd24c285b8fb766e9d4bfd12116d60c9753aed822d32529d7dbe24d14b68c62be1cd0a6884cf93cac56e972b316efeafef2068c61fe980f3de18dab6a2de05e4011caf429120ffc68f709f14829736d5336a846869e45dc478a0202c504f2d5f66cb14c860324de48574ae44d30d99a307a584e9999df47144cd4e5fb6088a5931310b699fc92a8bafacade2339cf8f6f7ed3b4eb04d38ee3325a80d273706e445ff1fc7dc5708bf35f58a6bef6a3c1b0016996fe86ff95e4778796e1f05c9bbb32a1942e4199ae1eb35ba958b4e7d8136fa74661b2478c48d9e4bf31be179fd1eb2baa02d5859b0a26e42b2286de175722a6eaafe898698d875c7e161197ee14aad35d49164f73df4fc18a565ce32355e5527547f9ad80096578c123471d27babacf11ac5dc52a97fdc9dcdf49eee3697478e56a34df39abffefca858e9e9f2cdcad7823aadf42e8b47b93a9384a5148fb70065d59ec7696396067c453c8b3bccaac157e201d42e445e4f890f0498e7138eb655d42ab93c21848ecdd37392c27a2f9434e7c000a716c91121ce4a09eec421efd828cd1578a80a661006d834c1215b56e1210eb3232a37a8d8c1794b205b891b944a630fc9d90c8ca9a7f4a160f064fa13e602b5a8fa5d4e91b827d46d4461ea861a95d9fdff4e169031b5933dc895dcd63428109ec1889dc559f8270520238c0cb4c050dc793adc387ddcbd9421af90e640f6a0a7a3d754075bdeb110d51aa9c3253718a5eac8992bd69caa184e2062b0ed18457dc43052b6e51faab38e63595cfb513514d6ec4f2e6149f74dc0ff3bb6e9ba3287d88e71678d10e1c13d3806c97e06cfe056175a02f6b6638239523cb9614c0d64b460a917eaa5050075b92def8a349f51ec68309af1d63079b41ef73a2468f47eaab8b0c03bd22381e3e2f5b31d68b4dfc0f07fb4ffd32f0a0b736380f92794a5e9481fe9a83cad672ba5c4bfc57fd22bc34b63f828eed9b2eb70527cc69848953e87505fb74097a905744d93b0da73fa7548bd04994380069f50ca8a4f452088aaac31492c2aac8a2b04e38c246c1743c46a96c5fc60dd6c0440ea6964bc7f86d203a6cba2baf7bdaabb1f78563954e71f1c45730d259a643aee5d8eddbf1803dba55e2479531de013c2867ed465dcd21b0f236d985f1cc865480386b55401d882199f779c43bf6a772fa9394070530bfda06fd2810cf12b6e730d982e7644c3dc6ebcbfd029ebc1d861a7bc53394ca3bc4173dd89bc21b1ac67d4f2cbdcde1e2e89352439e00cc7c042749a881803b37da76008aa25c4f04cba65306112964026792b1238a5e8bec20bd9391fc190f73befc4642533777a12ecfda6c09aad168a13d473fdc0d5ed40a1c627a67fd5691acd5523d34a0312d89aa93554b18289c387698b4fa23144278e29f25765bdc99310bc372261ebcee581e5059bd790417a6c43573e488038f620d435cd738658925fad4dbf441ae821a5ce057a0ce24e456eadfe9ae192dec624757723b6bd1751f1358fda0d91e675ef99baa6e4049d5bb9d57c66bf643decf254b74605317b125f521d5459d7e0190715e930e017f6e251a8cbb1331cc745183632cf461b2f8c769a925c7a423ae23b1194d499b610d40ef758fc336faf1406c4cf4401f1b50b7db8976d302dcdc6fcf95e55bba0dc42ee0eee188be602295284e33730f2ec57817b21c99c272110fec53a852c264558e407ae0a2b33ed333fdc87da60eb9a7fbaaec6492d398a0c37dcea909afe8022cb8e90f5f6cbe6f5ce4ec79d0990427a423c695e7ead3db88b0e221aeb0aa611b2f96574d0c91674a941ab856d02538cde646b4518fa6ba9499c9bce1609c4e0e2be658e57ee1f5d6f387fdfee065797027347411be8312f90aec5bd443e67c4833b62ba8798bcea597cbd27bd27c808f27ed2dd432c697dd65cb874c68b047eb82bf4d74b16829c38806c2384c8371227c4b5f04c9756b6a3a614f2e849f6d4ea9b14e6795b55fc68b9e6f9b06cd21ff87b8fb719fcd5f7178d792446d974ceabf554db2c9aa5fc703639cea8c69d7db2c190fa0ab6557536ebb25a7bf4cf5b13414c4bb45e0083b8bb1973d1d0e286cbc2906b2bdce0550732a764b87e1924b5dfe7a756f5facc81d26503934d7b2783d438b6bae718a15affafda3449b7bba555740e463d6f4891c52ee3aae34696d6171e98ec4adb037250024533848d676151622b1b053b0c6f70421ba37f2392350692af9169c7ba06a48d306277cadf018dc2ea736010c05883062a7a0ed27881ba5ec3a5557e3ed05f1795b7fea2344b49bd1a5d7c2289520c292cfa1f1e632c06eb39f23437276b3efb7805d30da5c0265f96832a5d7b2b1bcacaaf009ae8097a75227760d144952360cafd4ec88bf475e24f1b56e8c74cced37f56c1ebd320c849adb30db4ac125a6619e69ea8ee257d73c317d2fc6dac68baf875aa8045f6a69dc68dee403b944c8fb229e2a5f07e23bfc4dadaf0e61ad776a8556d8a97dc4c4c18d423bcf6c6df2820a370906a3672ecc39dbc106a253e36e0cc20a03837c71e1136684e6e0ecc4a5a0af03c2b9d85224accda7d1bdff92a6231cd044715289b8f65a51173e95a01dd1923a2ef20c6fc887b785f9508ce4296c0a4f10d1b6aec4197b0189cce7a9df23521208571e62f2e8dbcca277f7be585980b8b8099b78fd515c9256c26eeda3f35bfff0022919442281291a760ea1ee97f5d6a0f1908687a7eb55aee2af0d80f0917c41e246b34fcba334a2bc0534b1df2c657ba09c652267b85d4be2305429a0b5a40a4fe15a094c336aaed2d7f7deae21eb1d0b3da6dbf5a6e889f14c05aa3416c7f6ae00a8c1722e3eba9f57b463f1efb019d6c0edbd8c0b0d2087493fcbc82c93c358c302879b37a202c2cffaed0e741ed422bc66df77af2314655d798b2d49c7cb4798312d36f37eb0629273f1c2bec7607ee2ef04e26ac2f854d875ee2e14bf2b926fdcff1845f7292454e5d942b954a26c3587cb6709319b995b7a876e0786097629079327f07f9aa61fd5e48d67cb7f69c907f1c7868c03c7781c119092572edd2fbe2aadb50d695dc68097dbf59513507b44026acefcc984bee1b8061493c6b9ddcf2dbdb8f75b271311b521ddb8f46d9822fda5238711b8bd8e8021c95faa203c7e1afa39e0e26cb4d313db929be6caae94f92c9fb5e152b28f883bdefc472f71371f0eab8e9b4bade8a0aa3dc5489e4552c0477f32781cd5545448ee687f6124f5df72ea9771ed64713527e6e9d5dfed5dddb87682732869219956f902f13bf9f8984c97660deaf10d00d5d54e1725a174aa0c2af728053b8d969fed0dcf42badf2cb2817934a5dc430b3506be2ce057316a414405538726d6f0105bbff8098b01c197280fd3ef7cc97759780b0975e81a1b09bce760777ac57683812a8547bbeda4bf6f683a036a2e4f2e70d6c88156d8a4750edc3bfefde4523a0624972fb033dbb9e0b85d4668e85dc24535758d6891d8a8cf42b442d0e2351743d60012d08b0bc961c60f197705d800da8159359939cf678c90a3514a58c67fcb92ae0fd3e2c78a45aa2be00491277e027ffdd7a5f8ef0a644a714a592ed942168fa79f51952e737c11ee8d41873380ae5a191bd6575d97c02689b2319e11eadbe129b739f6aa111315554b2047cfbb32161e3ed2d5ee4f25216749e09b31279dcbfc17de72e6c83ad5868fb99f8f865006d48030685b37bfb1f07dd5981b27d8da16efe2dedc91e356d8237213e5642f3fd2b4605a7960ca3c753168f7e6c1113352a1b705410e787d59f2eb6c88355ae1996836c0d00f8267cd1279485c53ed9c79385e45e0fa7c280080d4c7270b8eb880cca78b9ad4eb7c41b8c0e04655484eab9e84fbc9d92859f8c418c57f9cd2c34fd91ac2429255659d873588a67a58095e88e3c3d78464f5ee79d1d224cc14eee32943d64d86771f2eead1cca73c11d939cb96c3b697f1bf71845c0e50b6fb1aed3fb24f3a51fa9dca9c0bd1a8fcd0488a4589e1419778b2933e855579b486b2abd85c231339d6f47817daa873aea779358f65f1e489ddc06d053291357efce65a417aaeba560ab2f25bd41dd87dfecf6809760feb45cf21af64ff1acff201beaa044dc0975324568f31450b6ade77206bdcbd089710d6d817664e69ddcc1f2868f41661116c05a0828580820c75331a34443753735188c70d9955848d63120a7cd079b88734ffdfbf3767d4d782cb86b20bce7922b2d4cf6bce724839ce6051c483a8900576c088d163899f58f0c7581b0bc6bf71b1fa9f78f7a574b71741208aa5519848d660a0e4dc5e341c3ae0ac0ea35d1f903e4ed45597c33f8eec618766925d7f7c75daa5f242769115a49d0b2dcdcace18ac27f9b741a1d3e2837e398e238f5948de282c03dd875bd5354734c27fcb13ad68e3f2e48cb8f226862e9550db8844fc48d44f1ab6341bd35bfe9475abd6a9123677e94043d307ae76c807eb3e50d397ab6c48e3e10311059bd33b75d3faf7e1aa788991af7914b6ace4855f3eb29b57cc424e1207f18f917b880b4037770d394c418c204c2510085c8c07aa64bc929b23137934e33160ac563d38fa6faf565a7a8bd7f3214b4d38f6b2ae4b226647e9ecff4a00c4b659094af1b2f38b98f9ae7df41a7bbcc011c4a3d250c041cc96cef419c7a1f23ff1d894a3ca68e8fb4282c50e6131c9a3854faae37178b62ef7e48baa908d16781984d73b1d25eb9e174894dfc37a0b07e63df867ecd438801d606e11b580ecca485e4a9cccb271e756ddbdc406a5e5bfac27ea142a5e165618aa247812edb649502e385f5860e7af3eecfdf845d376c494d2de66ebd437fb00fb1cd442855c258c048ecf425d652fa26b106dff8769367cc58c5e8f03c2071e21b8aee0917c47fcc36e161a14c5309715258caf5354a936fe8e51e24cbad62153340f43e8045a0d8df72be4112074a7d86a54b2ee33fdf152be14e74d382046a97ec10b19383cb62bb0271e7af82b0d68c0b516a04f3e941518735ab719ecaa65a41e76a00c3edc96f7ce16a507a53fe847cb17510776bd54faaf209ae2a172778294bd98999e7b081b21a58d472f51bac95b065eff5eb1d7f528ff90de8b939e191da136f39a60d6f55072e89af801cf5b0d8abd2661816f9f7b2772140a303d3e5eb8e30429dbe7089622cdab35f646e908ddaab0e5d83c9fcfc5fabe572bb4b793fa884a07ea396fd984a9aef613ad23168b843730081f82b84d65dcbe7880934c61dd0ec50ba20cc110feced5b47715ab837d4a6e6e72e20376f5ad1a2cdfe964976587708c92ed22c79e1353e857db2d5f87cb1c0874460f072262041c4344b33893e144f38d35e98abb382001f111f862ba925cf3531045765d2d9382c9ab0ed72ea1cec00fad13b3923e1715f6a7303eb2d51c4739130f788b619a3062fbc1000a82681313923399804a390bfd036a87eee3e6d771cab97cc7e38f194eaa135bdb1558580cd9b82c8b29c83a118223996e07155f04b95610b4a521b705d922bf7ced284a260359e4006d569cf54baf807286997976ca7a1ed8fca31a71e17995e422ca7abf77acf5b198d5afb0848b0e05903045d2a15cadcd39bc5681bed897685e7f8e52ac5f7abf5d339c2654a9f2579cbaecf5c6371f2754d77fe8ff289949c6aa9ca6d24a645ea4dbf71ad83f480e3a2c435b09d8f70f99245f052c1db2abad57108733985c7c52047f3cb1343aa1ca5e1a8fdbb4fd4cc25651ca900299def28f1061793a5a4b8dc4b8a8565a523bc7e8cd5e519f607e685f7a59f5eb18331cd29a3e550710a8f009629ab7beaf340883cad1287970d1b080e27abe1e73c02baa028798d92474f2e0f7da03c0c3ab19a97d7080347f3667c42dee2008d3a59cd3ac56d2d00b1859e51a0ec0f073b6e3aa8d34c533e4c6b1efde2f89f9482a1101a184a87ff756085e5de3dcf7c89542e4a26fd8774dc43d3c63b8de35b2019ff1174b33243548b53b7bb18f4985bdc9dfdf2dcdc3c19ec99d60da850d8cf6716891f59bf904ca5d5b1e68e1ccd34a3faed73c76984512b5c090bebed2b782161465b3349e72a5f5acd1721bb791e9dbb566934f810e293aca85127913113976d6002750fcb3cc2276dd7776138fe44d60f1f264e02ff755baa4a21cedcfe9ac447baa71293d83c250b745775572e34f1546e04d6c2972bd1c5ca74df0428088fc1100bab334b901c272047320c9061d2efd22cd1f36520875baa2d8eaff6579e9a92a9433c6ad4d8dbad51e5ebba8b1d40cbf564b5b6cb29a4815cfc0fb062f06ce1f785ec43f0fbddce18a11e82c00e8736c3e1537eae5119d07f728d2ededaae18c2804f2678c774df5ec7793b916ff05c09153d8ea6a7c3154d43eb672e613f5e287a1d43ee55682ac7a0570138feadf6c7faac2016d77dd0fd287b10604aa5e5ed96c49ddf855712539ccd847c26bf7070fe25bac525c2e905aa31fe0696a0812f2ba305b5cc6f0d9bc6b7aadf453dbd65e60141893a25fcca00f6d468eda17d44cc94ec4d34cc57cd154fbfa05ffaf75836828d6b82155e35329f1103a6f9c8a7899d88b872c490deb78a21ceea38bfcb5b7fff70f638d02171d0fcb853d80765d275ab416b12e010d3b16b75e37380ab9f4a23efcb7d7b0b03691c87b5c1261b666f45b7625350fc47ef4f399f9d7f698e93084bfe2289afffdd213c613701c45629a3adbdcfb90c8bad3ec875b1b61b0973b6a3baa556dfec01d309cb345d8a0ac7c32df747af24557f5aa2d7348bb267c78861ec3761ca5c22f8115217f77dc76f0ca5fbb5baa07ab1cf3eab71a36c61720870a5c1e5f5afbce7848d9a72a2b452b10d7de1dbdd9d060e9c04887d5d6b448f9e8cda175e74951ec16965967cf533a7163b20b419973499cf556168e6c81ebf49563fb845f88e7120e7ba2d413f61e2e738993619af503dcc5a102dc1b86c313460c3eb2210cb218e2fecadce97974226ddcdaf32596f14d2c872fe5668d2eb06ebb533aeecd14c30bd9e1a923f778749fb40d5f163319e0ddc23c5fcdefd9a177d2dc730006ff8dffaafa92a9cd92324721f6abbbc8f3ff32c3363d2b7bc492b0868fd47bc8204dd63085afa5873488e7e67f63ccba68df049962ac240c192edd179a4ab3406e14a0eb82b119eaab7833fba4f03e9dee3079889dad9d1451e5ebecc352d2da88fa9edc33423bb88ebd0e58520ad6eeb4d5774e9a487e043f858d1922f1ec905346fdb62b0f87bae33e507b7a2b8b675ce1d6e5f2c912915497e930c1edd94a895e4753b4ffeab65fd45a1689354127d0a97e0582b2b66fa2608aa229fe04bae57d36ddb3f5964bd22fda36e5fb2dabaaa67ccec5294d0d8217c4cda97b0282ed7027345b7cbea541f1fd3438248feab72ac2bb5f65115cce3095f5975079074354407a5cb4f9a66b60cdb0d0b7fba213ee218b97b04aa9b4a195d4340db8bb84792cb3498364863fdb53de878d0f927f8e850e4b3fa457c63140cfa73faa5e72e42b26fb190318678f4402275eb9b843f80e78e22baa4a6f5b6a6c86a4fe00a1b443e994d310275f2dc2d78d9c1da6c71055ba4df3d97712ba6753b640cae41f4188cd274ae4ea470f0a080b7849e23a70ba4671518bf0410201d6982fedbaf86213466ddf30135bb45344eac988e64e7415619a7b071b4d6a307865e4310fa02973153fbe07e1708a3e985ff3ce75a4a5b5cea39ab9ef45caed8baccd348f87b13cc636947c777ef5d9d01f32fe4c1fe2d63dc2c7fe9a99e765f8c887bd76fcc596759f636b2f8b41ba395732458ce418f55356683bbcc9b17d0c7301c4bdcb06dcec687129cecc227e60d759a4ba08b1005ca8a00083369e96a719765a24658b5876b77f372ccc55e54e1ecd62c44f50b65786c908ecc9df5210852765b9364393090b8be94c8cb68d6118326de20fe4877a26c05ed4ca0fb442abf9544df49d50db69f38b0df00aa0e6c782fb33b323eafb695b46fe1924269452cec8b7f6db6c4d079b3c277874fda6d6c6bddbeb61faa0f3faf391f9479126a7bd9411d0dd4048a3c62395c84bb282733cc2e5e517780d6dadc237770d93618a4c9421bca26be0de2b459d2da64667a7383491616ea73f9f4925d11f68369bbde88d77aa67368b2dbd8e5e7ef3fdef3e09bf8e107adb192855d31d9005f3e4276bed2afa1af6b948fcb41ddc93e8530790ad6f5447d5a215b58eabd690e017ebd9ec922a2fe55bc96745527523d2dedba961114f2836b7ebc8cc055d625b8cae97c4b6189fdb031c707f644d978032d870d979a767cf3ab95625adee128ab17ed0fde26b2c97c0fd8b468eb01dee4bcfbb9bd3cc79ab9c1b0e4b514f40da581661e17e17ee5ae6146c73ae7d6d264df30c770ca005444e68a1e5ab82e2e1745bc4d76f902f4b9f84142242cfbc1f1eb2c5546b3236979e4c7d4d46403f9f78d33e20e2376dd49f58429809367115aed9d42ece9276e8dd325a2b86af2f7cde8784e32d0384b5051ecf6c818572bd115546cecbebbfc8c0f634c8cbb8af6c53c36f095fb783800ad730374397deae43e7f5d181d0bfe99a43f2dc09d8ca2f95203c103520911e0c46923cfda1a0610f5ada25fc74f05db823b7f1ef39eb2c9b5689106dd6e59dc61b46f84747179ba2bef414a8df1de3217b583d3915ba9403449d2ea480745437abd314f1c05c83621b138af6937b8940710e0e7d2d56c4f7b219dff15f24f0630b522b17b7349ee915892620dede45d1af1d593d7ddf8dab7558c5bd40430e5fda51ee62520043f9b6b9b6d74417a9625fd2f8ec4273fecb18070349088311f191d78b4d50e11666fbde61e41612693dea9f30b12d5d15686da28c259a0eb3e0787e71a40b9cd643a54550ce8efe35a900025155c926a964cef968afa93c087c9729ca91077b31df909654ee772f90fdb89967ae513b3028807c179e343c90b7c5999ff9a02f21c6cd54dd8193d7c0ad556c634c65d83c2ee7d841d063bb7b8b65a21670e327ca6a95161720d8b20ec61bee64885d3afbc31ea", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={[{}, {@mode={'mode', 0x3d, 0x8}}, {}, {@uid={'uid', 0x3d, 0xee01}}], [{@smackfsroot={'smackfsroot', 0x3d, 'mountinfo\x00'}}]}) read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) 1m50.866957195s ago: executing program 0 (id=1263): getpid() (async) r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0x3, 0x3}, 0x6) (async) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0x3, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r6, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_I_TEI={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x820) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c00"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r10, 0x0) ioctl$TIOCSBRK(r10, 0x5427) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r8) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r8) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r11, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x14) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="100029bd7000ffdbdf250f0000000800040009000000db84bbdbc33337c3f1ac0e864cf7eb1f91583a9e98c3aef935b556e3f3b462445b04bb55807585ad1b0afaeb9ae22df711f6050a2bfd4fdbb701dfbee4e01567"], 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x4001) setns(r1, 0x40000000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m50.783656166s ago: executing program 0 (id=1264): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000500)={0x9, 0x20, 0x3f519662, 0x20, 0x1}, 0x48) write$cgroup_subtree(r1, 0x0, 0x9) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) getpgid(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 1m50.677701246s ago: executing program 0 (id=1265): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000007c0)) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000000c0)={@local, @remote}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x105fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0xfc, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$TCSETS(0xffffffffffffffff, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m50.582632527s ago: executing program 33 (id=1100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0x114, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x3}}]}, 0x114}}, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c6be7797a6c2519b6018277f1899c7fca62c2fd04cbfbbcc7cd000000000000000000000000000000000000000025b2c975666fb398ef4f49f3adef48e87a90b62c1351b898daf1b0b194b66bdda60e71c5100a5a790e2c2d0c51e755e2ebcce0305687c7c7e99e65c150b3a2b3a30307338b3facb5faa69315727b19cb2afa3570af13e0a41b71464a5a57653d2a34c908cd2200"/158]) read$FUSE(r6, &(0x7f0000000740)={0x2020}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000004900010036560000000000000a0000800000200000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xb, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r10 = socket(0x26, 0x800, 0x0) sendto$inet(r10, 0x0, 0x0, 0xc011, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m50.241316759s ago: executing program 0 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x34, 0x1, 0x0, 0x0, "4454ce5065ac213d8cc299ba11f20f148ee9d76acc07641c11f52885a7c98ba9e4a4c5d0a40c5a6e296d32b4dbded9de898e84fbd4f49937024ece4d7798aa73"}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4004001) open(&(0x7f0000000000)='./file0\x00', 0x200001, 0x125) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) 1m50.240872679s ago: executing program 34 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x34, 0x1, 0x0, 0x0, "4454ce5065ac213d8cc299ba11f20f148ee9d76acc07641c11f52885a7c98ba9e4a4c5d0a40c5a6e296d32b4dbded9de898e84fbd4f49937024ece4d7798aa73"}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4004001) open(&(0x7f0000000000)='./file0\x00', 0x200001, 0x125) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) 3.379177567s ago: executing program 1 (id=3125): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) read(r0, &(0x7f00000000c0)=""/200, 0xc8) 3.378760247s ago: executing program 1 (id=3126): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3b79], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x12]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x4, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x6, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adce, 0x10, 0x2, 0x8, 0x9, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0xb, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x7, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="00222200000096010006e53f0b53743ff62a9007070900be008304"], 0x0}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r10}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r11 = socket$nl_audit(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2.624238472s ago: executing program 4 (id=3156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x40048c67) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r6}) close_range(r3, 0xffffffffffffffff, 0x0) 2.462643903s ago: executing program 4 (id=3159): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x3, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x4, '\x00', 0xda}, {0x0, 0x1, 0xfc, '\x00', 0x8}, {0x8, 0x13, 0x8}, {0x1, 0x3, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x7}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0xa, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) 2.185111006s ago: executing program 4 (id=3165): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e1", 0x1, 0x4040090, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000000)="e1", 0x1, 0x4040090, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x9, 0xfffffffffffffff8}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/pid_for_children\x00') open$dir(0x0, 0x408000, 0x5) (async) r4 = open$dir(0x0, 0x408000, 0x5) mount_setattr(r4, 0x0, 0x9800, &(0x7f0000008f40)={0x100000, 0xc, 0x100000, {r3}}, 0x20) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ftruncate(r6, 0x4a0e876b) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000140)=0x400032, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, r7, &(0x7f0000000140), 0x0, 0x9, 0x0, 0x2}]) 2.073403326s ago: executing program 4 (id=3167): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x6000) 1.961267527s ago: executing program 4 (id=3170): ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a01010200"/184], 0xd0}}, 0x40) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x105fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0xfc, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r5, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.5485999s ago: executing program 1 (id=3180): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000300)=""/225) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090265000101000004090400001002060000052406000005240000000d240f0100040000000000000115241207"], 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x10, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/63, 0x3f, 0x1, 0x28}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.047362843s ago: executing program 4 (id=3184): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_usb_connect$hid(0x3, 0x66, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="8002090000000906b0003766401b31"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881ab, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 797.304534ms ago: executing program 6 (id=3185): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) timer_create(0x4, &(0x7f0000000140)={0x0, 0x18, 0x2, @thr={&(0x7f0000000040)="12804634aff281aecc2663cf2e4f90c1a7d1af9a684c9e42243cb041dfa32e1b1fc322101e7f8060156bd08fcab64d5a3be665c6020dcd5f687abe8ee4c0ca50f6598ee8b66bc428f9b14beec940defcad76c062f039610ffeb29cfcb0d66b", &(0x7f00000000c0)="6b44d5a0df2f7661c52634eea7342febdb41e9ba91c9ac76e32af9a788a1d4a32bfb2abccbe14cdb0cc203a134e8e455f9f8e943075dbcdf532990708581e280ffb483f28b611ed7ba00a8bf22feba533a35b2cfbd60d50e5aace8e600ba65641e390495509577eef919"}}, &(0x7f0000000180)) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 770.084525ms ago: executing program 5 (id=3186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x88ff8000) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20201, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x400}) syz_pidfd_open(0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 743.614575ms ago: executing program 6 (id=3187): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x7f, 0xffffffffffffffff, 'id0\x00'}) write$tcp_congestion(r0, &(0x7f0000000080)='bbr\x00', 0x4) bind$802154_dgram(r0, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) pread64(r1, &(0x7f0000000100)=""/254, 0xfe, 0x10) write$tcp_congestion(r0, &(0x7f0000000200)='cdg\x00', 0x4) pread64(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x5) r2 = openat$cgroup_ro(r0, &(0x7f0000001240)='memory.numa_stat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000032c0)={0x30, 0x0, r3, [{0x5, 0x80000001, 0x4, 0x84, 'id0\x00'}]}, 0x30) r5 = dup2(r0, r0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000003300)={r2, 0x0, {0x0, 0x0, 0x0, 0x29, 0x81, 0x0, 0x4, 0x1b, 0x4, "997487da8f5bbc7237c6baa3049cbb191db1c3bec2ffe1555b8f26ff17ef8aa9ca6c4e6d3f952588b39c389c2f7a0101cfebe8a376884ea740fa68841c994feb", "84dfe266b34dd980969478daa73d64aef3dd1a22843d77609dfbf932020400c79a1c022815f4de13b59af3e8e18c94bcb78a7dd8480b4da62b9a5744e83d714b", "c3b6f2bbedef84c889b5f8e3465209d14221d4d21563a30b3cca979b884a1dab", [0x7, 0x5]}}) r6 = dup2(r1, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000003440)={[{0x1ff, 0x7, 0x8, 0x6, 0x5, 0x0, 0x7, 0x4, 0x93, 0x2, 0x0, 0x8c, 0xb55}, {0x1, 0x2, 0x8, 0x81, 0xa1, 0x2, 0x79, 0x9, 0x5, 0x9, 0x9, 0xf, 0x7}, {0xd, 0x4, 0x6, 0x3, 0xa, 0x39, 0x9, 0x2, 0xff, 0x20, 0x10, 0xd, 0x8}], 0x3}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000034c0), 0x284402, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000003500)={0xa}) r8 = dup2(r5, r6) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003540), 0x0, 0x0) read$snapshot(r9, &(0x7f0000003580)=""/33, 0x21) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f00000035c0)={0x1ff, 0x2, 0x4, 0x6, 0xa, 0x0, [{0x7fffffff, 0x9, 0x2, '\x00', 0x1409}, {0x0, 0x5481, 0x90}, {0x3, 0x0, 0x4, '\x00', 0x2403}, {0x4, 0xffffffff, 0x5a2, '\x00', 0x600}, {0x5, 0x7f0, 0x4}, {0x2, 0x7, 0x5}, {0x5, 0x8, 0x54b, '\x00', 0x180}, {0x5, 0x9, 0xb698, '\x00', 0x440a}, {0x29, 0x401, 0x7, '\x00', 0x1209}, {0x0, 0x7, 0x8000000000000000, '\x00', 0x3584}]}) read$FUSE(r7, &(0x7f0000003840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000005880)=0xd675, 0x4) mount$fuse(0x0, &(0x7f00000058c0)='./file0\x00', &(0x7f0000005900), 0xb00480, &(0x7f0000005940)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1600}}], [{@context={'context', 0x3d, 'root'}}, {@appraise}]}}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005a40), 0x2, 0x0) write$tcp_congestion(r11, &(0x7f0000005a80)='vegas\x00', 0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005ac0)='cpuacct.usage_sys\x00', 0x0, 0x0) r12 = dup2(0xffffffffffffffff, r5) ioctl$PPPIOCSMRU(r12, 0x40047452, &(0x7f0000005b00)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000005b40)={0x0, 0x3, 0x6}) 689.293546ms ago: executing program 6 (id=3188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fff000/0x1000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x2}) getuid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x881, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fff000/0x1000)=nil) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x2}) (async) getuid() (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x881, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) 689.030515ms ago: executing program 5 (id=3189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x300000000000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={0x0, 0xfffffffe, 0x800}) 688.531766ms ago: executing program 5 (id=3190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x25}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 687.707686ms ago: executing program 5 (id=3191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async, rerun: 32) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) (async, rerun: 64) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x42040, 0x0) (async, rerun: 64) syz_clone3(&(0x7f0000004500)={0x100830000, &(0x7f0000000540), &(0x7f0000003340), &(0x7f0000003380)=0x0, {0x40}, &(0x7f00000033c0)=""/234, 0xea, &(0x7f00000034c0)=""/4096, &(0x7f00000044c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r8 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004580)={0x0, 0x0, 0x0}, &(0x7f00000045c0)=0xc) sendmsg$netlink(r2, &(0x7f0000004680)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000140)={0x108, 0x2a, 0x8, 0x70bd28, 0x25dfdbfb, "", [@generic="626effab981d13305aca3969ba44308bf88ea4779480beca008e6ca70a01bd0a8af0a4eac21ae2f43a3c147fd1d69aa106a4268d1b02834724823a5d4d55ac969273dff6cb78ab0a134db04ec6d233811b1942e67b5d86ca17c56e201b9e7fd95f0308c949b34ba0fdac5b079d148dcf17d5d69d03dcc01c57bcbef3c96dd6217615abdaccd5c0515b7d79bd55e1fff430577f1bc42259937cab5991fa0f8b1aab6e5a8617db1580085bc4229f80c49b70025c324c1c0739265e5a91559b7a643f4d9bf8b88c42c234f510d16638bf403ef9cc81cca768437e4fd2535cf6fcfe95b624be21bfccc0f8a412b3f20a0b35a8299f70eb2b27"]}, 0x108}, {&(0x7f0000000680)={0x430, 0x28, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0x209, 0x5d, 0x0, 0x1, [@generic="d683484b4a5590349b8cc0df5e2bc986bb4248641c1126fca7ddefa8168f", @typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @generic="450bc810fb34524bf3fb3034d95960ba76c1ea0043f7b6c7883a49368339b7f3e925f67a23a662bb1879c9f76fa4237b91c7b62ae364d751d107ee3661a48cd6b519616c8c7aba60d6dd38193a68bee851b24c3fcc94765632b9547af54dc6c315cdd0f0d42fcd8358b3c2e12a33890d", @nested={0x4, 0x12a}, @generic, @typed={0x8, 0x133, 0x0, 0x0, @pid=r3}, @generic="75d5456a1f5edfed2293af0fccb4aafb", @generic="538443256be4e59b5aaa51ca4e35c0a3ed8401fbae5cbdaee4d22f9549dbb478968d70a04e422b6501ff9c41510bd9e3632b63a7f899d4a5e73320bd34d2abe84f9bbf75d300e3dca1f7b5a940f4c6e28885b65c8004aeebd203bb5f45c220e376407609621ef86ac56ebc05382bbc2c68fed74ef67fb401d2635ed189f853c074dda1b50308eab560bbe28cee136bfe14cbb096934afe4e659f359f27b385c9d58383a12d", @nested={0x4, 0x12c}, @generic="a564af38165691029772d0382ed9f8568f0cc91970ee818ad5216c4192f8ff0a2611dea642c289e433775fc354993094eed5a26719734632ce671cc8d6810814816733e190bddc0d510f0c9c8f81b4c5a676ba03a39b0bd4ee542bc08d9fa7b0b68f41721e0bfab43ba665c89afff0887cb987f01ef1a4f5a395ce091cf372620e3c47b786a9b4d452f9374e096f9a87e98466c559cc49fae712c740085312ef0baaa1fb7792f630f662"]}, @nested={0x28, 0xdc, 0x0, 0x1, [@nested={0x4, 0x48}, @nested={0x4, 0xa9}, @typed={0x8, 0x11f, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x7, 0xbd, 0x0, 0x0, @str='$.\x00'}, @nested={0x1d1, 0x29, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x3}, @typed={0x1b, 0x62, 0x0, 0x0, @binary="513ca34eeb64b1361b7b9bedc70989a799dbb63a669525"}, @typed={0x8, 0xfc, 0x0, 0x0, @u32=0xc6}, @nested={0x4, 0xb3}, @nested={0x4, 0x90}, @nested={0x4, 0x5a}, @typed={0xfd, 0xc2, 0x0, 0x0, @binary="5523809fb9d702b6306c771fb9b1591473953988e8396acad1636e0d93748ef967d7a7fa756999fda5e205f7e55bd85514778f8797d13d48fa4498cdb6b63cc58163e4636816d654406534273fc958540bca94b297ee48e92119ec60f0bb0667933ebd6df1f71cbd1c590fdb9e11753a2bfa06b5f2d0df11e7ea7f69617485392a48fe6154d02ee13cedcfe98c3207094f2bad63a8850f8f2b5730140b52116c5e18e602b14e716b2a15ca0fc7304532a043bdeef89dd233c992625663c501cc112f38c657ef46ce7addeeeb5efa7ca9a977cca38fcdbf36ceb2bc5a6b58e9e555156dcac94027cba5104492608a34d784a48db89a595d3eaf"}, @generic, @generic="44f86ec928802006eb2e22151701cef78a9a12000ad01e4c354da1c1c5db7ba776c946c546bcdaddfffe8e4739346f22da4a96803e8851d1a392968d0c8fe456e9ad92928678ee600d32cda73fb87f095303550c0c79e90e6e501ab12b669053811a5c4cc29be35867f6cf8a42f0ebfa04163a3af203d0e499172fb00080e5ccf67e47e801d574f4fd482126fa3ac2d002", @generic]}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x119, 0x0, 0x0, @uid=r4}]}, 0x430}, {&(0x7f0000000ac0)={0x14c, 0x2b, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@loopback}, @typed={0xfe, 0x7, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x8c}, @nested={0x30, 0x1a, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @uid}, @typed={0x8, 0x83, 0x0, 0x0, @u32=0x7fff}, @typed={0x17, 0x24, 0x0, 0x0, @str='./binderfs/binder1\x00'}, @typed={0x4, 0x21}]}]}, 0x14c}, {&(0x7f0000000440)={0x10, 0x2b, 0x20, 0x70bd26, 0x25dfdbfc}, 0x10}, {&(0x7f0000000c40)=ANY=[@ANYBLOB="8c1300002c00200029bd7000fddbdf25710b7f96eb6be123e61fd6fd1f5c273e8f5b3e156b86f1ab897754b5b7ca1fc0f2a5f77455fcd00ae5414a90c3de5754e0df86e562cc9b649f91e00addae88cf65199cde63df5dbc6e33bd8adbb66486f698bd14e28f14f68b64826a9ab98faee1847a3c5766ce7e0800a900", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"/482], 0x138c}, {&(0x7f0000002000)={0x11fc, 0x22, 0x214, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0xee, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x119, 0x121, 0x0, 0x1, [@generic="2ea2ef27be11932d969b4d14e851cec53d1cf72844f9550d786ccc4e2046d71cc33e2c1f68a8866faf3925e5afcf99367813290d9d738e8d43c9fb6c1c66013030f586ddbc6e19a83c39ceba4bf39b054049847a1640cdfb3d42e30224032943eaaee74fa49fb943bc0308e75c933911234b0a475c5a317423f900006cb9ceccfabe57702b407ab8950d6401c124ea3bf6d958e51cabc8eb212e23ac2e122cab7fdcbb3367ee19b7c57e569a950755e1ad8b769c357c02c2f51f9abe96bd2d1b6c145e770eb728e39ce51228de1581d53c8d872aa8ab78a44e4231fcbe894c3b1f14add5ed8705fa9119e00204a3eb336267177f75a227e244", @typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x96}, @nested={0x4, 0x4}]}, @generic="8b8f454a34df4be244bb00379a0649c3a0bd805448af77405fc35deb03c244de853a35e290b92a913a4bb9a9371a474182c8e276b2195413633b16dbe12da4f8f532c37437089b6d8dae76c0c18d1c68152dd7be773fe4a4add7120cb2c69aaa97fb2025b30721089813dbd68492de94320794ba13d9e492706ceec8dc6dc628b0d8d8e89b05c811089910239821e6a9bfd4fc8817a12d108acefb1aca397c6310b30545e5ab705a878db2f362d59bb0d807a2ecccbb9d261a0883ec61ac93", @nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x9b}]}, @generic="4f29a2a3a2f99629754e59cfd2b0447cec51a451e6c8aa6bb3188f6cd9b8bcec13fcc8de2897506d6fbb856d928d0d4bdc3118e2dd4e3757cdd4531091072b72487c5d2e3e75641760225be89a455e67ac0ea539734d6b0585c29ad12f1032a9524f4cdfe73fd2685c2ad397a8b4ce117d575d9124534df9f2183c0ae0377635bad53635e670fab20217e4c60d378a69f1422065a0507bc207c6fefc5055a98effc4062d8413be6099df26a29afb5c5e5ea8b13aea051e50c84cb4021cd24aed18b6a75253df9c29ce05530e0eac63ab756de5ff6f3ec4397dcfc982d23fa302e186c8086a89703a9d72fdf2dee3a6138242c6d06e0e90d04093b556470f7e72025cf9aa60c222386688d7f8b4c60b392284a5a466971930e70c0b86eb3ec4a3f4fa09cc3482aebc93922d114115454317bba7408277d982692e44d1a9b1a2bb20cab81edd6e681859d1773e44f46e43f2be1f841082dcd7bd2086e5161604c50443d74ab712da654a160e24f6a1c0ba8b72879a36d00ac0f78f364ea65506f04511474877f8bd0c85825e873fbf83587975d66dcfedb9be53c098390fbdafcac8b5a00c696394594742fce18d0a803ac94a7eaf649e5b00e262c29d54b4506fc199bf8d1b18aa1646fa10293a256db77ac72d6814e1fc043ffbdc12854d9007584c80f1b236d86ed179efee36d961ac9af5629e8cfc68046ca407b705b7c83884ee318eacdbd4b881196b9df14dd8907a9b6c1d4382a9cbf83a855f1055f41cc3f17fbf6f9f147c409b11516b97af1f2b82acfc2f0a1e5f959a341addfcb26b5e1f3e94a22f0a3d2493cbd473608096c6b273b5c1bf3a5be7fda590be067abd6c9562c17da6ac522517ef59955a93f016a894bd13617d8d7dda83e7dcb28dd4b75351b031873d797b7cfdc9dbb3a0e2215df32596ae4f8be1d993f08e6b32ccd4d6a414e2340419e0afa9327f6e255cd86eef135ad468191ce2132bf1c0b3d389152a66ef3706b72ab5f96a5123c6cdc71e2ae3e069119d2f8204f060b05a288db0fc13d80f93ff1c24c2ea4a0fb6824a79b120422ef8e035d0764044df686070a122e6b24b5c01e49346a2b2611626e135281b94cb2c9c05361b876f3c3af14622eec0fcdfac77d04c48930b74016989a9f0effd33d9924c0a1ee4900f9a90a6f38a17869f45bbd1928d12fe831035ad24f0ada232ff4bd1d9e913e4f2d283f2c05cd477e3f8a0e3bef65957ca3f9d42113ac85997d6935e319ddb975afd88eb1f74c940c21d1020abebc5fd21f6a48f5f94d3270a09a7a8c04ea77a7d6ec1adda7cd093ffc6a85c5917d7e4fdae258bf35ab596bf0bc2396794bf49833329a0b0b8a6253439b3302a0709cdb27b3e4611af6136f9f7fe4761049fbf57140bde0f66a2db9e76971f8e0944afe308d39e631ecb0092cee6c0b45dd2a7f9d97f37ea861b83d6883f2232b1034ac51931abef5186850d4b3f64a6309b5602d1d8c0a1c244333ee17397155f56adddf3b4b8738a03a1f9e4eb73ad5ecee09b7c5ab50a9ba325d6a2ab0b3bf954bef2bb348508921713eea3b160d94a92cac6bc9523dfb39d8976eb80643c76db60bc824c1f5fdda05721aff1da681d07af4ce6038ec1d1a9676d13172f70820972467a280a981ca3d35e21b3ab54c6c8c1b08d54c4cef3360232482e3b7395c207fb143573218f3d90ce5aaea602ead6de5fba1abaedb5d85b431130d929c02a19dc744ad2346ecc07a3c2b78db312e3bc5a87329197c1e1e87473737a442ae053603a3669d135fd502a295770b37e98afe2b0ddaa427700ff05acae9569e7dc40cc56b2ed27fee0efecf0a422355da3c3fd98a347d55541bd8cc476f55d1082bf1cd099f6eb84a3ad45dc11f59c05bf0607058165b487631235f900103597a9dd971dc6d4672addd11db7d77b817b3d3326522cd6a8ef446270f08845a77bfcf4e1ed9dcb4cfa4768b513f0b680c4e6189aadc96e0e1fda800398803d23fc287bb1b570ac7fb1cfdd40ff5f214d5413190cd6201c95b0a243181af3453867c44bd2e53b78b57c9669017d1907248679b4d97e06f5d0f50721886e3e6c9c5b41a01efcfd2cf4b50e6f32d76f61770557841765606a46fdaf8f25b3e26378780f05b2ff1691256ae9ebf21b1b33c8eca55dc221e710e5a1c8fc17d386b0888a63955d073bd105f70ec00bc7e6162a28306074f6f663a6ce2314299f20ce293e2b563e3bdfb5f7378c3ab58a0cd8f9fdd0d9d328aea95d8d604224ddfca0ffe0b5a30fdba4e4838087f6e01cb9b56d083fa3b71655b15a82aeb3595dd9092c84c5034c58fe1c282f7451aeaf542e7542d1ffc6b9ad3f8d902e864a28ab0615d671c40b4f663df911c1d365ef0b2d9cf2dcc4f70b6b7a4722d6a67feb0b9b1aa11205d5415c29aeacc391e7ca7acc90cb328a0767081a2b53050d5482e1567e00e63537269e65d2704d28d17a49a68aa30b8e87228bbefd9e1d7c834906e0e381779eff406ff986ead10db1d95f3729413abf9206c3e5855c6d1b3320568ec88bf3a172f79508a023319757c579889b5f69c35077c12886dd5351d23ba110d754420dd5bfc82bd273d6c6d6e12dd4e10dfb85dd71cd7676d81f00ad28045103d951301409917fde5bde8a6b7c4eaf1e978f9753ed85e65c84808da28fb2229c4a490bf96a037daf3a729aa3fe7f0e67cf48c39bf09fd47269ec011624a5b23ff701eecf5fb099c3313e74625c1e470cd5dd79ca8db51bc45c23f6cc66ff41c546cf74e1bddfd3a524f4f45d57678c1758d5395801180419f20f33826f0f21478cbf1377a532551573bbba204539611b651881e30094ac85acf151c151b86da3b31fbc43f7ce0a70cd7b5d7ce26b5434f69a8474205c04a9292dea28a41f989fed8c0ca4ce7f79611bc56f984d287b14423fcc1f78ed65fea844ba05953216e4dcff87c04da4b6de954d8628429d18152ed85a7235290e298102fb7ab944a64cf012ad84f302f3e15fc3111cc95ccd3da8371452fc1a7621a758f65ef22dd73a822dec9f8fbe8bde6b458c5488a5dc4bcdabbd01efcdaa4bd24e9c3ac3cda84d922687ff7ba5960bfea4a28b22fd9faf0fd1d5167d080d26237462525efc1e27c179ec546e72389c4c530412861b6d4a04e9878b366f395653d84e5136619311dd5b2291561e40338e44bde3d79e8564198c85cc25e4c0e544f906e3cb4b4f388c2924d0493d8ebd47805640cd7f555f7f7716c8af72162d4673fb49877d86f647fc6fc6d1490ab16cbb15b5a271af63d1779474ade8aacc672819f279a3a77cfb7876f2bedec0d64bd116344e3cbdb9f06a86a94b0ca254fb11d0cf2f2280998dcdd89ae22eaff9fa8eb3d5daf06de787afa5b448d988504e7af732725725583049a90ce705ba99533eafbcd87ac836a3457e6460b8456831bc17c7f5997c308edb807dc91ba01d2199257d6797aeb5491803f8ccf11c6e2bfe52cb907400790140e5dea8fde76905aedfdfa00e1bb6b759cddada54cebd1dd9f593c4a8b8b89310e2f18fb31e74c8ee7b4cd045c96359a0f712302a90aa208f5ae28889dd7c66085ce57dbea8f224b85c63021357251505f3b2866501ebe13d4dbc400f459b2ff458d4a883173b213ad052b01495decb805471ded663fdc0a03d84c4c4b83b23e5ef3aa602fd1d8822495f2bdbbe0c957c5b77876a646dc79d9267edbbdf70d8acae7e78557c6fd0598eb33b835677341241f8f6e7d8d927e5b757f4728f5a7494547333c13ba315be13445aee6c6798fd6922f94c0363de0d4444efee5fa4362a06cb091796dab6b7e559640eaeab08e84eb5a6d844211f1d14dec10de49ec8f69df6fbc0d37c323d1a1b275db1a8b01592e2f91f1f8ec1fb0dd20c77489ee3a4f85c9865333903a92d7e39a0f485635111d2bf39fff1c364283f1979935c89e09f72b8c6368e4ec31a7ddf2739ed4d3b1fdaed8be5cc66870aba60203a199e025a6124bf014e3ee650d3d8ae594984b67f8f43e2d96b13708c07b444257239ed11ab8f1f09f1417d8414224929d2c8a8b2151e67e842178f0514aa7b134b36ba4da5b41628abed1edd5fe7421b5fe7ef755ef08f83c3e2cba21531c1799e74a3d81342019845943c9a59c8a3d661d20808025cde8ea2cb2fb08ce8026a67df0ff02701b9234f34f4429280aca84f0fbdd451d8ab6b91ec8787147be5a83c78e18230e456d23eb0d2f2efcf2ff56c4e6eabe5d0831022f6296f8d724cb6e2f25a217ae7b4b972cc70b7e54dd4aeebe461085914dece65f61a702317b6d08261e3cedbed5f56208ae8e290d7c72fdc748cd96c64d435618ca08eaaf1dfa03a2d331ac7d7d5f4ea7b4666abc97cd6f2726cdc34b6f37c1e273379157c9066ec5a67a80e436156a1598fbc5c4d7da87f12300042d61fc92a809c600d9effc68fda248d2fd3c7590cfa73f2082702a029512a6cd30ab60109e93adb1e6f2cdd4a5340c31de108caa5feb31e532ac69f451ec914b7e9a5fe58e5d2c15e1e81dff946c243af045afc16c4158edc68a70f00e43b8678926526ebecc65c2f4e5f1c81fcbe3b4ca7551a3beb7a3ac398d25ddc4ebad97818bd2ff923672ae6615f896900a3e2dea70c2626e00a6eca7bdfb34fdf5c7d1bc6eb17978011b5a6d4ac79e416ea2d1170abb8841cdc74d532c562d96aaf9974b33281763e9fc7a39dbc66f7d31183d42c3850679ea7bbb508a3885150c01613e6f763b5e688187223111aba966ac87599e92d7fc755b2b3b67016c93d6b3a68474252190682ced6d5e0d93260b1a3b8090cae18ed9a193f35d8ed14cbfaff7bbab993c093052e5229621b3f2bab8c90920c043fef390eb4ccc8766101d2cf07ffba73de158abbd2974f38d9333074a4d6f2963fd66ae7e3a84754a7a2f8d76217ec9c13a5ca2939577cf245ba31e03b8eba111409ca2643716abe0371711d2cdb2a18fd078d8f6b841270d18026cd1b7ab002c436bdc1f38a38c05c7208a53ebc35aef255919656cce647935ed0847ed4e93b4b8cc3a435527dfc89a2ea3b06bddc3da40ba4f0f0badb02dbbaece07dca86703149308e97d29228b5667ef754573d5a47910d342e02bf857aac713afdc7a06930269e6e6547d1fdfe1c9fc4dd53674f239a3779c96987f277ac0c4728c89e63dd01e812a69d05bd4ebe391d078d3e6e3ab97c450b1ed6121a48e6c1d650aea40f06f9b1f7ce00548dab08df42830f2a2c73694f8a4433b5d0c9a9e11369555ccd6ed1e6094f40cf4a0a33724bc4a01d16dc367785e36fd72ecc3028ab2970f9968797d3513bf8a544702605ebf28fc4fa4ee5e9956f4fb41243358ffe34a6d016b125e1b93224578f9a95ddb6c17808e897f71cdf756931071fb5b8aa98b94b7307e36dfffddbe62bcee44816e4fbd42812e9f3f3956ffef947dd36e35bd718281e466789c217b750959465f83afa8094997417f0f65cfc2858485c9f607e633b51ffd7b00db50e64d6298c01e9df38ea41db454312c0b613e94ab134890bec6b000e0dac8fcb605d274680fb5a4914a17dc98cb06204fc9060420e4a3fdda60ce275324daea72863db5efaa8ceb4648a971f6cd409e9baebf8747d792cb08ff181251c05fa5afcf33c03122956bb6e634f3ca7bcea297230fcadec7b5872b90bb1f575ac5dd083a328cbace264bd318c9cb5eafcb45637d1effcb697f7f7cfb4345c99b65ee5b0b5e5133c8eb9a784e5a16df779096afd8bbf0f39b4a957b8de527edbc527c911d400f617cf9735"]}, 0x11fc}, {&(0x7f0000003200)={0x118, 0x33, 0x20, 0x70bd27, 0x25dfdbff, "", [@generic="b6aeb2ec9b33e8377763b0dfa83dbfb6525a67a128b7b96e31fe8719d50f70", @generic="55a49755486c355ba861eb242ac4ade51198c00f4958fd25506e11c6b0f710f1ffc78791a61b4a08c44b81cb7b5ed20c615f438ab9630e589765879a25371a17a3340d3321d4d5155cc14837e58b290684b3a506e8d78abd52d1e07bd42929fbef868cedd2a9ff832bdac7b999704c62e345c1a77731691ab579bac6ad7287f601948370eacb89eaa2fd9108cc37864dadb9fc09e4e2d9cf3f3aa62223431d83e7dee913b67a5fc627a5e41674f2b6887647b9d9b507bf315bfd54c76e9415ca04be34fff8de0428a2414090cc5388118358bd203490c7629b126795f05ec4dcce9cb41166b6a5fa"]}, 0x118}], 0x7, &(0x7f0000004600)=[@rights={{0x2c, 0x1, 0x1, [r5, r0, r0, r0, r0, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x50, 0x24004811}, 0x20008881) 685.315015ms ago: executing program 5 (id=3192): ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a01010200"/184], 0xd0}}, 0x40) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x105fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0xfc, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000"]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r5, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 672.558175ms ago: executing program 6 (id=3193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82802, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x1e, 0x87, 0xa, 0x10, 0x103d, 0x101, 0xed86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc8, 0x5, 0x10, 0x4, [{{0x9, 0x4, 0xaa, 0x3, 0x0, 0xff, 0x1, 0x37, 0x7}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x7, 0x0, 0x80000000, 0x3c0d, 0x0, 0x6631, 0x46a, 0xa8e7, 0x4, 0xa, 0x80000001}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x4) readv(r4, 0x0, 0x0) 670.136736ms ago: executing program 5 (id=3194): r0 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mount(0x0, 0x0, 0x0, 0x10, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010101, 0x0, 0x6c}, @in6=@remote, {0x0, 0x2400000000000}, {}, {}, 0x0, 0x3506, 0x2, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x4, @private2, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="48a3b42132a3ac752cfdf1dc6cc7c07e2cad2ba29495b1d0e4a07ab3dd735bf93ef25bf078caaaf63b33cd9c3e54600f3140437e384b85bca40ccd524cc5aa5a01f7879abf8d784817a64f163fbfac9caff5167c304ee1cb2e7e8bc992b03ddc365d3760", 0x64}, {&(0x7f0000000240)="a3d6020e1e4bdc80891316038871dd49581834f4c682ed5e5f43ebb83389d08735190a97f051b79a129893009a832ba7ef6a891ea78e417302ada4cb7d76dc8539cdc71be0b197c91845c97d8c50bc0bb0eabe45f85a2e743d5a594a", 