last executing test programs: 9m42.127671925s ago: executing program 32 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000000c0003800400038004000100180001801400020073797a5f74756e000000000000000000050006000600000008000900030000000500070003"], 0x50}}, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x50040) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x2010, r3, 0xe3990000) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x519c6000) 8m57.377316243s ago: executing program 33 (id=1924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xd75, 0x6, '9P2000'}, 0x13) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) (rerun: 64) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x800000000000024}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 7m23.57394841s ago: executing program 0 (id=3858): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="083c86dd0001400e04600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESOCT], 0xfdef) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x20, 0x31, 0x15, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @typed={0x0, 0x4e, 0x0, 0x0, @pid}]}, 0x54}], 0x1}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000000)) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) sendfile(r6, r4, 0x0, 0xbc44) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x8aa1637c0a35b8d9, 0x0) 7m23.57364316s ago: executing program 0 (id=3859): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x80088a02, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, r4, {0x7, 0x21, 0x5, 0x14210000, 0x7d, 0x1005, 0x0, 0x4}}, 0x50) r5 = syz_clone(0x1228000, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000300)="580000001500add427323b470c47b45602067fffffff81004e220700000400000000a8002000eaa57b00090080020efffeffe8090200001fe304f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c6000009", 0x59}], 0x1) process_mrelease(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) truncate(&(0x7f0000000080)='./cgroup/pids.max\x00', 0x6) sendfile(r10, r9, 0x0, 0xffffffff) 7m23.46911641s ago: executing program 0 (id=3861): socket$netlink(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 7m23.403517507s ago: executing program 0 (id=3862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000440)=[{0x4a4, 0x0, 0x1, 0xfffffffc}, {0x10a, 0xfc, 0x4, 0x7ffefffc}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) getdents(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x281, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m23.403122727s ago: executing program 0 (id=3863): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) (async) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x7d4) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 7m23.402826157s ago: executing program 0 (id=3864): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='gadgetfs\x00', 0x189, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x200ffff, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40040, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303df81e700d3b1c70e5edfa9136e252913030303030303030303030303030", @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=r3]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x2010004, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) epoll_pwait(r3, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x10, 0x200447fd, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 7m20.850691047s ago: executing program 4 (id=3895): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT=0x0], 0x1c4}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT=0x0], 0x1c4}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000080) (async) 7m20.809919801s ago: executing program 4 (id=3897): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149143, 0x0) r0 = memfd_secret(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000040)={'sit0\x00', @local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) r10 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}], [], 0x6b}}) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000001010200000000000000000a0000013c000d8014000400000000000000000000000000000000010c000380060001004e210000"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004000) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r3, 0xb60aebde7ebb79ef, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) r13 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r13, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r14, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x406, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0x80000c, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xfffff001, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x49, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x200d, 0x7, 0x4, 0x4, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r14, 0x5501) 7m20.690639553s ago: executing program 4 (id=3898): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0xfffffffffffffe61, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.L'}, 0x1a) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@cache_fscache}], [], 0x6b}}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 7m20.690078363s ago: executing program 4 (id=3899): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f0000000340)='dctcp\x00', 0x6) dup2(r0, r1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r6, 0x0, 0x87) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)=0x7f, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r10 = socket(0x6, 0x6, 0x1ff) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r10, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 7m20.530633989s ago: executing program 4 (id=3903): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000180)=0x4, 0x4) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2f}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r1, 0x0, r1) umount2(&(0x7f0000000000)='./cgroup\x00', 0x6) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) 7m20.475665484s ago: executing program 4 (id=3904): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) (async) sendfile(r4, r3, 0x0, 0xffffffff) 7m20.424762509s ago: executing program 34 (id=3904): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) (async) sendfile(r4, r3, 0x0, 0xffffffff) 7m8.128140415s ago: executing program 35 (id=3864): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='gadgetfs\x00', 0x189, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x200ffff, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40040, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303df81e700d3b1c70e5edfa9136e252913030303030303030303030303030", @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=r3]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x2010004, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) epoll_pwait(r3, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x10, 0x200447fd, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 6m20.046546479s ago: executing program 7 (id=4515): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172c801b0fb99c189c40b54508934a914fc837355d7d86b5c9660c42034c90001180349f0984086644cc9b69b4f10813e01b35346b2f08400416a6167ec3b577ae3fca5fa2e21bdcdd57a56a7f3ec43ecc2d9638bc2913008fd266d3cba6da35dcb5010e352b29ec1b50b41c29b2cbea62d3caee292fb62b267e02922d2412a63c9"], 0xf0, 0x1}}], 0x1, 0x44015) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0x1d}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 6m20.043391709s ago: executing program 7 (id=4516): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1280, 0x1000000005}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6m19.905064653s ago: executing program 7 (id=4518): pread64(0xffffffffffffffff, 0x0, 0x0, 0x911) r0 = socket(0x8000000010, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x40040}, 0x24004801) write(r0, &(0x7f00000008c0)="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", 0xfc) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 6m16.830598784s ago: executing program 7 (id=4526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 6m16.751650432s ago: executing program 7 (id=4528): ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) open(&(0x7f0000002080)='./file0\x00', 0x1c92c0, 0x1) mount$cgroup2(0x0, &(0x7f0000003900)='./file0\x00', &(0x7f0000003940), 0x800, &(0x7f0000003980)={[{}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) 6m16.281425978s ago: executing program 7 (id=4530): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)="1e0e", 0x2) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000000)={0xc291, 0x5}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 6m16.183483948s ago: executing program 36 (id=4530): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)="1e0e", 0x2) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000000)={0xc291, 0x5}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 6m4.614536342s ago: executing program 8 (id=4637): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0xfffffffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40047705, 0x0) 6m4.511717562s ago: executing program 8 (id=4641): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffff1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10010, 0xffffffffffffffff, 0xa03c0000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x2, 0x401, 0x6, 0x7}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 6m4.444017019s ago: executing program 8 (id=4642): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 6m4.321676171s ago: executing program 8 (id=4645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xfc, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @release={0x40046306, 0x1}, @enter_looper, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000004800)=""/4096, 0x1000, 0x0, 0x28}, @flat=@handle={0x73682a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @flat=@handle={0x73682a85, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000003800)=""/4096, 0x1000, 0xfffffffffffffffe, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64627573645f657865635f743a73302073797374656d5f7500f43237d3cc0b81614d230a048fe14e16f83ac15271af35ef64766f748b6d454e4e772879d269b715dbca7d7fa246df2ebb5a8c148684a12e3510a5d42f1dbf7fdf55903a587812708f1c04c6d21eed883654276b9cce523439fffca676d95f1a11fe4bd84fcbf1a45659134cbd0332cbbc2fbea622f0195e1bff2dfa25a926384cf5ce0919f42bcfc44c90abd6c8e4"], 0x2b) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x18, 0x1, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000017c0)={0x2020}, 0x2020) r3 = dup(0xffffffffffffffff) write$FUSE_INIT(r3, 0x0, 0x101d0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0/../file0/../file0', [], 0xa, "ae7b04006b696bb769e7bca3f224a8e03f29fd3e27e4faa79f34d5c7b4ca0e80ec1886a2933b111b396989b6"}, 0x49) close(0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r4}, 0x800, 0xffec, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) getsockopt$inet_int(r2, 0x111, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) 6m4.158534727s ago: executing program 8 (id=4648): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r0, 0x4, 0x12, r1, 0x0) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, 0xffffffffffffffff, 0x66053000) 6m4.066525416s ago: executing program 8 (id=4651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x27, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) 6m4.008658461s ago: executing program 37 (id=4651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x27, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) 5m26.706175099s ago: executing program 5 (id=5157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x10001, 0x54f5bad8, 0x8, 0x7, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x401, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x80000000, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0100fd640000", 0x6, 0x36}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0xa, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x2, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f0000000080)=0x103, 0x4) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r11, 0x6, 0x8, 0x0, &(0x7f0000000080)) 5m26.702488269s ago: executing program 5 (id=5158): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x4, 0x81, 0x9, 0x1}, {0x1000, 0x4, 0x0, 0xb3}, {0x4, 0x5, 0x6, 0x8}, {0x9d, 0x9, 0x7, 0x1}, {0x3, 0xbe, 0xb, 0x6}, {0x1, 0x2, 0x5, 0xffff7ae0}, {0xffff, 0xd, 0x6, 0x80000001}, {0x3ff, 0x4, 0x0, 0xa7}, {0x5a, 0x9, 0xf, 0x91}, {0x5, 0x5, 0xd4, 0x7}]}) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20400c, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200008101e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x4, 0x81, 0x9, 0x1}, {0x1000, 0x4, 0x0, 0xb3}, {0x4, 0x5, 0x6, 0x8}, {0x9d, 0x9, 0x7, 0x1}, {0x3, 0xbe, 0xb, 0x6}, {0x1, 0x2, 0x5, 0xffff7ae0}, {0xffff, 0xd, 0x6, 0x80000001}, {0x3ff, 0x4, 0x0, 0xa7}, {0x5a, 0x9, 0xf, 0x91}, {0x5, 0x5, 0xd4, 0x7}]}) (async) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20400c, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200008101e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 5m26.686230981s ago: executing program 5 (id=5159): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {0x100, 0x6, 0x1, 0x26}, 0x5, [0x7, 0x3, 0x1, 0x7, 0x9, 0x9, 0x0, 0x1, 0x9, 0x2, 0x2, 0x2, 0x3, 0xd65e, 0x6, 0x3, 0x4, 0x2, 0x4, 0x9, 0x80, 0x1, 0x4, 0x0, 0xd43, 0x3, 0xffffffdc, 0x1, 0x8, 0xd82, 0x0, 0x2b, 0x6, 0x401, 0x5, 0xffffffff, 0x2, 0x9, 0x80000000, 0xfffffffe, 0xa2c4, 0x0, 0xa, 0x80000000, 0x8, 0x40, 0x1000, 0x6, 0xfff, 0x0, 0x2, 0xbc800000, 0x7, 0x7, 0x1, 0x4, 0xfffffff2, 0x81, 0x9161, 0x0, 0xf1ad, 0xff, 0x3, 0x6], [0xffff9d60, 0x7, 0x1, 0x5, 0x101, 0xf0, 0x80, 0x8, 0x5, 0xfffffff9, 0x86, 0x9, 0x3, 0x400, 0xf, 0x2, 0xd7c4, 0x4, 0x6, 0x8, 0x0, 0x3, 0x7, 0xffff, 0x409, 0x4, 0x8, 0x9, 0x8, 0x1, 0x4, 0x4, 0x3a8, 0x2, 0x3, 0xa2, 0xf, 0x2, 0x3, 0x45, 0x0, 0x2, 0xfffffe01, 0x8000, 0x0, 0x9, 0x7, 0x2, 0x7, 0xbb, 0x7fb8b14d, 0x200, 0x5, 0x3, 0x7, 0x5, 0x3, 0x2, 0x5, 0x1, 0x2, 0x5, 0x8, 0x2213], [0x3, 0x1, 0x5, 0x7, 0x6, 0x2, 0x200, 0xb8e, 0xcfa, 0x2, 0x0, 0x9, 0x6, 0x3, 0x80000000, 0x7, 0x5, 0x3ff, 0x2, 0x5, 0x8, 0x3ee9, 0x4, 0x0, 0x4, 0x7, 0x5, 0x1, 0xe, 0x8, 0x1da9, 0x8, 0x7f, 0xc, 0x2, 0x8001, 0xaff, 0x1, 0x2, 0x2, 0x7abdc577, 0x3, 0x7, 0x9, 0x1, 0x400, 0x7, 0x7fff, 0x6, 0x5, 0x12d, 0x2, 0x7, 0x53, 0x7, 0x9, 0x7, 0x1, 0x2, 0x2a, 0xa, 0x5, 0x4, 0x9], [0x2, 0x80dd, 0x10000, 0x0, 0xfffffff7, 0x6, 0x8, 0x6, 0x0, 0x2b, 0x8, 0x8, 0x5, 0x2, 0x1, 0x3, 0x3d50, 0x3, 0x6, 0x0, 0x6, 0x8, 0x5, 0xff, 0x6, 0x0, 0x4, 0x5eda, 0x1, 0x7, 0x0, 0xe, 0xff, 0xfffffffd, 0x5, 0x5, 0x0, 0x60ca, 0x9, 0x4, 0x8, 0x3, 0x0, 0x2, 0x2, 0xb4, 0xa967, 0x2, 0x80000000, 0x9, 0x0, 0x0, 0x6c7c, 0x8, 0x2, 0x2, 0xfffffff7, 0x8000, 0x7, 0x2, 0x5, 0x1, 0x3, 0x1]}, 0x45c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r2, 0x1fe, 0x7ffc, 0x3) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) 5m26.656984614s ago: executing program 5 (id=5160): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r0, 0x0, 0x700) unshare(0x100) (async) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="341888"]}]}, 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 5m26.586520961s ago: executing program 5 (id=5161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000001280)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) fchdir(0xffffffffffffffff) (async, rerun: 32) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) (async, rerun: 32) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='environ\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') pread64(r5, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) (async) r6 = socket(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r3], 0x20}}, 0x40816) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) 5m26.583075411s ago: executing program 5 (id=5162): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2281, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}], [], 0x6b}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x5, 0x7}) (async) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x5, 0x7}) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000040)={0xb480000000000000, 0x4000, 0x8000000000400000, 0xd, 0x4}) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 5m11.583945374s ago: executing program 38 (id=5162): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2281, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}], [], 0x6b}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x5, 0x7}) (async) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x5, 0x7}) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000040)={0xb480000000000000, 0x4000, 0x8000000000400000, 0xd, 0x4}) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 29.454021019s ago: executing program 6 (id=9194): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) close(r1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 29.44011687s ago: executing program 6 (id=9195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a001511"], 0x14}], 0x1}, 0x4000080) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigqueueinfo(0xffffffffffffffff, 0x3b, &(0x7f00000000c0)={0x5, 0x9, 0xfffffff8}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="070000000000000000000500"], 0x50}, 0x1, 0x0, 0x0, 0x8040000}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r2, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x40) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000400)={0x49, 0x29, 0x1, {0x9dd, [{{0x80, 0x2}, 0x7, 0x8, 0x7, './file0'}, {{0x0, 0x3, 0x3}, 0x4, 0x5, 0x7, './file0'}]}}, 0x49) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0xc, {0x0, 0x1}, {0x74, 0x2}, @period={0x5a, 0x7fff, 0x5, 0x1, 0x5, {0x5, 0x4, 0x40, 0x5}, 0x3, &(0x7f0000000140)=[0x100, 0x1ff, 0x7]}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) mprotect(&(0x7f0000552000/0x11000)=nil, 0x11000, 0x2000009) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x4800, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0xa, 0x6, 0x8, 0x362, 0x8, 0x418, 0x1ff, 0x3}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) 29.404185014s ago: executing program 6 (id=9196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000001180)={0x7, 'vlan1\x00', {0x20}, 0x9}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x0, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff7, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0xb53e, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000000000000000000062738992c66ed879a9"], 0x60}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008"], 0x34}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x17, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbd8], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000004e40)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 29.262632727s ago: executing program 6 (id=9197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1f4) r1 = socket$inet6(0xa, 0x80000, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, 0x38, 0x620, 0x70bd28, 0x25dfdbfb, {0x1a}, [@typed={0x5, 0x6f, 0x0, 0x0, @str='\x00'}, @generic="c47f96b97ff8cc45c54dfb37869b4fd87c7d80f0ba4ca8e35992941ca60c330049035f7b3e36ddb44d7665bd90b2a5f7d5bf28d25f5f816b92a1bb858e9bed007d8269e8112d40", @typed={0x17, 0x135, 0x0, 0x0, @str='./binderfs/binder1\x00'}, @generic="b7b629d1c847d04edb4e7293e3f9235f9b151de273a603bfe5cb5f93decf36f22cba73e61a4afe944db4e34c7086785b5379ef08eaa789520ff9ae88f63bc1a7f7f5bf"]}, 0xc0}, 0x1, 0x0, 0x0, 0x8820}, 0x40) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000300)={0x9, 0x8, '\x00', 0x1, &(0x7f00000002c0)=[0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4004010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r5, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "637c946eb1e36d806ab5f3589f80d118"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x884) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e29, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffc01}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) 29.261890368s ago: executing program 6 (id=9198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, 0x0, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 28.778706355s ago: executing program 6 (id=9207): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f000001b8c0)) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x29, r1}, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readahead(r2, 0xa4, 0x405a) 28.773871206s ago: executing program 39 (id=9207): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f000001b8c0)) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x29, r1}, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readahead(r2, 0xa4, 0x405a) 11.244438927s ago: executing program 1 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) write(r0, &(0x7f0000000480)="2b9d395c51e6d1ea49693d594606573dfd15517d95b4b8a8714df535375426e512276bae567e2fb86a703e3017ab078d9113085d9fa5495f24a6681677e23db52610a44373976f887b1657654e64f3bf5b28d8917f3a735ae0c19dabf992c89352fe4a4d0913483195afc940ee84b3a2e4457338ef7bdee3ebee0c4a5c3e8cf075ccdba284f710b8918bbfd7ce5aad7dedd6ca1786a29478cfa9b06c38b17cf13c56bfc19c2658a8beb9b4d31728dcbda1bbebbd2aa1388711143764cecc7bb01f6e838a95f43b0b00a19c7d36", 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) connect$netlink(r1, &(0x7f0000000140), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001002abd7000fedbdf250100000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 