last executing test programs: 5m44.075702512s ago: executing program 2 (id=2563): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x0) (async) sendfile(r1, r0, 0x0, 0x80000000) 5m44.074917361s ago: executing program 2 (id=2564): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x161782, 0x0) mkdir(0x0, 0x48) chdir(0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xa0a7a89b}, {0x6, 0x24, 0x1a, 0x0, 0x3b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001d00)={0x14, &(0x7f0000001c80)=ANY=[@ANYBLOB="400a4500000045244500425ae68de561752de2f73a24b2efc6f9b128b8d1182fd6bbf8d724b8537e24e2df5e2989d36a98e8be9bfd93acce94f12ae6a66f1e83a0c63f09a5de61355727a5"], &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001fc0)={0x44, &(0x7f0000001d40)={0x20, 0x11, 0xa4, "73e6259d535a4d94cc7e0cb0e30101e7ed37346f64962c740304f91eefa22f21458ae3b0cdc18f7d1ccc156fc78c6d534086499a320853166c6ad118263b00b5de20153d51cb570fbb9cb852c9435afeba411c56b78fb166eea9f085b3a04af7c32e7e11de249afe88f1352c59dd1a4323dc55a6d61880d5b46f383f8a17f70d77ab50c6a26986b5163959f6e142d8e0237019c312b18da01b7eb71423b74d3e0472ebd7"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001e80)={0x20, 0x80, 0x1c, {0x8000, 0x6, 0x80000001, 0xcf, 0x9, 0x4, 0x5, 0x6, 0x1, 0x80, 0x6, 0x1}}, &(0x7f0000001ec0)={0x20, 0x85, 0x4, 0xfffffff9}, &(0x7f0000001f00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001f40)={0x20, 0x87, 0x2, 0x7f}, &(0x7f0000001f80)={0x20, 0x89, 0x2, 0x1}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7fffffff, @private1, 0x6}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m41.938196149s ago: executing program 2 (id=2579): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2009, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '7/=\v\xed\xa0\xcd0\xe4jh\xfc`\x1a \xfb\xa8%\x01\xd1\x8b)<\xbb\x1b\xed`VQ\x8c\x99E\xe0e\xd6\xf4-\xa6\xdasq\x0f\x14\xc5^o{\vj\xf7\x17mP\x1a\x96\xcd\xf9,r\xbf\xb5G\xf6\x8f\xc7\x15\x04\xd7\xbb\xd9{\xe2\x1e\x94\x1c\xa6X\xc8\xbb\x92X\x8c=\xc8\xf22\xf2\x8b\x17\x9c`\xe3B\xb6\xf2\x81\xabf\xe5\v\xb9D\xcc2r\xacR\x04\xa6\x9f\xca\xb3m\x81\x81Gj\xba\xe1&:\xb4\x9f\xac6\x1cH\x18\xca5\xd7/\x11fV\xef\xf9m\x9c\xfc\x1bC\x02r\xbe\xcb~&\xb24r\xf66\xd7\xbb\xb6hTs`\xf7\xf9qJ\xb8\x9d\x18\x10\bL\xa8\xc3\x9f\xd50V\xae\x98\'\xd79\xe4\xf8\xb9^\x01+\xe2\x00\t\xa0w\xe1B\xd2\xcd4\x00@l\xf48\xda\xcc\x86B&R\x8fv\x13\xe3\xa1\x86v\xd9F\xa6\xd0\x95\x95^o\x14lW\xea\xd1=\x8c\x80fv\x19\x9d\xc9!\a\x14f\x95\x965%\a\xbe\xae\x15_\xcd\xfa\x81\x1a\xe8\x02/\x99a\xc9\xa8\a\xdc8\xd0\x84+\x19\x92\xbe\x80\xb3\xa4 i\x89\xf6\xbb!_\xcc\xe7]V\xcb0\x91yf\x84\xbef\xcf\xea\xf9\xb9\xb7\x90U\xd85\x19VJ$\x8eo\x8a\xb8s\xa7\xdb\x17\x9f<\x96g\xea\x99^1\x1d*\xa3\xc8\xac,\xd2\x0e\x85\xdd\xa7gS\x8f\x1b\xfb\x9fhv\xa3\xf4L)\xd3\xf8\xd2\xfaq\xb5\xfe\x7f\x99\x86\xa5Rp\xd7\xdf\xad\xc1\x7f\xe7e.\xff\x0ez\x81_\xc1!\xc5\xa1\xc8\x8e\'\x8c[v*n\xbb\xa0\xcc\xa7'}}]}}) 5m41.938063549s ago: executing program 2 (id=2580): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) 5m41.936937599s ago: executing program 2 (id=2581): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x9, 0x1, 0xa}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 5m41.85051629s ago: executing program 2 (id=2582): unshare(0x22020600) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) chown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0xe}, @fda={0x66646185, 0x0, 0x0, 0xb}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0xe}, @fda={0x66646185, 0x0, 0x0, 0xb}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000400)='pagemap\x00') (async) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='pagemap\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0xfffe, r8, 0x0}]) (async) io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0xfffe, r8, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x1, @multicast2}, 0x10) bind$netlink(r3, &(0x7f0000004e80)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) ioctl$int_in(r11, 0x5421, &(0x7f0000000240)=0x1) (async) ioctl$int_in(r11, 0x5421, &(0x7f0000000240)=0x1) splice(r11, 0x0, r10, 0x0, 0xfea8, 0xa) shutdown(r9, 0x1) (async) shutdown(r9, 0x1) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r12, 0x0) (async) r13 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000940)={0x30, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r13}], 0x51, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff7a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000022c0)={0x98, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x1002}, @fd={0x66642a85, 0x0, r11}, @flat=@handle={0x73682a85, 0x101, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r13}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}], 0x6b, 0x0, &(0x7f0000002240)="38853b06aabed8885e0a1acd05ddc5563061fae09c4e85f7bf3232092f2584a4f016f4e1b8b9fbade4bcd2ffa0921d270d1ddfbe352c07714bd9897a77a33fc322d18538d9e8ec7636faf4d027cef5993a1983e55998d4639484ef5b91b88fb67397192e0bf26a8cd2bf7c"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000022c0)={0x98, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x1002}, @fd={0x66642a85, 0x0, r11}, @flat=@handle={0x73682a85, 0x101, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r13}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}], 0x6b, 0x0, &(0x7f0000002240)="38853b06aabed8885e0a1acd05ddc5563061fae09c4e85f7bf3232092f2584a4f016f4e1b8b9fbade4bcd2ffa0921d270d1ddfbe352c07714bd9897a77a33fc322d18538d9e8ec7636faf4d027cef5993a1983e55998d4639484ef5b91b88fb67397192e0bf26a8cd2bf7c"}) 5m25.647171453s ago: executing program 32 (id=2582): unshare(0x22020600) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) chown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0xe}, @fda={0x66646185, 0x0, 0x0, 0xb}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x1, 0xe}, @fda={0x66646185, 0x0, 0x0, 0xb}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000400)='pagemap\x00') (async) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='pagemap\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0xfffe, r8, 0x0}]) (async) io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0xfffe, r8, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x1, @multicast2}, 0x10) bind$netlink(r3, &(0x7f0000004e80)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) ioctl$int_in(r11, 0x5421, &(0x7f0000000240)=0x1) (async) ioctl$int_in(r11, 0x5421, &(0x7f0000000240)=0x1) splice(r11, 0x0, r10, 0x0, 0xfea8, 0xa) shutdown(r9, 0x1) (async) shutdown(r9, 0x1) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r12, 0x0) (async) r13 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000940)={0x30, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r13}], 0x51, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff7a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000022c0)={0x98, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x1002}, @fd={0x66642a85, 0x0, r11}, @flat=@handle={0x73682a85, 0x101, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r13}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}], 0x6b, 0x0, &(0x7f0000002240)="38853b06aabed8885e0a1acd05ddc5563061fae09c4e85f7bf3232092f2584a4f016f4e1b8b9fbade4bcd2ffa0921d270d1ddfbe352c07714bd9897a77a33fc322d18538d9e8ec7636faf4d027cef5993a1983e55998d4639484ef5b91b88fb67397192e0bf26a8cd2bf7c"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000022c0)={0x98, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x1002}, @fd={0x66642a85, 0x0, r11}, @flat=@handle={0x73682a85, 0x101, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r13}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}], 0x6b, 0x0, &(0x7f0000002240)="38853b06aabed8885e0a1acd05ddc5563061fae09c4e85f7bf3232092f2584a4f016f4e1b8b9fbade4bcd2ffa0921d270d1ddfbe352c07714bd9897a77a33fc322d18538d9e8ec7636faf4d027cef5993a1983e55998d4639484ef5b91b88fb67397192e0bf26a8cd2bf7c"}) 5m13.81490872s ago: executing program 4 (id=2925): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e9ffff014d564b000000eccd"]) close_range(r3, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 5m13.650560393s ago: executing program 4 (id=2934): prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002000000000000000000000000000000020001000000000000000a0d00000000030005000000000002", @ANYRES16=r0, @ANYRESDEC=r3], 0x78}, 0x1, 0x7}, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000100), &(0x7f0000000140), 0x0) unshare(0x64000600) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000340), &(0x7f0000000380), 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x129c2000) 5m13.641314923s ago: executing program 4 (id=2938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) clock_nanosleep(0x9511f3c3a34bb9cc, 0x1, &(0x7f00000004c0), 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 5m13.590348534s ago: executing program 4 (id=2940): futex(&(0x7f0000000100)=0x6, 0x4, 0x4, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x92, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="1400002100080000000000000000006700000000"], 0x14}, 0x1, 0x0, 0x0, 0x60e222aa7f003633}, 0xc0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x10, 0x803, 0x0) 5m13.475840296s ago: executing program 4 (id=2944): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r1, &(0x7f0000001280), 0xcc001) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x5e21, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3e, &(0x7f0000000040)=0x200, 0x4) connect$unix(r5, &(0x7f0000000540)=@abs={0x1, 0x0, 0x100}, 0x6e) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xfffffdcf, 0x6, 'RAS\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000000) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 5m13.387826957s ago: executing program 4 (id=2947): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x2240, 0x100) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xe196, 0xfffffffffffffffa}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffff000, 0x10000}) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async, rerun: 32) r5 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) recvmmsg(r5, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/102, 0x66}], 0x1, &(0x7f0000000600)=""/214, 0xd6}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) (async, rerun: 64) shutdown(r5, 0x2) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1}, 0x40002042) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async, rerun: 32) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) (async, rerun: 32) madvise(&(0x7f000019d000/0x3000)=nil, 0x3000, 0x4) (async, rerun: 32) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000081000/0x400000)=nil) 5m13.384159047s ago: executing program 33 (id=2947): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x2240, 0x100) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xe196, 0xfffffffffffffffa}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x1, 0xfffffffffffff000, 0x10000}) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async, rerun: 32) r5 = socket(0x1e, 0x1, 0x0) (rerun: 32) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) recvmmsg(r5, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/102, 0x66}], 0x1, &(0x7f0000000600)=""/214, 0xd6}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) (async, rerun: 64) shutdown(r5, 0x2) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1}, 0x40002042) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async, rerun: 32) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) (async, rerun: 32) madvise(&(0x7f000019d000/0x3000)=nil, 0x3000, 0x4) (async, rerun: 32) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000081000/0x400000)=nil) 4m13.281573607s ago: executing program 1 (id=3978): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x4a, 0x2, 0x10000, 0x50, @mcast1, @remote, 0x8010, 0x60, 0x1, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x4a, 0x2, 0x10000, 0x50, @mcast1, @remote, 0x8010, 0x60, 0x1, 0x7}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x30, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x30, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) madvise(&(0x7f00003af000/0x3000)=nil, 0x3000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peek(0x2, r3, &(0x7f0000000180)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) 4m13.237505318s ago: executing program 1 (id=3980): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0x0, 0xdddd1000, 0xa, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0xdddd0000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 4m13.14150752s ago: executing program 1 (id=3983): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x69baf000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000080)) 4m13.13969936s ago: executing program 1 (id=3985): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="aa536d2cb03b45a1dfb953f1edf5b75800a401355063d95d2ef85b", 0x1b}], 0x1, 0x0, 0x0, 0x44000}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000002c0)='@\\-\\#^.\x00') ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000003c0)=""/139) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}, {0x0}], 0x2) recvmsg(r4, &(0x7f0000000200)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/203, 0xcb}, {&(0x7f0000002580)=""/208, 0xd0}], 0x4, &(0x7f0000000140)}, 0x2) 4m13.057394171s ago: executing program 1 (id=3988): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x311, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'ccm_base(cbc-aes-ce,wp384-generic)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ptrace$poke(0x1, r1, &(0x7f0000000040), 0x5) 4m12.771627036s ago: executing program 1 (id=3996): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5033caab4fcbc139a0b808ff3a8466dedbcffd4de1bc39eed5c627c88594d49d26124c7e2e7f16a8da80cbd0d2c3c6cf919cc89e4de6c92ab99bc66c4c", @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf2503000000140001800f00010069623a67656e657665300000"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r3, r0, 0x0, 0x80000000) 4m12.754758926s ago: executing program 34 (id=3996): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5033caab4fcbc139a0b808ff3a8466dedbcffd4de1bc39eed5c627c88594d49d26124c7e2e7f16a8da80cbd0d2c3c6cf919cc89e4de6c92ab99bc66c4c", @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf2503000000140001800f00010069623a67656e657665300000"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r3, r0, 0x0, 0x80000000) 4m2.363700428s ago: executing program 6 (id=4144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xaf4, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x43) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x304}, "17499b19ddd58131", "15b00dae11c7b8fd0e3714dde36a9387", "b6acd2ca", "55526dfd65489998"}, 0x28) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x52, 0x0, 0x0}) 3m59.728786913s ago: executing program 5 (id=4214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0xa1, 0x0, 0x14}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/186, 0xba, 0x1, 0x11}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 3m59.697319864s ago: executing program 5 (id=4215): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7}]}, 0x20}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = timerfd_create(0x9, 0x800) clock_gettime(0x4, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000080)) sendfile(r0, r0, 0x0, 0x5) 3m59.615707115s ago: executing program 5 (id=4216): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x80800) ppoll(&(0x7f0000002c80)=[{r1, 0x50}], 0x1, &(0x7f0000002d00)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xd5dd0001, 0x800b, 0xfffdfffb, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x8, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x27}, {0x0, 0x4, 0x5, '\x00', 0x7}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf5, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x8, 0xfa, '\x00', 0x42}]}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x410, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030311f683541ef30303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000180)={r0}) 3m59.513746837s ago: executing program 5 (id=4217): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x39, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400}) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x810, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xfffff000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000bc0)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00\x00\x00\x00\x00') 3m59.440923098s ago: executing program 5 (id=4218): socket$igmp6(0xa, 0x3, 