0x5c}, {&(0x7f0000000480)="a2e7b33212e7311c90d4c72c978bda08135dcc9f2e28d963a1d6ab51a266eaff1e8613e26dfdde7e3b9f82b688e640cae344c869706d0f85ed5ad0f0003211a73b41a9fec67a7f756730860efd6a8d649b589221fb5a6a19cfcdf4981462b2d874a9c063326922737e462e7583233982b251dd545cca7c2689e9d263726b31087034c7fb836a477af52851a32ac810c417342ad929916f3cc0a9c89a65dad6f4c7a77f68655f756c1409e20da06179fb2306edce1b213c12ffaa20c07a052397fbbd0517f362953b5e17949cc4819d85a4a26703efddae622f8610cbd9d352d75c5dfdbe0d30b102bd26025c", 0xec}], 0x3, &(0x7f0000000380)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x9, 0x0, [@local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xb9}}, @hopopts={{0x18, 0x29, 0x36, {0x6c}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd8}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x88}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000005c0)="68ad08af61ece3b2ea63c92b34471ecdf94f6c7de148436c6a5ada7dd902fe5d1c592f882e27ae0944044ba0d64b3a8a921c347a0b1d820a87e707a73049abbcb8a47e973c450804f2a75afb3c5688b65d9fdd50d32372a2ee28ead9bab46152a7a099dcdf3dcc06c55d6bbd3944311cb5965930bbed57f43dfa7087c5ab48fa1c42d3d06553fb3dfd182b23f15e3aba6a5a759c2131eb633eb351a853a0c9d369402840955f0e1c37830f16cebc49b71a2f9d5bffdf7c27480a2233a28bdb88879fe1eedff4843abd3e2d3e5d250698f44975c09afdcac33099cb484abb3b", 0xdf}, {&(0x7f00000006c0)="cde0cea1d4b13d22ee1573c3c7fe68d9d6a8a5cc564cd004ac654daf7723f66c5c7baecf61329a07cbe9eb68c303c01944d1c7a6b6603e3b1fd5db1f0663c6547de1bb3ca28d0084467c658d3410454d75c05df653", 0x55}, {&(0x7f0000000740)="0c5ffea2ea68b26b7fd650b66e257072e6252e442b19ba9723b936befb90ea", 0x1f}, {&(0x7f0000000780)="4005c0f8236c25caaba41473d4ffd0261a64b327cc2716010c654cca7052c10715cb662c7620af28feb0856b56f0d2e430850e7a633eb6511794c87e6136", 0x3e}, {&(0x7f00000007c0)="cfb29684e781ff86f3945dce70bbc1dd1b9b4c3eb0ba1d68e70339e54748274af99572488a6c5e04c77ae1011effe9db22f441e8fd0cf5f8c101249b363950454bf321ba315c756ababd44c85330c60650d22e12db912bf8633e9833dba893b8dbc7b7dc163b062eb597301f22dc08c34b6d8554a8", 0x75}], 0x5, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}], 0x30}}], 0x2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 133.396129ms ago: executing program 1 (id=3196): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000300)=""/153) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 72.11203ms ago: executing program 6 (id=3197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="68cd0897f336fa71f0aeeb8992ee86f076f6bcfe8445ca282a3e921dd64a95c8ca69f6874ce8c677dcf8dc96814f0288e80730afe63a553f234fe6b7c7d3f8d2705e853c3c3b30146c53ce4229be46f7331eb295739b7df804af5044dadac92475aebea24809a8741951a90e69729dfd5bb58f1ac20b7e298171140fa043438b3e610bc5e06c0ec9efb64b19a26904196c738fe58872fe344102ee8b565a1e7712ac915f7587", 0xa6, 0x815, &(0x7f0000000000)={0xa, 0x4e22, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x20043, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x1e, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r5, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0xffffffffffffffff, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 71.66751ms ago: executing program 1 (id=3198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0) (async, rerun: 64) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') copy_file_range(r3, &(0x7f0000000080)=0xfffffffffffffff9, r3, 0x0, 0xfffffffffffffffc, 0x0) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x5a}}, 0x18) 69.12992ms ago: executing program 6 (id=3199): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0xa, 0x6ff, 0x220, 0x4, 0x4, 0x80, 0x29bd}, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x81e000) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x5, 0x0, 0xfffffffc}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x2012, r4, 0x5401000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4e0cdd70e9af79cd, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a900000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0xfffff7fffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x894}, 0x44000) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, r5, {0x5}}, 0x18) dup3(r3, r8, 0x6700000000000000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r8, 0x3312, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=3200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x54d00, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x240408d5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB=' \x00o'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x20, 0x18, 0x2, '>U'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="200f6c000000449a3ff72234112f"], 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x5}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read$FUSE(r3, &(0x7f00000036c0)={0x2020}, 0x2020) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="86cd4e89333a7f48788a205a02c202b160d0905a69aed78b5de2d0b14a4644014bf903f25c35ce665d1f2a2733c0d69a47f26eed7e25b7db9e8a893f9235c94d956e47a945170c37daf0306bd9358c309a74efdd48df52ecb49b11e008d35e71146bc2e0e6039cc55848daf5d4118698fad9a085e9cf746e741d459c212d9e3014c7985f77f7d249bbc20870e9b085fea6a3a8b3a716db5ea90bd107630393cab1f2af391fbf20e34787b61063fc2fa7f5e44bc44af57a5e76faf21624514fb6daec9981d755f990611afe87bd16444484df030d39b9f031bc6072dfc2e030", 0xdf}, {&(0x7f00000002c0)="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", 0xfb}, {&(0x7f00000003c0)="68435da1b1e79169d704cca14d718873be145a54312a37e1c0a998a1ac15196f77f91bb2558e584f37e5", 0x2a}], 0x3, 0x6, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup(r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001fe"], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x3, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000580)) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000080)={'custom1\x00'}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): set_refault_anon 49 [ 167.398447][ T6137] total_workingset_refault_file 0 [ 167.403460][ T6137] total_swap 127983616 [ 167.407525][ T6137] total_swapcached 12288 [ 167.411788][ T6137] total_pgpgin 240985 [ 167.415771][ T6137] total_pgpgout 164696 [ 167.419866][ T6137] total_pgfault 63823 [ 167.423861][ T6137] total_pgmajfault 39 [ 167.427838][ T6137] total_inactive_anon 17358848 [ 167.432613][ T6137] total_active_anon 234082304 [ 167.437300][ T6137] total_inactive_file 0 [ 167.441452][ T6137] total_active_file 0 [ 167.445414][ T6137] total_unevictable 63131648 [ 167.450062][ T6137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6138,uid=0 [ 167.465817][ T6137] Memory cgroup out of memory: Killed process 6138 (syz.5.1887) total-vm:90296kB, anon-rss:1172kB, file-rss:54912kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 167.530478][ T6139] syz.5.1887 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 167.558402][ T6139] CPU: 0 UID: 0 PID: 6139 Comm: syz.5.1887 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 167.558430][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.558443][ T6139] Call Trace: [ 167.558449][ T6139] [ 167.558458][ T6139] __dump_stack+0x21/0x30 [ 167.558486][ T6139] dump_stack_lvl+0x10c/0x190 [ 167.558509][ T6139] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.558532][ T6139] ? ___ratelimit+0x3f7/0x5a0 [ 167.558558][ T6139] dump_stack+0x19/0x20 [ 167.558580][ T6139] dump_header+0xd7/0x490 [ 167.558599][ T6139] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 167.558623][ T6139] oom_kill_process+0x35d/0x640 [ 167.558646][ T6139] ? sched_clock_cpu+0x75/0x400 [ 167.558670][ T6139] out_of_memory+0x659/0xa80 [ 167.558691][ T6139] ? __cfi_out_of_memory+0x10/0x10 [ 167.558711][ T6139] ? mutex_lock_killable+0x92/0x1c0 [ 167.558730][ T6139] ? __cfi_mutex_lock_killable+0x10/0x10 [ 167.558750][ T6139] mem_cgroup_out_of_memory+0x279/0x350 [ 167.558769][ T6139] ? drain_obj_stock+0xed0/0xed0 [ 167.558788][ T6139] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 167.558806][ T6139] try_charge_memcg+0x8f7/0xde0 [ 167.558830][ T6139] ? __cfi_try_charge_memcg+0x10/0x10 [ 167.558854][ T6139] ? __alloc_pages_noprof+0x31f/0x7b0 [ 167.558878][ T6139] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 167.558903][ T6139] __mem_cgroup_charge+0xf6/0x410 [ 167.558928][ T6139] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 167.558953][ T6139] ? do_pte_missing+0x2bdb/0x4240 [ 167.558976][ T6139] shmem_alloc_and_add_folio+0x86d/0x1050 [ 167.559000][ T6139] ? put_swap_device+0x130/0x130 [ 167.559028][ T6139] ? shmem_huge_global_enabled+0x2da/0x360 [ 167.559049][ T6139] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 167.559069][ T6139] ? __kasan_check_write+0x18/0x20 [ 167.559095][ T6139] ? _raw_spin_lock+0x8c/0x120 [ 167.559117][ T6139] shmem_get_folio_gfp+0x5f0/0x1380 [ 167.559139][ T6139] ? shmem_get_folio+0xc0/0xc0 [ 167.559156][ T6139] ? follow_page_pte+0xa5c/0xb90 [ 167.559180][ T6139] ? inode_to_bdi+0x6d/0x100 [ 167.559205][ T6139] shmem_write_begin+0xf4/0x270 [ 167.559227][ T6139] generic_perform_write+0x330/0x960 [ 167.559254][ T6139] ? __cfi_generic_perform_write+0x10/0x10 [ 167.559278][ T6139] ? down_write+0xe9/0x2a0 [ 167.559297][ T6139] ? file_update_time+0xa3/0x220 [ 167.559321][ T6139] shmem_file_write_iter+0x105/0x130 [ 167.559345][ T6139] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 167.559369][ T6139] __kernel_write_iter+0x41a/0x8e0 [ 167.559386][ T6139] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 167.559410][ T6139] ? __cfi___kernel_write_iter+0x10/0x10 [ 167.559427][ T6139] ? get_dump_page+0x160/0x220 [ 167.559449][ T6139] ? __asan_memset+0x39/0x50 [ 167.559466][ T6139] ? iov_iter_bvec+0xc0/0x180 [ 167.559488][ T6139] dump_user_range+0xb06/0xdf0 [ 167.559507][ T6139] ? __cfi_dump_emit+0x10/0x10 [ 167.559524][ T6139] ? __cfi_dump_user_range+0x10/0x10 [ 167.559542][ T6139] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 167.559568][ T6139] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 167.559593][ T6139] ? elf_core_dump+0x2368/0x3800 [ 167.559615][ T6139] elf_core_dump+0x2ccc/0x3800 [ 167.559639][ T6139] ? __cfi_elf_core_dump+0x10/0x10 [ 167.559666][ T6139] ? dump_interrupted+0xf0/0xf0 [ 167.559691][ T6139] ? 0xffffffffff600000 [ 167.559707][ T6139] do_coredump+0x1bfa/0x2bd0 [ 167.559734][ T6139] ? __cfi_do_coredump+0x10/0x10 [ 167.559759][ T6139] ? asm_exc_general_protection+0x2b/0x30 [ 167.559786][ T6139] ? __kasan_slab_free+0x6a/0x80 [ 167.559806][ T6139] ? kmem_cache_free+0x1c1/0x510 [ 167.559824][ T6139] ? get_signal+0xa75/0x14f0 [ 167.559846][ T6139] get_signal+0x11fd/0x14f0 [ 167.559871][ T6139] arch_do_signal_or_restart+0x96/0x720 [ 167.559910][ T6139] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 167.559937][ T6139] ? fixup_iopl_exception+0xdd/0x2e0 [ 167.559955][ T6139] irqentry_exit_to_user_mode+0x4e/0xb0 [ 167.559976][ T6139] irqentry_exit+0x16/0x60 [ 167.559994][ T6139] exc_general_protection+0x15a/0x1f0 [ 167.560024][ T6139] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 167.560048][ T6139] asm_exc_general_protection+0x2b/0x30 [ 167.560067][ T6139] RIP: 0033:0x7fa503b8f6d1 [ 167.560083][ T6139] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 167.560100][ T6139] RSP: 002b:0000200000000090 EFLAGS: 00010217 [ 167.560117][ T6139] RAX: 0000000000000000 RBX: 00007fa503de6090 RCX: 00007fa503b8f6c9 [ 167.560132][ T6139] RDX: 00002000000000c0 RSI: 0000200000000090 RDI: 0000000000800400 [ 167.560146][ T6139] RBP: 00007fa503c11f91 R08: 0000200000000180 R09: 0000200000000180 [ 167.560160][ T6139] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 167.560173][ T6139] R13: 00007fa503de6128 R14: 00007fa503de6090 R15: 00007ffebbcc40e8 [ 167.560190][ T6139] [ 167.560198][ T6139] memory: usage 298720kB, limit 307200kB, failcnt 40044 [ 168.031100][ T6139] memory+swap: usage 432104kB, limit 9007199254740988kB, failcnt 0 [ 168.039040][ T6139] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 168.043551][ T36] audit: type=1400 audit(1762390104.220:62502): avc: denied { mounton } for pid=6491 comm="syz.1.1992" path="/proc/1446/cgroup" dev="proc" ino=36287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 168.045872][ T6139] Memory cgroup stats for /syz5: [ 168.069186][ T6139] cache 314458112 [ 168.077763][ T36] audit: type=1400 audit(1762390104.250:62503): avc: denied { remount } for pid=6491 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 168.077962][ T6139] rss 106496 [ 168.100729][ T6139] rss_huge 0 [ 168.103918][ T6139] shmem 251326464 [ 168.107520][ T6139] mapped_file 0 [ 168.111046][ T6139] dirty 0 [ 168.113982][ T6139] writeback 0 [ 168.117254][ T6139] workingset_refault_anon 61 [ 168.121870][ T6139] workingset_refault_file 0 [ 168.126359][ T6139] swap 127901696 [ 168.130171][ T6139] swapcached 53248 [ 168.134010][ T6139] pgpgin 249585 [ 168.137462][ T6139] pgpgout 173296 [ 168.141195][ T6139] pgfault 64071 [ 168.144657][ T6139] pgmajfault 50 [ 168.148109][ T6139] inactive_anon 245657600 [ 168.152647][ T6139] active_anon 5783552 [ 168.156616][ T6139] inactive_file 0 [ 168.160279][ T6139] active_file 0 [ 168.163743][ T6139] unevictable 63131648 [ 168.167796][ T6139] hierarchical_memory_limit 314572800 [ 168.173215][ T6139] hierarchical_memsw_limit 9223372036854771712 [ 168.179390][ T6139] total_cache 314458112 [ 168.183548][ T6139] total_rss 106496 [ 168.187269][ T6139] total_rss_huge 0 [ 168.191014][ T6139] total_shmem 251326464 [ 168.195173][ T6139] total_mapped_file 0 [ 168.199184][ T6139] total_dirty 0 [ 168.202650][ T6139] total_writeback 0 [ 168.206442][ T6139] total_workingset_refault_anon 61 [ 168.211575][ T6139] total_workingset_refault_file 0 [ 168.216607][ T6139] total_swap 127901696 [ 168.220692][ T6139] total_swapcached 53248 [ 168.224969][ T6139] total_pgpgin 249585 [ 168.228920][ T6497] kvm: pic: non byte write [ 168.228974][ T6139] total_pgpgout 173296 [ 168.237378][ T6139] total_pgfault 64071 [ 168.241363][ T6139] total_pgmajfault 50 [ 168.245328][ T6139] total_inactive_anon 245657600 [ 168.250171][ T6139] total_active_anon 5783552 [ 168.254655][ T6139] total_inactive_file 0 [ 168.258829][ T6139] total_active_file 0 [ 168.262795][ T6139] total_unevictable 63131648 [ 168.267382][ T6139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6134,uid=0 [ 168.284253][ T6139] Memory cgroup out of memory: Killed process 6134 (syz.5.1887) total-vm:90296kB, anon-rss:1172kB, file-rss:57520kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 168.448210][ T4269] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 168.478257][ T4269] CPU: 1 UID: 0 PID: 4269 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 168.478288][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.478300][ T4269] Call Trace: [ 168.478306][ T4269] [ 168.478314][ T4269] __dump_stack+0x21/0x30 [ 168.478343][ T4269] dump_stack_lvl+0x10c/0x190 [ 168.478369][ T4269] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.478391][ T4269] ? ___ratelimit+0x3f7/0x5a0 [ 168.478417][ T4269] dump_stack+0x19/0x20 [ 168.478439][ T4269] dump_header+0xd7/0x490 [ 168.478457][ T4269] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 168.478481][ T4269] oom_kill_process+0x35d/0x640 [ 168.478503][ T4269] ? sched_clock_cpu+0x75/0x400 [ 168.478528][ T4269] out_of_memory+0x659/0xa80 [ 168.478549][ T4269] ? __cfi_out_of_memory+0x10/0x10 [ 168.478569][ T4269] ? mutex_lock_killable+0x92/0x1c0 [ 168.478588][ T4269] ? __cfi_mutex_lock_killable+0x10/0x10 [ 168.478608][ T4269] mem_cgroup_out_of_memory+0x279/0x350 [ 168.478627][ T4269] ? drain_obj_stock+0xed0/0xed0 [ 168.478646][ T4269] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 168.478664][ T4269] try_charge_memcg+0x8f7/0xde0 [ 168.478688][ T4269] ? shrink_node+0x3289/0x4370 [ 168.478705][ T4269] ? __cfi_try_charge_memcg+0x10/0x10 [ 168.478727][ T4269] ? __alloc_pages_noprof+0x31f/0x7b0 [ 168.478752][ T4269] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 168.478777][ T4269] __mem_cgroup_charge+0xf6/0x410 [ 168.478802][ T4269] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 168.478829][ T4269] folio_prealloc+0x67/0x240 [ 168.478851][ T4269] do_wp_page+0x1885/0x2ed0 [ 168.478870][ T4269] ? cgroup_rstat_updated+0x132/0x7f0 [ 168.478895][ T4269] ? copy_fpstate_to_sigframe+0x3d1/0xb80 [ 168.478918][ T4269] ? folio_put+0x90/0x90 [ 168.478936][ T4269] ? __cfi__raw_spin_lock+0x10/0x10 [ 168.478958][ T4269] ? __pte_offset_map+0x1b0/0x230 [ 168.478983][ T4269] ? pte_offset_map_rw_nolock+0xba/0x110 [ 168.479009][ T4269] handle_mm_fault+0xff7/0x1b90 [ 168.479032][ T4269] ? __cfi_handle_mm_fault+0x10/0x10 [ 168.479052][ T4269] ? find_vma+0xcd/0x110 [ 168.479070][ T4269] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 168.479090][ T4269] do_user_addr_fault+0x4ca/0x1200 [ 168.479117][ T4269] exc_page_fault+0x59/0xc0 [ 168.479137][ T4269] asm_exc_page_fault+0x2b/0x30 [ 168.479155][ T4269] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 168.479176][ T4269] Code: ff c7 48 ff c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 90 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 168.479199][ T4269] RSP: 0018:ffffc9000e79f938 EFLAGS: 00050206 [ 168.479217][ T4269] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000340 [ 168.479230][ T4269] RDX: ffff88811e333900 RSI: 000000000000000e RDI: 00007ffebbcc3f80 [ 168.479245][ T4269] RBP: ffffc9000e79fb30 R08: ffff88811e333907 R09: 1ffff11023c66720 [ 168.479260][ T4269] R10: dffffc0000000000 R11: ffffed1023c66721 R12: ffff88811e333900 [ 168.479275][ T4269] R13: 00007ffebbcc3f80 R14: ffff88811e334750 R15: dffffc0000000000 [ 168.479293][ T4269] ? copy_fpstate_to_sigframe+0x4ba/0xb80 [ 168.479315][ T4269] ? __dequeue_signal+0x50e/0x680 [ 168.479335][ T4269] ? dequeue_signal+0xf7/0x4f0 [ 168.479354][ T4269] ? get_signal+0x51c/0x14f0 [ 168.479376][ T4269] ? copy_fpstate_to_sigframe+0x174/0xb80 [ 168.479399][ T4269] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 168.479425][ T4269] ? fpu__alloc_mathframe+0xb8/0x160 [ 168.479448][ T4269] get_sigframe+0x58e/0x7d0 [ 168.479473][ T4269] ? __cfi_get_sigframe+0x10/0x10 [ 168.479498][ T4269] ? __dequeue_signal+0x50e/0x680 [ 168.479518][ T4269] x64_setup_rt_frame+0x15d/0xcc0 [ 168.479544][ T4269] ? get_signal+0x1098/0x14f0 [ 168.479567][ T4269] ? _raw_spin_unlock_irq+0x45/0x70 [ 168.479590][ T4269] ? get_signal+0x1250/0x14f0 [ 168.479612][ T4269] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 168.479640][ T4269] arch_do_signal_or_restart+0x31d/0x720 [ 168.479666][ T4269] ? __cfi___x64_sys_clone+0x10/0x10 [ 168.479688][ T4269] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 168.479717][ T4269] irqentry_exit_to_user_mode+0x4e/0xb0 [ 168.479737][ T4269] irqentry_exit+0x16/0x60 [ 168.479755][ T4269] exc_page_fault+0x66/0xc0 [ 168.479773][ T4269] asm_exc_page_fault+0x2b/0x30 [ 168.479790][ T4269] RIP: 0033:0x7fa503b85988 [ 168.479816][ T4269] Code: 84 e4 74 66 e8 89 04 00 00 41 89 c4 85 c0 0f 84 4e 01 00 00 49 c7 c5 a8 ff ff ff 64 45 8b 75 00 48 89 da 89 ee bf 02 00 00 00 93 09 00 00 45 85 e4 79 05 64 45 89 75 00 48 8b 84 24 c8 00 00 [ 168.479832][ T4269] RSP: 002b:00007ffebbcc4370 EFLAGS: 00010202 [ 168.479847][ T4269] RAX: 0000000000000249 RBX: 0000000000000000 RCX: 00007fa503b85e13 [ 168.479860][ T4269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 168.479872][ T4269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 168.479884][ T4269] R10: 000055556b1997d0 R11: 0000000000000246 R12: 0000000000000249 [ 168.479898][ T4269] R13: ffffffffffffffa8 R14: 0000000000000002 R15: 00007ffebbcc4500 [ 168.479914][ T4269] [ 168.952871][ T4269] memory: usage 276212kB, limit 307200kB, failcnt 43458 [ 168.962348][ T4269] memory+swap: usage 394984kB, limit 9007199254740988kB, failcnt 0 [ 168.978942][ T4269] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 168.993526][ T4269] Memory cgroup stats for /syz5: [ 168.993639][ T4269] cache 276389888 [ 169.007630][ T4269] rss 98304 [ 169.014017][ T4269] rss_huge 0 [ 169.021802][ T4269] shmem 213258240 [ 169.028379][ T4269] mapped_file 0 [ 169.035562][ T4269] dirty 0 [ 169.054765][ T4269] writeback 0 [ 169.068398][ T4269] workingset_refault_anon 61 [ 169.092213][ T4269] workingset_refault_file 0 [ 169.119160][ T4269] swap 127938560 [ 169.132887][ T4269] swapcached 57344 [ 169.169289][ T6516] 9pnet: Could not find request transport: rdma [ 169.197436][ T4269] pgpgin 249586 [ 169.218378][ T4269] pgpgout 182592 [ 169.222449][ T4269] pgfault 64071 [ 169.226260][ T4269] pgmajfault 50 [ 169.229995][ T4269] inactive_anon 197124096 [ 169.234474][ T4269] active_anon 15912960 [ 169.238596][ T4269] inactive_file 0 [ 169.244089][ T4269] active_file 0 [ 169.247573][ T4269] unevictable 63131648 [ 169.251741][ T4269] hierarchical_memory_limit 314572800 [ 169.257129][ T4269] hierarchical_memsw_limit 9223372036854771712 [ 169.263332][ T4269] total_cache 276389888 [ 169.267484][ T4269] total_rss 98304 [ 169.271135][ T4269] total_rss_huge 0 [ 169.274852][ T4269] total_shmem 213258240 [ 169.279057][ T4269] total_mapped_file 0 [ 169.283035][ T4269] total_dirty 0 [ 169.286485][ T4269] total_writeback 0 [ 169.290292][ T4269] total_workingset_refault_anon 61 [ 169.295385][ T4269] total_workingset_refault_file 0 [ 169.300421][ T4269] total_swap 127938560 [ 169.304509][ T4269] total_swapcached 