9.183277729s ago: executing program 1 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) write(r0, &(0x7f0000000480)="2b9d395c51e6d1ea49693d594606573dfd15517d95b4b8a8714df535375426e512276bae567e2fb86a703e3017ab078d9113085d9fa5495f24a6681677e23db52610a44373976f887b1657654e64f3bf5b28d8917f3a735ae0c19dabf992c89352fe4a4d0913483195afc940ee84b3a2e4457338ef7bdee3ebee0c4a5c3e8cf075ccdba284f710b8918bbfd7ce5aad7dedd6ca1786a29478cfa9b06c38b17cf13c56bfc19c2658a8beb9b4d31728dcbda1bbebbd2aa1388711143764cecc7bb01f6e838a95f43b0b00a19c7d36", 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) connect$netlink(r1, &(0x7f0000000140), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001002abd7000fedbdf250100000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 7.285212505s ago: executing program 9 (id=9307): r0 = open$dir(0x0, 0x2, 0x21) openat2(r0, 0x0, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000, 0x2) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) poll(0x0, 0x0, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r5 = socket$inet(0x2, 0x10, 0xf2c7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001680)=0x0) prlimit64(r6, 0x5, &(0x7f00000016c0)={0x23, 0xbb65}, &(0x7f0000001700)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001740), 0x101000, 0x0) close_range(r7, r5, 0x0) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000280)="b400c434eddb08078a8f2c8dab2955cf8fa9ed7da1c33bbf1ce246f4a60ed6e664f5178487330053fa36d9bfbfbe62ee4a67b8a5a8a7a3b5fd5ae261baf03d4f78159d0832826d5c505cda0bc28d98c8c6823dbbe06e77274e6e02eba65be65c7cb6c9d262bb27866a980551b3a0fcf40bdbf689e6ba4ad4e56717eedc2661167e45f0137d3e66371ecea9a67b54bb7f29f5b1790aa751c324c8445d65814a9319d1beaae407db3999e7faade885ba09456297cbd0f8b8fe22e48cacb644cf45605f7efdfe2db6e1a840e7e83007e18c76fe03429d5770ea363ea4a25088bdf71438a793bca2877996ea5726637b1bb8fc2f2ee670ef698b1936cd5f5fa4e81b10cb6dc6bfa247224d7596208be7e30530e045de308a0927931b4bf70eaa89313fe3e3a587e49bdcf89ed939aaea352a29024cf8faccda41dd5925659d5643c56b50500d10bd5d81e153f1db8087d82ee5d7bef72bee82f9f137b1b01da6504a3ffd76f7f011b37db2ca37de4fa1184fe4a53a26dd5d95e47f31d6bccdcdd1940fa3b4e88e3f2a9247fa5c81ffd238b019b3c9d7bde2fe1a3186147d47c97388e75d897319a57500b618008cf7e091ec320c41fe8abeb187eb20f2c7100dbdf28e6fafb3661eb1a2f4e87aa7a7ba5a92336a28f10478fba35c64b7e280d1c8f4d810ec2634a34132e98c381266f89d7718db5d60fa909a78ad70d1f13782e8453fd94e6ea33c4395e46cb9f16971e8a687028a9ae84f221168cac6e4189ff2cbc8365c64e4b3bb25ef14ac3d06f21e11c15b7c3ab95622534c9f4fbe993795a3d7a4a94910be53169fcb22117e26c0faa819253ff2db57d39730a7a344a87f8c2eaa0cabd334f60c881dc55cd97376e0f42d7a17ba2cd0d05ff9bedeed25877d44fb29c15adeb18f1a59f1957a30bc1bfcc7495c9032f528ec2a5c16723d22b1c5b7bbfc5a2a3f4e760c91d70be0913a0b241869e291cdc46fb804a6e7dd3c0da2fcdea4bab2441c20f072a6670c02c8cd85f8966db1f296090bd757cd09d0d9d7237da62f6bb01a71050b33373c51f1ea8a8af7cd856766fa2ee99d94b08cb749d7864167d5ca335fa81eb976f28b2da7d7a41f675c3a667a71196f3639b6480506ff88c79f30ca5250b3f6ebf92c69cacb78f9bb559ef26394b6fdc6c4e9334a69ef38dd40cfb83da4c6b339b5ef92d2068b193879496d4c6d2b81b66742d0c615e0e5e23afda5492d51328b28adb06c74893d35dd5b8a28d314d30662a5b5c4d7d202fb5608c86e383368c92350b17f90f4248e351f8ee940be8eecbef5276c4dd45919eeb4d67bde06dc9e4a6b088883afe7ebdc24308628bcaf7e5c2ad138811b087a950e808ea6975348002d21b2dd23bc014f96c44df6ad3f7438a1116c826e87d598433a90668dd62a06b9ea8ca1fa3b892d86e1a1868353fcabc5384f73fea49c43851d7efbbbe17e259dbec38ad51000195db554526f2ec734e51a9d578a0b3d18fe2e4ef418c12990cbeab22ef70301c2428d2f0a3333c8b3ee057ab6f1ac9dfd87887e9ba71cf6633c010ea7c9e9c977b97d290f95fe3521fa2f6b21742e557b0f2eda065e95f29e0dc9d250afc935054b65700f116ad27ef375e7c8d86df1f1024b9ed5111bc52574671140128b581ea95568bdf6cd9f5fc6275629da04e3e24bbf590b513cb5acb99d41918dc73471c14b0722824b841ed79ab2952f821be2e9ac4e4b849523f43c1efeb398d6344b656e794d858479d07d721ddc9f7d9bb2dfb01d3e8c286f30539ed8b5dfffb9cbc03065ec7d00134cb77ea2489e5565c97cfced335e8e348de5d05d67dde0356908f4d682a2a2bfba323fbba22e8fc345357da6c6f8d63ac9fdb3a095edf8bc30af083a264be6cafa6aa20d30d5276eb1ddb4933b3d6a7019a5d89005adbf31046382b668393bcd821a85d894e931bf93ab182547c80cf0c04fa2071041dc8b90e18aa0f37594cea9e613cfd1d9776865d09db52306fd63ffe8be405fc294c38fe366df54d3d7e0ae58bed00079efcc27d6e7f92e7030828ff1992de143127e2d50982c858d07a4f87c7fb322776f0131170b7859550d7332cf430f3bd3655f766d1180621e8bf8c8aa00f6d0b5942c3d14d4a6adb64ea7c981fd0211012eb2ba40c8f0dbcd78e76558c0ebad0ff9ed6ea23c0e6cc91c4a7f554002512f8a318af90225aae2dcea5e5e1e517970587644e9969b6ed5eaa3ecdce41cde5f2fde5909837453056c0fdcdb69350e1cc390006b406fc8fc75ec83e5f644086b5f55f4937e3b168f39153552f44b8ea94a02b622e27d714ab7606a41de10aea5e94a1d49ff6a94759041d6dbecfa911c7ef589bf307eb9b49e2499939941c7d5da39aaf300a8e857ceb152056275320b5f924a1762028671c93a1daf67669aea426785a4fff68e2ca5517dbf5dbba210998d8e5b2a9e8a1a7fa6b1c14fcf63ebac754d97871a8ac3288c67a7b60ce7a9c45662c10be7927ee3b16c30bb41095c0eb2d6927d919d7a56ae6ef0d827dc15e410fe799ad342188324a0039a517974436bafb9a95f90b74e3a211a07d532d44a6c1b36484eaa3f06d1277d5dd1ea50a5a3dbb263e420f34fba215ef9c1bc5bfae2be0a26c2007b759d637ab41f150dd68e5130d12dedc810c2a402873ee25dd128d1f181b199a5c3c7fb06af5c296edfb40babf9641f14097292a9fc803e3d682f809befc6636bb05a3e897b82e78ad9afa492f956ca9f7f998e3ba1c917ef448c165f863be553c7e8562b956723f13d64f5cccecb3bc13e4b55a288fb4fcba9d5129dca47bf9b1d66a020c66efc7f9b296f18fb1e131ee8298dc49120a8da531245eb4daa218827277425e815cf7c6c533ac8a160ba695f92092b00bbbaf8283689bd8cab01cdfde69f081eb96aef93116097a620614abc7ba11fb6bcc9e9767582ba3203b49e2a800a652943a89734c1d92db7ab6c3537ce7b27742d877f7ce3b7af59109a6f9b183c1e610ac2ea0eb52386fb02907862dbf52366612e0efb44308d3e3df609129017e405d86e6c8f5b22d4172b94768f2125195829cd81e4239ea146673a09b8f64e77c6dae06e1cc238040f42cccf7b8d35a8be8a9eaa1ad91be502c153408c027e857fa93476443920959a9cca1e68fd3a4b7723116df4f486d84a3f15f221a88d33b236a13915c71e12085fbc4fdcf3428d1a588a7b7425e9a097b5d2b24382bd260659f68314fd0545933501ef39792cd79a1b212e0fb76b9dca27d183a47c4270929aa5fc5faedb89b31bd8a71f7aa5fcc3c0c9037d226d8b35303ae0f06e3df0ef1aa7755ec30c09d5bdc6dc2a9128c07111ec6cee9683e514492950e7a4ff36687d8a953153763441f68bf11d0a0814453e1fa7fa0d2fbe5a3d1a139d03de9075e0d67279aafedaedcff4454434aa1fba37acb9d8aa926a23c16b9a47b69f83eb42797224c0d60286675a89c4d95547398236db51dacc5fc610be426dde08e9c7d39875396c0aec12ef896403300505c36207069f162ba24634418de56403eaa7a091f022009f7f3c69541f65b45289b3f1740a6996620ed86bcb6da91a7cbd0f02e2642a19b7e2f76155524bd2bd5ef01e483a102a5d8b807888c9d88fa5c13ebd0d5f930484396806e810cff91fca6ce2654fd2724ba5d072b6f60dc09b6b6abf3f642dec3a69a9494f230a7d32ce1197f4fa88a3af59b3f645ee049eb611d6408e59c0295f2445cfb389e3f0d0fff12375b3cbbb1002e042c488d7bd1226ceb02db3b85ba4d5debb87d68f3e22954c3ec94ce8fc6531dea16d1ec64f99d36262cfe07ab2d749158ff7a369c3de13b072c2f656dc702f1220d7f6a201f8b751fb6d45907461c8615689211d63016e4bf6e293ba6afa492909f99cf41a150add31ce9661c1eb42cedaaad1af0b7d5b1374217614c0a1e6e777730d15b32b1964945f90cca19a7251a43b46fadfc23b48aeadfd3d46febaa44ba2e155c9573d0825948d7430bff7284b97f1c612da1ce54f2b025319ddce797ef90ab95d2dd2010e1c7b16f18454048cc292ea4f4db5c4f53bb489168dd11e7cfc92a5c7a33927071b08f88ee8428fb5e67e683075512df86f9d102bc72a4c175357052561629a971fd561a644c41db9eae3027cb9d5e797b3abd526e7da06199c7844cc2f11aff3b42710f5053beea47e97b0ee0f0be54ecfbe77fe97ec923fe0de4768f947903b08f449cc11b1269d11f500aa153df671a26852c032bb057c6a2625fcf3764e21695c3eb945e7181e4e3ed19e39cf428aeaa741f32b0e033974f2884e8e699e8ce74536eac2274e410138e66bfb649c9a6fb06b9901618210e7a82402c98a0fe024e669483211aa2eafa5125acf1ba00f2b34a39fd3062b6ad87d55c9fc82bc76404d02f3991a37ce9d5ebe0be6e1c37518851279005dbfd0fa6cad660d5cb8a65965cd41f9853373ce48646326935770422b33551a69bb187ebe0e0df2b40f3a5703a2946430303428235125f0ce4400e7f247ad4c1437d3aff8a39de8249527fce198108f9024553da6f5779b40a9a4ed3ccac04fb931339383366700e64c73a890e8d722ddbb46c8c4cf1867eb6a05eed3af5acef1f4ea25e8b212d1e4ed24255bc3f79611778d53fa6547913fb4186e5158a4ea2389863d148d6b729b32116b655a193d409efbdcddb567613fdb60833e22a61ad5482638a339df224c6009df0025cc6163b80b31040b26711481f274de5164915c1aa3cba4c02765ad4d6ea68cf58fe1a1e0d63c8889d3240ff7deed540ea4da8091abdbb311ea244a752306e527aceb5102fb16f44b70a2560b65a397abccfc9dd0d5552312bca12eb8ecfdb65cf34d43b5530944d0e92ad7043a3dab1c7f62deae293fe1807ef7f1dc607bfee4cc0150a1f9669947f153ac19d0dc86f725e1ae0c20e8e36e99b1c348c5ade6cbb302de6f18b2fbb4acb82ddebc10b8bcaf016ef50e9dcee9307a02838adb4f7af31eecabdece28656ce8b97ba1cffa82aad19c2a130698c694594132693f7e465edfd8c8081ded039d7757ea02d0e364f106d0807fd92446afaef17be454cc0a335740735a1b384e4f1d18be037132c0578767df22325600fe9cc035ea4eb397964baa7a69e29c43f9f7a7373816e880219de5da55c8c4d6183cc39cde24233fd1cb29c293e3c21f0d4fc0e5e5d4717e280e6d61e9a33bf714fab1362f4b0ddfdedda6cc807b687ee1d7413ee420a15630f978ad8ed05e0dcd6be74e44883f9eb6999aac4c88fdec665fbb67f5e68e77e429c1209b651400554e0b537336a9c8f0ab1521da684c46942d09338bf1e03be51dbef7edd6c009a660c76736bfb24d20df32a31d31eff3daffbf026a7c22fcc60855c05bd672c64e907de17782670a113bf5f267bafb1062d503e620a50a3e9518110c5b8b54540383c3cb9292b8ba86cfc1164843a83cae9a19f769b70426d9254c2b9943cd4b20330a3ce35f35295669fef5321c979e923e51d8a33ba75782b9d430b87d6f07b69529b9a39d7002bd623be1b7337d2c385818231f1c46ca59a7144ffa371da1415ab0cac4e5f93de08bc67993eeaf6168297ba4ab0e9d71713af84a97243b8fe38e25b0e570163038d1da4ee9165a3232dd63c53b9997e379362b4687ff9ae811b1d5df6dda0d3b62352bbc3790b184a3ab5970f60ae276c48e7beb77fe7a09e8c3e5f530424ed48828d2110031a7aa337e6502a4e1dc31b0fe8d5ce3feb16eebccdb207e6861eefe17a94f26f51e631afaaa4e", 0x1000}, {&(0x7f00000000c0)="8decbf4716da4b2894c1251ec9930671be4174872abf563f000d316280db4b4e68bcf5c4d0b4162cd9b6b01ea3d3b931f845c5d02afac1a83933d9afac0bdee1e0faf29312fbcbe32cf8d471ba17228206375b81dc4ea5810c7e0d802b8a860162088ee2bbbadb792cda2ad3fc78ec277a229a1a6e6a33866dbe", 0x7a}, {&(0x7f0000000140)="3bf6a551c5476be9abe9eeaefe295e66f25ea633bd1bb5612c346735868bc65dc6cef137cd1eab2f17aeec726ef57942e95fd968afa2f8be2a491ea738d296bab3de593549d096155f7287c67f55e289bc04e9c0536a5afc66df7c5ce12a01c916d2987ece01d660e25f3f75161acdaa8ae48092cb4aaadae4e1eb18cea633d0060ce04518bf3844b43bf673b2254d1d8467c66a3801e1227f2791bcc1ca58a9ba744256dc006b74017f5fe661d59999408e98", 0xb3}, {&(0x7f0000001280)="99e202a40a07d876b28820f5b6f8009a852c016c88f7cab0bb272f73e8f31bf0e4fbccf6db4502fcba91602261181e4967dd68a2fa859042d913be42418831caa42afe631727c7f4223db47c13009f6ec5b3b1387ea6a0c997fb137020fcbac43d9e06438881ec4f0102a19ab628ed924c6ddf9c3c1dcab0446afb36d0af9909ff636294da24ca8619995f302a320fc4f2f3f647ea6001e89c5b9fad1c39c10f492a030fd3f0effbf98e975a765bfb4bb5f221a26f5feb06dae73a2c02d04fa850bf763c91725279df094321c8fac9f69032d97ec9fdcaa385a1ab1347437b447b6fd566c0991f0c96442767dd8a", 0xee}, {&(0x7f0000001380)="5820fa307a80a7c089eb0849ca7fae126ca6a82a9365c6d73e7a1cbf496ed54a7ce1b412f5d3b49631f181e4b40fa9e9ac211fd0a2f174ff7825a900d5b26306bf46f58b9c6b20c54e98d1e0a38ca6732634a7a308b6f3c3b45e0cabfd7ef69a59412b3dced7e597f5f7e67558c67099c0755a72b1805075a2daf4501bef4ed63869e97081565d0a192524a0ed836f6e9a1360a8bb2b4bdbcff1fd98d83d7bc4b93edcc1b54f9e83928586aa4ccd2a325c267cb4a9bb199bd85245ffe1812df8f514f2bdd1194d61ecec3d8d3376b1ade12689d7f6eab163a1b52c63d0eefbd8676e63ae0068ccbbc9691d8a", 0xec}, {&(0x7f0000001480)="b5ba7bf82501d0615d3980054991131259dbe15c2c3fee02955349112831f553b053389c5611a48271d75b838617cb550ff4cbe61e40ad32706222fbaf8a9319af2e5dcdcde09c06859d3dd1c7fd7347ee9ee7179383c83f9284dfeb1438d6948586e6d8b24d67c3c97fc3da28bca3f71b74a6948d04dd4f8c0342f77cf2eb18d99dfd4b3216458a6eb7ebadde75f24b9c9a2cfe513d623b77a516c2e76b0bd449a32f442f727d11ef6b3b863cbf36eb4cd73d0de539fd045e99113286caa3e2a5c3", 0xc2}, {&(0x7f0000000200)="89a971", 0x3}], 0x7, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}, 0x4000000) 7.053361658s ago: executing program 1 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) write(r0, &(0x7f0000000480)="2b9d395c51e6d1ea49693d594606573dfd15517d95b4b8a8714df535375426e512276bae567e2fb86a703e3017ab078d9113085d9fa5495f24a6681677e23db52610a44373976f887b1657654e64f3bf5b28d8917f3a735ae0c19dabf992c89352fe4a4d0913483195afc940ee84b3a2e4457338ef7bdee3ebee0c4a5c3e8cf075ccdba284f710b8918bbfd7ce5aad7dedd6ca1786a29478cfa9b06c38b17cf13c56bfc19c2658a8beb9b4d31728dcbda1bbebbd2aa1388711143764cecc7bb01f6e838a95f43b0b00a19c7d36", 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) connect$netlink(r1, &(0x7f0000000140), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001002abd7000fedbdf250100000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 5.085079011s ago: executing program 9 (id=9312): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x55555ede6001) (async) brk(0x55555ede6001) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4.874605782s ago: executing program 9 (id=9317): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000011c0)=0x5, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_connect$uac1(0x2, 0x81, &(0x7f0000000cc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x2, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0xef, "ab"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc0, 0x5, 0x6, {0x7, 0x25, 0x1, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x3, 0xcd, {0x7, 0x25, 0x1, 0x80, 0x8, 0x2}}}}}}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x5, &(0x7f0000000e00)={0x5, 0xf, 0x5}, 0x2, [{0x5a, &(0x7f0000000e40)=@string={0x5a, 0x3, "ec35fa02d46059c416c986b11df2a4a66cbdb48fbc5c963d1f4a186cca78b121660d7b0f50abb1fd0ccc019d07496d0edc6c61c4e10bba602b3b186c2175f198950a97742a5ef775abde25b747fa992e96b9803b090ee381"}}, {0x0, 0x0}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0x4020aeb2) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000080)={0x20, 0x21, 0x23, {0x23, 0x11, "7fb9db16ec5bea3a1037c38bea8decea77bdb84c287066230e8bf12111c6a5ca8b"}}, 0x0, 0x0, 0x0}, &(0x7f0000000640)={0x2c, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x1, 0xe, "a75a43a55f9e04acced7f5a431a2"}, 0x0}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x0, 0x5}, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x1, 0x22, "3ad59d77005084d041a6755c5e0f48062f64ff4e153557a775143122c8941042f19a"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0x1a, r2, 0xc, 0x0) pipe(&(0x7f0000000040)) 4.79564976s ago: executing program 2 (id=9319): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) fadvise64(r0, 0x81, 0x9, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10001) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '.'}, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 4.79235449s ago: executing program 1 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) write(r0, &(0x7f0000000480)="2b9d395c51e6d1ea49693d594606573dfd15517d95b4b8a8714df535375426e512276bae567e2fb86a703e3017ab078d9113085d9fa5495f24a6681677e23db52610a44373976f887b1657654e64f3bf5b28d8917f3a735ae0c19dabf992c89352fe4a4d0913483195afc940ee84b3a2e4457338ef7bdee3ebee0c4a5c3e8cf075ccdba284f710b8918bbfd7ce5aad7dedd6ca1786a29478cfa9b06c38b17cf13c56bfc19c2658a8beb9b4d31728dcbda1bbebbd2aa1388711143764cecc7bb01f6e838a95f43b0b00a19c7d36", 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) connect$netlink(r1, &(0x7f0000000140), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001002abd7000fedbdf250100000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 2.631544562s ago: executing program 2 (id=9320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xd1383000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0xfffc, &(0x7f0000000800)) io_setup(0x7ffe, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.630979882s ago: executing program 3 (id=9321): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000001500)={0x0, 0x0}, 0x10) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) 2.598888395s ago: executing program 3 (id=9322): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8c082, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r2, &(0x7f0000000180)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18840806}, 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9f1, 0x9, 0xca, 0x5}, {0x1, 0x6, 0x3, 0x7}, {0x800, 0xab, 0xf7, 0x4}, {0x6, 0xf4, 0x9}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf2f7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff40}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe66e}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}]}}, {{0x8, 0x1, r1}, {0x178, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0xe2, 0xff, 0x8}, {0x5, 0xff, 0x2, 0x4}, {0xf7ac, 0x9, 0xa, 0xfff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}]}}]}, 0x4f0}}, 0x24000004) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r3) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000010c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000ac0)={0x5b0, r10, 0x0, 0x723c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x88, 0x4, "7abf7783d5bacd4f62e19eb2bbd2889a7561efc834deb9e815dcb55354f22d7127e09324d11fda1d9756e276853fe63b6bad61846d66fea869ec4fa543e81c5754d2e5cfbadd1a811d1602110371258436f27bf72c7892693edd7a30093c1914ae2eb961243b28a4a2523637a9b82e971c33739f8cba19b0383c63c39d47fca32746c2ea"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "be1ba4c3496d5d3da5acc5c597ecf0270c7596f267ef371d6c61e65e560f69b7a0e2bb4d11b2662ada901f17e415ca98908e3cb74254394e8b4b444d8c3b946346c7f91c0ade48c5902590963b1da78e10fb94d0534035c1a8ff824f1bdb9bfae2f61aa460ea7181ff0b1b72881ba83690127d29dbb1437007489796c5482459b5ee385d6763f177f2aa56c1b01cf88f034d876565f78942"}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "ca9a47cbb7449ce98660534519569d4f06ad07f2488dcdd582a31f3f81db75f04f98bd7355be70feca979f25ba650881be5e462c44772ba80352430d93a4abd0cb42c5d27dbcf5e973a6a4cf20d526c7dd03a2c6cf56e1589c0bcb4db81a41384b978d5faafee9be78e7b853"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "c547b4205318c7853c1c5043cad84b671bd13eda6577260c8a01dab8bc2291007d01e0ba0b735efed1c8e589b792d641951192030a2ebf3c1010d1eb71bbabacbda526da344aaf21d4585b3262ec5ad8a4c450bf382ea7f081daa22f64ef7d35f08c19a6bdec3743367fdb915dbfbc480ded8409ae6db273b2e160e5e56d4439d23074d8ba8f152bf88c8ffb54f9abbd81f3f43edef187d41447bf58c442bc8a023436fe2643daf2836473d578c92a7b771d18c3fc9aed7424538ac3b79f0eb18669"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "f49c619ff01413d85ff8e68a0a8c83884c4b69a06e384331fddff4e7a40dec27080674a8e1c814eccf7b58ded7d4da33941580b7cbf545a421cb0161c9ce82"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "35de18e9516a6aeb71203bd72e4aee4e9a5124784406aaaf1647975e906495f0401755a80f81ac318ad3b7cfd4c4bc93d4b1f90ad45931d296e90216b97adb7defc4b609caf8c00a13d736a33cf3215f4e952e6c6581754359ba8d81b70a6163b8aeb33d890d50a88641ec118296e29db02a0d9a82c0b4ae8944be4729138be82a1b9086a330c0e9704cbe874d40c4657951dd22"}]}, @ETHTOOL_A_FEATURES_WANTED={0x224, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "e48cfe9a38b23effe1a8db8935533eb22e3b0ec5d41c1f75c2"}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'activeport\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'user_linkup\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[[%@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'activeport\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'activebackup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ']%,^},$,}.