0x2) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x66008, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0]) 3m59.440416558s ago: executing program 5 (id=4219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000633000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) listen(r4, 0x0) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) (async) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000240)={0x404}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) (async) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={{}, 0x5, 0xe9c, 0x5}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x80000) 3m59.139850654s ago: executing program 6 (id=4220): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) unshare(0x20020000) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x0, 0x6) fcntl$setpipe(r4, 0x407, 0x10ae) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 3m58.81072962s ago: executing program 6 (id=4226): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x38000, 0x1800, 0x8, 0x1}, 0x20) 3m58.79988412s ago: executing program 6 (id=4227): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2000000000000) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/75, 0x4b, 0x1, 0x3a}, @flat=@handle={0x73682a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 3m58.740945671s ago: executing program 6 (id=4228): prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2203, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x410681, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x100800, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002200)='dctcp-reno\x00', 0xb) (async) prctl$PR_SET_DUMPABLE(0x4, 0x3) (async) prctl$PR_SET_DUMPABLE(0x4, 0x3) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000002240)={'caif0\x00', 0x400}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002280), 0x400, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002300)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000022c0)="a5b0af6a4b66454e8474095f4a", 0xd, r2}, 0x68) (async) ptrace$getregs(0xe, r3, 0xe54, &(0x7f0000002380)=""/4096) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003380), 0x2002, 0x0) (async) syz_usb_connect(0x5, 0x1057, &(0x7f00000033c0)={{0x12, 0x1, 0x310, 0xc3, 0x34, 0xe4, 0xff, 0x421, 0x433, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1045, 0x4, 0x0, 0x3, 0x10, 0x8, [{{0x9, 0x4, 0x3d, 0x0, 0x2, 0xff, 0xe5, 0x8d, 0x9, [@hid_hid={0x9, 0x21, 0x1800, 0x3, 0x1, {0x22, 0x9e4}}], [{{0x9, 0x5, 0x0, 0x8, 0x20, 0xa, 0x8, 0x6, [@generic={0xc7, 0x1, "5aff8c13a34104f3940977df1841c0edce00209ba74f0d4ec0bda8be53f562ce123af46baeeb1f3c6f16ea29174bf3e83325e1354eac3cbc8aa28d6dc9e152c82897375c9b583b690b8d159bb4095fa9f0d4b4118b4d30bfd0943c3e0573b4f3ef067f2a9071d2f90a61ec4a62860af225891bef5216c2953cfc2b34d8ea1e778ff0989b7f7f45c348ee82839a2bc1c63a2212a384e44bdaa388e5e9df7d30d404283d64e02c459cacab09d14bde0897795965c4abb92d86ab4f2dbaff45965b880cdd6e9a"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x9, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0xbb, 0x96, 0xb, 0xf5, 0x10, 0x1c, 0x6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "af"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x3, 0x9c, 0xba}, [@country_functional={0xa, 0x24, 0x7, 0x3, 0x1, [0x3ff, 0x3]}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x24}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x20, 0x7, 0x8000}, @dmm={0x7, 0x24, 0x14, 0x8, 0x400}]}, @generic={0xc9, 0x23, "8163a6aad26883858f3d79b4d8a8b04772932020b4681b5d8d368a6d65008ba19061fe15a184fed1fd83230b8d6ef821f63af3ea4ac9cd4a9d84a45de6bdc0dd6aebc6e567e7135b4f2e217dd72c4d8a4c6033a06257a2187ce0f7bef4ac427a112386393c3a0cc28891c48b7c8818cb7827e11b952c0cbebc187e3a5bec24f373c8bbb56af2973a335e1f8ad2dec995ee7e486e474ee10a458e8b156369d974a9a98ef2b3ef4161ad1528ce34e1ef74b2aa8bed166f86544a4cb8350b7a66cc1edc510104f491"}], [{{0x9, 0x5, 0x8, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0xa, 0x7, [@generic={0xe4, 0x8, "e53e28756de5f58f11d7a6b7006ba20bb80e73accf4665433053575fe2b7599226f80b3c71ad35abaff63a5c83a0656f00bd73b3f43b80a31d109ea1fa160b0ed73d51c58ab086912f5dc2a199e3a66d5cc858168304f56e5aa1faa5cb9fa5be50b8c5736ebad0174c3964b1c22fbf6129c32506c721e09602b00e6c9b47f53222385ab5b32c40156ef160327a77fb73bd50eb720a5c1c73d9e4fed5372450bd8e90f85261627d6573c5c9fb21d553bab5f2b42614e0cd58c5e5d5e975eaa2e5de53548a1d589d2e2d0ddd15756f3558cd8bcae7bfedff60081914ab1030394c2b47"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0xa7, 0x3, 0xff, [@generic={0xec, 0x22, "61d8e273f0a489bb3f27a6507bf6bd81a49044d6e976246e5eb8461552ccf581a9072f0893fecb264619c0a58d0bc3e23a649f5d0f41f5d0fed21438f20c7e26411c2b10f3380249cb279c8e58fb2415d4baa95f5ac1105923adbffe9760449d7b1fd1d21929f11e835827cb10d34cf743f7595d04aad185b0fc6141d3e36928c63b8af4b4126d5a0453f0e1bfebfc2eed2bbc1e9f6a6f3b78065665a2974fd2f96fd0b301b93f3cd7fe40a1436cc2f4ffda2d65fb49fc6444e5671556427b6eeeb40acb655f54906a406bf9a3ace77be542e98fdc3b53341e8dcfdc5017b9aaa3980b3728a398ebfa6c"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x5, 0xee}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0xac, 0x7, 0xee, [@generic={0x22, 0x22, "6641a21ef28a4574c4a2e79821173f481b5385d794b35b76a1e1c156745d78c2"}, @generic={0x25, 0x2, "9afdc339fe311d417140958183e80cfcbc8bba150165791eccd07d0663db9097f4db01"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0xf7, 0x1, 0xfc, [@generic={0x27, 0x2, "abc9dda168511b5af18fc59fc40dc737938f895b5a10f1f1cc9f3a6f58bf0af8014a6dfb71"}, @generic={0x9d, 