57344 [ 169.308766][ T4269] total_pgpgin 249586 [ 169.312740][ T4269] total_pgpgout 182592 [ 169.316799][ T4269] total_pgfault 64071 [ 169.320811][ T4269] total_pgmajfault 50 [ 169.324779][ T4269] total_inactive_anon 197124096 [ 169.329627][ T4269] total_active_anon 15912960 [ 169.334200][ T4269] total_inactive_file 0 [ 169.338322][ T4269] total_active_file 0 [ 169.342305][ T4269] total_unevictable 63131648 [ 169.346878][ T4269] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6133,uid=0 [ 169.361674][ T4269] Memory cgroup out of memory: Killed process 6133 (syz.5.1887) total-vm:90296kB, anon-rss:1172kB, file-rss:57520kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 169.510545][ T6139] syz.5.1887 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 169.520209][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.5.1887 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 169.520238][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.520251][ T6139] Call Trace: [ 169.520258][ T6139] [ 169.520266][ T6139] __dump_stack+0x21/0x30 [ 169.520295][ T6139] dump_stack_lvl+0x10c/0x190 [ 169.520319][ T6139] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.520343][ T6139] ? ___ratelimit+0x3f7/0x5a0 [ 169.520369][ T6139] dump_stack+0x19/0x20 [ 169.520392][ T6139] dump_header+0xd7/0x490 [ 169.520411][ T6139] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 169.520435][ T6139] oom_kill_process+0x35d/0x640 [ 169.520458][ T6139] ? sched_clock_cpu+0x75/0x400 [ 169.520482][ T6139] out_of_memory+0x659/0xa80 [ 169.520503][ T6139] ? __cfi_out_of_memory+0x10/0x10 [ 169.520524][ T6139] ? mutex_lock_killable+0x92/0x1c0 [ 169.520543][ T6139] ? __cfi_mutex_lock_killable+0x10/0x10 [ 169.520563][ T6139] mem_cgroup_out_of_memory+0x279/0x350 [ 169.520582][ T6139] ? drain_obj_stock+0xed0/0xed0 [ 169.520600][ T6139] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 169.520618][ T6139] try_charge_memcg+0x8f7/0xde0 [ 169.520642][ T6139] ? __cfi_try_charge_memcg+0x10/0x10 [ 169.520665][ T6139] ? __alloc_pages_noprof+0x31f/0x7b0 [ 169.520689][ T6139] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 169.520715][ T6139] __mem_cgroup_charge+0xf6/0x410 [ 169.520741][ T6139] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 169.520767][ T6139] ? do_pte_missing+0x2bdb/0x4240 [ 169.520791][ T6139] shmem_alloc_and_add_folio+0x86d/0x1050 [ 169.520816][ T6139] ? put_swap_device+0x130/0x130 [ 169.520845][ T6139] ? shmem_huge_global_enabled+0x2da/0x360 [ 169.520866][ T6139] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 169.520887][ T6139] ? __kasan_check_write+0x18/0x20 [ 169.520913][ T6139] ? _raw_spin_lock+0x8c/0x120 [ 169.520935][ T6139] shmem_get_folio_gfp+0x5f0/0x1380 [ 169.520958][ T6139] ? shmem_get_folio+0xc0/0xc0 [ 169.520976][ T6139] ? follow_page_pte+0xa5c/0xb90 [ 169.521000][ T6139] ? inode_to_bdi+0x6d/0x100 [ 169.521025][ T6139] shmem_write_begin+0xf4/0x270 [ 169.521048][ T6139] generic_perform_write+0x330/0x960 [ 169.521076][ T6139] ? __cfi_generic_perform_write+0x10/0x10 [ 169.521101][ T6139] ? down_write+0xe9/0x2a0 [ 169.521121][ T6139] ? file_update_time+0xa3/0x220 [ 169.521144][ T6139] shmem_file_write_iter+0x105/0x130 [ 169.521168][ T6139] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 169.521192][ T6139] __kernel_write_iter+0x41a/0x8e0 [ 169.521209][ T6139] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 169.521233][ T6139] ? __cfi___kernel_write_iter+0x10/0x10 [ 169.521250][ T6139] ? get_dump_page+0x160/0x220 [ 169.521273][ T6139] ? __asan_memset+0x39/0x50 [ 169.521290][ T6139] ? iov_iter_bvec+0xc0/0x180 [ 169.521313][ T6139] dump_user_range+0xb06/0xdf0 [ 169.521333][ T6139] ? __cfi_dump_emit+0x10/0x10 [ 169.521351][ T6139] ? __cfi_dump_user_range+0x10/0x10 [ 169.521369][ T6139] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 169.521396][ T6139] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 169.521422][ T6139] ? elf_core_dump+0x2368/0x3800 [ 169.521444][ T6139] elf_core_dump+0x2ccc/0x3800 [ 169.521469][ T6139] ? __cfi_elf_core_dump+0x10/0x10 [ 169.521496][ T6139] ? dump_interrupted+0xf0/0xf0 [ 169.521522][ T6139] ? 0xffffffffff600000 [ 169.521538][ T6139] do_coredump+0x1bfa/0x2bd0 [ 169.521567][ T6139] ? __cfi_do_coredump+0x10/0x10 [ 169.521593][ T6139] ? asm_exc_general_protection+0x2b/0x30 [ 169.521620][ T6139] ? __kasan_slab_free+0x6a/0x80 [ 169.521640][ T6139] ? kmem_cache_free+0x1c1/0x510 [ 169.521658][ T6139] ? get_signal+0xa75/0x14f0 [ 169.521681][ T6139] get_signal+0x11fd/0x14f0 [ 169.521707][ T6139] arch_do_signal_or_restart+0x96/0x720 [ 169.521733][ T6139] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 169.521760][ T6139] ? fixup_iopl_exception+0xdd/0x2e0 [ 169.521779][ T6139] irqentry_exit_to_user_mode+0x4e/0xb0 [ 169.521799][ T6139] irqentry_exit+0x16/0x60 [ 169.521819][ T6139] exc_general_protection+0x15a/0x1f0 [ 169.521849][ T6139] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 169.521872][ T6139] asm_exc_general_protection+0x2b/0x30 [ 169.521890][ T6139] RIP: 0033:0x7fa503b8f6d1 [ 169.521906][ T6139] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 169.521922][ T6139] RSP: 002b:0000200000000090 EFLAGS: 00010217 [ 169.521941][ T6139] RAX: 0000000000000000 RBX: 00007fa503de6090 RCX: 00007fa503b8f6c9 [ 169.521956][ T6139] RDX: 00002000000000c0 RSI: 0000200000000090 RDI: 0000000000800400 [ 169.521971][ T6139] RBP: 00007fa503c11f91 R08: 0000200000000180 R09: 0000200000000180 [ 169.521986][ T6139] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 169.521999][ T6139] R13: 00007fa503de6128 R14: 00007fa503de6090 R15: 00007ffebbcc40e8 [ 169.522016][ T6139] [ 169.522024][ T6139] memory: usage 305404kB, limit 307200kB, failcnt 45647 [ 169.992841][ T66] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 170.000825][ T6139] memory+swap: usage 432024kB, limit 9007199254740988kB, failcnt 0 [ 170.009727][ T6139] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.016589][ T6139] Memory cgroup stats for /syz5: [ 170.016722][ T6139] cache 314335232 [ 170.025282][ T6139] rss 94208 [ 170.028409][ T6139] rss_huge 0 [ 170.031594][ T6139] shmem 251203584 [ 170.035216][ T6139] mapped_file 0 [ 170.038685][ T6139] dirty 0 [ 170.041609][ T6139] writeback 0 [ 170.044884][ T6139] workingset_refault_anon 71 [ 170.053570][ T6139] workingset_refault_file 0 [ 170.058072][ T6139] swap 127938560 [ 170.069806][ T6139] swapcached 57344 [ 170.073639][ T6139] pgpgin 267843 [ 170.077141][ T6139] pgpgout 191554 [ 170.081103][ T6139] pgfault 64840 [ 170.084635][ T6139] pgmajfault 55 [ 170.088214][ T6139] inactive_anon 91553792 [ 170.092616][ T6139] active_anon 159031296 [ 170.096826][ T6139] inactive_file 0 [ 170.100515][ T6139] active_file 0 [ 170.104196][ T6139] unevictable 63131648 [ 170.108314][ T6139] hierarchical_memory_limit 314572800 [ 170.113758][ T6139] hierarchical_memsw_limit 9223372036854771712 [ 170.120708][ T6139] total_cache 314335232 [ 170.131949][ T6139] total_rss 94208 [ 170.135637][ T6139] total_rss_huge 0 [ 170.140444][ T6139] total_shmem 251203584 [ 170.144634][ T6139] total_mapped_file 0 [ 170.159418][ T66] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 170.167815][ T66] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 170.178510][ T66] usb 2-1: config 201 has no interface number 0 [ 170.184962][ T66] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 170.196893][ T6139] total_dirty 0 [ 170.200599][ T66] usb 2-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.214068][ T66] usb 2-1: config 201 interface 249 has no altsetting 0 [ 170.221816][ T6139] total_writeback 0 [ 170.226047][ T6139] total_workingset_refault_anon 71 [ 170.231260][ T6139] total_workingset_refault_file 0 [ 170.236397][ T6139] total_swap 127938560 [ 170.240566][ T6139] total_swapcached 57344 [ 170.244934][ T6139] total_pgpgin 267843 [ 170.249007][ T6139] total_pgpgout 191554 [ 170.253242][ T6139] total_pgfault 64840 [ 170.257310][ T66] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 170.266432][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.274591][ T66] usb 2-1: Product: syz [ 170.279105][ T66] usb 2-1: Manufacturer: syz [ 170.283702][ T66] usb 2-1: SerialNumber: syz [ 170.289193][ T6139] total_pgmajfault 55 [ 170.293208][ T6139] total_inactive_anon 91553792 [ 170.304312][ T6139] total_active_anon 159031296 [ 170.310029][ T6139] total_inactive_file 0 [ 170.314236][ T6139] total_active_file 0 [ 170.318287][ T6139] total_unevictable 63131648 [ 170.323200][ T6139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6147,uid=0 [ 170.338573][ T6139] Memory cgroup out of memory: OOM victim 6147 (syz.5.1887) is already exiting. Skip killing the task [ 170.349900][ T6542] 9pnet_fd: Insufficient options for proto=fd [ 170.361122][ T6129] syz.5.1887 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 170.436898][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.5.1887 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 170.436929][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.436941][ T6129] Call Trace: [ 170.436948][ T6129] [ 170.436956][ T6129] __dump_stack+0x21/0x30 [ 170.436985][ T6129] dump_stack_lvl+0x10c/0x190 [ 170.437016][ T6129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.437039][ T6129] ? ___ratelimit+0x3f7/0x5a0 [ 170.437066][ T6129] dump_stack+0x19/0x20 [ 170.437088][ T6129] dump_header+0xd7/0x490 [ 170.437106][ T6129] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 170.437130][ T6129] oom_kill_process+0x35d/0x640 [ 170.437151][ T6129] ? sched_clock_cpu+0x75/0x400 [ 170.437177][ T6129] out_of_memory+0x659/0xa80 [ 170.437199][ T6129] ? __cfi_out_of_memory+0x10/0x10 [ 170.437220][ T6129] ? mutex_lock_killable+0x104/0x1c0 [ 170.437239][ T6129] ? __cfi_mutex_lock_killable+0x10/0x10 [ 170.437259][ T6129] mem_cgroup_out_of_memory+0x279/0x350 [ 170.437279][ T6129] ? drain_obj_stock+0xed0/0xed0 [ 170.437298][ T6129] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 170.437317][ T6129] try_charge_memcg+0x8f7/0xde0 [ 170.437342][ T6129] ? __cfi_try_charge_memcg+0x10/0x10 [ 170.437365][ T6129] ? __alloc_pages_noprof+0x31f/0x7b0 [ 170.437391][ T6129] ? _raw_spin_lock+0x8c/0x120 [ 170.437413][ T6129] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 170.437438][ T6129] __mem_cgroup_charge+0xf6/0x410 [ 170.437463][ T6129] ? __schedule+0x132a/0x1df0 [ 170.437487][ T6129] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 170.437514][ T6129] shmem_alloc_and_add_folio+0x86d/0x1050 [ 170.437537][ T6129] ? put_swap_device+0x130/0x130 [ 170.437558][ T6129] ? shmem_huge_global_enabled+0x2da/0x360 [ 170.437578][ T6129] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 170.437598][ T6129] ? __kasan_check_write+0x18/0x20 [ 170.437624][ T6129] ? _raw_spin_lock+0x8c/0x120 [ 170.437647][ T6129] shmem_get_folio_gfp+0x5f0/0x1380 [ 170.437669][ T6129] ? shmem_get_folio+0xc0/0xc0 [ 170.437687][ T6129] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 170.437712][ T6129] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 170.437737][ T6129] ? inode_to_bdi+0x6d/0x100 [ 170.437761][ T6129] shmem_write_begin+0xf4/0x270 [ 170.437783][ T6129] generic_perform_write+0x330/0x960 [ 170.437810][ T6129] ? __cfi_generic_perform_write+0x10/0x10 [ 170.437835][ T6129] ? down_write+0xe9/0x2a0 [ 170.437853][ T6129] ? mnt_get_write_access_file+0x1af/0x3b0 [ 170.437876][ T6129] ? mnt_put_write_access_file+0xc2/0x100 [ 170.437898][ T6129] ? file_update_time+0x1ef/0x220 [ 170.437922][ T6129] shmem_file_write_iter+0x105/0x130 [ 170.437949][ T6129] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 170.437973][ T6129] __kernel_write_iter+0x41a/0x8e0 [ 170.437997][ T6129] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 170.438021][ T6129] ? __cfi___kernel_write_iter+0x10/0x10 [ 170.438038][ T6129] ? get_dump_page+0x160/0x220 [ 170.438061][ T6129] ? __asan_memset+0x39/0x50 [ 170.438078][ T6129] ? iov_iter_bvec+0xc0/0x180 [ 170.438100][ T6129] dump_user_range+0xb06/0xdf0 [ 170.438119][ T6129] ? __cfi_dump_emit+0x10/0x10 [ 170.438136][ T6129] ? __cfi_dump_user_range+0x10/0x10 [ 170.438154][ T6129] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 170.438180][ T6129] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 170.438205][ T6129] ? elf_core_dump+0x2368/0x3800 [ 170.438226][ T6129] elf_core_dump+0x2ccc/0x3800 [ 170.438250][ T6129] ? __cfi_elf_core_dump+0x10/0x10 [ 170.438277][ T6129] ? dump_interrupted+0xf0/0xf0 [ 170.438303][ T6129] ? 0xffffffffff600000 [ 170.438319][ T6129] do_coredump+0x1bfa/0x2bd0 [ 170.438347][ T6129] ? __cfi_do_coredump+0x10/0x10 [ 170.438370][ T6129] ? asm_exc_general_protection+0x2b/0x30 [ 170.438393][ T6129] ? __kasan_slab_free+0x6a/0x80 [ 170.438411][ T6129] ? kmem_cache_free+0x1c1/0x510 [ 170.438428][ T6129] ? get_signal+0xa75/0x14f0 [ 170.438451][ T6129] get_signal+0x11fd/0x14f0 [ 170.438476][ T6129] arch_do_signal_or_restart+0x96/0x720 [ 170.438503][ T6129] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 170.438530][ T6129] ? fixup_iopl_exception+0xdd/0x2e0 [ 170.438549][ T6129] irqentry_exit_to_user_mode+0x4e/0xb0 [ 170.438569][ T6129] irqentry_exit+0x16/0x60 [ 170.438587][ T6129] exc_general_protection+0x15a/0x1f0 [ 170.438613][ T6129] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 170.438637][ T6129] asm_exc_general_protection+0x2b/0x30 [ 170.438656][ T6129] RIP: 0033:0x7fa503b8f6d1 [ 170.438672][ T6129] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 170.438689][ T6129] RSP: 002b:0000200000000090 EFLAGS: 00010217 [ 170.438707][ T6129] RAX: 0000000000000000 RBX: 00007fa503de6090 RCX: 00007fa503b8f6c9 [ 170.438722][ T6129] RDX: 00002000000000c0 RSI: 0000200000000090 RDI: 0000000000800400 [ 170.438736][ T6129] RBP: 00007fa503c11f91 R08: 0000200000000180 R09: 0000200000000180 [ 170.438750][ T6129] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 170.438764][ T6129] R13: 00007fa503de6128 R14: 00007fa503de6090 R15: 00007ffebbcc40e8 [ 170.438781][ T6129] [ 170.925152][ T6129] memory: usage 271484kB, limit 307200kB, failcnt 47650 [ 170.925857][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.932949][ T6129] memory+swap: usage 379436kB, limit 9007199254740988kB, failcnt 0 [ 170.948422][ T6129] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.956693][ T6129] Memory cgroup stats for /syz5: [ 170.956812][ T6129] cache 277446656 [ 170.962835][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.984051][ T36] audit: type=1400 audit(1762390107.160:62504): avc: denied { audit_read } for pid=6527 comm="syz.1.2003" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.988958][ T6129] rss 114688 [ 171.011163][ T6129] rss_huge 0 [ 171.014401][ T6129] shmem 214315008 [ 171.018056][ T6129] mapped_file 0 [ 171.021867][ T6129] dirty 0 [ 171.024846][ T6129] writeback 0 [ 171.028158][ T6129] workingset_refault_anon 104 [ 171.032948][ T6129] workingset_refault_file 0 [ 171.037498][ T6129] swap 110796800 [ 171.041155][ T6129] swapcached 131072 [ 171.045037][ T6129] pgpgin 282304 [ 171.051548][ T6129] pgpgout 215006 [ 171.055179][ T6129] pgfault 65740 [ 171.058728][ T6129] pgmajfault 83 [ 171.062219][ T6129] inactive_anon 39440384 [ 171.066509][ T6129] active_anon 175173632 [ 171.070746][ T6129] inactive_file 0 [ 171.074423][ T6129] active_file 0 [ 171.077939][ T6129] unevictable 63131648 [ 171.082063][ T6129] hierarchical_memory_limit 314572800 [ 171.088893][ T6129] hierarchical_memsw_limit 9223372036854771712 [ 171.095091][ T6129] total_cache 277446656 [ 171.099323][ T6129] total_rss 114688 [ 171.103084][ T6129] total_rss_huge 0 [ 171.106829][ T6129] total_shmem 214315008 [ 171.111067][ T6129] total_mapped_file 0 [ 171.115089][ T6129] total_dirty 0 [ 171.119114][ T66] usb 2-1: USB disconnect, device number 53 [ 171.120210][ T6129] total_writeback 0 [ 171.129745][ T6129] total_workingset_refault_anon 104 [ 171.135459][ T6129] total_workingset_refault_file 0 [ 171.140523][ T6129] total_swap 110796800 [ 171.142760][ T36] audit: type=1400 audit(1762390107.320:62505): avc: denied { write } for pid=6568 comm="syz.4.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 171.144577][ T6129] total_swapcached 131072 [ 171.144587][ T6129] total_pgpgin 282304 [ 171.144594][ T6129] total_pgpgout 215006 [ 171.176102][ T6129] total_pgfault 65740 [ 171.180115][ T6129] total_pgmajfault 83 [ 171.184081][ T6129] total_inactive_anon 39440384 [ 171.188841][ T6129] total_active_anon 175173632 [ 171.193500][ T6129] total_inactive_file 0 [ 171.197627][ T6129] total_active_file 0 [ 171.201754][ T6129] total_unevictable 63131648 [ 171.206342][ T6129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6143,uid=0 [ 171.221231][ T6129] Memory cgroup out of memory: Killed process 6143 (syz.5.1887) total-vm:90296kB, anon-rss:1172kB, file-rss:57520kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 171.422890][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.466794][ T6579] erspan0: entered promiscuous mode [ 171.478484][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.487400][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.528493][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.537422][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.588950][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.597880][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.683072][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.721504][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 171.730727][ T6584] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 171.739400][ T6584] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 171.756461][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 172.061142][ T6129] syz.5.1887 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 172.070815][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.5.1887 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 172.070843][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.070857][ T6129] Call Trace: [ 172.070860][ T6129] [ 172.070866][ T6129] __dump_stack+0x21/0x30 [ 172.070883][ T6129] dump_stack_lvl+0x10c/0x190 [ 172.070896][ T6129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.070909][ T6129] ? ___ratelimit+0x3f7/0x5a0 [ 172.070923][ T6129] dump_stack+0x19/0x20 [ 172.070938][ T6129] dump_header+0xd7/0x490 [ 172.070948][ T6129] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 172.070962][ T6129] oom_kill_process+0x35d/0x640 [ 172.070973][ T6129] ? sched_clock_cpu+0x75/0x400 [ 172.070987][ T6129] out_of_memory+0x659/0xa80 [ 172.070998][ T6129] ? __cfi_out_of_memory+0x10/0x10 [ 172.071009][ T6129] ? mutex_lock_killable+0x92/0x1c0 [ 172.071020][ T6129] ? __cfi_mutex_lock_killable+0x10/0x10 [ 172.071030][ T6129] mem_cgroup_out_of_memory+0x279/0x350 [ 172.071041][ T6129] ? drain_obj_stock+0xed0/0xed0 [ 172.071051][ T6129] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 172.071060][ T6129] try_charge_memcg+0x8f7/0xde0 [ 172.071073][ T6129] ? __cfi_try_charge_memcg+0x10/0x10 [ 172.071085][ T6129] ? __alloc_pages_noprof+0x31f/0x7b0 [ 172.071098][ T6129] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 172.071111][ T6129] ? __folio_batch_add_and_move+0x2ab/0x370 [ 172.071124][ T6129] __mem_cgroup_charge+0xf6/0x410 [ 172.071137][ T6129] ? _raw_spin_lock+0x8c/0x120 [ 172.071149][ T6129] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 172.071163][ T6129] shmem_alloc_and_add_folio+0x86d/0x1050 [ 172.071176][ T6129] ? put_swap_device+0x130/0x130 [ 172.071188][ T6129] ? shmem_huge_global_enabled+0x2da/0x360 [ 172.071199][ T6129] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 172.071210][ T6129] ? __kasan_check_write+0x18/0x20 [ 172.071224][ T6129] ? _raw_spin_lock+0x8c/0x120 [ 172.071236][ T6129] shmem_get_folio_gfp+0x5f0/0x1380 [ 172.071247][ T6129] ? shmem_get_folio+0xc0/0xc0 [ 172.071257][ T6129] ? follow_page_pte+0xa5c/0xb90 [ 172.071270][ T6129] ? inode_to_bdi+0x6d/0x100 [ 172.071282][ T6129] shmem_write_begin+0xf4/0x270 [ 172.071294][ T6129] generic_perform_write+0x330/0x960 [ 172.071309][ T6129] ? __cfi_generic_perform_write+0x10/0x10 [ 172.071322][ T6129] ? down_write+0xe9/0x2a0 [ 172.071332][ T6129] ? file_update_time+0xa3/0x220 [ 172.071344][ T6129] shmem_file_write_iter+0x105/0x130 [ 172.071357][ T6129] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 172.071370][ T6129] __kernel_write_iter+0x41a/0x8e0 [ 172.071379][ T6129] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 172.071392][ T6129] ? __cfi___kernel_write_iter+0x10/0x10 [ 172.071401][ T6129] ? get_dump_page+0x160/0x220 [ 172.071412][ T6129] ? __asan_memset+0x39/0x50 [ 172.071421][ T6129] ? iov_iter_bvec+0xc0/0x180 [ 172.071433][ T6129] dump_user_range+0xb06/0xdf0 [ 172.071443][ T6129] ? __cfi_dump_emit+0x10/0x10 [ 172.071452][ T6129] ? __cfi_dump_user_range+0x10/0x10 [ 172.071461][ T6129] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 172.071476][ T6129] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 172.071489][ T6129] ? elf_core_dump+0x2368/0x3800 [ 172.071500][ T6129] elf_core_dump+0x2ccc/0x3800 [ 172.071513][ T6129] ? __cfi_elf_core_dump+0x10/0x10 [ 172.071527][ T6129] ? dump_interrupted+0xf0/0xf0 [ 172.071540][ T6129] ? 