%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':\xb1X[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}-\\[\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "5940d76250ef387474d63568ca144958d8a91202ed667af70e4b9725b699a8721d09da3193c3362a31d24b677a58c5b9f05429ae203fdb1f9b2a5184c2de19dc4415919a2756eae7c0d47121b1d9dc6656f509603a73f14a7adda9dff32577d43de14d8e59e74cf1fdf156784674b9d9614c1f5271eb0408e8360c781f5b77231c52af29b4aa353c89af8d9174df8bed34aba67bb36f815f788bdb8612aabe92c367119450a37d64c45504010dfea6e36bb71c4f9b749f37689d97e61c95ad81d08fc75feccb9540cf6f5ff94e3c"}]}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000001140)=r11) (async, rerun: 64) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000001180)) (async, rerun: 64) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x800, 0x0) bind$vsock_stream(r12, &(0x7f0000001200)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001280)={0x230, r10, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x170, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) (async) r13 = accept4$bt_l2cap(r12, &(0x7f0000001540), &(0x7f0000001580)=0xe, 0x80000) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), r12) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r14, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r3) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x124, r15, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb70}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc34}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xba}]}]}, 0x124}}, 0x20008110) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, &(0x7f0000001940)=0xd, 0x4) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000001980)=0x142e, 0x4) sendmsg(r13, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000019c0)="29fe27ead1b3ea10b7e475414671b4dc649f3432b8d6520bc795141c3a273e12567a9e26c556f500da6ea336484e061f2adc6a5811f3688fc29f8a3fcddde644ee1e566a6881c50c33d54bbd77cf3d7c406b0854ee41e8b613de0fa0dbe7b2004692b16d74879ccf62f51c4a76be8e30edf65214c358b3a5b25d5258d0647ed1019e19084b76b1be1342905e6e7e6951c2860640d436a0c058578395a701d22052babb3c4803e1755e040709fc97cdce540977485fee1dcb5891f7be4489e092aa0eb808960f609bf0a433713c4eb12a3b83d2c55850be49", 0xd8}, {&(0x7f0000001ac0)="4bbd3cfe58ee33fd7af8f85b06b45938108a59e9246b11d9535eaa7710d2744062a73a5b3a827e4340045c3081f107ae1795e7758ff7300e3db52153fae46fc20c9c912b83776013d40980dce9d0929893eef2d8533c3c604ebc79e4743556875f2cb77dcb2a96cf20e8b42d230d91a554c9fe63b591fbef8db897080c80a448db459b", 0x83}, {&(0x7f0000001b80)="65fcdcae89ebc77d0227aa260d41cca52c26452839a41fbf9d8e3f6ff78ad88ab1bc4ccc0c5995fe2a12624f", 0x2c}, {&(0x7f0000001bc0)="0d775357963cfec806db2c4092712b7f225d6892ba6f71688bf339668548fc2e796dfb8965856897d64442fdb3663351439e006023168705fb2cdf8ba34e26daa2b7f6a1f7da95590e913d6e5a4d9f1ffd24e1292cb0b4fc73daff00d3c890e8e8cbedb34f1c0563053d415253c5dc79e12f00c9d80c85cfcc672ad6c7e7002a0e2c2ef92e1e4ad65fc41f689b13e6c836e029", 0x93}, {&(0x7f0000001c80)="70145e714873cce1367855f8bf3399046258858006b2eeecb25aaece18b30719420917570a61b5adea8213f9838398e959039609e28af90fd68db4b9e5c140a3a8c0f0f5e68f4df978f57b6198b5b30095b25d921f61d2651f97464352ec9b1d397f8e63d4d68d7617b5b5f409ce3f349b1c35896adf3f36", 0x78}], 0x5, &(0x7f0000001d80)=[{0x20, 0x117, 0x400, "cfee6beb2ab256d4a22584479a9315"}, {0x10, 0x118, 0x8000}, {0xa8, 0x29, 0x8, "b3c3b8d7bc3a634e85aff0221f2878bbc04217a998a99b9ff0abedc49f62a60464b55fcc700d54f76fa601a6e9e2a2a40735b6309264670c463eea2194308359775fb8f5d8dd60c4266e5fa779aa39c734c4088fb93b7a93365bb64d3e224b09a682c245c10860e2bd05afcb3924ac5272b82cf50a16b1be91910cd8111d6b8721775d7e2a157e57b9b29c10e76c00573987e0c96a4a"}, {0xd8, 0x111, 0x5, "f79be3939d8c2fb2028321797def558e35a1358fea6545f5250e54abb85bd4a7910f657f916fd515c2008e0b42414b8415f1826d58a9addade33dea2ebac29a1f19a53e168c9d6e62edf40a1ab1ad1e80761dfc06aa3876e45ba228f04ed6ee77003a9b52114681b33feb0461a20d105e280cf126cba6575b1d4852fb62d9fcc12577e15719f84c8df821d1844c1bf0e961e24d035fb008e5df5eefdd4624f9e2d6dbb1fc869a9aa0afaa41d73d7cf83ba9b7540fbd40a4050c9bc86821b6230682c"}, {0x1010, 0x18, 0x4, "32764235e35fe290ce3fb321ef9906c2d431580f53f311e457e851f34d6b51f984e24ef67ca82d81999c3bf6982f5168a62ba0ca0e2aadbc8a5837d5afe7347d1353a8fcfe7825cf6457f1d3e815c2cfa597e870e64ca814fa06056729ec5a9928a889a9c6e07778ae788d553acf08addbdc71eeb29065d742b4309f660f62323dfba158bebc767cd9b897267b699dbb627472c835a6d0172041264b31c1d30c20e234af773cf2c175c8fcd015dbd322b56b2ea243d055f10aa05d68918187eab3c7470ff11e6cef520b842fec71646bc14a557c9694a3ab2d3740958d2a0e3d6f0fea555c3764c63c3a3dbb6e83477372327b5e228fef40ebdbaffad6237280d637478467bd63ef5548b8133fabe1919fa383962c5205e337b72256c5f6cfbcf36796c01c9a31fb06eb19d54cc5cb0aef5cc0afbba2168d29134775bdcdf45af75f661b5e4486640ac87b83de5569f6c3d55c08debb7ed59a9d7b9e265acdeec5b0ae9a2e77deb4ec0b2470ee4b63b81853bd08018092148895e58ead7456e97745267c34d307d745e183ed625dab46c5db88d10bc13f97f556a8edb5b10bd34a4cdab8bd5bb424c3d99dfaf3c3d0398bb25209c53a3d81ccb70947542acd56900d14dc7d22033394f64c860a821cdbcc1b901ef520fdac90fd255518f4d3442b2ceddceadc4fc53a3225af7cfe2db7f3902353719036150d565b0fc150041685dfece1d4d464746fa1084fc6e97af19647d6cc4d463f8008990a7822d6ca0661d49e83248948f4e10c1a72f5f2648adbbcd03f6b2694d5187ac3e9580660404aeb31caef0b6bd214ab2ea9a526fa93f8e02733d360d52fbb7704c1af10289c6c050a3f68c04c4d144ebf6b382c1da21f1dc0028d405c359d3efe71dc4044e89b66493ab12e012bb1c48b7ebefedcfd14171035a6e19091307db732d596dabf996ed7864a3191a4eee72990027780b16b33bdc1056670af2bc840c7e74e5df9e2155c18e93db2ebfa5a0d44165dd8a83201fcc76ce2f946e8c496b2966db45ad66e744fda6b9cd6652724a0bfb6af35b99ef42383bbf36f06617d5671500a4e9a27409b906351abdd092671eb9573b982b48130b129c56e14cc0999d04ed32db8dd56c8eab936928c8cc9f7ea87428c50b7513518c735752b21a1a89c0330d39ac6112d77cfedd0105636316c9f7ad373c649545ade4c56aec3a605cd17a7d0cb3f658ef037502b78738b446d91a2c73ff09b37916ea3830537a4846207e81009b6dedc9cbf3b6321b6144b37a74a34455b1505dcc7bc2a3ef839494bb258d45c7a336e792c469a5aab0096873f8d9d94f577b541c8062b416a864febd065456119cdec39e31b5dbb50392f124b06754c9f1e5d987c513b81dfe8bbb86d4650ee597e309a73b93f286bb2f80f41b37a355f3f7f111a03922d0d14da52ca89fa829457b27e38e0b648a45b701a418a9601ec3006d5cee41d63e6517b9cb8eb04c79690fe52b45d59656153141ced299f4948fb4ce9e766c690b1e2e1ebbdcc6db83e933c11678c70a850d11ea7cabb2364bd1983bdaee4fa276c66f78270b6ffb260a71e28be53bbf7b7126dee47093d17a20bb2d530b858c583ecae1a3898049cde74bfc0da62858f1fa99977c691c4cddaf54903319554dde5a06c5297e8951f76260510489ad0d66da2de70454651b584ad06cf4f5c01125e6db0a7afdbfaa39f34df758e161b7a00d5be7b08738563211b5a2c9519b89bbac2156f5733a1db96d9cf8b9aa703ff0c5ea7b9956a5a67fe8e25122b05eabcdf9e878fea014ce80de58ab1a2bef27a569d1752d27bf52d3f565c18eee70b7f886b42be783b6cac5d051a4487badf77712b67d874611e06c35dfde04cfb461dfb13e981d147000dbd97d6b886becbeeb452a1989bf2850cac6116f705d693d125a7426fb119554aa558aae60f59c1044edd518cf62a38b433905848ed2d68880151e3bcc275c11b6e6af56c0bc244e48e7ad6355cc4e9bbed138c86f6508da731c8469da89a2c8adf076c19f102a5ab13160c0ccc6a5b5b69ca81e45d9f49937c736ff6171611901a129d3e1f7bd5759ea3da4149771bea3ed6c64d19111b521e8537c564197d3b42fdb81a68f93a6faf05f9bdba8b78fdf19bb69747c5e6fb3956aa59126ac7d49b6d075258c56095bc7525c71c88954160c32752b7ce005c00a689e7b818dd0efa2b8f3f334ba25cb8b87d8dc5ed870bcaba9d9695c33bbe602ce4d51ec44f7784f4f7719a8b23b2cff4232b344b7d5f4d3da8f1bb18ebd9038ea46c2295741a635fe04fd7bc1f372c96c284f9481a427bab2e78cb2cbda855ca790a78faf1cf4532e30da54692c9db156dd0e662be0917ba54ddd3d252f6c670669401ca7c274f2925f31266f8de784f6f1058ccffe9a462c51afdeb2a11110a997dc3cc1cbb0387f23f37189700a5e961b7ff552db49ccce8cef6774058614cbd12da4e13f95efd97a0af9fa13bfcb8fcfe5728e657318c01e9afbcd6200f1c5791a550aaee24f7acff31179b549e17c6f0a0631f4b82a13d57ae59d8bf026c1cd5a3162b35753f39b569d3480132be22915b3d7cfe2a55582559ebe75d1fce28d4c167c91ee59945373e99c3481c07e6793f782c4e05a90623768548035057830e2c81348b45d7ef4bb0ae9341771be177e717c3b470bf77cf36e33ba8a26f553abf65f4774796efb532aaa42fd4bca2ee6b9600b52c42132f08ec648eddc5973e18e6707ca1ed73da9b9fc107486809028787d6298965212bcaa6371e85bbbe2129ae16a4424e48d474bfef78ef63968fa7fc80504c5bcfdf6c9fa0995289a5242cc1709c1f9239f4903a5ccfd337821ad7c309010deb838df03d46d2044256a59883b2c55e9ea5f2ec5468e9371b2924fb01ac13b9a5db099f7bab17c70e0ede06b1f4395e20df5dd283ce7662ddae664cbe01690b3b8d52c7842667876a8486abd879bffce36fc01e945b9762198be2603964bbba9c308dfd2595fc9ec661f9e3064dc7bc0dfc5fe8d61a0479761ea096c2c2944e6d2aa619b00b94e800039990c426bee000ffab1bd93ff46020fd1b274771be31e52d85796d69055bb892c1b3bb0e85a924b3adbb2c9e338200f0cb8a9646beba4ade2ff38678c596edd42b98fca239886ab4f8e7eadd64b5473fb76943f0925070c6140132684542686e0f8a99cbc5822f687526ff697caebf5a8b87eaca8757736f0cc6e330234039cc83e553eb582b32df96f4e91bbe227353af71976d562724b9a3de166679f4d099ecf018bcaf9babe51222367c510129c50e333365900646eed6d413dc30c320f088b460b86067a3dc3df169bf22208469dbaf922faa4bfdcd1f7df5b46ab3baaa31330a2889b2669c62a59879331364b6015c0352d069f965aab9c0961d71954bc1b7c1f738d48723937a61b23d520a915ed60cc350143826589602365fc289f5be82f1665757771d6b1f3cb5860d4232d23ae009142faf472a33032fef8a060e1d4cbf218c96a9958edd86c8efe07765bb425bb012f80039ebdb239380d40b81ff1d5ebb38294026f9bea5613c01e557d9a58a4ef808955f71618b8d464245fe7272f7676c74ca4d0bab88ea798b493c530bbb7d74be4c5eaa3d2b08a179e1957d5d883cafa570f82e63ce8f55dd8b6040e97169090a6a8b52b2c3d0cedaa74df1cfa3d084223f3a7f1031e2af68453ac74bbe62c54beb31cd7a383bc3647629025f62588e48f1f0b973e5dfeb86dddfa632df1ee12f8d703bde51b041412242bdb3513cb0f04956382e8837f8fb20fc9880b92b037462daea18a0c839a8d7903d3650cbbf3484f945ecf19a99784e6b55f8e7ac20f388041a90b438544d6f3b15d987a8c5212b0f30004d08a865a9a7a5df0f546ff9c050af3fe81ab0efe310f580681a9013f7ab55c41b18f4a0d126a9468e1cec1d56c69f6727abbdf494a60b94b410f71cbb431b9d00be104732118908b8b521b653f94092244d81665f74d44fadf506df734546941a90bde8b998ffc04e1b8d206c84f960cc13d2be4b9aead9b537eb3973dfb2511c3f7f8e3432d4dc992a27f8924c0162415522e934c9201b37168ef82b8225b696f75e37b8259a99ccb880b20294cecfda5fd3bb1fcacfbeee8eb98c14a092725aa2b26a073075f019e143f6de202b4b0ab8fa18eca8b0f8381992a7509fcc54d7c2e9bd11b33fcf66fa17bd01a3773aa05c4d53227f9f6020705f8690ebaab20ae74cb9047097182b5812be87d6c8f1966b7a3eb06b5f67d64728f61c54ca11f2266dba8141e70243b92ec939504257fb7adb7d9690a99bace574633ac2e5db1daeb8ff2666e1eb9ec83fa764e5761fcdef4917564f5e4829454cca4ce2d7c75b132df8cb1bb63000c0ee06195e2069279b64c96ab8b65d7c8644cd4665439fc20815b71624407528ad3f8198e4413ddf6381c48ca7a5cc44069ff2459df8894dbbe06b2587d4dc99acd5da56d5bf51be37713fcd358322d67c5ef0ab30f89c5e303c5e1c60b34127f799241866535542287d59b8f9ff19c19e0483315d305d2dba204053b3f46f5afe657ed81d1a04909b275fe71312a128f44308adba175d198ce22b32c8b17e7e02a0ecf6ccc9fb634b296efbc124e955db485c15bf0450288f679a3a48eb1893dabb8ad0076c6ada2cce454bbe7837ce03edb2c37f3c34f194f229e8eb899047ccd9fd675453991471fb273a3c3f699463ea6bb694e6c4277554f3befc2f6d9c983e0d1afb22bfe20b031109c19c1e4a91d3e6b16e233b821b3c36ef14ff447a68a49a93e6cc6b4a80fda95e21b9f4851fc9fac4b48241fcf0aab4d615af5e8265bcf2ec86301cd7ce2140dffad782d19f8b481f9c6adae27c202ad8ccf6d13d639cca75a491c4b030ee87f9063a687813300d03cab86f95c1b7b28c8cd69943e89697cf32c072b24fa3550973cf2b86e8f79000fed4b0fbeed3df8581addf5aa8a6459d7c89f1bded4801f50287a00d388fb48d893e239d15b6319e71b23ecb98d1267c400a0f0823a75343eb41243126810c299d5b442dc3e9e0f88b8ede32e5c0ee553bb9dd903fe815a9874baa01a65369e812075d81602aff98d2556ac1a62271417e857d30a1b4055e1e6306b5c58f5b61e50c14e550c68453f0c3dfd8785a0d36f3c61eb65d99d2c798afac2aeecbde5c79c2e9190280240f3f0d57bcc5c62edf3bd34f3146070104355ed9a3ce3009d5c34e8b3005c7ed5b962ad742bfa5a4a74006927546458ae38e2a72588231e330b84453cdc5e805ac397c6215b794c9f1450897d21786435931591a9fe3dadc35c8bc0d2d92bbc9ddde4f68d75bc34d65bf5093e76d2da01408a4845cb99952769519e821f94c6461a943ae98a65ca71be0df814c1b6f6e2a9e8a73ddd01b0384ad9d38c92963fa07375a9c2397a45a2944a1ebe05422d0f40b2db6d276ee6ea86d98d369726a1bdd5a06caaca1934a35b10d6aa9abce26c0bdbcab450902373146cfae0c973cef4d4a36f6e0714f6062ce4fe640b4951243cb2891e3c52b1e8c7227b7b3a98781bd5129f77903ec3333af13d65b152abb614ea8a1bba6307cc2c600fac48539c6fd34a2fa72e1db4b04f78230973316d0aff7b5746816a65713ca7c88aeb17d359fe2d3a4dafc1cc5c9fd248ed3ca6f4626662d0181dfb1597d748704877dcc5d59098fdb805cd5c66365e494dc4fd29bc3b460200763a4e3ead099320f0797066d0ad9e2e7f9830ef6075ac9181081456b9b11bcc2c8"}, {0x110, 0x104, 0x6, "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"}], 0x12d0}, 0x10) 2.490660316s ago: executing program 3 (id=9323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x0, 0x4b6c0000, 0x2, 0xe, 0xc2, 0x4}, {0xffffff01, 0x1, 0x80000001, 0x2d, 0x3, 0x8000000000000001}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4801) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)={0x0, 0xffffffffffffff95, 0x6, 0xa4, 0x8, 0x0, [{0xb64f, 0x971, 0x2, '\x00', 0x800}, {0x7, 0xb, 0x4, '\x00', 0x1100}, {0xeb, 0x4, 0xffffff0000000000}, {0x2, 0x6, 0xffffffff}, {0x0, 0x400, 0x100000001}, {0xa, 0x49f9d926, 0x4d328fc6, '\x00', 0x1504}, {0xfffffffffffffff7, 0x5, 0x1, '\x00', 0x2500}, {0xba8, 0x7ff, 0x8, '\x00', 0x2b00}]}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x4000, 0x0, 0xffffffffffffffff, 0x9}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7) 2.489591596s ago: executing program 2 (id=9324): unshare(0x20040600) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff0a010101000000000000000000000000000000000000000300000000020020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c40008"], 0x17c}}, 0x20044004) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.459120959s ago: executing program 2 (id=9325): r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x4, 0x2a180) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000000000)="8ca9f0cfc0efa7fa3e31bb31b28e564717b6c965838caa7e61128d472424cc4da8df5c8aa8583b39416992577e13d22ee4352470d9a218f2dd3543e5b75cdbe4f668aef7583ca7c4c7dd103b5677097c11d3fbb9606d695c59ed1f63ae86d82e3bae041dc37efb8b4b11814811af97d3d2c24ac86e6afde9acd8e103924b2ffd76ce6b218394ccd6d37233f8472a", 0x8e, r0}, 0x68) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) (async) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000380)={0x13, "7b0d0172aa775cfe6f588c70cfaf98885c61cfac1011f0ec70e3a5cd55005368fdd88231f3f38cd561b8798a3dd96e8d2999cf6e0df67cdcd2f4e1f4fefdf21d"}) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (rerun: 32) 2.411291004s ago: executing program 1 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) write(r0, &(0x7f0000000480)="2b9d395c51e6d1ea49693d594606573dfd15517d95b4b8a8714df535375426e512276bae567e2fb86a703e3017ab078d9113085d9fa5495f24a6681677e23db52610a44373976f887b1657654e64f3bf5b28d8917f3a735ae0c19dabf992c89352fe4a4d0913483195afc940ee84b3a2e4457338ef7bdee3ebee0c4a5c3e8cf075ccdba284f710b8918bbfd7ce5aad7dedd6ca1786a29478cfa9b06c38b17cf13c56bfc19c2658a8beb9b4d31728dcbda1bbebbd2aa1388711143764cecc7bb01f6e838a95f43b0b00a19c7d36", 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) connect$netlink(r1, &(0x7f0000000140), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001002abd7000fedbdf250100000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 230.826228ms ago: executing program 9 (id=9326): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dont_measure,context=system_u,rootcontext=staff_u,\x00']) open(&(0x7f0000000040)='./file0\x00', 0x42, 0x1) 182.597003ms ago: executing program 2 (id=9327): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 64) r1 = userfaultfd(0x80801) (rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 32) r3 = eventfd(0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async, rerun: 64) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000004}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @private=0xa010101}, 0x8) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 32) ioctl$TCFLSH(r6, 0x400455c8, 0xffffffffffffffff) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109025c0002018010060904000001020d000005240600010524002aab0d240f0105000000fd0f0800a906241a0400020905810310007981010904010000020d00000904010102020d0000090582020002070023c7ad03020002060909"], 0x0) 180.576813ms ago: executing program 3 (id=9328): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r1, 0x0, 0xfffffccd) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 180.286683ms ago: executing program 9 (id=9329): setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000140)="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", 0xfc5, 0x1) (async) setxattr$security_capability(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), &(0x7f0000001240)=@v2={0x2000000, [{0x151d, 0x800}, {0x9, 0x4}]}, 0x14, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000001280)='./cgroup\x00', &(0x7f00000005c0), 0x2004808, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000001180)='.log\x00', 0xb4202, 0xf2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) (async) sendfile(r2, r3, 0x0, 0xa26) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) (async) setxattr$incfs_metadata(&(0x7f0000001140)='./cgroup\x00', 0x0, &(0x7f00000011c0), 0x0, 0x1) socketpair(0x1d, 0x800, 0x3b, &(0x7f0000000040)) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x2008b22, 0x0, 0x5, 0x15, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c060000000000027a8f3d45cdd4992861ac000000000000000000000000000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x2000000000001]}}) (async) rt_sigqueueinfo(0x0, 0x39, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400}) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 32) arch_prctl$ARCH_GET_FS(0x1003, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000001e005f5b25bd7000fcdbdf250a010101000000000000000000000000000004d557ae918406dbcc0e0f93b1975800003c00e000000100000000000000000000000005000000ff34000010000a002bbd70002dbd7000f87f00"], 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 138.190787ms ago: executing program 3 (id=9330): r0 = socket$pptp(0x18, 0x1, 0x2) accept(r0, 0x0, 0x0) (async) accept(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) 96.495071ms ago: executing program 2 (id=9331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xab, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x4e, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8bd, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x5, 0x70, 0x80, 0x1, 0x1}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x5}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x7, '^'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x2, 0x6, 0x1, 0x6, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x6, 0x5, 0xa6}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x7, 0x4, "036a03603e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x3f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x80, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1, 0x5}}}}}}}]}}, 0x0) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000008c0)={0x4, 0x3, {0x0, @usage=0x9, 0x0, 0x0, 0x1, 0x6, 0x401, 0x200, 0x8, @struct={0x10000, 0x1}, 0xd2, 0xffffae3c, [0xff, 0x0, 0x5785c4e5, 0x6, 0x5f, 0x400000000]}, {0x8ff, @usage=0xca5, 0x0, 0x8, 0xb312, 0x86d, 0x7, 0x5, 0xa25528faa532341, @struct={0x8, 0x2}, 0x7, 0xd50, [0xc7e4, 0x4, 0x1, 0x8, 0x3, 0xfffffffffffffff9]}, {0x6, @usage=0x8, 0x0, 0x8, 0x7ff, 0x4c, 0xab, 0x0, 0x2, @struct={0x6, 0x9}, 0x100, 0x9, [0x4, 0x80, 0x3ff, 0x74, 0x54f8, 0x7f]}, {0xc, 0xc, 0x1c95d2f1}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000cc0)={0x9, 0x3, {0xb56, @usage=0x8, r4, 0x1, 0xa7, 0xfffffffffffffffb, 0x41, 0x0, 0x28, @usage=0x76cfd62a, 0x1, 0xf, [0x0, 0x7, 0xf, 0x3, 0xfffffffffffff628, 0x800]}, {0x1, @usage=0x8, 0x0, 0x5, 0x4, 0x9, 0x8, 0x8, 0x449, @usage=0xfffffffffffffffd, 0x7, 0xfffffff7, [0x8, 0x7fffffff, 0x100000000, 0x5, 0x8000000000000000, 0xbb]}, {0x2, @usage=0x7, r5, 0x1, 0x4, 0x4, 0x4, 0x1d5e, 0x16, @struct={0x5, 0x9}, 0x5, 0x0, [0xa8c2, 0x81, 0xfe, 0x6, 0xffff, 0x11]}, {0x8, 0x5a185075, 0x2}}) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109025c0002018010060904000001020d000005240600010524002aab0d240f0105000000ff0f0800a906241a0400020905810310007981010904010000020d00000904010102020d0000090582020002070023090503022002060909"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.746659ms ago: executing program 9 (id=9332): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x51) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x1) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000040)={0x2, 0x2}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 10.437979ms ago: executing program 3 (id=9333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000440)="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") r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x80004, 0x6) process_madvise(r2, 0x0, 0x0, 0x17, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1200, 0xfff7fffffffffffe}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x402, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=9208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) write(r0, &(0x7f0000000480)="2b9d395c51e6d1ea49693d594606573dfd15517d95b4b8a8714df535375426e512276bae567e2fb86a703e3017ab078d9113085d9fa5495f24a6681677e23db52610a44373976f887b1657654e64f3bf5b28d8917f3a735ae0c19dabf992c89352fe4a4d0913483195afc940ee84b3a2e4457338ef7bdee3ebee0c4a5c3e8cf075ccdba284f710b8918bbfd7ce5aad7dedd6ca1786a29478cfa9b06c38b17cf13c56bfc19c2658a8beb9b4d31728dcbda1bbebbd2aa1388711143764cecc7bb01f6e838a95f43b0b00a19c7d36", 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) connect$netlink(r1, &(0x7f0000000140), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001002abd7000fedbdf250100000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): form/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input38 [ 621.923241][ T9] usb 4-1: USB disconnect, device number 45 [ 622.282423][T25955] binder: Unknown parameter 's4ats' [ 622.610570][T25964] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 622.610598][T25964] rust_binder: Read failure Err(EFAULT) in pid:448 [ 622.860176][T25966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 623.344579][ T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 623.359727][ T36] kauditd_printk_skb: 503 callbacks suppressed [ 623.359765][ T36] audit: type=1400 audit(2000004628.685:74055): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.414571][ T36] audit: type=1400 audit(2000004628.715:74056): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.464573][ T36] audit: type=1400 audit(2000004628.725:74057): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.514579][ T36] audit: type=1400 audit(2000004628.815:74058): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.586802][ T36] audit: type=1400 audit(2000004628.905:74059): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.588766][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.639978][ T36] audit: type=1400 audit(2000004628.905:74060): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.655775][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.687044][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 623.690044][ T36] audit: type=1400 audit(2000004628.905:74061): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.699246][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 623.750352][ T36] audit: type=1400 audit(2000004628.905:74062): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.751094][ T31] usb 4-1: SerialNumber: syz [ 623.796344][ T36] audit: type=1400 audit(2000004628.905:74063): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.842021][ T36] audit: type=1400 audit(2000004628.945:74064): avc: denied { ioctl } for pid=25971 comm="syz.3.8695" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.940166][ T527] usb 10-1: USB