0x3e, "452b7c5a4f51c097818ceb1ff3983ab91bd8db17bd608a50f8a42091982bf8c3f09ea878cf3088e63228e44cce4a04d0542fdda570034693b75dc74315ac0ae54e1be4b482552bc2ef583bca258b15ee0d88f11828f022dc4331faae6e99d895f0ca8bf2fb8ba7902f87b4fbedd658615d2e950916476300dc6a5828fb060a799819ea1fccd9d6add3d10bb4ac87a5d4d3b6e47d71b3dd87ec5d68"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x6, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe, 0xa6e7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0x47, 0x10, [@generic={0x23, 0xf, "29157dcfbd52fdf3b10fa107f7e223bceb8c7f6c5f150c67074f04632ef185e0db"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x2, 0x23, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x749}, @generic={0xf7, 0x5, "fd69f2cbdaa7052b761061bfc98abfb0924094639729232f3f7c29f49c8159b6c275077dc2fcef49cd14fa6a2365888e4087622555a7a9eada9413d93f2d6c6720e8d569646bf52a82b7b30c14f1c7f929b8b09ce86ea6a8cb9c39187a32d85918cc21dd86bc05acc73fedea88c1f90b3c3b3f9e692771e6b37b73d27d9c44f3ff4b3841592c765af7437ef568c9db1ea989237ccfafef84daf433bb6259f0fc4c36a24811279cffe834064d1bfe16395201839d6daad215b286db87ae894ff66ed9dc749da84ec74cd99d4fbd7c6a059f91d898ca37fa6a9231200034d1514bb439638948e7858ff4c0245494215e6c70c31d04a7"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x1c, 0xff, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x80, 0x81, 0x1, [@generic={0x84, 0x3, "32cfdefeca435b74a9d9ed92548dd16db3b2627aaec95ce9f344a298741537d753513406508a39b746622af3ce1f0589319716e58ecc73a455255e6b43fd1fba8486287e054219c6b630b6b20c09fe4755ab968778411d875a1624de743b1458b1cc47a0322b495887d6c72ca6af93d27e37f1b374dfdbd710a9559bf6e58c5a5ce8"}, @generic={0x8c, 0x24, "cfedc68250d301ace5a7f419f76c8fa57386e998d0d17d17738e558df1fa214901fa9c80cf6c82114d6a12f01cbe6db6ce14486f28abe4c06dd36e25ae6f4018d8e623a26e70bbed197b40c235695ddbdd40e5062ce195c4a7e992b8cc198b3e613903b27a2c6c8f8564d49d4dee5efc5eb85912867afc6c0b97ebbff4c21a2c5a968e5f53be34cb76a3"}]}}]}}, {{0x9, 0x4, 0x3f, 0x9, 0x10, 0xff, 0x5, 0x1c, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9d7d56"}, {0x5, 0x24, 0x0, 0x73}, {0xd, 0x24, 0xf, 0x1, 0xdf20, 0x7, 0x7, 0x81}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@call_mgmt={0x5}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x401, [0xf, 0x735, 0x80, 0x10, 0x7]}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0xf}, @acm={0x4}, @mdlm_detail={0x88, 0x24, 0x13, 0x0, "8312c2818f0b7523756e72c5053879cc7f51da279c695b29979c680373cf2d4c814c421e420b2379e65e22af866b6ef6226593874cb4b58035eaef480d0bab96e64661c641f5a5153b50995e0195f8793bde6c057c158749be93a63a50c124a7c2410e100c62a3c6e922d38afb435bc4e644f3a593b14b99d60d9460fcae58b4a1495717"}]}], [{{0x9, 0x5, 0x1, 0x1, 0x10, 0x7f, 0x5, 0xaf, [@generic={0xc7, 0x6, "f6c11c8ceadbfb69671d2226d97f080b82ac5c909846e10bdb8ab1eaae79a43f675ddc6f51aa5b5d1ad98f73a8bdf45a02c6d19704b2438a78a5582ba337dca86ad64e4f7f2024713c761a557a2b971c8ef6ad6bc7824ce80b82a5d5056168cf40e87e8defa0991d98b3eae95e8ac624914cd9abf8c8aa62fe639502d82a6ee73b6583a12c5d2452c897a61a5e73b97e976f900029b2f945f61ba17c0386bef0f5f2b29fafdeb2f16cb47b8ead0b21167575244e072cd88d4f7e0f23c98d00284c9e2b3797"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x71, 0x3, 0x10}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xfa, 0x7ff}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xb, 0x0, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x9, 0x2, 0x0, [@generic={0x22, 0xa, "c75be7c7554ffd2e50fb18312148743c01db14b2f8f77a87adfdf4f9865c8dc5"}]}}, {{0x9, 0x5, 0x3efe45beeebe3d6f, 0x10, 0x20, 0x60, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x1a, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0xf3, 0x4, 0x3, [@generic={0xc, 0x11, "3beb2faef16decf116b9"}, @generic={0xdb, 0xb, "7c55bbd3cf39ce643e9a24121cba856eabc5b9bcb091646d008738a15ba9482161b23c9868f683480ede56ae8c5e6212d7e4e4dfb9355f73b98b52c5b0d07fc10d70c0775bb791aba40aee2dfbbf3e1fc06fca047bc756ca20868bff32f768049f4b975145b9b0b31c318fde9014087d5b68bb7bd2449948dd941c67064d5af8669790d64b8ff8f5e7cb367bc3446273289a3a6b4a4452d98dae80d12e19ccd97c1a180aa82dc6da2c05b2d003d759c3b3b989eb28c2121b8af0ef53181c837e0e975df091ca0aa92526aaf854a5c846f32a3c13132492d1b1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x1, 0x54, 0x4}}, {{0x9, 0x5, 0xb, 0x8, 0xb9f52d0549a6c515, 0xcd, 0x6, 0xf}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x77, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x979cd25b4993824d, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0x3, 0x40, [@generic={0x73, 0xb, "3c8e555cb8246e70a568304ab5e2bdf68e5cc8f340e4febb4c3aec2aa0ad7e6a7e5b673296ea4d1da48f3c58d29bb71c333a397ad2774a6e0baec15403cfcf5c69c7f1ad3c607ee42fa1efdffda94b8a8556b7ac3fe579eefbd1338f8d6d6e28048d204449cf50d3c7ec811623cbc97bf4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x9, 0x2, [@generic={0x31, 0x9, "d92cf0015ab78a2daac25ec8c6d2ff27a8fe66144b7afb5791042ed617915fc614173bfdfe58e7a9eaee5249c17961"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x1, 0x0, 0x9, [@generic={0x33, 0x4, "f80ea78d98aa2176033ea6235f0bf556aebeaccaeb177bcffd25c59ab39e4092f4211af1b9b34787f9414020096641acd3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x1, 0x1, [@generic={0xc1, 0x2, "3ea0392b354c5435c73760091388ff81192f974bd27ebe8ebd5407e0bf722712291336d9654ff794bbc9206b24b11b945e48c9afb7b792e60f2bee1c52c2021462ba62a9ecf92a65456d6c9b14e717d4e0433cb04f6777198f3a135d382d9201ef031de4a77a81c3dfe246d56a5d173ac970bd71a1a550e5aaf71c0bbb9bd9283ccecfb0d0e2b90a14d22c1f213a68c6b63c1b3c784cbf33dc6ca035b8bf8db8afe507a6bd3757bbe9ea7acb2c2f1c890692ff2691e4563e4c8bba36d839c0"}, @generic={0x49, 