0xffffffffff600000 [ 172.071548][ T6129] do_coredump+0x1bfa/0x2bd0 [ 172.071563][ T6129] ? __cfi_do_coredump+0x10/0x10 [ 172.071576][ T6129] ? asm_exc_general_protection+0x2b/0x30 [ 172.071590][ T6129] ? __kasan_slab_free+0x6a/0x80 [ 172.071603][ T6129] ? kmem_cache_free+0x1c1/0x510 [ 172.071613][ T6129] ? get_signal+0xa75/0x14f0 [ 172.071625][ T6129] get_signal+0x11fd/0x14f0 [ 172.071638][ T6129] arch_do_signal_or_restart+0x96/0x720 [ 172.071653][ T6129] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 172.071667][ T6129] ? fixup_iopl_exception+0xdd/0x2e0 [ 172.071679][ T6129] irqentry_exit_to_user_mode+0x4e/0xb0 [ 172.071698][ T6129] irqentry_exit+0x16/0x60 [ 172.071716][ T6129] exc_general_protection+0x15a/0x1f0 [ 172.071734][ T6129] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 172.071747][ T6129] asm_exc_general_protection+0x2b/0x30 [ 172.071757][ T6129] RIP: 0033:0x7fa503b8f6d1 [ 172.071767][ T6129] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 172.071776][ T6129] RSP: 002b:0000200000000090 EFLAGS: 00010217 [ 172.071787][ T6129] RAX: 0000000000000000 RBX: 00007fa503de6090 RCX: 00007fa503b8f6c9 [ 172.071795][ T6129] RDX: 00002000000000c0 RSI: 0000200000000090 RDI: 0000000000800400 [ 172.071804][ T6129] RBP: 00007fa503c11f91 R08: 0000200000000180 R09: 0000200000000180 [ 172.071817][ T6129] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 172.071830][ T6129] R13: 00007fa503de6128 R14: 00007fa503de6090 R15: 00007ffebbcc40e8 [ 172.071852][ T6129] [ 172.071869][ T6129] memory: usage 307200kB, limit 307200kB, failcnt 52409 [ 172.549974][ T6129] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 172.558398][ T6129] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 172.565342][ T6129] Memory cgroup stats for /syz5: [ 172.565515][ T6129] cache 314253312 [ 172.578392][ T6129] rss 282624 [ 172.583435][ T6129] rss_huge 0 [ 172.586636][ T6129] shmem 251121664 [ 172.590414][ T6129] mapped_file 0 [ 172.594045][ T6129] dirty 0 [ 172.597008][ T6129] writeback 0 [ 172.600325][ T6129] workingset_refault_anon 128 [ 172.604991][ T6129] workingset_refault_file 0 [ 172.609510][ T6129] swap 127946752 [ 172.613045][ T6129] swapcached 49152 [ 172.616757][ T6129] pgpgin 330052 [ 172.620239][ T6129] pgpgout 253763 [ 172.623774][ T6129] pgfault 67123 [ 172.625764][ T36] audit: type=1400 audit(1762390108.800:62506): avc: denied { read } for pid=6595 comm="syz.6.2026" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.627256][ T6129] pgmajfault 105 [ 172.653832][ T6129] inactive_anon 49283072 [ 172.654203][ T36] audit: type=1400 audit(1762390108.800:62507): avc: denied { open } for pid=6595 comm="syz.6.2026" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.658090][ T6129] active_anon 202158080 [ 172.658100][ T6129] inactive_file 0 [ 172.658107][ T6129] active_file 0 [ 172.693004][ T6129] unevictable 63131648 [ 172.697043][ T6129] hierarchical_memory_limit 314572800 [ 172.702417][ T6129] hierarchical_memsw_limit 9223372036854771712 [ 172.708979][ T6129] total_cache 314253312 [ 172.713262][ T6129] total_rss 282624 [ 172.717076][ T6129] total_rss_huge 0 [ 172.720830][ T6129] total_shmem 251121664 [ 172.724503][ T36] audit: type=1400 audit(1762390108.900:62508): avc: denied { remount } for pid=6601 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 172.725133][ T6129] total_mapped_file 0 [ 172.749117][ T6129] total_dirty 0 [ 172.753224][ T6129] total_writeback 0 [ 172.757134][ T6129] total_workingset_refault_anon 128 [ 172.762418][ T6129] total_workingset_refault_file 0 [ 172.767768][ T6129] total_swap 127946752 [ 172.771862][ T6129] total_swapcached 49152 [ 172.776095][ T6129] total_pgpgin 330052 [ 172.780090][ T6129] total_pgpgout 253763 [ 172.784142][ T6129] total_pgfault 67123 [ 172.788092][ T6129] total_pgmajfault 105 [ 172.792153][ T6129] total_inactive_anon 49283072 [ 172.796897][ T6129] total_active_anon 202158080 [ 172.801890][ T6129] total_inactive_file 0 [ 172.806043][ T6129] total_active_file 0 [ 172.808028][ T6605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:320 [ 172.810166][ T6129] total_unevictable 63131648 [ 172.823886][ T6129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6146,uid=0 [ 172.838749][ T6129] Memory cgroup out of memory: Killed process 6146 (syz.5.1887) total-vm:90296kB, anon-rss:1172kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 172.923211][ T6589] syz.5.2024 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 172.968380][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.5.2024 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 172.968410][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.968422][ T6589] Call Trace: [ 172.968428][ T6589] [ 172.968436][ T6589] __dump_stack+0x21/0x30 [ 172.968465][ T6589] dump_stack_lvl+0x10c/0x190 [ 172.968488][ T6589] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.968510][ T6589] ? ___ratelimit+0x3f7/0x5a0 [ 172.968536][ T6589] dump_stack+0x19/0x20 [ 172.968558][ T6589] dump_header+0xd7/0x490 [ 172.968577][ T6589] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 172.968601][ T6589] oom_kill_process+0x35d/0x640 [ 172.968623][ T6589] ? sched_clock_cpu+0x75/0x400 [ 172.968648][ T6589] out_of_memory+0x659/0xa80 [ 172.968669][ T6589] ? __cfi_out_of_memory+0x10/0x10 [ 172.968690][ T6589] ? mutex_lock_killable+0x92/0x1c0 [ 172.968708][ T6589] ? __cfi_mutex_lock_killable+0x10/0x10 [ 172.968727][ T6589] mem_cgroup_out_of_memory+0x279/0x350 [ 172.968746][ T6589] ? drain_obj_stock+0xed0/0xed0 [ 172.968769][ T6589] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 172.968788][ T6589] try_charge_memcg+0x8f7/0xde0 [ 172.968812][ T6589] ? __cfi_try_charge_memcg+0x10/0x10 [ 172.968835][ T6589] ? __alloc_pages_noprof+0x31f/0x7b0 [ 172.968860][ T6589] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 172.968883][ T6589] ? _raw_spin_lock+0x8c/0x120 [ 172.968906][ T6589] __mem_cgroup_charge+0xf6/0x410 [ 172.968930][ T6589] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 172.968957][ T6589] folio_prealloc+0x67/0x240 [ 172.968978][ T6589] do_wp_page+0x1885/0x2ed0 [ 172.968998][ T6589] ? cgroup_rstat_updated+0x132/0x7f0 [ 172.969024][ T6589] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 172.969048][ T6589] ? folio_put+0x90/0x90 [ 172.969067][ T6589] ? __cfi__raw_spin_lock+0x10/0x10 [ 172.969089][ T6589] ? __pte_offset_map+0x1b0/0x230 [ 172.969114][ T6589] ? pte_offset_map_rw_nolock+0xba/0x110 [ 172.969139][ T6589] handle_mm_fault+0xff7/0x1b90 [ 172.969162][ T6589] ? __cfi_handle_mm_fault+0x10/0x10 [ 172.969181][ T6589] ? lock_vma_under_rcu+0x49d/0x540 [ 172.969204][ T6589] ? __se_sys_futex+0x28f/0x300 [ 172.969225][ T6589] do_user_addr_fault+0x96c/0x1200 [ 172.969252][ T6589] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 172.969276][ T6589] exc_page_fault+0x59/0xc0 [ 172.969294][ T6589] asm_exc_page_fault+0x2b/0x30 [ 172.969313][ T6589] RIP: 0033:0x7fa503a4d75c [ 172.969330][ T6589] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 172.969346][ T6589] RSP: 002b:00007ffebbcc4118 EFLAGS: 00010246 [ 172.969364][ T6589] RAX: 0000000000000000 RBX: 00007fa504915720 RCX: 0000000000000000 [ 172.969378][ T6589] RDX: 0000000000001a2d RSI: ffffffff81e9da2d RDI: 0000000000000000 [ 172.969396][ T6589] RBP: ffffffff81e9da2d R08: 00007fa503dd0000 R09: 00007fa503dd2000 [ 172.969411][ T6589] R10: 0000000081e9da31 R11: 0000000000000000 R12: 0000000000000000 [ 172.969424][ T6589] R13: 0000000000000000 R14: ffffffff81e9da2d R15: 000000000000000c [ 172.969437][ T6589] ? getname_flags+0x8d/0x710 [ 172.969455][ T6589] ? getname_flags+0x8d/0x710 [ 172.969477][ T6589] ? getname_flags+0x8d/0x710 [ 172.969495][ T6589] [ 172.969503][ T6589] memory: usage 288228kB, limit 307200kB, failcnt 53239 [ 173.008397][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 173.103765][ T6589] memory+swap: usage 389552kB, limit 9007199254740988kB, failcnt 0 [ 173.278394][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 173.280839][ T6589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 173.289718][ T9] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 173.295227][ T6589] Memory cgroup stats for [ 173.303309][ T9] usb 2-1: config 0 has no interface number 0 [ 173.308459][ T6589] /syz5 [ 173.315318][ T9] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 173.323380][ T6589] : [ 173.338082][ T9] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 173.346554][ T6589] cache 287567872 [ 173.349089][ T9] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.360113][ T6589] rss 303104 [ 173.365261][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 173.373880][ T6589] rss_huge 0 [ 173.377151][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.386095][ T6589] shmem 224436224 [ 173.389874][ T9] usb 2-1: Product: syz [ 173.397272][ T6589] mapped_file 0 [ 173.400961][ T9] usb 2-1: Manufacturer: syz [ 173.404974][ T6589] dirty 0 [ 173.408493][ T9] usb 2-1: SerialNumber: syz [ 173.413036][ T6589] writeback 0 [ 173.426222][ T9] usb 2-1: config 0 descriptor?? [ 173.428231][ T6589] workingset_refault_anon 138 [ 173.436293][ T6602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.443408][ T6589] workingset_refault_file 0 [ 173.444385][ T6602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.455496][ T6589] swap 127934464 [ 173.467729][ T6589] swapcached 61440 [ 173.477959][ T6589] pgpgin 337485 [ 173.488984][ T6589] pgpgout 267711 [ 173.501164][ T6589] pgfault 67286 [ 173.511103][ T6589] pgmajfault 115 [ 173.521117][ T6589] inactive_anon 104628224 [ 173.535156][ T6589] active_anon 120016896 [ 173.547975][ T6589] inactive_file 0 [ 173.559182][ T6589] active_file 0 [ 173.570207][ T6589] unevictable 63131648 [ 173.580612][ T6589] hierarchical_memory_limit 314572800 [ 173.585997][ T6589] hierarchical_memsw_limit 9223372036854771712 [ 173.592364][ T6589] total_cache 287567872 [ 173.596526][ T6589] total_rss 303104 [ 173.602564][ T6589] total_rss_huge 0 [ 173.606341][ T6589] total_shmem 224436224 [ 173.610670][ T6589] total_mapped_file 0 [ 173.614708][ T6589] total_dirty 0 [ 173.618282][ T6589] total_writeback 0 [ 173.625300][ T6589] total_workingset_refault_anon 138 [ 173.630612][ T6589] total_workingset_refault_file 0 [ 173.635687][ T6589] total_swap 127934464 [ 173.639969][ T6589] total_swapcached 61440 [ 173.644216][ T6589] total_pgpgin 337485 [ 173.648239][ T6589] total_pgpgout 267711 [ 173.652536][ T6589] total_pgfault 67286 [ 173.656611][ T6602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.664371][ T6602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.674776][ T9] net1080 2-1:0.147 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, be:5a:ff:89:88:33 [ 173.686305][ T6589] total_pgmajfault 115 [ 173.697164][ T6589] total_inactive_anon 104628224 [ 173.702413][ T6589] total_active_anon 120016896 [ 173.707739][ T6589] total_inactive_file 0 [ 173.712006][ T6589] total_active_file 0 [ 173.716011][ T6589] total_unevictable 63131648 [ 173.720729][ T6589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1887,pid=6142,uid=0 [ 173.735655][ T6589] Memory cgroup out of memory: OOM victim 6142 (syz.5.1887) is already exiting. Skip killing the task [ 173.872929][ T9] usb 2-1: USB disconnect, device number 54 [ 173.879762][ T9] net1080 2-1:0.147 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 174.633489][ T36] audit: type=1400 audit(1762390110.810:62509): avc: denied { mount } for pid=6685 comm="syz.5.2049" name="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 174.656388][ T36] audit: type=1400 audit(1762390110.810:62510): avc: denied { search } for pid=6685 comm="syz.5.2049" name="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.678671][ T36] audit: type=1400 audit(1762390110.810:62511): avc: denied { setattr } for pid=6685 comm="syz.5.2049" name="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.701005][ T36] audit: type=1400 audit(1762390110.810:62512): avc: denied { write } for pid=6685 comm="syz.5.2049" name="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.723138][ T36] audit: type=1400 audit(1762390110.810:62513): avc: denied { add_name } for pid=6685 comm="syz.5.2049" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.743829][ T36] audit: type=1400 audit(1762390110.810:62514): avc: denied { create } for pid=6685 comm="syz.5.2049" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 174.828401][ T66] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 174.978397][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 174.984575][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.994682][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.004861][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.013896][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.021878][ T66] usb 2-1: Product: syz [ 175.026010][ T66] usb 2-1: Manufacturer: syz [ 175.030624][ T66] usb 2-1: SerialNumber: syz [ 175.202466][ T6695] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 175.237636][ T66] usb 2-1: 0:2 : does not exist [ 175.244652][ T66] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 175.255613][ T66] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 175.266292][ T66] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 175.277066][ T66] usb 2-1: USB disconnect, device number 55 [ 175.751589][ T6705] /dev/rnullb0: Can't open blockdev [ 175.841851][ T36] audit: type=1400 audit(1762390112.020:62515): avc: denied { setopt } for pid=6716 comm="syz.5.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.895254][ T6723] fuse: Unknown parameter 'îWßĚúzm>mş´' [ 175.901348][ T6723] SELinux: security_context_str_to_sid (sytem_uÝGĐą) failed with errno=-22 [ 175.929065][ T36] audit: type=1400 audit(1762390112.110:62516): avc: denied { getopt } for pid=6720 comm="syz.5.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.119611][ T36] audit: type=1400 audit(1762390112.300:62517): avc: denied { remount } for pid=6727 comm="syz.5.2064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 176.681923][ T36] audit: type=1400 audit(1762390112.860:62518): avc: denied { nlmsg_tty_audit } for pid=6731 comm="syz.1.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 176.724061][ T6735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.724363][ T6736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.731134][ T6736] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 176.737553][ T6736] rust_binder: Error while translating object. [ 176.746208][ T6736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.752422][ T6736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1490 [ 176.753263][ T6725] 9pnet_fd: p9_fd_create_tcp (6725): problem connecting socket to 127.0.0.1 [ 176.838189][ T6742] tipc: Started in network mode [ 176.843086][ T6742] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 176.852114][ T6742] tipc: Enabled bearer , priority 10 [ 176.893552][ T6746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.893673][ T6746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.281101][ T6778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.287841][ T6778] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 177.294304][ T6778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 177.302302][ T6778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1497 [ 177.353416][ T6785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.362740][ T6783] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 177.703111][ T6812] incfs: Options parsing error. -22 [ 177.716348][ T6812] incfs: mount failed -22 [ 177.799840][ T6816] overlayfs: failed to clone lowerpath [ 177.806056][ T6816] erofs: Unknown parameter 'mountinfo' [ 177.825609][ T6818] overlayfs: failed to clone upperpath [ 177.944890][ T6829] 9pnet_fd: Insufficient options for proto=fd [ 177.968396][ T66] tipc: Node number set to 4269801488 [ 178.091864][ T6859] 9pnet_fd: Insufficient options for proto=fd [ 178.268563][ T6874] overlay: ./file0 is not a directory [ 178.333329][ T6879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.333761][ T6879] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 178.372509][ T6891] rust_binder: Write failure EFAULT in pid:372 [ 178.397218][ T6893] input: syz0 as /devices/virtual/input/input25 [ 178.488758][ T6895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.554585][ T6898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.725366][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 178.868771][ T6913] __nla_validate_parse: 56 callbacks suppressed [ 178.868789][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2131'. [ 179.288417][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 179.438409][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 179.444659][ T10] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 179.452877][ T10] usb 2-1: config 0 has no interface number 0 [ 179.460225][ T10] usb 2-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 179.469291][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.477267][ T10] usb 2-1: Product: syz [ 179.481450][ T10] usb 2-1: Manufacturer: syz [ 179.486034][ T10] usb 2-1: SerialNumber: syz [ 179.491175][ T10] usb 2-1: config 0 descriptor?? [ 179.697917][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 179.697935][ T36] audit: type=1400 audit(1762390115.870:62533): avc: denied { append } for pid=6926 comm="syz.1.2135" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.697964][ T6927] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 179.734159][ T6927] rust_binder: Write failure EINVAL in pid:1517 [ 179.734636][ T330] usb 2-1: USB disconnect, device number 56 [ 179.911333][ T6939] vcan0: entered allmulticast mode [ 179.916614][ T6939] vcan0: left allmulticast mode [ 180.079958][ T36] audit: type=1326 audit(1762390116.260:62534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.5.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa503b8f6c9 code=0x7fc00000 [ 180.125955][ T6947] batadv_slave_0: entered promiscuous mode [ 180.253475][ T6952] futex_wake_op: syz.1.2144 tries to shift op by 32; fix this program [ 180.262239][ T6952] overlayfs: missing 'lowerdir' [ 180.267568][ T36] audit: type=1400 audit(1762390116.440:62535): avc: denied { append } for pid=6951 comm="syz.1.2144" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.290859][ T6946] batadv_slave_0: left promiscuous mode [ 180.324246][ T36] audit: type=1400 audit(1762390116.500:62536): avc: denied { remount } for pid=6951 comm="syz.1.2144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.752343][ T6972] fuse: Unknown parameter 'ăgr up_id' [ 180.759213][ T6972] overlay: ./file0 is not a directory [ 180.772328][ T6974] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2151'. [ 181.722555][ T36] audit: type=1400 audit(1762390117.900:62537): avc: denied { create } for pid=7034 comm="syz.4.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 181.835600][ T7043] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.844352][ T36] audit: type=1400 audit(1762390118.020:62538): avc: denied { shutdown } for pid=7044 comm="syz.6.2174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.709410][ T36] audit: type=1326 audit(1762390118.890:62539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.6.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f23f8f6c9 code=0x7fc00000 [ 182.734404][ T36] audit: type=1400 audit(1762390118.910:62540): avc: denied { unmount } for pid=4274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 182.802850][ T7075] netlink: 'syz.6.2185': attribute type 4 has an invalid length. [ 182.815978][ T7075] netlink: 'syz.6.2185': attribute type 4 has an invalid length. [ 182.853054][ T7077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.904853][ T7077] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 182.923516][ T7080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.927262][ T7082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.945671][ T7086] x_tables: duplicate entry at hook 2 [ 183.239024][ T7096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.290215][ T7102] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 183.517818][ T36] audit: type=1400 audit(1762390119.690:62541): avc: denied { bind } for pid=7116 comm="syz.5.