disconnect, device number 46 [ 624.055023][T25984] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8700'. [ 624.074357][T25984] netlink: 51 bytes leftover after parsing attributes in process `syz.6.8700'. [ 624.094564][T25984] netlink: 'syz.6.8700': attribute type 4 has an invalid length. [ 624.096876][ T31] usb 4-1: 0:2 : does not exist [ 624.144800][ T31] usb 4-1: USB disconnect, device number 46 [ 624.173979][T25987] binder: Unknown parameter 's' [ 624.174004][T25986] binder: Unknown parameter 's' [ 624.284063][T24915] udevd[24915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 624.446523][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8705'. [ 624.464616][T25999] bridge_slave_1: left allmulticast mode [ 624.470809][T25999] bridge_slave_1: left promiscuous mode [ 624.476538][T25999] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.484476][T25999] bridge_slave_0: left allmulticast mode [ 624.490455][T25999] bridge_slave_0: left promiscuous mode [ 624.496326][T25999] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.865251][T26046] netlink: 'syz.6.8718': attribute type 6 has an invalid length. [ 624.884291][T26046] netlink: 'syz.6.8718': attribute type 4 has an invalid length. [ 624.892132][T26046] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8718'. [ 625.359748][T26070] fuse: Bad value for 'fd' [ 625.365589][T26070] fuseblk: Unknown parameter 'vd' [ 625.475205][T26078] overlayfs: failed to clone upperpath [ 625.539542][T26088] fuseblk: Bad value for 'group_id' [ 625.547142][T26088] fuseblk: Bad value for 'group_id' [ 625.699494][T26108] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 625.965511][T26129] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=26129 comm=syz.3.8747 [ 626.001577][T26132] netlink: 'syz.2.8749': attribute type 16 has an invalid length. [ 626.010082][T26132] netlink: 'syz.2.8749': attribute type 2 has an invalid length. [ 626.017927][T26132] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.8749'. [ 626.424590][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 626.424588][ T480] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 626.610945][T26146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 626.610979][T26146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:723 [ 626.663077][T26148] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 626.794151][T26156] tmpfs: Unknown parameter './binderfs/binder1' [ 627.421888][T26189] futex_wake_op: syz.6.8768 tries to shift op by -1; fix this program [ 627.670605][T24729] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 627.830451][T24729] usb 10-1: Using ep0 maxpacket: 8 [ 627.838077][T24729] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 627.847411][T24729] usb 10-1: config 179 has no interface number 0 [ 627.853913][T24729] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 627.865114][T24729] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 627.877001][T24729] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 627.888274][T24729] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 627.899793][T24729] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 627.913182][T24729] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 627.922366][T24729] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.937207][T26188] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 628.117859][T26212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8776'. [ 628.170107][T24729] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input40 [ 628.185409][T26218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=26218 comm=syz.6.8777 [ 628.391721][T26188] binder: Bad value for 'stats' [ 628.407928][ T31] usb 10-1: USB disconnect, device number 47 [ 628.407934][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 628.407968][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 628.430786][ T31] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 628.463138][T26220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=26220 comm=syz.6.8777 [ 628.538384][T26225] netlink: 'syz.3.8779': attribute type 3 has an invalid length. [ 628.547613][ T36] kauditd_printk_skb: 360 callbacks suppressed [ 628.547631][ T36] audit: type=1400 audit(2000004633.786:74425): avc: denied { mounton } for pid=26224 comm="syz.3.8779" path="/175" dev="tmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 628.578062][ T36] audit: type=1400 audit(2000004633.786:74426): avc: denied { create } for pid=26224 comm="syz.3.8779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 628.606041][ T36] audit: type=1400 audit(2000004633.786:74427): avc: denied { setopt } for pid=26224 comm="syz.3.8779" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 628.648073][ T36] audit: type=1400 audit(2000004633.870:74428): avc: denied { create } for pid=26230 comm="syz.2.8782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 628.650744][T26231] 9pnet_fd: Insufficient options for proto=fd [ 628.684878][ T36] audit: type=1400 audit(2000004633.870:74429): avc: denied { mounton } for pid=26230 comm="syz.2.8782" path="/379/file0" dev="tmpfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 628.722981][ T36] audit: type=1400 audit(2000004633.898:74430): avc: denied { name_bind } for pid=26228 comm="syz.6.8781" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 628.745774][ T36] audit: type=1400 audit(2000004633.898:74431): avc: denied { node_bind } for pid=26228 comm="syz.6.8781" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 628.754871][T26237] netlink: 'syz.6.8784': attribute type 4 has an invalid length. [ 628.778855][ T36] audit: type=1400 audit(2000004633.936:74432): avc: denied { create } for pid=26232 comm="syz.2.8783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 628.802961][T26237] netlink: 'syz.6.8784': attribute type 4 has an invalid length. [ 628.824389][ T36] audit: type=1400 audit(2000004633.936:74433): avc: denied { getopt } for pid=26232 comm="syz.2.8783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 628.864327][ T36] audit: type=1400 audit(2000004633.964:74434): avc: denied { create } for pid=26236 comm="syz.6.8784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.059499][T26252] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 629.060058][T26252] rust_binder: Write failure EINVAL in pid:731 [ 629.199188][T26263] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8795'. [ 629.535879][ T9] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 629.719664][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.723756][T26307] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 629.741488][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.762988][ T9] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 629.772996][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.786088][ T9] usb 10-1: config 0 descriptor?? [ 630.048141][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8820'. [ 630.105898][T26335] fuse: Bad value for 'rootmode' [ 630.228426][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 630.239266][ T9] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 630.450996][ T9] cp2112 0003:10C4:EA90.0028: Part Number: 0x00 Device Version: 0x00 [ 630.461432][T26338] netlink: 'syz.2.8823': attribute type 11 has an invalid length. [ 630.470628][T26338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26338 comm=syz.2.8823 [ 630.671842][T26269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.685567][T26269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.560416][T26383] fuse: Bad value for 'fd' [ 631.565016][T24729] usb 10-1: reset high-speed USB device number 48 using dummy_hcd [ 631.784284][T26393] EXT4-fs: Ignoring removed check option [ 631.790037][T26393] No source specified [ 632.413853][ T9] usb 10-1: USB disconnect, device number 48 [ 632.936140][T26432] rust_binder: 752: no such ref 3 [ 632.941397][T26432] rust_binder: 752: no such ref 1 [ 632.947404][T26432] rust_binder: Write failure EFAULT in pid:752 [ 633.091821][T26439] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 633.100583][T26439] rust_binder: Write failure EINVAL in pid:757 [ 633.411060][T26452] netlink: 596 bytes leftover after parsing attributes in process `syz.3.8864'. [ 633.479364][ T31] usb 10-1: new low-speed USB device number 49 using dummy_hcd [ 633.485809][T26456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26456 comm=syz.3.8866 [ 633.500089][T26456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8866'. [ 633.639229][ T31] usb 10-1: Invalid ep0 maxpacket: 64 [ 633.656079][T26465] netlink: 'syz.3.8869': attribute type 46 has an invalid length. [ 633.664157][T26465] netlink: 'syz.3.8869': attribute type 28 has an invalid length. [ 633.777845][ T31] usb 10-1: new low-speed USB device number 50 using dummy_hcd [ 633.937679][ T31] usb 10-1: Invalid ep0 maxpacket: 64 [ 633.943511][ T31] usb usb10-port1: attempt power cycle [ 633.944028][ T36] kauditd_printk_skb: 875 callbacks suppressed [ 633.944046][ T36] audit: type=1400 audit(2000004638.839:75310): avc: denied { ioctl } for pid=26447 comm="syz.9.8862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 633.980553][ T36] audit: type=1400 audit(2000004638.848:75311): avc: denied { ioctl } for pid=26447 comm="syz.9.8862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.006530][ T36] audit: type=1400 audit(2000004638.848:75312): avc: denied { ioctl } for pid=26447 comm="syz.9.8862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.032332][ T36] audit: type=1400 audit(2000004638.923:75313): avc: denied { ioctl } for pid=26447 comm="syz.9.8862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.057763][ T36] audit: type=1400 audit(2000004638.923:75314): avc: denied { ioctl } for pid=26447 comm="syz.9.8862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.142400][ T36] audit: type=1400 audit(2000004639.027:75315): avc: denied { mounton } for pid=26470 comm="syz.6.8871" path="/475/file0" dev="tmpfs" ino=2594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 634.166525][ T36] audit: type=1400 audit(2000004639.036:75316): avc: denied { mount } for pid=26470 comm="syz.6.8871" name="/" dev="9p" ino=9225342361691684866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 634.248677][ T36] audit: type=1400 audit(2000004639.130:75317): avc: denied { ioctl } for pid=26447 comm="syz.9.8862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.299634][ T36] audit: type=1400 audit(2000004639.167:75318): avc: denied { create } for pid=26477 comm="syz.3.8874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 634.321098][ T31] usb 10-1: new low-speed USB device number 51 using dummy_hcd [ 634.330254][ T36] audit: type=1400 audit(2000004639.167:75319): avc: denied { create } for pid=26477 comm="syz.3.8874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 634.367359][ T31] usb 10-1: Invalid ep0 maxpacket: 64 [ 634.513252][ T31] usb 10-1: new low-speed USB device number 52 using dummy_hcd [ 634.535842][ T31] usb 10-1: Invalid ep0 maxpacket: 64 [ 634.543684][ T31] usb usb10-port1: unable to enumerate USB device [ 636.514136][T26550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8899'. [ 636.531709][T26550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8899'. [ 636.593244][T26555] overlayfs: failed to resolve './file0': -2 [ 636.832365][T26571] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 636.832396][T26571] rust_binder: Read failure Err(EFAULT) in pid:772 [ 636.999698][T26573] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 637.334895][T26603] netlink: 'syz.3.8917': attribute type 27 has an invalid length. [ 637.346216][T26602] cgroup: none used incorrectly [ 638.441315][T26673] 9pnet_fd: Insufficient options for proto=fd [ 638.487186][T26678] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 638.594662][T26688] fuse: Bad value for 'fd' [ 638.972935][T26710] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 639.097203][T26721] SELinux: Context 0 is not valid (left unmapped). [ 639.107887][T26721] SELinux: Context 2 is not valid (left unmapped). [ 639.115944][T26721] SELinux: Context %Jt!U^v _c0~ [ 639.115944][T26721] Zد+nk%TpJtF|}m/u%[dmnـM%y.un*̊Ww&q'CN.$,rHRߙ=Jic#q!/@Eom5(@ޠ7"Z$pUw0K=Fߢ]g,3EW [ 642.513769][T26771] __dump_stack+0x21/0x30 [ 642.513808][T26771] dump_stack_lvl+0x10c/0x190 [ 642.513839][T26771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 642.513871][T26771] ? ___ratelimit+0x3f7/0x5a0 [ 642.513906][T26771] dump_stack+0x19/0x20 [ 642.513936][T26771] dump_header+0xd7/0x490 [ 642.513960][T26771] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 642.513992][T26771] oom_kill_process+0x35d/0x640 [ 642.514021][T26771] ? __pv_queued_spin_lock_slowpath+0x8e1/0xcc0 [ 642.514058][T26771] out_of_memory+0x659/0xa80 [ 642.514087][T26771] ? __cfi_out_of_memory+0x10/0x10 [ 642.514115][T26771] ? mutex_lock_killable+0x92/0x1c0 [ 642.514138][T26771] ? __cfi_mutex_lock_killable+0x10/0x10 [ 642.514164][T26771] mem_cgroup_out_of_memory+0x279/0x350 [ 642.514189][T26771] ? drain_obj_stock+0xed0/0xed0 [ 642.514213][T26771] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 642.514236][T26771] try_charge_memcg+0x8f7/0xde0 [ 642.514268][T26771] ? __cfi_try_charge_memcg+0x10/0x10 [ 642.514300][T26771] ? __alloc_pages_noprof+0x31f/0x7b0 [ 642.514333][T26771] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 642.514365][T26771] ? __folio_batch_add_and_move+0x2ab/0x370 [ 642.514400][T26771] __mem_cgroup_charge+0xf6/0x410 [ 642.514435][T26771] ? _raw_spin_lock+0x8c/0x120 [ 642.514463][T26771] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 642.514499][T26771] shmem_alloc_and_add_folio+0x86d/0x1050 [ 642.514531][T26771] ? put_swap_device+0x130/0x130 [ 642.514559][T26771] ? shmem_huge_global_enabled+0x2da/0x360 [ 642.514586][T26771] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 642.514612][T26771] ? __kasan_check_write+0x18/0x20 [ 642.514647][T26771] ? _raw_spin_lock+0x8c/0x120 [ 642.514676][T26771] shmem_get_folio_gfp+0x5f0/0x1380 [ 642.514706][T26771] ? shmem_get_folio+0xc0/0xc0 [ 642.514735][T26771] ? follow_page_pte+0xa5c/0xb90 [ 642.514767][T26771] ? inode_to_bdi+0x6d/0x100 [ 642.514801][T26771] shmem_write_begin+0xf4/0x270 [ 642.514829][T26771] generic_perform_write+0x330/0x960 [ 642.514867][T26771] ? __cfi_generic_perform_write+0x10/0x10 [ 642.514900][T26771] ? down_write+0xe9/0x2a0 [ 642.514924][T26771] ? mnt_get_write_access_file+0x1af/0x3b0 [ 642.514955][T26771] ? mnt_put_write_access_file+0xc2/0x100 [ 642.514986][T26771] ? file_update_time+0x1ef/0x220 [ 642.515017][T26771] shmem_file_write_iter+0x105/0x130 [ 642.515049][T26771] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 642.515077][T26771] __kernel_write_iter+0x41a/0x8e0 [ 642.515095][T26771] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 642.515123][T26771] ? __cfi___kernel_write_iter+0x10/0x10 [ 642.515142][T26771] ? get_dump_page+0x160/0x220 [ 642.515167][T26771] ? __asan_memset+0x39/0x50 [ 642.515184][T26771] ? iov_iter_bvec+0xc0/0x180 [ 642.515209][T26771] dump_user_range+0xb06/0xdf0 [ 642.515229][T26771] ? __cfi_dump_emit+0x10/0x10 [ 642.515247][T26771] ? __cfi_dump_user_range+0x10/0x10 [ 642.515266][T26771] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 642.515296][T26771] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 642.515326][T26771] ? elf_core_dump+0x2368/0x3800 [ 642.515350][T26771] elf_core_dump+0x2ccc/0x3800 [ 642.515376][T26771] ? __cfi_elf_core_dump+0x10/0x10 [ 642.515406][T26771] ? dump_interrupted+0xf0/0xf0 [ 642.515435][T26771] ? filp_open+0x182/0x1d0 [ 642.515460][T26771] ? 0xffffffffff600000 [ 642.515477][T26771] do_coredump+0x1bfa/0x2bd0 [ 642.515509][T26771] ? __cfi_do_coredump+0x10/0x10 [ 642.515538][T26771] ? asm_exc_page_fault+0x2b/0x30 [ 642.515567][T26771] ? __kasan_slab_free+0x6a/0x80 [ 642.515589][T26771] ? kmem_cache_free+0x1c1/0x510 [ 642.515609][T26771] ? get_signal+0xa75/0x14f0 [ 642.515634][T26771] get_signal+0x11fd/0x14f0 [ 642.515662][T26771] arch_do_signal_or_restart+0x96/0x720 [ 642.515693][T26771] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 642.515733][T26771] irqentry_exit_to_user_mode+0x4e/0xb0 [ 642.515755][T26771] irqentry_exit+0x16/0x60 [ 642.515775][T26771] exc_page_fault+0x66/0xc0 [ 642.515795][T26771] asm_exc_page_fault+0x2b/0x30 [ 642.515815][T26771] RIP: 0033:0x7fb036c4f987 [ 642.515832][T26771] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 642.515850][T26771] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 642.515869][T26771] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 642.515883][T26771] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 642.515897][T26771] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 642.515911][T26771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 642.515928][T26771] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 642.515946][T26771] [ 642.537479][T26771] memory: usage 307200kB, limit 307200kB, failcnt 17919 [ 643.005603][T26771] memory+swap: usage 432016kB, limit 9007199254740988kB, failcnt 0 [ 643.053575][T26771] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 643.060598][T26771] Memory cgroup stats for /syz9: [ 643.060764][T26771] cache 313454592 [ 643.070263][T26771] rss 1064960 [ 643.073606][T26771] rss_huge 0 [ 643.076858][T26771] shmem 313454592 [ 643.094273][T26771] mapped_file 0 [ 643.102062][T26771] dirty 0 [ 643.106065][T26771] writeback 0 [ 643.109389][T26771] workingset_refault_anon 2418 [ 643.119336][T26771] workingset_refault_file 0 [ 643.123904][T26771] swap 127934464 [ 643.126562][T26846] netlink: 'syz.2.8992': attribute type 10 has an invalid length. [ 643.135484][T26771] swapcached 53248 [ 643.135824][T26846] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8992'. [ 643.144494][T26771] pgpgin 476261 [ 643.153258][T26846] bridge_slave_1: entered allmulticast mode [ 643.154492][T26771] pgpgout 408148 [ 643.169758][T26771] pgfault 225931 [ 643.173425][T26771] pgmajfault 228 [ 643.176990][T26771] inactive_anon 130560000 [ 643.186969][T26771] active_anon 184004608 [ 643.194226][T26771] inactive_file 0 [ 643.197902][T26771] active_file 0 [ 643.203025][T26771] unevictable 0 [ 643.206576][T26771] hierarchical_memory_limit 314572800 [ 643.212056][T26771] hierarchical_memsw_limit 9223372036854771712 [ 643.218573][T26771] total_cache 313454592 [ 643.225558][T26771] total_rss 1064960 [ 643.239270][T26771] total_rss_huge 0 [ 643.243868][T26771] total_shmem 313454592 [ 643.248086][T26771] total_mapped_file 0 [ 643.252112][T26771] total_dirty 0 [ 643.255654][T26771] total_writeback 0 [ 643.259479][T26771] total_workingset_refault_anon 2418 [ 643.264831][T26771] total_workingset_refault_file 0 [ 643.269930][T26771] total_swap 127934464 [ 643.284431][T26855] batadv_slave_1: entered promiscuous mode [ 643.284570][T26771] total_swapcached 53248 [ 643.294731][T26771] total_pgpgin 476261 [ 643.298960][T26771] total_pgpgout 408148 [ 643.305629][T26771] total_pgfault 225931 [ 643.310896][T26771] total_pgmajfault 228 [ 643.315585][T26771] total_inactive_anon 130560000 [ 643.320984][T26771] total_active_anon 184004608 [ 643.331861][T26859] batadv_slave_1: left promiscuous mode [ 643.337624][T26771] total_inactive_file 0 [ 643.341888][T26771] total_active_file 0 [ 643.345935][T26771] total_unevictable 0 [ 643.350303][T26771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26753,uid=0 [ 643.371025][T26771] Memory cgroup out of memory: Killed process 26753 (syz.9.8965) total-vm:90296kB, anon-rss:1148kB, file-rss:54684kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 643.449884][T26764] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 643.488556][T26764] CPU: 1 UID: 0 PID: 26764 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 643.488596][T26764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 643.488611][T26764] Call Trace: [ 643.488619][T26764] [ 643.488629][T26764] __dump_stack+0x21/0x30 [ 643.488678][T26764] dump_stack_lvl+0x10c/0x190 [ 643.488710][T26764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 643.488740][T26764] ? ___ratelimit+0x3f7/0x5a0 [ 643.488774][T26764] dump_stack+0x19/0x20 [ 643.488803][T26764] dump_header+0xd7/0x490 [ 643.488826][T26764] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 643.488856][T26764] oom_kill_process+0x35d/0x640 [ 643.488885][T26764] ? sched_clock_cpu+0x75/0x400 [ 643.488917][T26764] out_of_memory+0x659/0xa80 [ 643.488945][T26764] ? __cfi_out_of_memory+0x10/0x10 [ 643.488972][T26764] ? mutex_lock_killable+0x104/0x1c0 [ 643.488995][T26764] ? __cfi_mutex_lock_killable+0x10/0x10 [ 643.489020][T26764] mem_cgroup_out_of_memory+0x279/0x350 [ 643.489043][T26764] ? drain_obj_stock+0xed0/0xed0 [ 643.489066][T26764] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 643.489089][T26764] try_charge_memcg+0x8f7/0xde0 [ 643.489121][T26764] ? __cfi_try_charge_memcg+0x10/0x10 [ 643.489151][T26764] ? __alloc_pages_noprof+0x31f/0x7b0 [ 643.489182][T26764] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 643.489212][T26764] ? __folio_batch_add_and_move+0x2ab/0x370 [ 643.489242][T26764] __mem_cgroup_charge+0xf6/0x410 [ 643.489275][T26764] ? _raw_spin_lock+0x8c/0x120 [ 643.489303][T26764] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 643.489339][T26764] shmem_alloc_and_add_folio+0x86d/0x1050 [ 643.489370][T26764] ? put_swap_device+0x130/0x130 [ 643.489397][T26764] ? shmem_huge_global_enabled+0x2da/0x360 [ 643.489423][T26764] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 643.489449][T26764] ? __kasan_check_write+0x18/0x20 [ 643.489482][T26764] ? _raw_spin_lock+0x8c/0x120 [ 643.489511][T26764] shmem_get_folio_gfp+0x5f0/0x1380 [ 643.489539][T26764] ? shmem_get_folio+0xc0/0xc0 [ 643.489562][T26764] ? follow_page_pte+0xa5c/0xb90 [ 643.489592][T26764] ? inode_to_bdi+0x6d/0x100 [ 643.489623][T26764] shmem_write_begin+0xf4/0x270 [ 643.489651][T26764] generic_perform_write+0x330/0x960 [ 643.489700][T26764] ? __cfi_generic_perform_write+0x10/0x10 [ 643.489733][T26764] ? down_write+0xe9/0x2a0 [ 643.489758][T26764] ? file_update_time+0xa3/0x220 [ 643.489790][T26764] shmem_file_write_iter+0x105/0x130 [ 643.489820][T26764] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 643.489852][T26764] __kernel_write_iter+0x41a/0x8e0 [ 643.489874][T26764] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 643.489906][T26764] ? __cfi___kernel_write_iter+0x10/0x10 [ 643.489927][T26764] ? get_dump_page+0x160/0x220 [ 643.489956][T26764] ? __asan_memset+0x39/0x50 [ 643.489976][T26764] ? iov_iter_bvec+0xc0/0x180 [ 643.490005][T26764] dump_user_range+0xb06/0xdf0 [ 643.490035][T26764] ? __cfi_dump_emit+0x10/0x10 [ 643.490056][T26764] ? __cfi_dump_user_range+0x10/0x10 [ 643.490078][T26764] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 643.490113][T26764] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 643.490147][T26764] ? elf_core_dump+0x2368/0x3800 [ 643.490174][T26764] elf_core_dump+0x2ccc/0x3800 [ 643.490205][T26764] ? __cfi_elf_core_dump+0x10/0x10 [ 643.490240][T26764] ? dump_interrupted+0xf0/0xf0 [ 643.490272][T26764] ? filp_open+0x182/0x1d0 [ 643.490302][T26764] ? 