0x9, "08ccad43aa942d98e4df7a907d22fff97e95f3e42e083eae2ca0a636b673ab0be60a757b6b61ba6abefacf4dc109bb441273006138b00b9669260d651a39bc1624beba26d8e6b7"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8, 0x7, 0xb2}}]}}, {{0x9, 0x4, 0x8e, 0x2f, 0xd, 0x57, 0x81, 0x3e, 0x80, [@hid_hid={0x9, 0x21, 0xffff, 0x1, 0x1, {0x22, 0xf41}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "6923fdf0c8fa"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x9, 0x7895}}], [{{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0xde, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xf1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1c, 0x987}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x6, 0x8, 0x80}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x6, 0x5, [@generic={0x102, 0x4, "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"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xff, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x3, 0x10, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x7, 0x8, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xded8}]}}, {{0x9, 0x5, 0x5, 0xb, 0x20, 0x2f, 0x9, 0x40, [@generic={0x5e, 0xb, "a4beeceff067e98d9a0b975591305b972f3c18276ebf50ea6438dd17241a916bc1461c75826c9fd8b5768393f19cb9dfcc0226a9448ef8c78fc2a9947bf064201684a991033526c12a03f9332e8245b43d19aff33b902ca4c3063969"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0x6, 0x1}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x68, 0x80, 0x4, [@generic={0x3f, 0x10, "510f9a6050bd454f5e058a9f2d38c43bc8fe1636f89fbc9e2124c099a98c90c6cf4397fd220d9c49d6248f22f4c96391651d922db9ec2b3cb6f88a14dc"}, @generic={0x37, 0xd, "17675c1dba9a0891bf0ec14ed76159a69d1b32dce17d750824163cb665e3e5fc49eadc87ebd9524c3a685c2abf1b94c5e19c2ad6db"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xc, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xf}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x9, 0x5, 0x8, [@generic={0x99, 0x46, "1b80f268d5e8606643a1814afd2f5828dc59e313caa9fd46280446935e32ff74690b33797b7206f356d164b10b74dbb6f9ebfd751f1dabd11202dbcbcb57d7324051dda815147a14e5bb04867975437c2e9a86f7967815213931096d240ac5078db6b6576445cb2f889030fb7ca1ed2de9c6e0f90861a1e685da6e12294cbf9af3fb99eea31662142da4918cfff84a91dd71dc38c7a225"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x7, 0x9, 0x8, [@generic={0x24, 0x31, "feb55722f94846baceb076b403fe84954c78a44f085d1d064d1672517e3b7870b61c"}]}}]}}]}}]}}, &(0x7f0000004540)={0xa, &(0x7f0000004440)={0xa, 0x6, 0x310, 0x1, 0x4, 0x8, 0x40, 0x3}, 0x32, &(0x7f0000004480)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "14697c08fe17aafb2ee7ee5c95f7a7df"}, @ssp_cap={0xc, 0x10, 0xa, 0x5b, 0x0, 0x8, 0xff0f, 0x926c}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf1, 0x8, 0x9}]}, 0x2, [{0xe, &(0x7f00000044c0)=@string={0xe, 0x3, "003fe339ebd6aaf323037ffd"}}, {0x4, &(0x7f0000004500)=@lang_id={0x4, 0x3, 0x83e}}]}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000004580), 0x2c0200, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 3m58.655246682s ago: executing program 6 (id=4229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x8370, @private1, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="82", 0x1}, {&(0x7f0000000400)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000002300)={0xc8, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1afd}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f6d}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x805) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0x2000, 0x80af000}}, "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", "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"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x80a0000, 0x10, 0xb3, 0xe, 0x5, 0x9, 0x6, 0x4, 0x5, 0x8, 0x7}, {0x2000, 0xffff1000, 0x3, 0x10, 0x80, 0x6, 0x0, 0x80, 0xf, 0x3, 0x4, 0x4}, {0xeeee0000, 0x0, 0x8, 0x8, 0x9, 0xf4, 0xfe, 0x1, 0xc, 0x4, 0x9, 0x8}, {0x2, 0x0, 0x10, 0xdd, 0x5, 0x8, 0xfc, 0x60, 0x6, 0x80, 0x4, 0xff}, {0x80a0000, 0x8000000, 0x2, 0x3, 0x1, 0x3, 0x0, 0x8, 0x2, 0x9, 0x5, 0x40}, {0x10000, 0x3000, 0x9, 0x1, 0x1, 0x7, 0x90, 0xca, 0x10, 0xf, 0xdf, 0xf9}, {0xdddd0000, 0x10000, 0xf, 0x4, 0xff, 0x7f, 0x3, 0x7, 0x2, 0x0, 0x7, 0x1}, {0x4000, 0x4000, 0x9, 0x9d, 0x76, 0xf, 0x8, 0x5, 0xfd, 0x9, 0x4, 0xff}, {0x6000, 0x401}, {0x1, 0x8}, 0xe0000000, 0x0, 0xeeef0000, 0x200008, 0x9, 0x0, 0x100000, [0xfffffffffffffffe, 0x6, 0x2907, 0x2]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m58.605651303s ago: executing program 35 (id=4229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x8370, @private1, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="82", 