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.703403][ T36] audit: type=1400 audit(1762390119.880:62542): avc: denied { write } for pid=7141 comm="syz.5.2207" path="socket:[39263]" dev="sockfs" ino=39263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.734308][ T7146] 9pnet_fd: Insufficient options for proto=fd [ 183.938909][ T7150] /dev/rnullb0: Can't open blockdev [ 183.944807][ T7152] /dev/rnullb0: Can't open blockdev [ 184.018410][ T10] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 184.168405][ T10] usb 2-1: device descriptor read/64, error -71 [ 184.369452][ T7165] netlink: 'syz.5.2215': attribute type 4 has an invalid length. [ 184.377347][ T7165] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2215'. [ 184.400320][ T7167] 9pnet_fd: Insufficient options for proto=fd [ 184.418406][ T10] usb 2-1: device descriptor read/64, error -71 [ 184.668405][ T10] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 184.798410][ T10] usb 2-1: device descriptor read/64, error -71 [ 184.932210][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 184.932226][ T36] audit: type=1326 audit(1762390121.110:62544): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.6.2225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 185.038401][ T10] usb 2-1: device descriptor read/64, error -71 [ 185.148468][ T10] usb usb2-port1: attempt power cycle [ 185.488399][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 185.509343][ T10] usb 2-1: device descriptor read/8, error -71 [ 185.649356][ T10] usb 2-1: device descriptor read/8, error -71 [ 185.784543][ T36] audit: type=1400 audit(1762390121.960:62545): avc: denied { ioctl } for pid=7227 comm="syz.6.2237" path="socket:[39405]" dev="sockfs" ino=39405 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 185.888427][ T10] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 185.909546][ T10] usb 2-1: device descriptor read/8, error -71 [ 186.039414][ T10] usb 2-1: device descriptor read/8, error -71 [ 186.148464][ T10] usb usb2-port1: unable to enumerate USB device [ 186.494350][ T36] audit: type=1400 audit(1762390122.670:62546): avc: denied { watch_reads } for pid=7271 comm="syz.6.2252" path="/160" dev="tmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 186.569178][ T36] audit: type=1326 audit(1762390122.750:62547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7271 comm="syz.6.2252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 186.754016][ T7277] netlink: 'syz.4.2254': attribute type 4 has an invalid length. [ 186.762481][ T7277] netlink: 'syz.4.2254': attribute type 4 has an invalid length. [ 186.801456][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'. [ 186.816440][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'. [ 186.828266][ T7293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7293 comm=syz.5.2259 [ 186.844163][ T7293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2259'. [ 186.854996][ T7293] netlink: 'syz.5.2259': attribute type 19 has an invalid length. [ 186.901374][ T36] audit: type=1400 audit(1762390123.080:62548): avc: denied { read } for pid=7300 comm="syz.5.2262" name="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.923655][ T36] audit: type=1400 audit(1762390123.080:62549): avc: denied { open } for pid=7300 comm="syz.5.2262" path="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.945837][ T36] audit: type=1326 audit(1762390123.080:62550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c878f6c9 code=0x7fc00000 [ 186.969896][ T36] audit: type=1326 audit(1762390123.080:62551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c878f6c9 code=0x7fc00000 [ 186.993678][ T36] audit: type=1326 audit(1762390123.150:62553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c878f6c9 code=0x7fc00000 [ 187.018798][ T36] audit: type=1326 audit(1762390123.150:62552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.4.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c878f6c9 code=0x7fc00000 [ 187.103513][ T7330] netlink: 393 bytes leftover after parsing attributes in process `syz.5.2271'. [ 187.122412][ T7333] overlayfs: failed to clone upperpath [ 187.127627][ T7332] overlayfs: failed to clone upperpath [ 187.482031][ T7358] fuse: Unknown parameter '' [ 187.486862][ T7358] fuse: Unknown parameter '˙ô' [ 187.717590][ T7377] overlayfs: failed to clone lowerpath [ 187.761576][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.761605][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.768070][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.774563][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.781012][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.787437][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.793923][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.800799][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.810458][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.818940][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.825372][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.831997][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.838678][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.845172][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.851628][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.858094][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.864570][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.871202][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.877620][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.884084][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.890513][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.896958][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.903472][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.909937][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.916384][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.928156][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.934625][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.942358][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.949477][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.956069][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.962591][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.969087][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.975508][ T7386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.033179][ T7417] overlayfs: failed to clone upperpath [ 188.049762][ T7417] fuse: Bad value for 'fd' [ 188.535580][ T7421] overlayfs: failed to clone lowerpath [ 188.973530][ T7436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.974053][ T7436] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 188.980524][ T7436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 188.988575][ T7436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1567 [ 189.029193][ T7441] kvm: apic: phys broadcast and lowest prio [ 189.164047][ T7459] /dev/rnullb0: Can't open blockdev [ 189.184409][ T7466] overlayfs: failed to clone lowerpath [ 189.194035][ T7466] overlay: Unknown parameter 'fsname' [ 189.214984][ T7476] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 189.242539][ T7488] netlink: 'syz.4.2327': attribute type 4 has an invalid length. [ 189.250377][ T7488] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2327'. [ 189.307070][ T7499] rust_binder: Write failure EFAULT in pid:1593 [ 189.357917][ T7502] rust_binder: Write failure EINVAL in pid:1593 [ 189.591449][ T7510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.173504][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 190.173522][ T36] audit: type=1400 audit(1762390126.350:62576): avc: denied { setopt } for pid=7518 comm="syz.4.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 190.407028][ T7534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.407753][ T7535] rust_binder: Write failure EINVAL in pid:1604 [ 190.423795][ T7539] overlayfs: failed to clone upperpath [ 190.554480][ T7548] fuse: Bad value for 'fd' [ 190.624253][ T7555] netlink: 'syz.1.2350': attribute type 11 has an invalid length. [ 190.632535][ T7555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=7555 comm=syz.1.2350 [ 190.671205][ T36] audit: type=1400 audit(1762390126.850:62577): avc: denied { read } for pid=7562 comm="syz.5.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.768314][ T7590] overlayfs: failed to clone upperpath [ 190.888024][ T7608] cgroup: Name too long [ 190.974249][ T7629] netlink: 'syz.4.2375': attribute type 11 has an invalid length. [ 190.995367][ T36] audit: type=1400 audit(1762390127.170:62578): avc: denied { write } for pid=7630 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.098138][ T36] audit: type=1400 audit(1762390127.270:62579): avc: denied { map } for pid=7626 comm="syz.1.2374" path="socket:[41192]" dev="sockfs" ino=41192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 191.122775][ T36] audit: type=1400 audit(1762390127.270:62580): avc: denied { accept } for pid=7626 comm="syz.1.2374" path="socket:[41192]" dev="sockfs" ino=41192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 191.148934][ T36] audit: type=1400 audit(1762390127.330:62581): avc: denied { ioctl } for pid=7640 comm="syz.4.2379" path="/516/file0" dev="tmpfs" ino=2803 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.256221][ T7655] netlink: 'syz.4.2382': attribute type 2 has an invalid length. [ 191.264349][ T7655] can: request_module (can-proto-4) failed. [ 191.419848][ T7682] 9pnet_fd: Insufficient options for proto=fd [ 191.463848][ T7688] overlayfs: failed to clone upperpath [ 191.532734][ T7699] fuse: Bad value for 'fd' [ 191.538285][ T7699] overlayfs: failed to clone upperpath [ 191.941815][ T36] audit: type=1400 audit(1762390128.074:62582): avc: denied { ioctl } for pid=7716 comm="syz.6.2405" path="socket:[40499]" dev="sockfs" ino=40499 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.188089][ T7762] 9pnet: Unknown protocol version 9 [ 192.733813][ T7790] netlink: 'syz.4.2424': attribute type 4 has an invalid length. [ 192.743427][ T7790] netlink: 'syz.4.2424': attribute type 4 has an invalid length. [ 192.758831][ T36] audit: type=1400 audit(1762390128.843:62583): avc: denied { map } for pid=7791 comm="syz.4.2425" path="socket:[41348]" dev="sockfs" ino=41348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.369420][ T7877] netlink: 'syz.5.2448': attribute type 12 has an invalid length. [ 194.377289][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'. [ 194.916283][ T7898] netlink: 'syz.1.2456': attribute type 11 has an invalid length. [ 194.924163][ T7898] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 194.931950][ T7898] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.2456'. [ 195.122023][ T7922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7922 comm=syz.5.2465 [ 196.028134][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 196.196830][ T7961] netlink: 'syz.4.2481': attribute type 4 has an invalid length. [ 196.204626][ T7961] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2481'. [ 196.842232][ T8001] netlink: 'syz.5.2495': attribute type 5 has an invalid length. [ 196.850064][ T8001] netlink: 'syz.5.2495': attribute type 5 has an invalid length. [ 196.857872][ T8001] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2495'. [ 196.876293][ T8003] netlink: 'syz.5.2496': attribute type 13 has an invalid length. [ 197.334183][ T36] audit: type=1400 audit(1762390133.138:62584): avc: denied { nlmsg_read } for pid=8018 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 197.668393][ T8065] overlayfs: failed to clone upperpath [ 198.083612][ T36] audit: type=1326 audit(1762390133.832:62585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.6.2523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 198.237792][ T36] audit: type=1400 audit(1762390133.983:62586): avc: denied { execstack } for pid=8100 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 198.335415][ T36] audit: type=1400 audit(1762390134.076:62587): avc: denied { accept } for pid=8116 comm="syz.1.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 198.374340][ T36] audit: type=1326 audit(1762390134.114:62588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.2538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58d878f6c9 code=0x0 [ 199.291157][ T8181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8181 comm=syz.6.2559 [ 199.304423][ T8181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8181 comm=syz.6.2559 [ 199.741612][ T36] audit: type=1400 audit(1762390135.399:62589): avc: denied { getopt } for pid=8184 comm="syz.5.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.874948][ T36] audit: type=1400 audit(1762390135.521:62590): avc: denied { setopt } for pid=8198 comm="syz.6.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.983414][ T36] audit: type=1400 audit(1762390135.624:62591): avc: denied { getopt } for pid=8236 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.347422][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2578'. [ 200.364573][ T36] audit: type=1400 audit(1762390135.981:62592): avc: denied { create } for pid=8247 comm="syz.5.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.741071][ T8272] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 200.750062][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'. [ 200.759955][ T8272] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 200.986403][ T8296] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 200.994840][ T8297] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 201.031398][ T8307] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 201.049395][ T36] audit: type=1400 audit(1762390136.628:62593): avc: denied { relabelto } for pid=8306 comm="syz.6.2598" name="file0" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 201.497012][ T8349] 9pnet: p9_errstr2errno: server reported unknown error 0000 [ 201.527168][ T8318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8318 comm=syz.4.2602 [ 201.582012][ T8378] netlink: 'syz.6.2620': attribute type 1 has an invalid length. [ 201.598607][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2620'. [ 202.171948][ T8413] netlink: 'syz.4.2634': attribute type 10 has an invalid length. [ 202.179855][ T8413] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2634'. [ 202.189518][ T8413] bridge_slave_1: left promiscuous mode [ 202.195239][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.287374][ T8428] tipc: Enabling of bearer rejected, failed to enable media [ 202.567867][ T8457] overlayfs: failed to clone lowerpath [ 202.580725][ T8461] 9pnet_fd: Insufficient options for proto=fd [ 202.729163][ T8491] netlink: 'syz.5.2656': attribute type 1 has an invalid length. [ 202.745437][ T8493] bpf: Bad value for 'uid' [ 202.758097][ T8495] 9pnet_fd: Insufficient options for proto=fd [ 202.771238][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 202.771252][ T36] audit: type=1400 audit(1762390138.233:62596): avc: denied { bpf } for pid=8496 comm="syz.5.2659" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.224787][ T8549] overlayfs: missing 'lowerdir' [ 203.235530][ T36] audit: type=1326 audit(1762390138.674:62597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.6.2677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 203.259833][ T8552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8552 comm=syz.4.2678 [ 203.375759][ T8593] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 203.400217][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2691'. [ 203.422660][ T8604] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2693'. [ 203.432072][ T36] audit: type=1400 audit(1762390138.861:62598): avc: denied { accept } for pid=8603 comm="syz.6.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 203.487166][ T8623] overlayfs: failed to clone lowerpath [ 203.671037][ T8644] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 203.769520][ T36] audit: type=1400 audit(1762390139.180:62599): avc: denied { watch watch_reads } for pid=8659 comm="syz.6.2710" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 204.054696][ T8673] overlayfs: failed to clone upperpath [ 204.390327][ T8701] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2723'. [ 204.401631][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.410303][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.417597][ T8693] bridge_slave_0: entered allmulticast mode [ 204.424320][ T8693] bridge_slave_0: entered promiscuous mode [ 204.430734][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.439192][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.446649][ T8693] bridge_slave_1: entered allmulticast mode [ 204.453002][ T8693] bridge_slave_1: entered promiscuous mode [ 204.529525][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.536594][ T8693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.543869][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.550923][ T8693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.564128][ T8724] 9pnet_virtio: no channels available for device [ 204.575123][ T3072] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.582705][ T3072] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.593791][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.600843][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.610059][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.617111][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.649096][ T8693] veth0_vlan: entered promiscuous mode [ 204.663164][ T8693] veth1_macvtap: entered promiscuous mode [ 204.725758][ T8737] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 204.733911][ T8739] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 204.946622][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.979931][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.991297][ T8753] bridge_slave_0: entered allmulticast mode [ 205.001074][ T8753] bridge_slave_0: entered promiscuous mode [ 205.019123][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.034580][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.047369][ T8753] bridge_slave_1: entered allmulticast mode [ 205.067151][ T8753] bridge_slave_1: entered promiscuous mode [ 205.207923][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.214973][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.222251][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.229287][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.279164][ T3072] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.286788][ T3072] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.298503][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.305543][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.327987][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.335045][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.389957][ T8753] veth0_vlan: entered promiscuous mode [ 205.422528][ T8753] veth1_macvtap: entered promiscuous mode [ 205.539859][ T36] audit: type=1400 audit(1762390140.841:62600): avc: denied { read write } for pid=8782 comm="syz.1.2736" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.576771][ T36] audit: type=1400 audit(1762390140.841:62601): avc: denied { open } for pid=8782 comm="syz.1.2736" path="/0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.670372][ T8787] netlink: 'syz.1.2745': attribute type 27 has an invalid length. [ 205.702473][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.709710][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.732228][ T8796] SELinux: failed to load policy [ 205.962785][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 206.068734][ T8799] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2749'. [ 206.099214][ T8807] rust_binder: Write failure EFAULT in pid:8 [ 206.116707][ T36] audit: type=1400 audit(1762390141.376:62602): avc: denied { accept } for pid=8809 comm="syz.1.