0xffffffffff600000 [ 643.490321][T26764] do_coredump+0x1bfa/0x2bd0 [ 643.490358][T26764] ? __cfi_do_coredump+0x10/0x10 [ 643.490390][T26764] ? asm_exc_page_fault+0x2b/0x30 [ 643.490422][T26764] ? __kasan_slab_free+0x6a/0x80 [ 643.490447][T26764] ? kmem_cache_free+0x1c1/0x510 [ 643.490470][T26764] ? get_signal+0xa75/0x14f0 [ 643.490499][T26764] get_signal+0x11fd/0x14f0 [ 643.490531][T26764] arch_do_signal_or_restart+0x96/0x720 [ 643.490570][T26764] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 643.490609][T26764] irqentry_exit_to_user_mode+0x4e/0xb0 [ 643.490635][T26764] irqentry_exit+0x16/0x60 [ 643.490658][T26764] exc_page_fault+0x66/0xc0 [ 643.490686][T26764] asm_exc_page_fault+0x2b/0x30 [ 643.490709][T26764] RIP: 0033:0x7fb036c4f987 [ 643.490729][T26764] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 643.490750][T26764] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 643.490772][T26764] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 643.490788][T26764] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 643.490805][T26764] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.490820][T26764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 643.490835][T26764] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 643.490855][T26764] [ 643.492937][T26764] memory: usage 307028kB, limit 307200kB, failcnt 18621 [ 643.968739][T26764] memory+swap: usage 425380kB, limit 9007199254740988kB, failcnt 0 [ 643.976844][T26764] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 643.984035][T26764] Memory cgroup stats for /syz9: [ 643.984180][T26764] cache 313462784 [ 643.992891][T26764] rss 761856 [ 643.996115][T26764] rss_huge 0 [ 643.999416][T26764] shmem 313462784 [ 644.003071][T26764] mapped_file 0 [ 644.006549][T26764] dirty 0 [ 644.009525][T26764] writeback 0 [ 644.012825][T26764] workingset_refault_anon 2425 [ 644.017610][T26764] workingset_refault_file 0 [ 644.022175][T26764] swap 121135104 [ 644.026070][T26764] swapcached 253952 [ 644.029960][T26764] pgpgin 483124 [ 644.033566][T26764] pgpgout 415040 [ 644.043752][T26764] pgfault 226112 [ 644.047351][T26764] pgmajfault 232 [ 644.050922][T26764] inactive_anon 186675200 [ 644.055336][T26764] active_anon 127635456 [ 644.059515][T26764] inactive_file 0 [ 644.063209][T26764] active_file 0 [ 644.066732][T26764] unevictable 0 [ 644.070217][T26764] hierarchical_memory_limit 314572800 [ 644.075637][T26764] hierarchical_memsw_limit 9223372036854771712 [ 644.085236][T26764] total_cache 313462784 [ 644.100890][T26764] total_rss 761856 [ 644.104674][T26764] total_rss_huge 0 [ 644.117717][T26764] total_shmem 313462784 [ 644.122901][T26764] total_mapped_file 0 [ 644.126980][T26764] total_dirty 0 [ 644.130788][T26764] total_writeback 0 [ 644.134708][T26764] total_workingset_refault_anon 2425 [ 644.145256][T26764] total_workingset_refault_file 0 [ 644.167382][T26764] total_swap 121135104 [ 644.182914][T26764] total_swapcached 253952 [ 644.191415][T26764] total_pgpgin 483124 [ 644.200573][T26764] total_pgpgout 415040 [ 644.214737][T26764] total_pgfault 226112 [ 644.220402][T26764] total_pgmajfault 232 [ 644.230805][T26764] total_inactive_anon 186675200 [ 644.236921][T26764] total_active_anon 127635456 [ 644.241798][T26764] total_inactive_file 0 [ 644.246521][T26764] total_active_file 0 [ 644.250593][T26764] total_unevictable 0 [ 644.254705][T26764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26755,uid=0 [ 644.271006][T26764] Memory cgroup out of memory: Killed process 26755 (syz.9.8965) total-vm:90296kB, anon-rss:1276kB, file-rss:53660kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 644.355855][T26760] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 644.393057][T26760] CPU: 0 UID: 0 PID: 26760 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 644.393093][T26760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.393108][T26760] Call Trace: [ 644.393116][T26760] [ 644.393126][T26760] __dump_stack+0x21/0x30 [ 644.393161][T26760] dump_stack_lvl+0x10c/0x190 [ 644.393192][T26760] ? __cfi_dump_stack_lvl+0x10/0x10 [ 644.393223][T26760] ? ___ratelimit+0x3f7/0x5a0 [ 644.393258][T26760] dump_stack+0x19/0x20 [ 644.393288][T26760] dump_header+0xd7/0x490 [ 644.393312][T26760] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 644.393343][T26760] oom_kill_process+0x35d/0x640 [ 644.393371][T26760] ? sched_clock_cpu+0x75/0x400 [ 644.393403][T26760] out_of_memory+0x659/0xa80 [ 644.393431][T26760] ? __cfi_out_of_memory+0x10/0x10 [ 644.393459][T26760] ? mutex_lock_killable+0x104/0x1c0 [ 644.393482][T26760] ? __cfi_mutex_lock_killable+0x10/0x10 [ 644.393507][T26760] mem_cgroup_out_of_memory+0x279/0x350 [ 644.393530][T26760] ? drain_obj_stock+0xed0/0xed0 [ 644.393554][T26760] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 644.393577][T26760] try_charge_memcg+0x8f7/0xde0 [ 644.393609][T26760] ? __cfi_try_charge_memcg+0x10/0x10 [ 644.393648][T26760] ? __alloc_pages_noprof+0x31f/0x7b0 [ 644.393681][T26760] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 644.393712][T26760] ? __folio_batch_add_and_move+0x2ab/0x370 [ 644.393742][T26760] __mem_cgroup_charge+0xf6/0x410 [ 644.393775][T26760] ? _raw_spin_lock+0x8c/0x120 [ 644.393803][T26760] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 644.393840][T26760] shmem_alloc_and_add_folio+0x86d/0x1050 [ 644.393871][T26760] ? put_swap_device+0x130/0x130 [ 644.393899][T26760] ? shmem_huge_global_enabled+0x2da/0x360 [ 644.393926][T26760] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 644.393951][T26760] ? __kasan_check_write+0x18/0x20 [ 644.393985][T26760] ? _raw_spin_lock+0x8c/0x120 [ 644.394015][T26760] shmem_get_folio_gfp+0x5f0/0x1380 [ 644.394044][T26760] ? shmem_get_folio+0xc0/0xc0 [ 644.394067][T26760] ? follow_page_pte+0xa5c/0xb90 [ 644.394099][T26760] ? inode_to_bdi+0x6d/0x100 [ 644.394132][T26760] shmem_write_begin+0xf4/0x270 [ 644.394160][T26760] generic_perform_write+0x330/0x960 [ 644.394197][T26760] ? __cfi_generic_perform_write+0x10/0x10 [ 644.394230][T26760] ? down_write+0xe9/0x2a0 [ 644.394255][T26760] ? file_update_time+0xa3/0x220 [ 644.394287][T26760] shmem_file_write_iter+0x105/0x130 [ 644.394319][T26760] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 644.394351][T26760] __kernel_write_iter+0x41a/0x8e0 [ 644.394372][T26760] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 644.394405][T26760] ? __cfi___kernel_write_iter+0x10/0x10 [ 644.394427][T26760] ? get_dump_page+0x160/0x220 [ 644.394457][T26760] ? __asan_memset+0x39/0x50 [ 644.394477][T26760] ? iov_iter_bvec+0xc0/0x180 [ 644.394507][T26760] dump_user_range+0xb06/0xdf0 [ 644.394531][T26760] ? __cfi_dump_emit+0x10/0x10 [ 644.394552][T26760] ? __cfi_dump_user_range+0x10/0x10 [ 644.394574][T26760] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 644.394608][T26760] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 644.394648][T26760] ? elf_core_dump+0x2368/0x3800 [ 644.394676][T26760] elf_core_dump+0x2ccc/0x3800 [ 644.394707][T26760] ? __cfi_elf_core_dump+0x10/0x10 [ 644.394743][T26760] ? dump_interrupted+0xf0/0xf0 [ 644.394778][T26760] ? filp_open+0x182/0x1d0 [ 644.394808][T26760] ? 0xffffffffff600000 [ 644.394827][T26760] do_coredump+0x1bfa/0x2bd0 [ 644.394867][T26760] ? __cfi_do_coredump+0x10/0x10 [ 644.394901][T26760] ? asm_exc_page_fault+0x2b/0x30 [ 644.394934][T26760] ? __kasan_slab_free+0x6a/0x80 [ 644.394961][T26760] ? kmem_cache_free+0x1c1/0x510 [ 644.394984][T26760] ? get_signal+0xa75/0x14f0 [ 644.395014][T26760] get_signal+0x11fd/0x14f0 [ 644.395047][T26760] arch_do_signal_or_restart+0x96/0x720 [ 644.395083][T26760] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 644.395123][T26760] irqentry_exit_to_user_mode+0x4e/0xb0 [ 644.395149][T26760] irqentry_exit+0x16/0x60 [ 644.395173][T26760] exc_page_fault+0x66/0xc0 [ 644.395197][T26760] asm_exc_page_fault+0x2b/0x30 [ 644.395220][T26760] RIP: 0033:0x7fb036c4f987 [ 644.395240][T26760] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 644.395260][T26760] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 644.395281][T26760] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 644.395298][T26760] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 644.395314][T26760] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.395330][T26760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 644.395345][T26760] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 644.395366][T26760] [ 644.395376][T26760] memory: usage 302964kB, limit 307200kB, failcnt 22919 [ 645.026826][T26760] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 645.035652][T26760] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 645.042647][T26760] Memory cgroup stats for /syz9: [ 645.042817][T26760] cache 313966592 [ 645.052638][T26760] rss 589824 [ 645.056710][T26760] rss_huge 0 [ 645.065332][T26760] shmem 313966592 [ 645.085781][T26760] mapped_file 0 [ 645.089296][T26760] dirty 0 [ 645.092256][T26760] writeback 4096 [ 645.095860][T26760] workingset_refault_anon 2426 [ 645.107754][ T36] kauditd_printk_skb: 248 callbacks suppressed [ 645.107772][ T36] audit: type=1400 audit(2000004649.322:76249): avc: denied { create } for pid=26909 comm="syz.3.9016" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.116257][T26760] workingset_refault_file 0 [ 645.149451][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9015'. [ 645.158630][ T36] audit: type=1400 audit(2000004649.322:76250): avc: denied { map } for pid=26909 comm="syz.3.9016" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.168625][T26760] swap 127967232 [ 645.196570][T26760] swapcached 28672 [ 645.204586][T26760] pgpgin 493142 [ 645.208093][T26760] pgpgout 425029 [ 645.215214][T26760] pgfault 226634 [ 645.215886][ T36] audit: type=1400 audit(2000004649.322:76251): avc: denied { read write } for pid=26909 comm="syz.3.9016" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.218994][T26760] pgmajfault 233 [ 645.248072][T26760] inactive_anon 296026112 [ 645.260280][T26760] active_anon 18546688 [ 645.263318][ T36] audit: type=1400 audit(2000004649.322:76252): avc: denied { create } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 645.269734][T26760] inactive_file 0 [ 645.285973][ T36] audit: type=1400 audit(2000004649.322:76253): avc: denied { create } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 645.298951][T26760] active_file 0 [ 645.311062][ T36] audit: type=1400 audit(2000004649.322:76254): avc: denied { create } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.332598][ T36] audit: type=1400 audit(2000004649.322:76255): avc: denied { create } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 645.341793][T26760] unevictable 0 [ 645.354785][ T36] audit: type=1400 audit(2000004649.322:76256): avc: denied { create } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 645.373544][T26760] hierarchical_memory_limit 314572800 [ 645.384810][ T36] audit: type=1400 audit(2000004649.322:76257): avc: denied { bind } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.396047][T26760] hierarchical_memsw_limit 9223372036854771712 [ 645.407681][ T36] audit: type=1400 audit(2000004649.322:76258): avc: denied { bind } for pid=26909 comm="syz.3.9016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 645.416166][T26760] total_cache 313966592 [ 645.439668][T26760] total_rss 589824 [ 645.443633][T26760] total_rss_huge 0 [ 645.447445][T26760] total_shmem 313966592 [ 645.451817][T26760] total_mapped_file 0 [ 645.455925][T26760] total_dirty 0 [ 645.459884][T26760] total_writeback 4096 [ 645.464106][T26760] total_workingset_refault_anon 2426 [ 645.469526][T26760] total_workingset_refault_file 0 [ 645.474619][T26760] total_swap 127967232 [ 645.478817][T26760] total_swapcached 28672 [ 645.483455][T26760] total_pgpgin 493142 [ 645.492324][T26760] total_pgpgout 425029 [ 645.496556][T26760] total_pgfault 226634 [ 645.501854][T26760] total_pgmajfault 233 [ 645.506114][T26760] total_inactive_anon 296026112 [ 645.517010][T26760] total_active_anon 18546688 [ 645.521901][T26760] total_inactive_file 0 [ 645.526128][T26760] total_active_file 0 [ 645.530342][T26760] total_unevictable 0 [ 645.534416][T26760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26758,uid=0 [ 645.549548][T26760] Memory cgroup out of memory: Killed process 26758 (syz.9.8965) total-vm:90296kB, anon-rss:1148kB, file-rss:60080kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 645.672003][T26764] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 645.704587][T26764] CPU: 1 UID: 0 PID: 26764 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 645.704628][T26764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 645.704644][T26764] Call Trace: [ 645.704652][T26764] [ 645.704662][T26764] __dump_stack+0x21/0x30 [ 645.704699][T26764] dump_stack_lvl+0x10c/0x190 [ 645.704730][T26764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 645.704761][T26764] ? ___ratelimit+0x3f7/0x5a0 [ 645.704796][T26764] dump_stack+0x19/0x20 [ 645.704825][T26764] dump_header+0xd7/0x490 [ 645.704849][T26764] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 645.704879][T26764] oom_kill_process+0x35d/0x640 [ 645.704907][T26764] ? sched_clock_cpu+0x75/0x400 [ 645.704938][T26764] out_of_memory+0x659/0xa80 [ 645.704967][T26764] ? __cfi_out_of_memory+0x10/0x10 [ 645.704993][T26764] ? mutex_lock_killable+0x104/0x1c0 [ 645.705017][T26764] ? __cfi_mutex_lock_killable+0x10/0x10 [ 645.705042][T26764] mem_cgroup_out_of_memory+0x279/0x350 [ 645.705065][T26764] ? drain_obj_stock+0xed0/0xed0 [ 645.705089][T26764] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 645.705111][T26764] try_charge_memcg+0x8f7/0xde0 [ 645.705143][T26764] ? __cfi_try_charge_memcg+0x10/0x10 [ 645.705173][T26764] ? __alloc_pages_noprof+0x31f/0x7b0 [ 645.705205][T26764] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 645.705236][T26764] ? __folio_batch_add_and_move+0x2ab/0x370 [ 645.705267][T26764] __mem_cgroup_charge+0xf6/0x410 [ 645.705300][T26764] ? _raw_spin_lock+0x8c/0x120 [ 645.705329][T26764] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 645.705365][T26764] shmem_alloc_and_add_folio+0x86d/0x1050 [ 645.705395][T26764] ? put_swap_device+0x130/0x130 [ 645.705423][T26764] ? shmem_huge_global_enabled+0x2da/0x360 [ 645.705450][T26764] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 645.705482][T26764] ? __kasan_check_write+0x18/0x20 [ 645.705515][T26764] ? _raw_spin_lock+0x8c/0x120 [ 645.705544][T26764] shmem_get_folio_gfp+0x5f0/0x1380 [ 645.705573][T26764] ? shmem_get_folio+0xc0/0xc0 [ 645.705596][T26764] ? follow_page_pte+0xa5c/0xb90 [ 645.705627][T26764] ? inode_to_bdi+0x6d/0x100 [ 645.705660][T26764] shmem_write_begin+0xf4/0x270 [ 645.705688][T26764] generic_perform_write+0x330/0x960 [ 645.705726][T26764] ? __cfi_generic_perform_write+0x10/0x10 [ 645.705758][T26764] ? down_write+0xe9/0x2a0 [ 645.705782][T26764] ? file_update_time+0xa3/0x220 [ 645.705812][T26764] shmem_file_write_iter+0x105/0x130 [ 645.705843][T26764] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 645.705875][T26764] __kernel_write_iter+0x41a/0x8e0 [ 645.705897][T26764] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 645.705935][T26764] ? __cfi___kernel_write_iter+0x10/0x10 [ 645.705957][T26764] ? get_dump_page+0x160/0x220 [ 645.705988][T26764] ? __asan_memset+0x39/0x50 [ 645.706008][T26764] ? iov_iter_bvec+0xc0/0x180 [ 645.706038][T26764] dump_user_range+0xb06/0xdf0 [ 645.706062][T26764] ? __cfi_dump_emit+0x10/0x10 [ 645.706082][T26764] ? __cfi_dump_user_range+0x10/0x10 [ 645.706105][T26764] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 645.706139][T26764] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 645.706171][T26764] ? elf_core_dump+0x2368/0x3800 [ 645.706199][T26764] elf_core_dump+0x2ccc/0x3800 [ 645.706229][T26764] ? __cfi_elf_core_dump+0x10/0x10 [ 645.706264][T26764] ? dump_interrupted+0xf0/0xf0 [ 645.706297][T26764] ? filp_open+0x182/0x1d0 [ 645.706326][T26764] ? 0xffffffffff600000 [ 645.706346][T26764] do_coredump+0x1bfa/0x2bd0 [ 645.706383][T26764] ? __cfi_do_coredump+0x10/0x10 [ 645.706416][T26764] ? asm_exc_page_fault+0x2b/0x30 [ 645.706449][T26764] ? __kasan_slab_free+0x6a/0x80 [ 645.706482][T26764] ? kmem_cache_free+0x1c1/0x510 [ 645.706504][T26764] ? get_signal+0xa75/0x14f0 [ 645.706534][T26764] get_signal+0x11fd/0x14f0 [ 645.706565][T26764] arch_do_signal_or_restart+0x96/0x720 [ 645.706602][T26764] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 645.706641][T26764] irqentry_exit_to_user_mode+0x4e/0xb0 [ 645.706668][T26764] irqentry_exit+0x16/0x60 [ 645.706692][T26764] exc_page_fault+0x66/0xc0 [ 645.706716][T26764] asm_exc_page_fault+0x2b/0x30 [ 645.706740][T26764] RIP: 0033:0x7fb036c4f987 [ 645.706760][T26764] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 645.706780][T26764] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 645.706802][T26764] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 645.706819][T26764] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 645.706836][T26764] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 645.706851][T26764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 645.706866][T26764] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 645.706888][T26764] [ 645.710540][T26764] memory: usage 307008kB, limit 307200kB, failcnt 24998 [ 646.251672][T26842] usb usb7: usbfs: process 26842 (syz.9.8991) did not claim interface 0 before use [ 646.300011][T26842] overlayfs: failed to resolve './file0': -2 [ 646.320316][T26764] memory+swap: usage 416396kB, limit 9007199254740988kB, failcnt 0 [ 646.330625][T26842] rust_binder: Write failure EFAULT in pid:841 [ 646.338157][T26764] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 646.379833][T26764] Memory cgroup stats for /syz9: [ 646.379990][T26764] cache 313217024 [ 646.405381][T26764] rss 593920 [ 646.432596][T26764] rss_huge 0 [ 646.437827][T26764] shmem 313217024 [ 646.453563][T26764] mapped_file 0 [ 646.457085][T26764] dirty 0 [ 646.470703][T26764] writeback 4096 [ 646.482261][T26764] workingset_refault_anon 2465 [ 646.501291][T26764] workingset_refault_file 0 [ 646.513154][T26764] swap 113819648 [ 646.535997][T26764] swapcached 65536 [ 646.539779][T26764] pgpgin 504664 [ 646.543259][T26764] pgpgout 436727 [ 646.569277][T26764] pgfault 227058 [ 646.579808][T26764] pgmajfault 264 [ 646.589232][T26764] inactive_anon 289648640 [ 646.597229][T26764] active_anon 23838720 [ 646.618669][T26764] inactive_file 0 [ 646.631103][T26764] active_file 0 [ 646.634643][T26764] unevictable 0 [ 646.648907][T26764] hierarchical_memory_limit 314572800 [ 646.664825][T26764] hierarchical_memsw_limit 9223372036854771712 [ 646.677942][T26764] total_cache 313217024 [ 646.682261][T26764] total_rss 593920 [ 646.686108][T26764] total_rss_huge 0 [ 646.690111][T26764] total_shmem 313217024 [ 646.694327][T26764] total_mapped_file 0 [ 646.698431][T26764] total_dirty 0 [ 646.702281][T26764] total_writeback 4096 [ 646.706434][T26764] total_workingset_refault_anon 2465 [ 646.712068][T26764] total_workingset_refault_file 0 [ 646.717206][T26764] total_swap 113819648 [ 646.721726][T26764] total_swapcached 65536 [ 646.726060][T26764] total_pgpgin 504664 [ 646.730131][T26764] total_pgpgout 436727 [ 646.734465][T26764] total_pgfault 227058 [ 646.738653][T26764] total_pgmajfault 264 [ 646.742979][T26764] total_inactive_anon 289648640 [ 646.747892][T26764] total_active_anon 23838720 [ 646.752713][T26764] total_inactive_file 0 [ 646.757157][T26764] total_active_file 0 [ 646.761637][T26764] total_unevictable 0 [ 646.765940][T26764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26762,uid=0 [ 646.781002][T26764] Memory cgroup out of memory: Killed process 26762 (syz.9.8965) total-vm:90296kB, anon-rss:1148kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 646.816209][T26773] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 646.828237][T26773] CPU: 1 UID: 0 PID: 26773 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 646.828272][T26773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 646.828288][T26773] Call Trace: [ 646.828297][T26773] [ 646.828306][T26773] __dump_stack+0x21/0x30 [ 646.828342][T26773] dump_stack_lvl+0x10c/0x190 [ 646.828373][T26773] ? __cfi_dump_stack_lvl+0x10/0x10 [ 646.828403][T26773] ? ___ratelimit+0x3f7/0x5a0 [ 646.828439][T26773] dump_stack+0x19/0x20 [ 646.828476][T26773] dump_header+0xd7/0x490 [ 646.828499][T26773] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 646.828530][T26773] oom_kill_process+0x35d/0x640 [ 646.828559][T26773] ? sched_clock_cpu+0x75/0x400 [ 646.828591][T26773] out_of_memory+0x659/0xa80 [ 646.828618][T26773] ? __cfi_out_of_memory+0x10/0x10 [ 646.828645][T26773] ? mutex_lock_killable+0x104/0x1c0 [ 646.828670][T26773] ? __cfi_mutex_lock_killable+0x10/0x10 [ 646.828695][T26773] mem_cgroup_out_of_memory+0x279/0x350 [ 646.828718][T26773] ? drain_obj_stock+0xed0/0xed0 [ 646.828742][T26773] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 646.828764][T26773] try_charge_memcg+0x8f7/0xde0 [ 646.828794][T26773] ? __cfi_try_charge_memcg+0x10/0x10 [ 646.828825][T26773] ? __alloc_pages_noprof+0x31f/0x7b0 [ 646.828857][T26773] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 646.828888][T26773] ? __folio_batch_add_and_move+0x2ab/0x370 [ 646.828917][T26773] __mem_cgroup_charge+0xf6/0x410 [ 646.828950][T26773] ? _raw_spin_lock+0x8c/0x120 [ 646.828979][T26773] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 646.829014][T26773] shmem_alloc_and_add_folio+0x86d/0x1050 [ 646.829045][T26773] ? put_swap_device+0x130/0x130 [ 646.829072][T26773] ? shmem_huge_global_enabled+0x2da/0x360 [ 646.829098][T26773] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 646.829123][T26773] ? __kasan_check_write+0x18/0x20 [ 646.829157][T26773] ? _raw_spin_lock+0x8c/0x120 [ 646.829186][T26773] shmem_get_folio_gfp+0x5f0/0x1380 [ 646.829213][T26773] ? shmem_get_folio+0xc0/0xc0 [ 646.829236][T26773] ? follow_page_pte+0xa5c/0xb90 [ 646.829267][T26773] ? inode_to_bdi+0x6d/0x100 [ 646.829299][T26773] shmem_write_begin+0xf4/0x270 [ 646.829327][T26773] generic_perform_write+0x330/0x960 [ 646.829363][T26773] ? __cfi_generic_perform_write+0x10/0x10 [ 646.829395][T26773] ? down_write+0xe9/0x2a0 [ 646.829419][T26773] ? file_update_time+0xa3/0x220 [ 646.829458][T26773] shmem_file_write_iter+0x105/0x130 [ 646.829489][T26773] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 646.829520][T26773] __kernel_write_iter+0x41a/0x8e0 [ 646.829542][T26773] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 646.829574][T26773] ? __cfi___kernel_write_iter+0x10/0x10 [ 646.829594][T26773] ? get_dump_page+0x160/0x220 [ 646.829623][T26773] ? __asan_memset+0x39/0x50 [ 646.829644][T26773] ? iov_iter_bvec+0xc0/0x180 [ 646.829673][T26773] dump_user_range+0xb06/0xdf0 [ 646.829696][T26773] ? __cfi_dump_emit+0x10/0x10 [ 646.829719][T26773] ? __cfi_dump_user_range+0x10/0x10 [ 646.829740][T26773] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 646.829775][T26773] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 646.829809][T26773] ? elf_core_dump+0x2368/0x3800 [ 646.829837][T26773] elf_core_dump+0x2ccc/0x3800 [ 646.829867][T26773] ? __cfi_elf_core_dump+0x10/0x10 [ 646.829903][T26773] ? dump_interrupted+0xf0/0xf0 [ 646.829935][T26773] ? filp_open+0x182/0x1d0 [ 646.829964][T26773] ? 0xffffffffff600000 [ 646.829984][T26773] do_coredump+0x1bfa/0x2bd0 [ 646.830021][T26773] ? __cfi_do_coredump+0x10/0x10 [ 646.830054][T26773] ? asm_exc_page_fault+0x2b/0x30 [ 646.830087][T26773] ? __kasan_slab_free+0x6a/0x80 [ 646.830112][T26773] ? kmem_cache_free+0x1c1/0x510 [ 646.830135][T26773] ? get_signal+0xa75/0x14f0 [ 646.830164][T26773] get_signal+0x11fd/0x14f0 [ 646.830195][T26773] arch_do_signal_or_restart+0x96/0x720 [ 646.830231][T26773] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 646.830269][T26773] irqentry_exit_to_user_mode+0x4e/0xb0 [ 646.830295][T26773] irqentry_exit+0x16/0x60 [ 646.830317][T26773] exc_page_fault+0x66/0xc0 [ 646.830340][T26773] asm_exc_page_fault+0x2b/0x30 [ 646.830363][T26773] RIP: 0033:0x7fb036c4f987 [ 646.830382][T26773] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 646.830403][T26773] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 646.830424][T26773] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 646.830439][T26773] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 646.830462][T26773] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 646.830478][T26773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 646.830493][T26773] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 646.830514][T26773] [ 646.923877][T26773] memory: usage 277904kB, limit 307200kB, failcnt 27116 [ 647.304862][T26773] memory+swap: usage 391976kB, limit 9007199254740988kB, failcnt 0 [ 647.312848][T26773] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 647.319854][T26773] Memory cgroup stats for /syz9: [ 647.320001][T26773] cache 284073984 [ 647.328657][T26773] rss 466944 [ 647.340117][T26773] rss_huge 0 [ 647.343336][T26773] shmem 284073984 [ 647.347058][T26773] mapped_file 0 [ 647.350688][T26773] dirty 0 [ 647.353655][T26773] writeback 0 [ 647.357215][T26773] workingset_refault_anon 2468 [ 647.362091][T26773] workingset_refault_file 0 [ 647.366646][T26773] swap 116809728 [ 647.370210][T26773] swapcached 65536 [ 647.373945][T26773] pgpgin 508315 [ 647.377490][T26773] pgpgout 447526 [ 647.381060][T26773] pgfault 227162 [ 647.384625][T26773] pgmajfault 266 [ 647.388216][T26773] inactive_anon 66121728 [ 647.392477][T26773] active_anon 218451968 [ 647.396650][T26773] inactive_file 0 [ 647.400340][T26773] active_file 0 [ 647.403815][T26773] unevictable 0 [ 647.407291][T26773] hierarchical_memory_limit 314572800 [ 647.430396][T26773] hierarchical_memsw_limit 9223372036854771712 [ 647.436602][T26773] total_cache 284073984 [ 647.440793][T26773] total_rss 466944 [ 647.451704][T26773] total_rss_huge 0 [ 647.455484][T26773] total_shmem 284073984 [ 647.459677][T26773] total_mapped_file 0 [ 647.473013][T26773] total_dirty 0 [ 647.476527][T26773] total_writeback 0 [ 647.480356][T26773] total_workingset_refault_anon 2468 [ 647.485701][T26773] total_workingset_refault_file 0 [ 647.490751][T26773] total_swap 116809728 [ 647.495521][T26773] total_swapcached 65536 [ 647.499890][T26773] total_pgpgin 508315 [ 647.503885][T26773] total_pgpgout 447526 [ 647.509241][T26773] total_pgfault 227162 [ 647.513349][T26773] total_pgmajfault 266 [ 647.518436][T26773] total_inactive_anon 66121728 [ 647.523229][T26773] total_active_anon 218451968 [ 647.528936][T26773] total_inactive_file 0 [ 647.533120][T26773] total_active_file 0 [ 647.538077][T26773] total_unevictable 0 [ 647.542085][T26773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26769,uid=0 [ 647.557993][T26773] Memory cgroup out of memory: Killed process 26769 (syz.9.8965) total-vm:90296kB, anon-rss:1276kB, file-rss:60096kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 647.740187][T22153] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 647.749990][T22153] CPU: 0 UID: 0 PID: 22153 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 647.750025][T22153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.750041][T22153] Call Trace: [ 647.750049][T22153] [ 647.750059][T22153] __dump_stack+0x21/0x30 [ 647.750098][T22153] dump_stack_lvl+0x10c/0x190 [ 647.750129][T22153] ? __cfi_dump_stack_lvl+0x10/0x10 [ 647.750161][T22153] ? ___ratelimit+0x3f7/0x5a0 [ 647.750196][T22153] dump_stack+0x19/0x20 [ 647.750225][T22153] dump_header+0xd7/0x490 [ 647.750250][T22153] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 647.750280][T22153] oom_kill_process+0x35d/0x640 [ 647.750309][T22153] ? sched_clock_cpu+0x75/0x400 [ 647.750341][T22153] out_of_memory+0x659/0xa80 [ 647.750369][T22153] ? __cfi_out_of_memory+0x10/0x10 [ 647.750396][T22153] ? mutex_lock_killable+0x104/0x1c0 [ 647.750419][T22153] ? __cfi_mutex_lock_killable+0x10/0x10 [ 647.750444][T22153] mem_cgroup_out_of_memory+0x279/0x350 [ 647.750467][T22153] ? drain_obj_stock+0xed0/0xed0 [ 647.750491][T22153] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 647.750513][T22153] try_charge_memcg+0x8f7/0xde0 [ 647.750544][T22153] ? sched_clock_cpu+0x75/0x400 [ 647.750575][T22153] ? __cfi_try_charge_memcg+0x10/0x10 [ 647.750607][T22153] ? __alloc_pages_noprof+0x31f/0x7b0 [ 647.750638][T22153] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 647.750683][T22153] __mem_cgroup_charge+0xf6/0x410 [ 647.750717][T22153] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 647.750753][T22153] folio_prealloc+0x67/0x240 [ 647.750781][T22153] do_wp_page+0x1885/0x2ed0 [ 647.750805][T22153] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 647.750841][T22153] ? folio_put+0x90/0x90 [ 647.750865][T22153] ? __cfi__raw_spin_lock+0x10/0x10 [ 647.750893][T22153] ? __pte_offset_map+0x1b0/0x230 [ 647.750926][T22153] ? pte_offset_map_rw_nolock+0xba/0x110 [ 647.750959][T22153] handle_mm_fault+0xff7/0x1b90 [ 647.750987][T22153] ? __cfi_handle_mm_fault+0x10/0x10 [ 647.751011][T22153] ? lock_vma_under_rcu+0x49d/0x540 [ 647.751040][T22153] ? __cfi___x64_sys_clone+0x10/0x10 [ 647.751068][T22153] ? __kasan_check_read+0x15/0x20 [ 647.751105][T22153] do_user_addr_fault+0x96c/0x1200 [ 647.751141][T22153] exc_page_fault+0x59/0xc0 [ 647.751164][T22153] asm_exc_page_fault+0x2b/0x30 [ 647.751187][T22153] RIP: 0033:0x7fb036d85288 [ 647.751206][T22153] Code: 84 e4 74 66 e8 89 04 00 00 41 89 c4 85 c0 0f 84 4e 01 00 00 49 c7 c5 a8 ff ff ff 64 45 8b 75 00 48 89 da 89 ee bf 02 00 00 00 93 09 00 00 45 85 e4 79 05 64 45 89 75 00 48 8b 84 24 c8 00 00 [ 647.751227][T22153] RSP: 002b:00007ffde4aedf20 EFLAGS: 00010206 [ 647.751248][T22153] RAX: 000000000000034e RBX: 0000000000000000 RCX: 00007fb036d85713 [ 647.751264][T22153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 647.751278][T22153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 647.751293][T22153] R10: 0000555573bb17d0 R11: 0000000000000246 R12: 000000000000034e [ 647.751309][T22153] R13: ffffffffffffffa8 R14: 0000000000000006 R15: 00007ffde4aee0b0 [ 647.751329][T22153] [ 648.074680][T22153] memory: usage 307112kB, limit 307200kB, failcnt 28231 [ 648.097598][T22153] memory+swap: usage 413632kB, limit 9007199254740988kB, failcnt 0 [ 648.186318][T22153] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 648.193267][T22153] Memory cgroup stats for /syz9: [ 648.193434][T22153] cache 313565184 [ 648.202045][T22153] rss 372736 [ 648.205305][T22153] rss_huge 0 [ 648.208547][T22153] shmem 313565184 [ 648.212214][T22153] mapped_file 0 [ 648.215697][T22153] dirty 0 [ 648.218664][T22153] writeback 4096 [ 648.222250][T22153] workingset_refault_anon 2470 [ 648.227033][T22153] workingset_refault_file 0 [ 648.231591][T22153] swap 118767616 [ 648.235158][T22153] swapcached 102400 [ 648.238985][T22153] pgpgin 527410 [ 648.242490][T22153] pgpgout 459346 [ 648.246061][T22153] pgfault 228319 [ 648.249626][T22153] pgmajfault 268 [ 648.253214][T22153] inactive_anon 103239680 [ 648.257565][T22153] active_anon 209494016 [ 648.261757][T22153] inactive_file 0 [ 648.265413][T22153] active_file 0 [ 648.268893][T22153] unevictable 0 [ 648.272394][T22153] hierarchical_memory_limit 314572800 [ 648.277788][T22153] hierarchical_memsw_limit 9223372036854771712 [ 648.283982][T22153] total_cache 313565184 [ 648.288164][T22153] total_rss 372736 [ 648.291910][T22153] total_rss_huge 0 [ 648.295862][T22153] total_shmem 313565184 [ 648.300048][T22153] total_mapped_file 0 [ 648.304065][T22153] total_dirty 0 [ 648.307573][T22153] total_writeback 4096 [ 648.311674][T22153] total_workingset_refault_anon 2470 [ 648.317054][T22153] total_workingset_refault_file 0 [ 648.322370][T22153] total_swap 118767616 [ 648.326531][T22153] total_swapcached 102400 [ 648.330889][T22153] total_pgpgin 527410 [ 648.334895][T22153] total_pgpgout 459346 [ 648.339134][T22153] total_pgfault 228319 [ 648.343229][T22153] total_pgmajfault 268 [ 648.347345][T22153] total_inactive_anon 103239680 [ 648.352238][T22153] total_active_anon 209494016 [ 648.356951][T22153] total_inactive_file 0 [ 648.378928][T22153] total_active_file 0 [ 648.382961][T22153] total_unevictable 0 [ 648.386967][T22153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26759,uid=0 [ 648.417962][T22153] Memory cgroup out of memory: Killed process 26759 (syz.9.8965) total-vm:90296kB, anon-rss:1276kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 648.579100][T26782] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 648.613352][T26782] CPU: 1 UID: 0 PID: 26782 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 648.613388][T26782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.613403][T26782] Call Trace: [ 648.613411][T26782] [ 648.613420][T26782] __dump_stack+0x21/0x30 [ 648.613458][T26782] dump_stack_lvl+0x10c/0x190 [ 648.613488][T26782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 648.613519][T26782] ? ___ratelimit+0x3f7/0x5a0 [ 648.613554][T26782] dump_stack+0x19/0x20 [ 648.613584][T26782] dump_header+0xd7/0x490 [ 648.613608][T26782] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 648.613638][T26782] oom_kill_process+0x35d/0x640 [ 648.613664][T26782] ? sched_clock_cpu+0x75/0x400 [ 648.613693][T26782] out_of_memory+0x659/0xa80 [ 648.613719][T26782] ? __cfi_out_of_memory+0x10/0x10 [ 648.613744][T26782] ? mutex_lock_killable+0x104/0x1c0 [ 648.613765][T26782] ? __cfi_mutex_lock_killable+0x10/0x10 [ 648.613788][T26782] mem_cgroup_out_of_memory+0x279/0x350 [ 648.613810][T26782] ? drain_obj_stock+0xed0/0xed0 [ 648.613832][T26782] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 648.613853][T26782] try_charge_memcg+0x8f7/0xde0 [ 648.613882][T26782] ? __cfi_try_charge_memcg+0x10/0x10 [ 648.613912][T26782] ? __alloc_pages_noprof+0x31f/0x7b0 [ 648.613940][T26782] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 648.613969][T26782] __mem_cgroup_charge+0xf6/0x410 [ 648.613997][T26782] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 648.614030][T26782] ? __cfi___switch_to+0x10/0x10 [ 648.614060][T26782] shmem_alloc_and_add_folio+0x86d/0x1050 [ 648.614089][T26782] ? put_swap_device+0x130/0x130 [ 648.614114][T26782] ? shmem_huge_global_enabled+0x2da/0x360 [ 648.614139][T26782] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 648.614163][T26782] ? __kasan_check_write+0x18/0x20 [ 648.614196][T26782] ? _raw_spin_lock+0x8c/0x120 [ 648.614226][T26782] shmem_get_folio_gfp+0x5f0/0x1380 [ 648.614265][T26782] ? shmem_get_folio+0xc0/0xc0 [ 648.614288][T26782] ? follow_page_pte+0xa5c/0xb90 [ 648.614320][T26782] ? raw_irqentry_exit_cond_resched+0x33/0x40 [ 648.614352][T26782] ? inode_to_bdi+0x6d/0x100 [ 648.614385][T26782] shmem_write_begin+0xf4/0x270 [ 648.614414][T26782] generic_perform_write+0x330/0x960 [ 648.614449][T26782] ? __cfi_generic_perform_write+0x10/0x10 [ 648.614483][T26782] ? down_write+0xe9/0x2a0 [ 648.614507][T26782] ? mnt_get_write_access_file+0x1af/0x3b0 [ 648.614537][T26782] ? mnt_put_write_access_file+0xc2/0x100 [ 648.614568][T26782] ? file_update_time+0x1ef/0x220 [ 648.614600][T26782] shmem_file_write_iter+0x105/0x130 [ 648.614630][T26782] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 648.614662][T26782] __kernel_write_iter+0x41a/0x8e0 [ 648.614684][T26782] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 648.614716][T26782] ? __cfi___kernel_write_iter+0x10/0x10 [ 648.614738][T26782] ? get_dump_page+0x160/0x220 [ 648.614767][T26782] ? __asan_memset+0x39/0x50 [ 648.614787][T26782] ? iov_iter_bvec+0xc0/0x180 [ 648.614816][T26782] dump_user_range+0xb06/0xdf0 [ 648.614840][T26782] ? __cfi_dump_emit+0x10/0x10 [ 648.614861][T26782] ? __cfi_dump_user_range+0x10/0x10 [ 648.614883][T26782] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 648.614919][T26782] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 648.614952][T26782] ? elf_core_dump+0x2368/0x3800 [ 648.614980][T26782] elf_core_dump+0x2ccc/0x3800 [ 648.615011][T26782] ? __cfi_elf_core_dump+0x10/0x10 [ 648.615046][T26782] ? dump_interrupted+0xf0/0xf0 [ 648.615081][T26782] ? filp_open+0x182/0x1d0 [ 648.615111][T26782] ? 0xffffffffff600000 [ 648.615135][T26782] do_coredump+0x1bfa/0x2bd0 [ 648.615174][T26782] ? __cfi_do_coredump+0x10/0x10 [ 648.615207][T26782] ? asm_exc_page_fault+0x2b/0x30 [ 648.615255][T26782] ? __kasan_slab_free+0x6a/0x80 [ 648.615281][T26782] ? kmem_cache_free+0x1c1/0x510 [ 648.615302][T26782] ? get_signal+0xa75/0x14f0 [ 648.615333][T26782] get_signal+0x11fd/0x14f0 [ 648.615366][T26782] arch_do_signal_or_restart+0x96/0x720 [ 648.615402][T26782] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 648.615441][T26782] irqentry_exit_to_user_mode+0x4e/0xb0 [ 648.615466][T26782] irqentry_exit+0x16/0x60 [ 648.615490][T26782] exc_page_fault+0x66/0xc0 [ 648.615514][T26782] asm_exc_page_fault+0x2b/0x30 [ 648.615537][T26782] RIP: 0033:0x7fb036c4f987 [ 648.615556][T26782] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 648.615577][T26782] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 648.615598][T26782] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 648.615615][T26782] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 648.615629][T26782] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.615644][T26782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.615659][T26782] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 648.615678][T26782] [ 648.615688][T26782] memory: usage 305968kB, limit 307200kB, failcnt 30670 [ 649.101120][T26782] memory+swap: usage 414240kB, limit 9007199254740988kB, failcnt 0 [ 649.109099][T26782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 649.116029][T26782] Memory cgroup stats for /syz9: [ 649.116188][T26782] cache 306315264 [ 649.124792][T26782] rss 229376 [ 649.135560][T26782] rss_huge 0 [ 649.138863][T26782] shmem 306315264 [ 649.142513][T26782] mapped_file 0 [ 649.145996][T26782] dirty 0 [ 649.156883][T26782] writeback 118784 [ 649.160735][T26782] workingset_refault_anon 2472 [ 649.176276][T26782] workingset_refault_file 0 [ 649.180927][T26782] swap 114606080 [ 649.184490][T26782] swapcached 389120 [ 649.188310][T26782] pgpgin 533686 [ 649.196716][T26782] pgpgout 467444 [ 649.202580][T26782] pgfault 228611 [ 649.206163][T26782] pgmajfault 270 [ 649.209733][T26782] inactive_anon 230481920 [ 649.241981][T26782] active_anon 76165120 [ 649.252783][T26782] inactive_file 0 [ 649.256698][T26782] active_file 0 [ 649.271074][T26782] unevictable 0 [ 649.274219][T26971] 9p: Unknown uid 00000000004294967295 [ 649.274687][T26782] hierarchical_memory_limit 314572800 [ 649.290356][T26782] hierarchical_memsw_limit 9223372036854771712 [ 649.311886][T26782] total_cache 306315264 [ 649.325674][T26782] total_rss 229376 [ 649.338193][T26782] total_rss_huge 0 [ 649.345691][T26782] total_shmem 306315264 [ 649.355846][T26782] total_mapped_file 0 [ 649.360038][T26782] total_dirty 0 [ 649.364022][T26782] total_writeback 118784 [ 649.368353][T26782] total_workingset_refault_anon 2472 [ 649.375038][T26782] total_workingset_refault_file 0 [ 649.380165][T26782] total_swap 114606080 [ 649.402626][T26782] total_swapcached 389120 [ 649.407102][T26782] total_pgpgin 533686 [ 649.411104][T26782] total_pgpgout 467444 [ 649.426039][T26782] total_pgfault 228611 [ 649.430161][T26782] total_pgmajfault 270 [ 649.446750][T26782] total_inactive_anon 230481920 [ 649.454006][T26782] total_active_anon 76165120 [ 649.465682][T26782] total_inactive_file 0 [ 649.472954][T26782] total_active_file 0 [ 649.481161][T26782] total_unevictable 0 [ 649.485188][T26782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26757,uid=0 [ 649.519251][T26782] Memory cgroup out of memory: Killed process 26757 (syz.9.8965) total-vm:90296kB, anon-rss:1276kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 649.914580][T26978] rust_binder: Fixups oob 178 180 369 186 [ 649.914611][T26978] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 649.920524][T26978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 650.022031][T26978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:846 [ 650.106605][T26775] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 650.193049][T26775] CPU: 0 UID: 0 PID: 26775 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 650.193089][T26775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 650.193104][T26775] Call Trace: [ 650.193112][T26775] [ 650.193122][T26775] __dump_stack+0x21/0x30 [ 650.193157][T26775] dump_stack_lvl+0x10c/0x190 [ 650.193187][T26775] ? __cfi_dump_stack_lvl+0x10/0x10 [ 650.193218][T26775] ? ___ratelimit+0x3f7/0x5a0 [ 650.193252][T26775] dump_stack+0x19/0x20 [ 650.193281][T26775] dump_header+0xd7/0x490 [ 650.193305][T26775] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 650.193335][T26775] oom_kill_process+0x35d/0x640 [ 650.193363][T26775] ? sched_clock_cpu+0x75/0x400 [ 650.193396][T26775] out_of_memory+0x659/0xa80 [ 650.193424][T26775] ? __cfi_out_of_memory+0x10/0x10 [ 650.193461][T26775] ? mutex_lock_killable+0x92/0x1c0 [ 650.193484][T26775] ? __cfi_mutex_lock_killable+0x10/0x10 [ 650.193509][T26775] mem_cgroup_out_of_memory+0x279/0x350 [ 650.193532][T26775] ? drain_obj_stock+0xed0/0xed0 [ 650.193555][T26775] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 650.193577][T26775] try_charge_memcg+0x8f7/0xde0 [ 650.193608][T26775] ? __cfi_try_charge_memcg+0x10/0x10 [ 650.193639][T26775] ? __alloc_pages_noprof+0x31f/0x7b0 [ 650.193670][T26775] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 650.193703][T26775] __mem_cgroup_charge+0xf6/0x410 [ 650.193737][T26775] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 650.193771][T26775] ? do_pte_missing+0x2bdb/0x4240 [ 650.193801][T26775] shmem_alloc_and_add_folio+0x86d/0x1050 [ 650.193832][T26775] ? put_swap_device+0x130/0x130 [ 650.193859][T26775] ? shmem_huge_global_enabled+0x2da/0x360 [ 650.193886][T26775] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 650.193911][T26775] ? __kasan_check_write+0x18/0x20 [ 650.193945][T26775] ? _raw_spin_lock+0x8c/0x120 [ 650.193973][T26775] shmem_get_folio_gfp+0x5f0/0x1380 [ 650.194001][T26775] ? shmem_get_folio+0xc0/0xc0 [ 650.194024][T26775] ? follow_page_pte+0xa5c/0xb90 [ 650.194054][T26775] ? inode_to_bdi+0x6d/0x100 [ 650.194087][T26775] shmem_write_begin+0xf4/0x270 [ 650.194115][T26775] generic_perform_write+0x330/0x960 [ 650.194152][T26775] ? __cfi_generic_perform_write+0x10/0x10 [ 650.194185][T26775] ? down_write+0xe9/0x2a0 [ 650.194210][T26775] ? file_update_time+0xa3/0x220 [ 650.194240][T26775] shmem_file_write_iter+0x105/0x130 [ 650.194271][T26775] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 650.194302][T26775] __kernel_write_iter+0x41a/0x8e0 [ 650.194324][T26775] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 650.194355][T26775] ? __cfi___kernel_write_iter+0x10/0x10 [ 650.194376][T26775] ? get_dump_page+0x160/0x220 [ 650.194404][T26775] ? __asan_memset+0x39/0x50 [ 650.194423][T26775] ? iov_iter_bvec+0xc0/0x180 [ 650.194458][T26775] dump_user_range+0xb06/0xdf0 [ 650.194482][T26775] ? __cfi_dump_emit+0x10/0x10 [ 650.194503][T26775] ? __cfi_dump_user_range+0x10/0x10 [ 650.194525][T26775] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 650.194558][T26775] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 650.194592][T26775] ? elf_core_dump+0x2368/0x3800 [ 650.194619][T26775] elf_core_dump+0x2ccc/0x3800 [ 650.194649][T26775] ? __cfi_elf_core_dump+0x10/0x10 [ 650.194684][T26775] ? dump_interrupted+0xf0/0xf0 [ 650.194716][T26775] ? filp_open+0x182/0x1d0 [ 650.194745][T26775] ? 