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.143959][ T36] audit: type=1400 audit(1762390141.404:62603): avc: denied { ioctl } for pid=8809 comm="syz.1.2753" path="socket:[45060]" dev="sockfs" ino=45060 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.188429][ T8815] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2755'. [ 206.217676][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.377594][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 206.386585][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.395273][ T31] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 206.404250][ T31] usb 5-1: config 0 has no interface number 0 [ 206.410529][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 206.427466][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 206.438012][ T31] usb 5-1: config 0 interface 88 has no altsetting 0 [ 206.447099][ T31] usb 5-1: string descriptor 0 read error: -22 [ 206.453556][ T31] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 206.462726][ T31] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 206.471745][ T31] usb 5-1: config 0 descriptor?? [ 206.489142][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input26 [ 206.710398][ T8804] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 206.720761][ T7957] udevd[7957]: Error opening device "/dev/input/event3": Input/output error [ 206.720945][ T36] audit: type=1400 audit(1762390141.948:62604): avc: denied { relabelto } for pid=8803 comm="syz.4.2751" name="/" dev="overlay" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 206.735841][ T7957] udevd[7957]: Unable to EVIOCGABS device "/dev/input/event3" [ 206.759180][ T330] usb 5-1: USB disconnect, device number 15 [ 206.791219][ T36] audit: type=1400 audit(1762390141.948:62605): avc: denied { associate } for pid=8803 comm="syz.4.2751" name="file0" dev="tmpfs" ino=30 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 206.793271][ T7957] udevd[7957]: Unable to EVIOCGABS device "/dev/input/event3" [ 207.449067][ T8868] incfs: Backing dir is not set, filesystem can't be mounted. [ 207.449067][ T8869] incfs: Backing dir is not set, filesystem can't be mounted. [ 207.449099][ T8868] incfs: mount failed -2 [ 207.464805][ T8869] incfs: mount failed -2 [ 207.490471][ T8868] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2772'. [ 207.502485][ T8873] rust_binder: Error while translating object. [ 207.502531][ T8873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 207.508831][ T8873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:19 [ 207.522936][ T8877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.576615][ T8890] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 207.584970][ T8890] rust_binder: Write failure EINVAL in pid:23 [ 207.590678][ T8894] tipc: Can't bind to reserved service type 0 [ 207.621051][ T8898] netlink: 'syz.5.2783': attribute type 1 has an invalid length. [ 208.019353][ T8934] rust_binder: Write failure EFAULT in pid:31 [ 208.296130][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 208.466660][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 208.472829][ T9] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 208.481097][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 208.489277][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.499511][ T9] usb 2-1: config 0 has no interface number 0 [ 208.506938][ T9] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 208.515998][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.524009][ T9] usb 2-1: Product: syz [ 208.528152][ T9] usb 2-1: Manufacturer: syz [ 208.532751][ T9] usb 2-1: SerialNumber: syz [ 208.537841][ T9] usb 2-1: config 0 descriptor?? [ 208.662993][ T8948] overlayfs: failed to clone upperpath [ 208.757926][ T8960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.766841][ T8960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.778463][ T9] usb 2-1: USB disconnect, device number 61 [ 208.847482][ T8966] rust_binder: Write failure EFAULT in pid:39 [ 208.915157][ T8968] rust_binder: Error while translating object. [ 208.921319][ T8968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 208.927630][ T8968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 209.126326][ T8988] rust_binder: 63: no such ref 3 [ 209.140385][ T8988] rust_binder: inc_ref_done called when no active inc_refs [ 209.140405][ T8988] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 209.154759][ T8988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 209.165292][ T8991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8991 comm=syz.4.2813 [ 209.187212][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2813'. [ 209.532545][ T769] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 209.687655][ T9007] binder: Bad value for 'defcontext' [ 209.693493][ T769] usb 5-1: No LPM exit latency info found, disabling LPM. [ 209.701301][ T769] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 209.712109][ T769] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.726874][ T769] usb 5-1: string descriptor 0 read error: -22 [ 209.733034][ T769] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 209.742071][ T769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.751000][ T8998] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.764867][ T9010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 209.784261][ T9015] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 209.821233][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 209.821248][ T36] audit: type=1400 audit(1762390144.856:62608): avc: denied { write } for pid=9021 comm="syz.1.2823" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.849751][ T36] audit: type=1400 audit(1762390144.856:62609): avc: denied { remove_name } for pid=9021 comm="syz.1.2823" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.872849][ T36] audit: type=1400 audit(1762390144.856:62610): avc: denied { unlink } for pid=9021 comm="syz.1.2823" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.057367][ T769] usbhid 5-1:1.0: can't add hid device: -71 [ 210.063292][ T769] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 210.072030][ T769] usb 5-1: USB disconnect, device number 16 [ 210.302615][ T36] audit: type=1326 audit(1762390145.307:62611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.6.2829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 210.928834][ T769] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 210.937289][ T9054] netlink: 'syz.5.2834': attribute type 14 has an invalid length. [ 211.043914][ T9061] fuse: Bad value for 'user_id' [ 211.053679][ T9061] fuse: Bad value for 'user_id' [ 211.089970][ T769] usb 5-1: config index 0 descriptor too short (expected 38717, got 61) [ 211.104209][ T769] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 211.118984][ T769] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 7 [ 211.136516][ T769] usb 5-1: string descriptor 0 read error: -71 [ 211.145106][ T769] usb 5-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 211.156536][ T769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.168001][ T769] usb 5-1: can't set config #9, error -71 [ 211.174684][ T769] usb 5-1: USB disconnect, device number 17 [ 211.227144][ T9072] tipc: Enabling of bearer rejected, failed to enable media [ 211.715825][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2849'. [ 211.766546][ T9099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 211.766929][ T9099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 211.776132][ T9099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:69 [ 211.801587][ T36] audit: type=1400 audit(1762390146.705:62612): avc: denied { write } for pid=9102 comm="syz.4.2852" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 211.831426][ T9112] rust_binder: Error in use_page_slow: ESRCH [ 211.833824][ T9112] rust_binder: use_range failure ESRCH [ 211.840192][ T9112] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 211.845737][ T9112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 211.853630][ T9112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76 [ 212.020687][ T9143] rust_binder: inc_ref_done called when no active inc_refs [ 212.030162][ T9143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.037771][ T9143] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 212.156567][ T9147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.164415][ T9147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 212.208961][ T9150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2866'. [ 212.235222][ T36] audit: type=1400 audit(1762390147.117:62613): avc: denied { getopt } for pid=9149 comm="syz.1.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.535738][ T9177] netlink: 'syz.5.2876': attribute type 4 has an invalid length. [ 212.543576][ T9177] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2876'. [ 212.720758][ T9184] SELinux: security_context_str_to_sid () failed with errno=-22 [ 212.794620][ T9186] rust_binder: 107: no such ref 0 [ 212.799725][ T9186] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 212.806875][ T9186] rust_binder: 107: no such ref 2 [ 212.811957][ T9186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 212.880436][ T9206] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2886'. [ 212.901171][ T9206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=9206 comm=syz.4.2886 [ 212.927756][ T9208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 212.927783][ T9208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:113 [ 212.948296][ T36] audit: type=1326 audit(1762390147.783:62614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9209 comm="syz.4.2888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f225958f6c9 code=0x0 [ 213.055658][ T9211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 213.121340][ T9221] fuse: Bad value for 'fd' [ 213.333347][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2898'. [ 213.370093][ T9241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 213.411808][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2901'. [ 213.810377][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2910'. [ 213.901525][ T9291] __vm_enough_memory: pid: 9291, comm: syz.4.2911, bytes: 18014402804453376 not enough memory for the allocation [ 214.072021][ T9304] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.190384][ T769] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 214.351343][ T769] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.361513][ T769] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.370433][ T769] usb 2-1: config 1 has no interface number 0 [ 214.376796][ T769] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.391277][ T769] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.398466][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 214.400565][ T769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.417155][ T769] usb 2-1: Product: syz [ 214.421292][ T769] usb 2-1: Manufacturer: syz [ 214.425891][ T769] usb 2-1: SerialNumber: syz [ 214.433785][ T769] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 214.441193][ T769] cdc_ncm 2-1:1.1: bind() failure [ 214.651559][ T9295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9295 comm=syz.1.2913 [ 214.665570][ T9295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 214.665963][ T9] usb 2-1: USB disconnect, device number 62 [ 214.925444][ T9316] rust_binder: Got transaction with invalid offset. [ 214.925500][ T9316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.932227][ T9316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 214.975835][ T9322] rust_binder: Write failure EFAULT in pid:135 [ 215.396391][ T9376] rust_binder: Write failure EFAULT in pid:161 [ 215.462484][ T9387] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2948'. [ 215.693270][ T769] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 215.853131][ T769] usb 5-1: Using ep0 maxpacket: 16 [ 215.859301][ T769] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 215.867627][ T769] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.877712][ T769] usb 5-1: config 0 has no interface number 0 [ 215.888126][ T769] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 215.897231][ T769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.905243][ T769] usb 5-1: Product: syz [ 215.909456][ T769] usb 5-1: Manufacturer: syz [ 215.914059][ T769] usb 5-1: SerialNumber: syz [ 215.919895][ T769] usb 5-1: config 0 descriptor?? [ 215.925599][ T769] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 215.931997][ T769] usb 5-1: No valid video chain found. [ 216.024877][ T9394] netlink: 'syz.1.2951': attribute type 12 has an invalid length. [ 216.138580][ T36] audit: type=1400 audit(1762390150.776:62615): avc: denied { setopt } for pid=9382 comm="syz.4.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.143949][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.168470][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.182124][ T769] usb 5-1: USB disconnect, device number 18 [ 216.293288][ T36] audit: type=1400 audit(1762390150.926:62616): avc: denied { bind } for pid=9416 comm="syz.4.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.313262][ T36] audit: type=1400 audit(1762390150.926:62617): avc: denied { name_bind } for pid=9416 comm="syz.4.2956" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 216.335917][ T36] audit: type=1400 audit(1762390150.926:62618): avc: denied { node_bind } for pid=9416 comm="syz.4.2956" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 216.358021][ T36] audit: type=1400 audit(1762390150.964:62619): avc: denied { connect } for pid=9416 comm="syz.4.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.412497][ T9430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 216.412522][ T9430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:177 [ 216.454738][ T36] audit: type=1400 audit(1762390151.077:62620): avc: denied { create } for pid=9432 comm="syz.4.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 216.494095][ T9433] rust_binder: Write failure EFAULT in pid:181 [ 216.555021][ T9442] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 216.613708][ T36] audit: type=1400 audit(1762390151.227:62621): avc: denied { setattr } for pid=9453 comm="syz.4.2968" path="socket:[47368]" dev="sockfs" ino=47368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.673243][ T36] audit: type=1326 audit(1762390151.274:62622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.4.2969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f225958f6c9 code=0x0 [ 217.270760][ T66] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 217.431593][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.441386][ T66] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 217.450408][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.459054][ T66] usb 2-1: config 0 descriptor?? [ 217.557381][ T9469] netlink: 'syz.6.2974': attribute type 1 has an invalid length. [ 217.565183][ T9469] netlink: 'syz.6.2974': attribute type 2 has an invalid length. [ 217.580709][ T9469] netlink: 'syz.6.2974': attribute type 1 has an invalid length. [ 217.589700][ T9469] netlink: 'syz.6.2974': attribute type 2 has an invalid length. [ 217.666325][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197 [ 217.666735][ T9477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 217.676262][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:197 [ 217.685971][ T36] audit: type=1400 audit(1762390152.231:62623): avc: denied { execute } for pid=9480 comm="syz.5.2979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.772458][ T9487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:199 [ 217.796401][ T9491] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 217.923895][ T9498] SELinux: security_context_str_to_sid () failed with errno=-22 [ 217.933563][ T66] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 218.247456][ T66] lenovo 0003:17EF:6047.0010: Failed to switch F7/9/11 mode: -71 [ 218.256725][ T66] lenovo 0003:17EF:6047.0010: Failed to switch middle button: -71 [ 218.264823][ T66] lenovo 0003:17EF:6047.0010: Fn-lock setting failed: -71 [ 218.272144][ T66] lenovo 0003:17EF:6047.0010: Sensitivity setting failed: -71 [ 218.282050][ T66] usb 2-1: USB disconnect, device number 63 [ 218.294982][ T332] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.443235][ T332] usb 5-1: device descriptor read/64, error -71 [ 218.699024][ T332] usb 5-1: device descriptor read/64, error -71 [ 218.791471][ T36] audit: type=1400 audit(1762390153.263:62624): avc: denied { read write } for pid=9533 comm="syz.1.2997" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 218.791923][ T9534] netlink: 'syz.1.2997': attribute type 28 has an invalid length. [ 218.954829][ T332] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.093392][ T332] usb 5-1: device descriptor read/64, error -71 [ 219.108251][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3002'. [ 219.349210][ T332] usb 5-1: device descriptor read/64, error -71 [ 219.466582][ T332] usb usb5-port1: attempt power cycle [ 219.688750][ T9560] x_tables: duplicate underflow at hook 1 [ 219.828871][ T332] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 219.848162][ T9575] rust_binder: Error while translating object. [ 219.848182][ T9575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 219.851201][ T332] usb 5-1: device descriptor read/8, error -71 [ 219.856965][ T9575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:141 [ 220.000450][ T332] usb 5-1: device descriptor read/8, error -71 [ 220.259129][ T9609] incfs: Options parsing error. -22 [ 220.264387][ T9609] incfs: mount failed -22 [ 220.265874][ T332] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.298855][ T332] usb 5-1: device descriptor read/8, error -71 [ 220.327293][ T9611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 220.327689][ T9611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 220.336915][ T9611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:171 [ 220.439150][ T332] usb 5-1: device descriptor read/8, error -71 [ 220.577796][ T9631] 9pnet_fd: Insufficient options for proto=fd [ 220.585702][ T332] usb usb5-port1: unable to enumerate USB device [ 220.607955][ T9636] rust_binder: 186: no such ref 2 [ 220.613033][ T9636] rust_binder: 186: no such ref 3 [ 220.618134][ T9636] rust_binder: 186: no such ref 3 [ 220.623168][ T9636] rust_binder: 186: no such ref 1 [ 220.628192][ T9636] rust_binder: 186: no such ref 2 [ 220.633328][ T9636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 220.847682][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3058'. [ 220.865871][ T9701] bridge_slave_1: left allmulticast mode [ 220.871501][ T9701] bridge_slave_1: left promiscuous mode [ 220.877114][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.884631][ T9701] bridge_slave_0: left allmulticast mode [ 220.890298][ T9701] bridge_slave_0: left promiscuous mode [ 220.895941][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.905386][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 221.003049][ T9705] overlayfs: failed to clone lowerpath [ 221.065258][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 221.071531][ T10] usb 2-1: config index 0 descriptor too short (expected 29496, got 56) [ 221.079938][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.090021][ T10] usb 2-1: config 0 has no interfaces? [ 221.096170][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.105224][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.113216][ T10] usb 2-1: Manufacturer: syz [ 221.118295][ T10] usb 2-1: config 0 descriptor?? [ 221.209128][ T9711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 221.209182][ T9712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 221.340795][ T10] usb 2-1: USB disconnect, device number 64 [ 221.768747][ T330] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 221.929595][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.940514][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.950242][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.963147][ T330] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.964545][ T9728] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 221.972340][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.988243][ T330] usb 5-1: config 0 descriptor?? [ 222.211457][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.218915][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.226282][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.233735][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.241253][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.248655][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.256027][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.263408][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.270792][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.278149][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.285538][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.292925][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.300279][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.307658][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.315050][ T330] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 222.322564][ T330] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 222.331399][ T330] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.526417][ T332] usb 5-1: USB disconnect, device number 23 [ 222.555286][ T330] hid (null): unknown global tag 0xc [ 222.562279][ T330] hid-generic 0007:0002:0006.0012: unknown main item tag 0x0 [ 222.571959][ T330] hid-generic 0007:0002:0006.0012: unknown global tag 0xc [ 222.579225][ T330] hid-generic 0007:0002:0006.0012: item 0 0 1 12 parsing failed [ 222.583135][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 222.583148][ T36] audit: type=1400 audit(1762390156.828:62629): avc: denied { create } for pid=9747 comm="syz.1.