0xffffffffff600000 [ 650.194763][T26775] do_coredump+0x1bfa/0x2bd0 [ 650.194800][T26775] ? __cfi_do_coredump+0x10/0x10 [ 650.194833][T26775] ? asm_exc_page_fault+0x2b/0x30 [ 650.194865][T26775] ? __kasan_slab_free+0x6a/0x80 [ 650.194891][T26775] ? kmem_cache_free+0x1c1/0x510 [ 650.194913][T26775] ? get_signal+0xa75/0x14f0 [ 650.194941][T26775] get_signal+0x11fd/0x14f0 [ 650.194973][T26775] arch_do_signal_or_restart+0x96/0x720 [ 650.195009][T26775] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 650.195046][T26775] irqentry_exit_to_user_mode+0x4e/0xb0 [ 650.195071][T26775] irqentry_exit+0x16/0x60 [ 650.195094][T26775] exc_page_fault+0x66/0xc0 [ 650.195117][T26775] asm_exc_page_fault+0x2b/0x30 [ 650.195140][T26775] RIP: 0033:0x7fb036c4f987 [ 650.195159][T26775] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 650.195179][T26775] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 650.195202][T26775] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 650.195219][T26775] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 650.195235][T26775] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 650.195251][T26775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 650.195265][T26775] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 650.195286][T26775] [ 650.195295][T26775] memory: usage 307200kB, limit 307200kB, failcnt 33945 [ 650.227488][T26990] tmpfs: Unknown parameter 'no' [ 650.289178][T26775] memory+swap: usage 432160kB, limit 9007199254740988kB, failcnt 0 [ 650.301933][T26992] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9042'. [ 650.303057][T26775] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 650.308161][T26991] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9042'. [ 650.322600][T26775] Memory cgroup stats for [ 650.479534][ T36] kauditd_printk_skb: 12808 callbacks suppressed [ 650.479559][ T36] audit: type=1400 audit(2000004654.361:89067): avc: denied { create } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 650.480234][T26775] /syz9 [ 650.487997][ T36] audit: type=1400 audit(2000004654.361:89068): avc: denied { write } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 650.491666][T26775] : [ 650.506021][ T36] audit: type=1400 audit(2000004654.380:89069): avc: denied { create } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.506905][T26775] cache 314462208 [ 650.514778][ T36] audit: type=1400 audit(2000004654.380:89070): avc: denied { write } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.515275][T26775] rss 98304 [ 650.519626][ T36] audit: type=1400 audit(2000004654.380:89071): avc: denied { read } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.526157][T26775] rss_huge 0 [ 650.540492][ T36] audit: type=1400 audit(2000004654.380:89072): avc: denied { read } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.546165][T26775] shmem 314462208 [ 650.553002][ T36] audit: type=1400 audit(2000004654.389:89073): avc: denied { write } for pid=26999 comm="syz.3.9045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.556063][T26775] mapped_file 0 [ 650.707104][ T36] audit: type=1400 audit(2000004654.568:89074): avc: denied { mount } for pid=27004 comm="syz.6.9046" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 650.708693][T26775] dirty 0 [ 650.855378][T27010] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.9048'. [ 650.872347][T26775] writeback 0 [ 650.908500][ T36] audit: type=1400 audit(2000004654.755:89075): avc: denied { map } for pid=27009 comm="syz.2.9048" path="socket:[103813]" dev="sockfs" ino=103813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 650.911411][T26775] workingset_refault_anon 2478 [ 650.940453][T26775] workingset_refault_file 0 [ 650.945162][T26775] swap 127959040 [ 650.948771][T26775] swapcached 36864 [ 650.952515][T26775] pgpgin 557670 [ 650.955996][T26775] pgpgout 489557 [ 650.959962][T26775] pgfault 229803 [ 650.963690][T26775] pgmajfault 275 [ 650.967350][T26775] inactive_anon 213516288 [ 650.969025][ T36] audit: type=1400 audit(2000004654.755:89076): avc: denied { execmem } for pid=27009 comm="syz.2.9048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 650.977083][T26775] active_anon 101056512 [ 650.999163][T26775] inactive_file 0 [ 651.002929][T26775] active_file 0 [ 651.006453][T26775] unevictable 0 [ 651.009978][T26775] hierarchical_memory_limit 314572800 [ 651.015459][T26775] hierarchical_memsw_limit 9223372036854771712 [ 651.021717][T26775] total_cache 314462208 [ 651.026641][T26775] total_rss 98304 [ 651.030357][T26775] total_rss_huge 0 [ 651.035080][T26775] total_shmem 314462208 [ 651.039325][T26775] total_mapped_file 0 [ 651.044279][T26775] total_dirty 0 [ 651.047818][T26775] total_writeback 0 [ 651.051690][T26775] total_workingset_refault_anon 2478 [ 651.058279][T26775] total_workingset_refault_file 0 [ 651.063380][T26775] total_swap 127959040 [ 651.068445][T26775] total_swapcached 36864 [ 651.072765][T26775] total_pgpgin 557670 [ 651.077772][T26775] total_pgpgout 489557 [ 651.081916][T26775] total_pgfault 229803 [ 651.086952][T26775] total_pgmajfault 275 [ 651.091098][T26775] total_inactive_anon 213516288 [ 651.111226][T26775] total_active_anon 101056512 [ 651.116015][T26775] total_inactive_file 0 [ 651.121158][T26775] total_active_file 0 [ 651.139168][T26775] total_unevictable 0 [ 651.145542][T26775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26779,uid=0 [ 651.165624][T26775] Memory cgroup out of memory: Killed process 26779 (syz.9.8965) total-vm:90296kB, anon-rss:1276kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 651.204745][T26767] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 651.224290][T26767] CPU: 1 UID: 0 PID: 26767 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 651.224325][T26767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 651.224340][T26767] Call Trace: [ 651.224349][T26767] [ 651.224358][T26767] __dump_stack+0x21/0x30 [ 651.224400][T26767] dump_stack_lvl+0x10c/0x190 [ 651.224431][T26767] ? __cfi_dump_stack_lvl+0x10/0x10 [ 651.224462][T26767] ? ___ratelimit+0x3f7/0x5a0 [ 651.224496][T26767] dump_stack+0x19/0x20 [ 651.224526][T26767] dump_header+0xd7/0x490 [ 651.224549][T26767] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 651.224581][T26767] oom_kill_process+0x35d/0x640 [ 651.224610][T26767] ? sched_clock_cpu+0x75/0x400 [ 651.224641][T26767] out_of_memory+0x659/0xa80 [ 651.224669][T26767] ? __cfi_out_of_memory+0x10/0x10 [ 651.224697][T26767] ? mutex_lock_killable+0x104/0x1c0 [ 651.224720][T26767] ? __cfi_mutex_lock_killable+0x10/0x10 [ 651.224745][T26767] mem_cgroup_out_of_memory+0x279/0x350 [ 651.224769][T26767] ? drain_obj_stock+0xed0/0xed0 [ 651.224792][T26767] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 651.224814][T26767] try_charge_memcg+0x8f7/0xde0 [ 651.224846][T26767] ? __cfi_try_charge_memcg+0x10/0x10 [ 651.224878][T26767] ? __alloc_pages_noprof+0x31f/0x7b0 [ 651.224910][T26767] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 651.224941][T26767] ? __folio_batch_add_and_move+0x2ab/0x370 [ 651.224971][T26767] __mem_cgroup_charge+0xf6/0x410 [ 651.225006][T26767] ? _raw_spin_lock+0x8c/0x120 [ 651.225034][T26767] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 651.225068][T26767] shmem_alloc_and_add_folio+0x86d/0x1050 [ 651.225099][T26767] ? put_swap_device+0x130/0x130 [ 651.225126][T26767] ? shmem_huge_global_enabled+0x2da/0x360 [ 651.225153][T26767] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 651.225179][T26767] ? __kasan_check_write+0x18/0x20 [ 651.225214][T26767] ? _raw_spin_lock+0x8c/0x120 [ 651.225244][T26767] shmem_get_folio_gfp+0x5f0/0x1380 [ 651.225273][T26767] ? shmem_get_folio+0xc0/0xc0 [ 651.225296][T26767] ? follow_page_pte+0xa5c/0xb90 [ 651.225327][T26767] ? inode_to_bdi+0x6d/0x100 [ 651.225360][T26767] shmem_write_begin+0xf4/0x270 [ 651.225389][T26767] generic_perform_write+0x330/0x960 [ 651.225432][T26767] ? __cfi_generic_perform_write+0x10/0x10 [ 651.225466][T26767] ? down_write+0xe9/0x2a0 [ 651.225489][T26767] ? mnt_get_write_access_file+0x1af/0x3b0 [ 651.225519][T26767] ? mnt_put_write_access_file+0xc2/0x100 [ 651.225550][T26767] ? file_update_time+0x1ef/0x220 [ 651.225581][T26767] shmem_file_write_iter+0x105/0x130 [ 651.225611][T26767] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 651.225641][T26767] __kernel_write_iter+0x41a/0x8e0 [ 651.225661][T26767] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 651.225692][T26767] ? __cfi___kernel_write_iter+0x10/0x10 [ 651.225714][T26767] ? get_dump_page+0x160/0x220 [ 651.225741][T26767] ? __asan_memset+0x39/0x50 [ 651.225761][T26767] ? iov_iter_bvec+0xc0/0x180 [ 651.225789][T26767] dump_user_range+0xb06/0xdf0 [ 651.225812][T26767] ? __cfi_dump_emit+0x10/0x10 [ 651.225834][T26767] ? __cfi_dump_user_range+0x10/0x10 [ 651.225855][T26767] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 651.225889][T26767] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 651.225922][T26767] ? elf_core_dump+0x2368/0x3800 [ 651.225949][T26767] elf_core_dump+0x2ccc/0x3800 [ 651.225980][T26767] ? __cfi_elf_core_dump+0x10/0x10 [ 651.226015][T26767] ? dump_interrupted+0xf0/0xf0 [ 651.226047][T26767] ? filp_open+0x182/0x1d0 [ 651.226076][T26767] ? 0xffffffffff600000 [ 651.226096][T26767] do_coredump+0x1bfa/0x2bd0 [ 651.226133][T26767] ? __cfi_do_coredump+0x10/0x10 [ 651.226165][T26767] ? asm_exc_page_fault+0x2b/0x30 [ 651.226199][T26767] ? __kasan_slab_free+0x6a/0x80 [ 651.226225][T26767] ? kmem_cache_free+0x1c1/0x510 [ 651.226247][T26767] ? get_signal+0xa75/0x14f0 [ 651.226276][T26767] get_signal+0x11fd/0x14f0 [ 651.226308][T26767] arch_do_signal_or_restart+0x96/0x720 [ 651.226344][T26767] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 651.226382][T26767] irqentry_exit_to_user_mode+0x4e/0xb0 [ 651.226417][T26767] irqentry_exit+0x16/0x60 [ 651.226439][T26767] exc_page_fault+0x66/0xc0 [ 651.226463][T26767] asm_exc_page_fault+0x2b/0x30 [ 651.226485][T26767] RIP: 0033:0x7fb036c4f987 [ 651.226504][T26767] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 651.226524][T26767] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 651.226546][T26767] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 651.226562][T26767] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 651.226579][T26767] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.226593][T26767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 651.226608][T26767] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 651.226629][T26767] [ 651.517292][T27022] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 651.690214][T26767] memory: usage 297732kB, limit 307200kB, failcnt 33994 [ 651.719142][T26767] memory+swap: usage 422928kB, limit 9007199254740988kB, failcnt 0 [ 651.727117][T26767] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 651.734174][T26767] Memory cgroup stats for /syz9: [ 651.734421][T26767] cache 304754688 [ 651.743137][T26767] rss 106496 [ 651.746366][T26767] rss_huge 0 [ 651.749622][T26767] shmem 304754688 [ 651.753269][T26767] mapped_file 0 [ 651.763032][T26767] dirty 0 [ 651.766019][T26767] writeback 0 [ 651.769603][T26767] workingset_refault_anon 2483 [ 651.774717][T26767] workingset_refault_file 0 [ 651.784565][T26767] swap 127938560 [ 651.788162][T26767] swapcached 53248 [ 651.792283][T26767] pgpgin 565866 [ 651.795788][T26767] pgpgout 500119 [ 651.799660][T26767] pgfault 229985 [ 651.808148][T26767] pgmajfault 279 [ 651.813821][T26767] inactive_anon 148504576 [ 651.818393][T26767] active_anon 156356608 [ 651.822829][T26767] inactive_file 0 [ 651.826700][T26767] active_file 0 [ 651.830436][T26767] unevictable 0 [ 651.834319][T26767] hierarchical_memory_limit 314572800 [ 651.840182][T26767] hierarchical_memsw_limit 9223372036854771712 [ 651.846827][T26767] total_cache 304754688 [ 651.851380][T26767] total_rss 106496 [ 651.855550][T26767] total_rss_huge 0 [ 651.860361][T26767] total_shmem 304754688 [ 651.865296][T26767] total_mapped_file 0 [ 651.869827][T26767] total_dirty 0 [ 651.874894][T26767] total_writeback 0 [ 651.879180][T26767] total_workingset_refault_anon 2483 [ 651.885044][T26767] total_workingset_refault_file 0 [ 651.890449][T26767] total_swap 127938560 [ 651.894842][T26767] total_swapcached 53248 [ 651.900452][T26767] total_pgpgin 565866 [ 651.908018][T26767] total_pgpgout 500119 [ 651.912171][T26767] total_pgfault 229985 [ 651.916364][T26767] total_pgmajfault 279 [ 651.922243][T26767] total_inactive_anon 148504576 [ 651.927211][T26767] total_active_anon 156356608 [ 651.948653][T26767] total_inactive_file 0 [ 651.961266][T26767] total_active_file 0 [ 651.965354][T26767] total_unevictable 0 [ 651.969356][T26767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26771,uid=0 [ 651.991148][T26767] Memory cgroup out of memory: Killed process 26771 (syz.9.8965) total-vm:90296kB, anon-rss:1276kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 652.622298][T26773] syz.9.8965 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 652.652402][T26773] CPU: 0 UID: 0 PID: 26773 Comm: syz.9.8965 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 652.652445][T26773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.652461][T26773] Call Trace: [ 652.652469][T26773] [ 652.652479][T26773] __dump_stack+0x21/0x30 [ 652.652516][T26773] dump_stack_lvl+0x10c/0x190 [ 652.652546][T26773] ? __cfi_dump_stack_lvl+0x10/0x10 [ 652.652577][T26773] ? ___ratelimit+0x3f7/0x5a0 [ 652.652611][T26773] dump_stack+0x19/0x20 [ 652.652640][T26773] dump_header+0xd7/0x490 [ 652.652664][T26773] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 652.652695][T26773] oom_kill_process+0x35d/0x640 [ 652.652722][T26773] ? sched_clock_cpu+0x75/0x400 [ 652.652754][T26773] out_of_memory+0x659/0xa80 [ 652.652782][T26773] ? __cfi_out_of_memory+0x10/0x10 [ 652.652809][T26773] ? mutex_lock_killable+0x92/0x1c0 [ 652.652833][T26773] ? __cfi_mutex_lock_killable+0x10/0x10 [ 652.652858][T26773] mem_cgroup_out_of_memory+0x279/0x350 [ 652.652881][T26773] ? drain_obj_stock+0xed0/0xed0 [ 652.652904][T26773] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 652.652927][T26773] try_charge_memcg+0x8f7/0xde0 [ 652.652958][T26773] ? __cfi_try_charge_memcg+0x10/0x10 [ 652.652989][T26773] ? __alloc_pages_noprof+0x31f/0x7b0 [ 652.653021][T26773] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 652.653052][T26773] ? __folio_batch_add_and_move+0x2ab/0x370 [ 652.653083][T26773] __mem_cgroup_charge+0xf6/0x410 [ 652.653116][T26773] ? _raw_spin_lock+0x8c/0x120 [ 652.653145][T26773] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 652.653180][T26773] shmem_alloc_and_add_folio+0x86d/0x1050 [ 652.653210][T26773] ? put_swap_device+0x130/0x130 [ 652.653244][T26773] ? shmem_huge_global_enabled+0x2da/0x360 [ 652.653272][T26773] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 652.653298][T26773] ? __kasan_check_write+0x18/0x20 [ 652.653332][T26773] ? _raw_spin_lock+0x8c/0x120 [ 652.653362][T26773] shmem_get_folio_gfp+0x5f0/0x1380 [ 652.653390][T26773] ? shmem_get_folio+0xc0/0xc0 [ 652.653414][T26773] ? follow_page_pte+0xa5c/0xb90 [ 652.653447][T26773] ? inode_to_bdi+0x6d/0x100 [ 652.653480][T26773] shmem_write_begin+0xf4/0x270 [ 652.653509][T26773] generic_perform_write+0x330/0x960 [ 652.653545][T26773] ? __cfi_generic_perform_write+0x10/0x10 [ 652.653577][T26773] ? down_write+0xe9/0x2a0 [ 652.653599][T26773] ? mnt_get_write_access_file+0x1af/0x3b0 [ 652.653629][T26773] ? mnt_put_write_access_file+0xc2/0x100 [ 652.653658][T26773] ? file_update_time+0x1ef/0x220 [ 652.653687][T26773] shmem_file_write_iter+0x105/0x130 [ 652.653716][T26773] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 652.653746][T26773] __kernel_write_iter+0x41a/0x8e0 [ 652.653765][T26773] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 652.653795][T26773] ? __cfi___kernel_write_iter+0x10/0x10 [ 652.653814][T26773] ? get_dump_page+0x160/0x220 [ 652.653841][T26773] ? __asan_memset+0x39/0x50 [ 652.653860][T26773] ? iov_iter_bvec+0xc0/0x180 [ 652.653889][T26773] dump_user_range+0xb06/0xdf0 [ 652.653912][T26773] ? __cfi_dump_emit+0x10/0x10 [ 652.653932][T26773] ? __cfi_dump_user_range+0x10/0x10 [ 652.653954][T26773] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 652.653988][T26773] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 652.654021][T26773] ? elf_core_dump+0x2368/0x3800 [ 652.654048][T26773] elf_core_dump+0x2ccc/0x3800 [ 652.654077][T26773] ? __cfi_elf_core_dump+0x10/0x10 [ 652.654112][T26773] ? dump_interrupted+0xf0/0xf0 [ 652.654143][T26773] ? filp_open+0x182/0x1d0 [ 652.654171][T26773] ? 0xffffffffff600000 [ 652.654190][T26773] do_coredump+0x1bfa/0x2bd0 [ 652.654226][T26773] ? __cfi_do_coredump+0x10/0x10 [ 652.654264][T26773] ? asm_exc_page_fault+0x2b/0x30 [ 652.654296][T26773] ? __kasan_slab_free+0x6a/0x80 [ 652.654320][T26773] ? kmem_cache_free+0x1c1/0x510 [ 652.654342][T26773] ? get_signal+0xa75/0x14f0 [ 652.654371][T26773] get_signal+0x11fd/0x14f0 [ 652.654404][T26773] arch_do_signal_or_restart+0x96/0x720 [ 652.654438][T26773] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 652.654474][T26773] irqentry_exit_to_user_mode+0x4e/0xb0 [ 652.654499][T26773] irqentry_exit+0x16/0x60 [ 652.654522][T26773] exc_page_fault+0x66/0xc0 [ 652.654546][T26773] asm_exc_page_fault+0x2b/0x30 [ 652.654569][T26773] RIP: 0033:0x7fb036c4f987 [ 652.654588][T26773] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 652.654609][T26773] RSP: 002b:00007fb037b50120 EFLAGS: 00010202 [ 652.654631][T26773] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fb036d8efc9 [ 652.654648][T26773] RDX: 00007fb037b50140 RSI: 00007fb037b50270 RDI: 000000000000000b [ 652.654664][T26773] RBP: 00007fb036e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 652.654679][T26773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.654694][T26773] R13: 00007fb036fe6218 R14: 00007fb036fe6180 R15: 00007ffde4aedc98 [ 652.654715][T26773] [ 653.138129][T26773] memory: usage 282664kB, limit 307200kB, failcnt 37204 [ 653.145636][T26773] memory+swap: usage 387148kB, limit 9007199254740988kB, failcnt 0 [ 653.153905][T26773] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 653.161171][T26773] Memory cgroup stats for /syz9: [ 653.161324][T26773] cache 289132544 [ 653.175838][T26773] rss 274432 [ 653.179100][T26773] rss_huge 0 [ 653.182705][T26773] shmem 289132544 [ 653.186626][T26773] mapped_file 0 [ 653.190332][T26773] dirty 0 [ 653.193475][T26773] writeback 0 [ 653.197072][T26773] workingset_refault_anon 2622 [ 653.202079][T26773] workingset_refault_file 0 [ 653.206939][T26773] swap 106991616 [ 653.210758][T26773] swapcached 327680 [ 653.215071][T26773] pgpgin 597590 [ 653.218780][T26773] pgpgout 535547 [ 653.222599][T26773] pgfault 230915 [ 653.226343][T26773] pgmajfault 334 [ 653.230121][T26773] inactive_anon 202465280 [ 653.234470][T26773] active_anon 87212032 [ 653.238568][T26773] inactive_file 0 [ 653.242475][T26773] active_file 0 [ 653.245951][T26773] unevictable 0 [ 653.249643][T26773] hierarchical_memory_limit 314572800 [ 653.255201][T26773] hierarchical_memsw_limit 9223372036854771712 [ 653.261408][T26773] total_cache 289132544 [ 653.265783][T26773] total_rss 274432 [ 653.269530][T26773] total_rss_huge 0 [ 653.273731][T26773] total_shmem 289132544 [ 653.278127][T26773] total_mapped_file 0 [ 653.282343][T26773] total_dirty 0 [ 653.285830][T26773] total_writeback 0 [ 653.289647][T26773] total_workingset_refault_anon 2622 [ 653.294992][T26773] total_workingset_refault_file 0 [ 653.300953][T26773] total_swap 106991616 [ 653.305103][T26773] total_swapcached 327680 [ 653.309646][T26773] total_pgpgin 597590 [ 653.313683][T26773] total_pgpgout 535547 [ 653.317969][T26773] total_pgfault 230915 [ 653.322058][T26773] total_pgmajfault 334 [ 653.326172][T26773] total_inactive_anon 202465280 [ 653.331255][T26773] total_active_anon 87212032 [ 653.336212][T26773] total_inactive_file 0 [ 653.340391][T26773] total_active_file 0 [ 653.349106][T26773] total_unevictable 0 [ 653.353139][T26773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8965,pid=26763,uid=0 [ 653.368144][T26773] Memory cgroup out of memory: Killed process 26763 (syz.9.8965) total-vm:90296kB, anon-rss:1148kB, file-rss:59824kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 653.839734][T27085] netlink: 324 bytes leftover after parsing attributes in process `syz.3.9074'. [ 653.891168][T27085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9074'. [ 654.404399][T27107] 8021q: VLANs not supported on ip6_vti0 [ 654.433665][T27107] 9pnet_fd: Insufficient options for proto=fd [ 654.630083][T27122] 9pnet_fd: Insufficient options for proto=fd [ 654.809655][T27134] overlayfs: failed to clone upperpath [ 655.043370][T27160] 9pnet_fd: Insufficient options for proto=fd [ 655.082384][T27162] fuse: Invalid rootmode [ 655.245672][T27171] netlink: 3 bytes leftover after parsing attributes in process `syz.6.9104'. [ 655.818849][ T36] kauditd_printk_skb: 249 callbacks suppressed [ 655.818868][ T36] audit: type=1400 audit(2000004659.372:89326): avc: denied { read write } for pid=27189 comm="syz.9.9113" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 655.845750][T27191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=27191 comm=syz.9.9113 [ 655.863032][ T36] audit: type=1400 audit(2000004659.381:89327): avc: denied { execmem } for pid=27190 comm="syz.2.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 655.895157][T27191] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 655.896938][ T36] audit: type=1400 audit(2000004659.391:89328): avc: denied { read write open } for pid=27189 comm="syz.9.9113" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 655.932697][ T36] audit: type=1400 audit(2000004659.409:89329): avc: denied { read write } for pid=27189 comm="syz.9.9113" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 655.957092][ T36] audit: type=1400 audit(2000004659.409:89330): avc: denied { read write open } for pid=27189 comm="syz.9.9113" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 655.982477][ T36] audit: type=1400 audit(2000004659.409:89331): avc: denied { ioctl } for pid=27189 comm="syz.9.9113" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 656.007666][ T36] audit: type=1400 audit(2000004659.437:89332): avc: denied { create } for pid=27189 comm="syz.9.9113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.028174][ T36] audit: type=1400 audit(2000004659.437:89333): avc: denied { write } for pid=27189 comm="syz.9.9113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.048755][ T36] audit: type=1400 audit(2000004659.437:89334): avc: denied { nlmsg_write } for pid=27189 comm="syz.9.9113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.069698][ T36] audit: type=1400 audit(2000004659.456:89335): avc: denied { read write } for pid=27189 comm="syz.9.9113" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 656.423776][T27214] 9pnet_fd: Insufficient options for proto=fd [ 656.495035][T27220] rust_binder: 867: no such ref 1 [ 656.500210][T27220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:867 [ 656.500761][T27220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:867 [ 656.628842][T27233] 9pnet_fd: Insufficient options for proto=fd [ 657.107293][ T527] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 657.196352][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9140'. [ 657.275108][ T527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.288249][ T527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.298299][ T527] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 657.320387][ T527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.330500][ T527] usb 10-1: config 0 descriptor?? [ 657.380221][T27281] tmpfs: Unknown parameter '01777777777777777777777]Z~±e)j_/ ҩ6*滔x$\' [ 657.497922][T27291] 9pnet_fd: Insufficient options for proto=fd [ 657.780179][ T527] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 657.788093][ T527] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 657.993499][ T527] cp2112 0003:10C4:EA90.002A: Part Number: 0x00 Device Version: 0x00 [ 658.210691][T27245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.224213][T27245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.672207][ T527] cp2112 0003:10C4:EA90.002A: error reading lock byte: 0 [ 659.137024][T27361] overlayfs: failed to clone upperpath [ 659.254462][T27364] tipc: Started in network mode [ 659.259485][T27364] tipc: Node identity ac14140f, cluster identity 4711 [ 659.266514][T27364] tipc: New replicast peer: 255.255.255.255 [ 659.272673][T27364] tipc: Enabled bearer , priority 10 [ 659.417410][T27370] overlayfs: failed to clone upperpath [ 659.814635][ T497] usb 10-1: USB disconnect, device number 54 [ 659.909598][T27387] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9182'. [ 660.064789][T27391] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9184'. [ 660.115532][T27396] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9186'. [ 660.177992][T27396] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9186'. [ 660.187302][T27396] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 660.263069][T27396] overlayfs: failed to clone upperpath [ 660.466146][ T497] tipc: Node number set to 2886997007 [ 661.158226][ T36] kauditd_printk_skb: 352 callbacks suppressed [ 661.158247][ T36] audit: type=1400 audit(2000004664.382:89688): avc: denied { mounton } for pid=27434 comm="syz.2.9201" path="/501/file0" dev="tmpfs" ino=2740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 661.203996][ T36] audit: type=1400 audit(2000004664.420:89689): avc: denied { create } for pid=27436 comm="syz.2.9202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.223943][ T36] audit: type=1400 audit(2000004664.420:89690): avc: denied { create } for pid=27436 comm="syz.2.9202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.244890][ T36] audit: type=1400 audit(2000004664.420:89691): avc: denied { ioctl } for pid=27436 comm="syz.2.9202" path="socket:[104392]" dev="sockfs" ino=104392 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.272185][ T36] audit: type=1400 audit(2000004664.420:89692): avc: denied { ioctl } for pid=27436 comm="syz.2.9202" path="socket:[104392]" dev="sockfs" ino=104392 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.299043][ T36] audit: type=1400 audit(2000004664.420:89693): avc: denied { setopt } for pid=27436 comm="syz.2.9202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.319883][ T36] audit: type=1400 audit(2000004664.429:89694): avc: denied { write } for pid=27436 comm="syz.2.9202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 661.346787][ T36] audit: type=1400 audit(2000004664.551:89695): avc: denied { execmem } for pid=27440 comm="syz.2.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 661.403183][ T36] audit: type=1400 audit(2000004664.598:89696): avc: denied { create } for pid=27442 comm="syz.2.9204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 661.446317][ T36] audit: type=1400 audit(2000004664.608:89697): avc: denied { write } for pid=27442 comm="syz.2.9204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 661.532613][T20797] bridge_slave_1: left allmulticast mode [ 661.538327][T20797] bridge_slave_1: left promiscuous mode [ 661.551803][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.560818][T20797] bridge_slave_0: left allmulticast mode [ 661.571186][T20797] bridge_slave_0: left promiscuous mode [ 661.580751][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.733089][T20797] tipc: Left network mode [ 661.765497][T20797] veth1_macvtap: left promiscuous mode [ 661.777915][T20797] veth0_vlan: left promiscuous mode [ 662.828511][T27481] binder: Unknown parameter 'context[7' [ 663.597992][T27505] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 664.427724][T27529] vlan1: entered promiscuous mode [ 664.440682][T27529] vlan1: entered allmulticast mode [ 664.445836][T27529] veth0_vlan: entered allmulticast mode [ 665.622478][T27566] rust_binder: 920: no such ref 3 [ 665.627591][T27566] rust_binder: 920: no such ref 1 [ 665.632662][T27566] rust_binder: Write failure EFAULT in pid:920 [ 666.413659][T27572] netlink: 'syz.9.9244': attribute type 4 has an invalid length. [ 666.432472][T27572] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.9244'. [ 666.495316][T27576] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 666.503589][T27576] rust_binder: Write failure EINVAL in pid:926 [ 666.505634][ T36] kauditd_printk_skb: 338 callbacks suppressed [ 666.505652][ T36] audit: type=1400 audit(2000004669.393:90036): avc: denied { read write } for pid=27575 comm="syz.9.9247" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 666.548039][ T36] audit: type=1400 audit(2000004669.412:90037): avc: denied { read write } for pid=27575 comm="syz.9.9247" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 666.596080][ T36] audit: type=1400 audit(2000004669.412:90038): avc: denied { read write open } for pid=27575 comm="syz.9.9247" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 666.634583][ T36] audit: type=1400 audit(2000004669.421:90039): avc: denied { read } for pid=27578 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 666.657444][ T36] audit: type=1400 audit(2000004669.421:90040): avc: denied { read open } for pid=27578 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 666.709925][ T36] audit: type=1400 audit(2000004669.421:90041): avc: denied { mounton } for pid=27578 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 666.731883][ T36] audit: type=1400 audit(2000004669.431:90042): avc: denied { sys_module } for pid=27578 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 666.753400][ T36] audit: type=1400 audit(2000004669.431:90043): avc: denied { sys_module } for pid=27578 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 666.774978][ T36] audit: type=1400 audit(2000004669.431:90044): avc: denied { read write open } for pid=27575 comm="syz.9.9247" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 666.800285][ T36] audit: type=1400 audit(2000004669.431:90045): avc: denied { sys_module } for pid=27578 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 667.595592][T27587] fuse: Bad value for 'user_id' [ 667.600534][T27587] fuse: Bad value for 'user_id' [ 667.871195][ T483] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 668.020401][ T483] usb 10-1: device descriptor read/64, error -71 [ 668.276174][ T483] usb 10-1: device descriptor read/64, error -71 [ 668.531918][ T483] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 668.670508][ T483] usb 10-1: device descriptor read/64, error -71 [ 668.933144][ T483] usb 10-1: device descriptor read/64, error -71 [ 669.054224][ T483] usb usb10-port1: attempt power cycle [ 669.416496][ T483] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 669.440707][ T483] usb 10-1: device descriptor read/8, error -71 [ 669.578756][ T483] usb 10-1: device descriptor read/8, error -71 [ 669.832122][ T483] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 669.855891][ T483] usb 10-1: device descriptor read/8, error -71 [ 669.994346][ T483] usb 10-1: device descriptor read/8, error -71 [ 670.120160][ T483] usb usb10-port1: unable to enumerate USB device [ 671.466579][T27625] fuse: Bad value for 'fd' [ 673.007193][ T36] kauditd_printk_skb: 281 callbacks suppressed [ 673.007213][ T36] audit: type=1400 audit(2000004675.492:90327): avc: denied { execmem } for pid=27644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 673.056346][ T36] audit: type=1400 audit(2000004675.501:90328): avc: denied { name_bind } for pid=27646 comm="syz.2.9267" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 673.096632][ T36] audit: type=1400 audit(2000004675.511:90329): avc: denied { mounton } for pid=27647 comm="syz.3.9268" path="/326/file0" dev="tmpfs" ino=1776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 673.143934][ T36] audit: type=1400 audit(2000004675.511:90330): avc: denied { mount } for pid=27647 comm="syz.3.9268" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 673.190490][ T36] audit: type=1400 audit(2000004675.520:90331): avc: denied { create } for pid=27645 comm="syz.9.9266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.233010][ T36] audit: type=1400 audit(2000004675.520:90332): avc: denied { create } for pid=27645 comm="syz.9.9266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.275652][ T36] audit: type=1400 audit(2000004675.520:90333): avc: denied { write } for pid=27645 comm="syz.9.9266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.317727][ T36] audit: type=1400 audit(2000004675.520:90334): avc: denied { read } for pid=27645 comm="syz.9.9266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.362832][ T36] audit: type=1400 audit(2000004675.520:90335): avc: denied { read } for pid=27645 comm="syz.9.9266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.404417][ T36] audit: type=1400 audit(2000004675.520:90336): avc: denied { write } for pid=27645 comm="syz.9.9266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 674.883436][T27665] loop2: detected capacity change from 0 to 7 [ 674.899879][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.909107][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 674.920632][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.929860][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 674.938645][T27665] loop2: unable to read partition table [ 674.944394][T27665] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 674.958780][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.967987][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 675.012118][T27671] loop2: detected capacity change from 7 to 4 [ 675.018916][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.032572][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.041780][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 675.065040][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.074297][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 675.083335][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.092559][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 675.109994][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.119235][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.689293][T27684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 676.707779][T27684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 678.642742][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 678.642765][ T36] audit: type=1400 audit(2000004680.784:90454): avc: denied { execmem } for pid=27704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 678.690732][ T36] audit: type=1400 audit(2000004680.803:90455): avc: denied { sys_module } for pid=27706 comm="syz.2.9287" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 678.713519][ T36] audit: type=1400 audit(2000004680.803:90456): avc: denied { create } for pid=27706 comm="syz.2.9287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 678.733967][ T36] audit: type=1400 audit(2000004680.803:90457): avc: denied { create } for pid=27706 comm="syz.2.9287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 678.779467][ T36] audit: type=1400 audit(2000004680.812:90458): avc: denied { ioctl } for pid=27706 comm="syz.2.9287" path="socket:[106778]" dev="sockfs" ino=106778 ioctlcmd=0x4802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 678.827869][ T36] audit: type=1400 audit(2000004680.812:90459): avc: denied { create } for pid=27707 comm="syz.3.9288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 678.856531][ T36] audit: type=1400 audit(2000004680.812:90460): avc: denied { getopt } for pid=27706 comm="syz.2.9287" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 678.879723][ T36] audit: type=1400 audit(2000004680.812:90461): avc: denied { create } for pid=27707 comm="syz.3.9288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 678.940258][ T36] audit: type=1400 audit(2000004680.812:90462): avc: denied { read } for pid=27705 comm="syz.9.9286" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 678.970009][T27724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.161447][T27733] cgroup: subsys name conflicts with all [ 680.878467][T27747] overlayfs: failed to clone upperpath [ 680.996251][T27756] veth1: entered allmulticast mode [ 681.158870][T27766] netlink: 'syz.3.9303': attribute type 27 has an invalid length. [ 681.879812][T27755] veth1: left allmulticast mode [ 683.236040][T27792] overlay: Bad value for 'verity' [ 683.242154][T27791] overlayfs: failed to clone lowerpath [ 685.224670][ T36] kauditd_printk_skb: 211 callbacks suppressed [ 685.224703][ T36] audit: type=1400 audit(2000004686.949:90663): avc: denied { execmem } for pid=27795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 685.272819][ T36] audit: type=1400 audit(2000004686.987:90664): avc: denied { read } for pid=27796 comm="syz.9.9312" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.303621][T27801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 685.303657][T27801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:983 [ 685.304810][T27800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 685.348732][ T36] audit: type=1400 audit(2000004686.987:90665): avc: denied { read } for pid=27796 comm="syz.9.9312" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.424781][ T36] audit: type=1400 audit(2000004686.987:90666): avc: denied { read open } for pid=27796 comm="syz.9.9312" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.474904][ T36] audit: type=1400 audit(2000004686.987:90667): avc: denied { read open } for pid=27796 comm="syz.9.9312" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.546978][ T36] audit: type=1400 audit(2000004687.015:90668): avc: denied { mount } for pid=27799 comm="syz.2.9313" name="/" dev="ramfs" ino=107042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 685.605369][ T36] audit: type=1400 audit(2000004687.033:90669): avc: denied { execmem } for pid=27796 comm="syz.9.9312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 685.636272][ T36] audit: type=1400 audit(2000004687.033:90670): avc: denied { execmem } for pid=27796 comm="syz.9.9312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 685.655809][ T36] audit: type=1400 audit(2000004687.033:90671): avc: denied { execute } for pid=27796 comm="syz.9.9312" path="/316/cpuacct.usage_percpu" dev="tmpfs" ino=1852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 685.680671][ T36] audit: type=1400 audit(2000004687.033:90672): avc: denied { execute } for pid=27796 comm="syz.9.9312" path="/316/cpuacct.usage_percpu" dev="tmpfs" ino=1852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 685.764833][ T31] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 685.938494][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.950046][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.960498][ T31] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 685.971064][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.991070][ T31] usb 10-1: config 0 descriptor?? [ 686.441290][ T31] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 686.450010][ T31] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 686.655331][ T31] cp2112 0003:10C4:EA90.002B: Part Number: 0x00 Device Version: 0x00 [ 686.870859][T27814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.880034][T27814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.768403][ T497] usb 10-1: reset high-speed USB device number 59 using dummy_hcd [ 688.610678][ T31] usb 10-1: USB disconnect, device number 59 [ 690.086624][T27842] 9pnet: Could not find request transport: gfcpZfd SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=9208 state=3 status=67 (errno 9: Bad file descriptor) [ 691.008799][T20811] bridge_slave_1: left allmulticast mode [ 691.014517][T20811] bridge_slave_1: left promiscuous mode [ 691.020229][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.027733][T20811] bridge_slave_0: left allmulticast mode [ 691.033511][T20811] bridge_slave_0: left promiscuous mode [ 691.039198][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.063696][T20811] bridge0 (unregistering): left allmulticast mode [ 691.189781][T20811] tipc: Disabling bearer [ 691.195151][T20811] tipc: Left network mode [ 691.318248][T20811] veth1_macvtap: left promiscuous mode [ 691.323815][T20811] veth0_vlan: left promiscuous mode [ 692.138445][T20811] erspan0: left allmulticast mode [ 692.143508][T20811] erspan0: left promiscuous mode [ 692.148686][T20811] bridge0: port 3(erspan0) entered disabled state [ 692.155529][T20811] bridge_slave_1: left allmulticast mode [ 692.161228][T20811] bridge_slave_1: left promiscuous mode [ 692.166851][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.174557][T20811] bridge_slave_0: left allmulticast mode [ 692.180232][T20811] bridge_slave_0: left promiscuous mode [ 692.185998][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.394578][T20811] veth1_macvtap: left promiscuous mode