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 222.587047][ T330] hid-generic 0007:0002:0006.0012: probe with driver hid-generic failed with error -22 [ 222.608210][ T9752] 9pnet_fd: Insufficient options for proto=fd [ 222.638370][ T9755] veth1: entered allmulticast mode [ 222.644877][ T9754] veth1: left allmulticast mode [ 222.922161][ T36] audit: type=1400 audit(1762390157.147:62630): avc: denied { map } for pid=9778 comm="syz.4.3084" path="socket:[48513]" dev="sockfs" ino=48513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.926750][ T9779] rust_binder: Error while translating object. [ 222.946117][ T9779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 222.946141][ T330] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 222.952615][ T9779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 222.961668][ T36] audit: type=1400 audit(1762390157.147:62631): avc: denied { accept } for pid=9778 comm="syz.4.3084" path="socket:[48513]" dev="sockfs" ino=48513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.046778][ T9781] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 223.063114][ T9783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.133038][ T330] usb 2-1: device descriptor read/64, error -71 [ 223.399509][ T330] usb 2-1: device descriptor read/64, error -71 [ 223.527427][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 223.665983][ T330] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 223.673624][ T9] usb 5-1: device descriptor read/64, error -71 [ 223.815203][ T330] usb 2-1: device descriptor read/64, error -71 [ 223.932445][ T9] usb 5-1: device descriptor read/64, error -71 [ 224.049794][ T9806] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3093'. [ 224.071046][ T330] usb 2-1: device descriptor read/64, error -71 [ 224.188284][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 224.196445][ T330] usb usb2-port1: attempt power cycle [ 224.337470][ T9] usb 5-1: device descriptor read/64, error -71 [ 224.561334][ T330] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 224.583626][ T330] usb 2-1: device descriptor read/8, error -71 [ 224.593382][ T9] usb 5-1: device descriptor read/64, error -71 [ 224.710610][ T9] usb usb5-port1: attempt power cycle [ 224.722216][ T330] usb 2-1: device descriptor read/8, error -71 [ 224.977052][ T330] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 224.995010][ T9845] overlayfs: failed to clone upperpath [ 225.001622][ T330] usb 2-1: device descriptor read/8, error -71 [ 225.072927][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 225.095231][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.137865][ T330] usb 2-1: device descriptor read/8, error -71 [ 225.233800][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.254181][ T330] usb usb2-port1: unable to enumerate USB device [ 225.377917][ T9862] netlink: 37 bytes leftover after parsing attributes in process `syz.6.3112'. [ 225.388199][ T9862] netlink: 37 bytes leftover after parsing attributes in process `syz.6.3112'. [ 225.488610][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 225.510927][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.580944][ T9872] tmpfs: Unknown parameter '˙˙˙˙˙˙˙˙' [ 225.621172][ T9878] 9pnet_fd: p9_fd_create_unix (9878): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 225.650502][ T9878] 9pnet_fd: p9_fd_create_unix (9878): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 225.681361][ T9878] 9pnet_fd: p9_fd_create_unix (9878): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 225.710805][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.829770][ T9] usb usb5-port1: unable to enumerate USB device [ 225.951937][ T9897] rust_binder: Error while translating object. [ 225.951962][ T9897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.958159][ T9897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 225.988731][ T9903] input: syz1 as /devices/virtual/input/input31 [ 226.256039][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 226.287698][ T9925] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3136'. [ 226.342467][ T36] audit: type=1400 audit(1762390160.355:62632): avc: denied { map } for pid=9942 comm="syz.5.3142" path="socket:[48722]" dev="sockfs" ino=48722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 226.415912][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 226.422024][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.432885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.442619][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.455403][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.464444][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.473465][ T9] usb 2-1: config 0 descriptor?? [ 226.481581][ T9947] binder: Unknown parameter '00000000000000000003' [ 226.496813][ T9949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.496843][ T9949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 226.633968][ T9951] netlink: 'syz.4.3145': attribute type 3 has an invalid length. [ 226.781451][ T36] audit: type=1326 audit(1762390160.768:62633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9981 comm="syz.6.3157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 226.889076][ T36] audit: type=1326 audit(1762390160.871:62634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9981 comm="syz.6.3157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f23f8f6c9 code=0x0 [ 226.928666][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 226.935967][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 226.943454][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 226.950058][ T36] audit: type=1400 audit(1762390160.928:62635): avc: denied { setattr } for pid=9990 comm="syz.6.3160" name="secretmem" dev="secretmem" ino=49831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 226.973970][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 226.981229][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 226.988645][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 226.995994][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 227.003393][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 227.010646][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 227.018088][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 227.025786][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 227.032021][ T9] HID 045e:07da: Invalid code 768 type 1 [ 227.037856][ T9] HID 045e:07da: Invalid code 769 type 1 [ 227.043552][ T9] HID 045e:07da: Invalid code 770 type 1 [ 227.049199][ T9] HID 045e:07da: Invalid code 771 type 1 [ 227.054864][ T9] HID 045e:07da: Invalid code 772 type 1 [ 227.060530][ T9] HID 045e:07da: Invalid code 773 type 1 [ 227.067788][ T9] HID 045e:07da: Invalid code 774 type 1 [ 227.073408][ T9] HID 045e:07da: Invalid code 775 type 1 [ 227.079042][ T9] HID 045e:07da: Invalid code 776 type 1 [ 227.086083][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input32 [ 227.102013][ T9] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 227.150760][ T9903] rust_binder: Error while translating object. [ 227.150798][ T9903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.157757][ T9903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 227.221936][ T36] audit: type=1400 audit(1762390161.181:62636): avc: denied { create } for pid=10004 comm="syz.6.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 227.291294][T10020] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 227.309970][T10020] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 227.331513][T10020] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 227.349920][T10020] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 227.457083][T10032] overlayfs: failed to resolve './file1': -2 [ 227.774227][T10053] cgroup: subsys name conflicts with all [ 227.826857][ T769] usb 2-1: USB disconnect, device number 69 [ 227.858452][T10056] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3179'. [ 227.874815][T10060] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3179'. [ 228.174619][ T769] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 228.334497][ T769] usb 2-1: Using ep0 maxpacket: 16 [ 228.340839][ T769] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.351183][ T769] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 228.364928][ T769] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.374101][ T769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.382268][ T769] usb 2-1: SerialNumber: syz [ 228.388211][ T769] usb 2-1: bad CDC descriptors [ 228.601769][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.601971][ T66] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 228.615839][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.629739][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.643834][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.652370][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.661485][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.670520][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.680415][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.688989][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.697949][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.708052][ T332] usb 2-1: USB disconnect, device number 70 [ 228.782150][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 228.788407][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.799668][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.809534][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.833438][ T66] usb 5-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 228.850801][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.868113][ T66] usb 5-1: config 0 descriptor?? [ 228.935481][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.942565][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.949669][T10103] bridge_slave_0: entered allmulticast mode [ 228.956034][T10103] bridge_slave_0: entered promiscuous mode [ 228.962356][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.969500][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.976592][T10103] bridge_slave_1: entered allmulticast mode [ 228.982864][T10103] bridge_slave_1: entered promiscuous mode [ 229.030152][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.037188][T10103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.044465][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.051496][T10103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.267149][T10114] rust_binder: Error while translating object. [ 229.267180][T10114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.273506][T10114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 229.306340][ T66] apple 0003:05AC:027B.0014: unknown main item tag 0x0 [ 229.315578][ T66] apple 0003:05AC:027B.0014: item fetching failed at offset 4/5 [ 229.323334][T10118] rust_binder: Error in use_page_slow: ESRCH [ 229.323351][T10118] rust_binder: use_range failure ESRCH [ 229.323889][ T13] bridge_slave_1: left allmulticast mode [ 229.329813][T10118] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 229.335575][ T66] apple 0003:05AC:027B.0014: parse failed [ 229.340948][T10118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 229.349692][ T13] bridge_slave_1: left promiscuous mode [ 229.354373][T10118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:231 [ 229.363529][ T66] apple 0003:05AC:027B.0014: probe with driver apple failed with error -22 [ 229.369421][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.394331][ T13] bridge_slave_0: left allmulticast mode [ 229.399979][ T13] bridge_slave_0: left promiscuous mode [ 229.405659][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.520538][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.527787][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.536140][T10073] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 229.536909][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.539968][ T31] usb 5-1: USB disconnect, device number 28 [ 229.544915][ T6215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.566808][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.573856][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.581600][ T37] INFO: task syz.2.1100:3748 blocked for more than 122 seconds. [ 229.589234][ T37] Not tainted syzkaller #0 [ 229.594248][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.602943][ T37] task:syz.2.1100 state:D stack:0 pid:3748 tgid:3746 ppid:289 flags:0x00000004 [ 229.613152][ T37] Call Trace: [ 229.616440][ T37] [ 229.619361][ T37] __schedule+0x1322/0x1df0 [ 229.623876][ T37] ? __sched_text_start+0x10/0x10 [ 229.628899][ T37] ? __kmalloc_noprof+0x271/0x530 [ 229.633919][ T37] ? update_curr+0xdc/0xaa0 [ 229.638423][ T37] ? enqueue_task+0x1133/0x11f0 [ 229.643259][ T37] schedule+0xc6/0x240 [ 229.647333][ T37] schedule_timeout+0xb2/0x3a0 [ 229.652087][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 229.657454][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 229.662988][ T37] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 229.669146][ T37] wait_for_common+0x359/0x630 [ 229.673912][ T37] ? wait_for_completion+0x40/0x40 [ 229.679027][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 229.684132][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 229.689674][ T37] wait_for_completion_state+0x19/0x40 [ 229.695124][ T37] do_coredump+0x7cf/0x2bd0 [ 229.699630][ T37] ? stack_depot_save_flags+0x399/0x800 [ 229.705166][ T37] ? kasan_save_track+0x4f/0x80 [ 229.710015][ T37] ? kasan_save_track+0x3e/0x80 [ 229.714857][ T37] ? kasan_save_free_info+0x4a/0x60 [ 229.720053][ T37] ? __kasan_slab_free+0x5f/0x80 [ 229.724991][ T37] ? __cfi_do_coredump+0x10/0x10 [ 229.729922][ T37] ? asm_exc_invalid_op+0x1f/0x30 [ 229.734951][ T37] ? __kasan_slab_free+0x6a/0x80 [ 229.739878][ T37] ? kmem_cache_free+0x1c1/0x510 [ 229.744809][ T37] ? get_signal+0xa75/0x14f0 [ 229.749389][ T37] get_signal+0x11fd/0x14f0 [ 229.753892][ T37] arch_do_signal_or_restart+0x96/0x720 [ 229.759440][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 229.765593][ T37] ? do_trap+0x228/0x3c0 [ 229.769834][ T37] irqentry_exit_to_user_mode+0x4e/0xb0 [ 229.775374][ T37] irqentry_exit+0x16/0x60 [ 229.779774][ T37] exc_invalid_op+0x42/0x60 [ 229.784272][ T37] asm_exc_invalid_op+0x1f/0x30 [ 229.789109][ T37] RIP: 0033:0x200000000004 [ 229.793513][ T37] RSP: 002b:00007f0be7e93a78 EFLAGS: 00010202 [ 229.799578][ T37] RAX: 000000000000000b RBX: 00007f0be71e6090 RCX: 00007f0be6f8f6c9 [ 229.807544][ T37] RDX: 00007f0be7e93a80 RSI: 00007f0be7e93bb0 RDI: 000000000000000d [ 229.815508][ T37] RBP: 00007f0be7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.823470][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.831433][ T37] R13: 00007f0be71e6128 R14: 00007f0be71e6090 R15: 00007fff56c4b5d8 [ 229.839399][ T37] [ 229.843638][ T37] NMI backtrace for cpu 1 [ 229.843652][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 229.843677][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.843688][ T37] Call Trace: [ 229.843695][ T37] [ 229.843702][ T37] __dump_stack+0x21/0x30 [ 229.843729][ T37] dump_stack_lvl+0x10c/0x190 [ 229.843752][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.843776][ T37] dump_stack+0x19/0x20 [ 229.843798][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 229.843821][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 229.843847][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 229.843868][ T37] ? sched_show_task+0x379/0x560 [ 229.843891][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 229.843912][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 229.843935][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 229.843958][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 229.843980][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 229.844003][ T37] watchdog+0xd8f/0xed0 [ 229.844027][ T37] ? __cfi_watchdog+0x10/0x10 [ 229.844050][ T37] ? __kasan_check_read+0x15/0x20 [ 229.844075][ T37] ? __kthread_parkme+0x138/0x180 [ 229.844092][ T37] ? schedule+0xc6/0x240 [ 229.844117][ T37] kthread+0x2ca/0x370 [ 229.844135][ T37] ? __cfi_watchdog+0x10/0x10 [ 229.844155][ T37] ? __cfi_kthread+0x10/0x10 [ 229.844171][ T37] ret_from_fork+0x67/0xa0 [ 229.844195][ T37] ? __cfi_kthread+0x10/0x10 [ 229.844212][ T37] ret_from_fork_asm+0x1a/0x30 [ 229.844236][ T37] [ 229.844258][ T37] Sending NMI from CPU 1 to CPUs 0: [ 229.912003][ T769] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 229.915337][ C0] NMI backtrace for cpu 0 [ 229.915348][ C0] CPU: 0 UID: 0 PID: 769 Comm: kworker/0:5 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 229.915367][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.915378][ C0] Workqueue: usb_hub_wq hub_event [ 229.915401][ C0] RIP: 0010:io_serial_in+0x7b/0xc0 [ 229.915420][ C0] Code: e8 0a f5 6c fe 44 89 f9 d3 e3 49 83 c6 08 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6b 62 c3 fe 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f 5d e9 85 b1 76 02 cc 44 89 f9 80 e1 [ 229.915433][ C0] RSP: 0018:ffffc9000e0d7010 EFLAGS: 00000006 [ 229.915446][ C0] RAX: 1ffffffff113eb05 RBX: 00000000000003f9 RCX: 0000000000000000 [ 229.915457][ C0] RDX: 00000000000003f9 RSI: 000000000001a222 RDI: 000000000001a223 [ 229.915467][ C0] RBP: ffffc9000e0d7030 R08: 0000000000000003 R09: 0000000000000004 [ 229.915477][ C0] R10: 0000000000000000 R11: ffffffff83190950 R12: dffffc0000000000 [ 229.915488][ C0] R13: dffffc0000000000 R14: ffffffff889f5fe8 R15: 0000000000000000 [ 229.915500][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 229.915513][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.915524][ C0] CR2: 000000110c29196c CR3: 0000000121ee2000 CR4: 00000000003526b0 [ 229.915538][ C0] Call Trace: [ 229.915543][ C0] [ 229.915550][ C0] serial8250_console_write+0x328/0x2130 [ 229.915567][ C0] ? prb_read_valid+0x80/0x80 [ 229.915580][ C0] ? __cfi_serial8250_console_write+0x10/0x10 [ 229.915596][ C0] ? __kasan_check_write+0x18/0x20 [ 229.915616][ C0] ? _raw_spin_lock+0x8c/0x120 [ 229.915633][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 229.915649][ C0] ? __kasan_check_read+0x15/0x20 [ 229.915669][ C0] univ8250_console_write+0x6f/0xb0 [ 229.915687][ C0] console_flush_all+0x5e6/0xaa0 [ 229.915705][ C0] ? __console_rewind_all+0x170/0x170 [ 229.915721][ C0] ? __kasan_check_read+0x15/0x20 [ 229.915739][ C0] ? is_printk_cpu_sync_owner+0x39/0x50 [ 229.915756][ C0] ? is_printk_legacy_deferred+0x5c/0x70 [ 229.915775][ C0] console_unlock+0xe9/0x270 [ 229.915789][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 229.915807][ C0] ? __cfi_console_unlock+0x10/0x10 [ 229.915821][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 229.915838][ C0] ? vprintk_emit+0x528/0x640 [ 229.915854][ C0] vprintk_emit+0x27c/0x640 [ 229.915868][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 229.915883][ C0] ? __switch_to_asm+0x3d/0x70 [ 229.915902][ C0] ? dev_vprintk_emit+0x167/0x400 [ 229.915917][ C0] dev_vprintk_emit+0x33b/0x400 [ 229.915931][ C0] ? __cfi_dev_vprintk_emit+0x10/0x10 [ 229.915945][ C0] ? __virt_addr_valid+0x2a6/0x380 [ 229.915962][ C0] dev_printk_emit+0xe1/0x130 [ 229.915977][ C0] ? __cfi_dev_printk_emit+0x10/0x10 [ 229.915991][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 229.916008][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 229.916032][ C0] __dev_printk+0x17f/0x1b0 [ 229.916051][ C0] _dev_info+0x10b/0x160 [ 229.916065][ C0] ? __cfi__dev_info+0x10/0x10 [ 229.916078][ C0] ? hub_port_reset+0x13c9/0x1570 [ 229.916098][ C0] hub_port_init+0x5fb/0x27b0 [ 229.916116][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 229.916134][ C0] ? __kasan_check_write+0x18/0x20 [ 229.916154][ C0] hub_event+0x232d/0x4270 [ 229.916177][ C0] ? __cfi_hub_event+0x10/0x10 [ 229.916195][ C0] ? __kasan_check_write+0x18/0x20 [ 229.916214][ C0] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 229.916233][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 229.916251][ C0] ? kick_pool+0xb9/0x550 [ 229.916266][ C0] process_scheduled_works+0x7d2/0x1020 [ 229.916290][ C0] worker_thread+0xc58/0x1250 [ 229.916305][ C0] kthread+0x2ca/0x370 [ 229.916319][ C0] ? __cfi_worker_thread+0x10/0x10 [ 229.916333][ C0] ? __cfi_kthread+0x10/0x10 [ 229.916347][ C0] ret_from_fork+0x67/0xa0 [ 229.916364][ C0] ? __cfi_kthread+0x10/0x10 [ 229.916378][ C0] ret_from_fork_asm+0x1a/0x30 [ 229.916399][ C0] [ 230.397726][ T13] tipc: Disabling bearer [ 230.403049][ T13] tipc: Left network mode [ 230.412003][T10103] veth0_vlan: entered promiscuous mode [ 230.423780][T10103] veth1_macvtap: entered promiscuous mode [ 230.553866][ T769] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 230.562964][ T769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.570983][ T769] usb 2-1: Product: syz [ 230.575152][ T769] usb 2-1: Manufacturer: syz [ 230.579735][ T769] usb 2-1: SerialNumber: syz [ 230.584917][ T769] usb 2-1: config 0 descriptor?? [ 230.627019][ T13] veth1_macvtap: left promiscuous mode [ 230.632517][ T13] veth0_vlan: left promiscuous mode [ 231.445323][ T36] audit: type=1400 audit(1762390165.140:62637): avc: denied { getopt } for pid=10123 comm="syz.1.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.465589][ T769] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 231.475500][ T769] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 231.485779][ T769] asix 2-1:0.0: probe with driver asix failed with error -71 [ 231.495495][ T769] usb 2-1: USB disconnect, device number 71