0x1}, {&(0x7f0000000400)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000002300)={0xc8, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1afd}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f6d}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x805) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0x2000, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa973f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc51e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085155ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc2b586ad5eb67c7add5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55b7ebc08c4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e6558ca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b96142e0995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "8f9bea13d6c1793efefda669a3bfc1a1f2d2afea1c14a5b35aac4a522cce409cb88f5802ab78a0dc4ad9e13501a073e6fc60f1778eecc8a6f5299ba9f7dcdab9079dc269bb0d7bb287afa53a930cfb99ca80b3c23dd58d7a4d8ceadf2787fc4f8c638dcd55f8e962ef362db8ae2d407ea8f04c151b89947d52c901335b5ca070883017289368b02ae4676286906bf2f984ae3b2f4ce4d345ea814a725ef388f09b6b6dcc519515885e6e5062d9cd7e801d8a14b1c5b86c404a3bcfb968a48710eb7c451630b0e3895739f51e1379f25a9848fd01021cc53ab10691091090b2cad44133a51465c16c2257cdde467cdae5616e809ad2f3ca71a0b4ae46b5b62142b1d6f782c4286dbea20f02bae71821c1c956172806c55069c3e33f8811a31a44856a1d0521c3e81c12b6dcae2b0e5f006a9468614031c6ad977aa589e4076f55a5528d7b408fd429da83d78bc7dbb794b4117379334fb9167b872d0459a457ae425f768052a583f23ff60a29f11659756f40240b1939fb8b72c3fbe3963680fdcc09900ab387757c9146d223ccdfd5aa26682d39aee3e4b327748d02f82964c117fd480804952654de00db09934cd5c1786b35453f18515ec8f28ee9aee0bfd367eafdfccb54ed29fd08bbea75ed8b6a93c23cb337ae900ba89dcbb3d87191e1e56de67175572aa09f2eaa4fc1f31055b08ce99c30dadc63c743de7fc3e5e0511c98d6b37132f66f09577f6a5f9d113865830876d2f33887136d976525d195790184b7eeaf82169128911c37856b5e75db9999269b252f12d07c62236fac6835a3c13261c527d03d33df946ddfa40c85548ddb9179cf5d963246e215fa0f76472f9f24493aad8db71422f1d1c31a454980f2499294f858de9e8a4937f832b21104c843d084ba15466453f9fd830a1d7d5dbe801ef67c2d6ba52cefcaffa798dd47e9d1e94729956b62ccaf200ff3c32e41cabf86de920f74e1c9e00391909b622505388a3d297b4095f5aa3c17ef5e68c4b3ff18855fd13ff2fe3b1746155d149baaead01ce8d975730b235b1fca6a158f219d3256489d1421e9a008434ae4acc01e583a3145633bd217a6b74d4165fddc31499b6bde7341aad811e80ee6aefdb5aa993926b57d90c0098babdf172c2ec2fe85ba0b75bdc898ba9a2dc7383533b70f3eae8c5c91526a9d5aa99f4a91c9a4235b05558f9871f1e2254a2300e7bd5b4c0fa0bae78e00a53400ca2d1bd03f9d47c82a0e8a17519b53ab0274dd5fcab49ef76a567c156b947b38744657321da66d2983024a67adc00adcde04f35fc2cfeb39c0adcaa508ee7cb8b7a6b73b4deeba620538003f11f390d108c466a2058db84b122b62844f6aebf2d119ea050ba34a1152c439b4ee0491d9417398ec2b7154bdb39ffadb6385c52108f61cc0847cc8e499b3009b00ea000d1c84848c8213d82aa2c87d9c7b15fdf23454190b5c18f563985383a42c2d600155970c15cde8da2d14ef5908704966c286d59a5141bff15ed1e8b7c1252d8cbd641c70f8129ca870fa1235155cf642095b20d88de5c0a0ac6e8969c05996481d1e8e7f9cae627ad6cd374bffa2c8714c84e735384c4064c2e194f26ea16d3d99259cc394d2c4553578ad251c3fe2b88b316dd3533b644ec59390868fe5e7f79fa721ae8dd5ded8ceefaad3879b8c5577bb831079b44fab7db38f0b61d74ed192b2c61cfe6bed13049db2c6b85434e46194230ab022f7d74be00a844023d9b423eb03ccfc0ad3e61b950cd9801941fd8e5d4b90154ae9f173b42fcd658190758f21af8ff9086d4eb12bc3496bfecd99211c1048b3ce4dd25f0934d7f17d45f50084c4ef7c3162c1cec43922d89d1945f675d980e8f2b374c198fb6e857d099c33aeececaac17ab9c12c343051e7dd2f8786883339dbc643af493745974a4da505844e0419dbddb4eca492713d006a5ff47d78dfac1642acab8caa7bda595b6b9532edf6da9ee99711822fabf8e8783dc8f156d1490f40ed6aedb4f97ce55269a2070b4aa3fc51ef22d9fa8342a03ef1b27831f83ade237f4344797eb29f9bbc6aced4005f4b379a1e0b060b4f9cbfce975b9bb2b53e1228c91753a7dfe6d67282d565c1ef42a15c1ff0d49f1128694336eaa277fd691de0748740241edb9250ab53e53523b2217fd4d554fe482c35d8ebdce8c2d053ea2b035a5e8f9ea2e683b24e418698e48b6bb8275c6938c61a6fcafb1f7c73a344db76bdc8cafb1a10b13121e62e3d9b92ad50241ec0908d73255cb72ab5d144757a55c116343e6e6c61bb0999615ddca343e02a5e3438cc9f66b1619c4467b12e615918d2f27392977775c165530dc0059bb41bd6103e612ef5bcd7f2df54ab86a05836b0bb685c05e935da8dfe4144217603c6e4f703d8062af788c7acf61285baaf7c7043a0602fbe8d61daabcf07156f7ee60debca3787d1f4b60f39c341df2908bf7944a5753883626920f1e82eeb374409fa0b331053a9c6bd3ab48682d228ec04d7cb3eb94917d00bc97b46ec14f1681013969cda5ea2c95fa390b3d6422ce0ac242690fbf352d757c9fbc66d06b0e4578e43f032c5f033d54618d178ef0fabdb00108d23cae66bd4ce059709b01e5b8ffec5597465a1c77c0bd8a1f2cb5f13d2b49450b23d021f64247966fd07bee6538fb0565b7eb41489566bc066107a345d705335bc918fe2e3c4edc50872fd25933aaa908cd78eec4e414d46c035c734af8a5b8d47fe62a4a9c49da0cf6547cc8d6702a2468c8d6fbe0ec7d90888d0bf3a0c7c42507d0baf458ce087d4c7725f42edad430abf233b064186c111b4c1fc2861e74426a31d04e2ade9d7acd8f0ac376b712d1eb20175b93b6900291b5625f90276f0857af6b0d108ddb0d772f501e687196c7caafc90010403596a6b5735e28ec6363896c8719e6002dcea716038e7b773c250c98aae730a7f39d995d0c737ff6e29c7a548c69896355b73d50eff7f7a1238f66601d10e4ccc6fb5e924a59bb41da1eba811f5acb22e8bc3719f3568d0fdc0868b29df0727f5cd50290a1845e22d523cde3002560fef504bd2c9a291c7a81a4f2b5b8a015f379009e3e8baed5d35c4a03e09afd37d7fe9d86e86eb53701ae8016d5a19ce5e96e11549ba09e3c2a6700ea84796091f6ca47d4c68fb1e6f4448e1b72f6d4b8af491b635208b31356140db8134e5a1594e47c7ad68dcd2399f49731c60f5f6c101955d4c31275df3d4ce3207e8dc03b87cae229f1f1d09f0064ef7b0727f787efef0369222717129287a9b3a375e6aadd40b6fdaea3d43cd59febe098b7f80d72343bb147a20b22b5de8fbd32bf4ce64f3ad2510dad9c243327e7c706b06004d1cb82e9cc113d74bb9cb820e360c9a8992b884a65234b93250f7ff8e7271983c6505cdf0524b5a8e60f8b3d86281a903ee62d3010d62a788d360182c1106486ee1673f5b7da5a2a154cbe53697305907f64140283f78b9b3b78d2a420586bbac1f72b4388258a0e7c1cc26048cbf3e47c593e9d3300e98931801efc3bdd0ed74e0d3b4f881c66b71a401d9719a1231394ffd04b35bb3c5dcc5ee18696e8327ef9f0f7d8ee218662ec6e747d5c009ba9462d0fba519be8f5f951a5bc077a6eaca928536f35e5929863357cc025fb80c5806d3b7a9f2645e1f6d3239bf763e9ff16fe6bf30d6139f2a117fa1db0d6d2c6aaecf1cacc1b28b24587c9bfd48e52f37651cc97c35d3dc3834b7f973213d0edefdf42a239da89bf1b735767f9e38119de3fd24dbdb34c38068888dc8ff11d19b1950772e283903ce51b1c13e86d58b283dc8f8a3c9456115b19a0561f3aa9c7eca553c4e5bfc20b5da4b32e607a57c2577ab2a65cedb2dd754a2363b37b138ea37e2e3546eea289da7475850e393e7331416bcf4ec75f0c6e654df1fc513e0dcc52ba57e9a128d148cf42d35fb9c7168c959e1ed6e4811fba1662c22194101a6d8787e037a35888117c854a2ef8f685076771ab5aefc8135cfa4c2a25680c6566e0fd19eee7cc86ece140efb6fab4200eabc09d834239abf5f48b46ea51797ee393693270da94c3e73859c01d1042e2eff0b1c4ed41ea560f38b8483d94b9dace687bbe8993fc4e2872b686bf299bb0dce34874d940fd2c36b5270aedd09e5e5a952d70f191e011c7e269219477fe8f5ded564f14fda6461b64d84ec32543a7ed663d8d27d8b8893942e0b7167f3f7b936f8f1fe623248d9815c5969f3a22f0fdefb527d9a870d7ece5430a9adcfee9eef05d235a0c87989965b20bad18c96d696e817c95693fec426ff81f1250e81c244058722243cb3e2df722ac46554a368a90a81206628fcc889cca832a8d4ed20188db0005b1b1c494e3dcce0622dd72ee35f4b4ac447909937bf67807344f5a629230752645aee6c70a885a80ea0e491fdef70648bfa0060ad78b122f2cc0637feb6c5754073d71326bb5a5c0b8c9890fffab1360d647d3a7b4e4bfb29c3162f311d7a1a41c3c5f739542ec723fff2c1e086dd79b1f22f3ff5a512e7ec7dfa54cc6883ae22b949139b1f029f8674ea97c5fb8125a3dafebddd524acdd1618c9f9b9fdf0ea659c4bd4b8da12cae04e89268611b8fa7fd23ff0ff7dcf8a10540120d03d72db15d0775075c1c30ba7e6a07ee6633fa6fa396ca3a5799a7905db5d49e8e8ce00eb7a9af5f2c60749bc28c4b188054e21f44f28d2d1258326ae27a1b14d4704ffb93ff506bbf07e0e4e1bf2502fce11eeb83b9c491a68db0744a61ec449f5338c0b40d77ed16de2d935320bbd2cea2a164f26e7b619ddd81448009adeadfdcdead9df5a1c6da9aca64f373dfaf7cb940aac9f5eedb7a5d49eb74dc0e0819b05f328e9a4ddf3ef0a27cf01a853e02bc69970a32930c48509d726600dc7ee95e119d4cb28f87aa13b7ff846c338b5f9090586ff7bd983721d4a4b5a2e9a3e1495644483bf14861d524196f0d73265688794d6b3b4ce8b3ffffff7f00000000aeaf9f79c08f5280a6ba0187eae965e412f14cb379869c997564b0a37349dc535882d5d4054d18bf44cbfccbdb8b377761096c974b3dde6a9dc767937bc3430a7fb614671e73ea867b4cd499f2581766510ad70811cda49b69b5afd380ae2ad43281e6640d4f20b2615f3c0b20f7d45c69a9cbbe7933776e07043b141664c059f1c6de17d44eed8b6242d6e8e8b3b86cff4306a9657e6d6f0c429f52138c6c5f7d155bc713432ca75bbf77c3a2c06e546474a7c327d10c46be64e6729643a9455420c48677a23c92f05e3e56f7fecbee4dea0b9eac600739cd068305bb6aea50d5d1042f821e78f2942d603c46a1e4541756bac183b640935dffe8309e3e90a170ca3d126375a0177b1d94b72b622607af60a2cfb9b63464689237fcdbb752e89335aa96c615a59e39fcd89a3a39445e78fb5dd491e29f638c162c886a762b16850863305496ca80974c3d39892a255f9a26b438662e6bc67e1d5115acff5bee940368df7e182ac1cc24331adb6e155ecfa1257d2f47a6b959f2bcf2dfbf86613c7761746ed85fd7e2a3c7c8602ee5143b100bd0a5026146becd255004fd8728bcfad605fad03e754ff1245e7716884e7e6898158ca4e9ba58cf09d8afe65fc18c2529b43a14e7eb7451b8072d68124be7b9133301d840191435de4704e2dda8ccfa87013f733aa10431faf7e46be7a391809af91e5e98d63c80a13c4b4fbb95b44ae5540f62f43036daef02b5dd404c0b08d46fa66fbdf0b4ed839494aa4c85194dac555e4061481c6717a3306700"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x80a0000, 0x10, 0xb3, 0xe, 0x5, 0x9, 0x6, 0x4, 0x5, 0x8, 0x7}, {0x2000, 0xffff1000, 0x3, 0x10, 0x80, 0x6, 0x0, 0x80, 0xf, 0x3, 0x4, 0x4}, {0xeeee0000, 0x0, 0x8, 0x8, 0x9, 0xf4, 0xfe, 0x1, 0xc, 0x4, 0x9, 0x8}, {0x2, 0x0, 0x10, 0xdd, 0x5, 0x8, 0xfc, 0x60, 0x6, 0x80, 0x4, 0xff}, {0x80a0000, 0x8000000, 0x2, 0x3, 0x1, 0x3, 0x0, 0x8, 0x2, 0x9, 0x5, 0x40}, {0x10000, 0x3000, 0x9, 0x1, 0x1, 0x7, 0x90, 0xca, 0x10, 0xf, 0xdf, 0xf9}, {0xdddd0000, 0x10000, 0xf, 0x4, 0xff, 0x7f, 0x3, 0x7, 0x2, 0x0, 0x7, 0x1}, {0x4000, 0x4000, 0x9, 0x9d, 0x76, 0xf, 0x8, 0x5, 0xfd, 0x9, 0x4, 0xff}, {0x6000, 0x401}, {0x1, 0x8}, 0xe0000000, 0x0, 0xeeef0000, 0x200008, 0x9, 0x0, 0x100000, [0xfffffffffffffffe, 0x6, 0x2907, 0x2]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m43.35511192s ago: executing program 36 (id=4219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000633000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) listen(r4, 0x0) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) (async) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000240)={0x404}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) (async) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000440)={{}, 0x5, 0xe9c, 0x5}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x80000) 20.556093231s ago: executing program 7 (id=8036): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 19.183593034s ago: executing program 7 (id=8047): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x8, 0x3d984567, 0x68}) write(r3, &(0x7f0000000680)="88", 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="d2", 0x1}], 0x1}}], 0x1, 0x0) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) r5 = getgid() fchown(r0, r1, r5) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 18.231911081s ago: executing program 7 (id=8050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf252500000005002a00010000000c0005000203aaaaaaaaaaaa05002a000600000008002f00020000000c002d000000000001000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f1814bffffffffffff807000000b800000000000000060005000d4530e96917", 0x26) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') futimesat(r5, &(0x7f00000000c0)='./mnt\x00', 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x770a, 0x0) 18.231659611s ago: executing program 7 (id=8051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async) close_range(r0, 0xffffffffffffffff, 0x0) 18.230751951s ago: executing program 7 (id=8052): quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) keyctl$clear(0x7, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2]) socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000100)=""/69, 0x45}], 0x2, 0x8cc, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000001c0)={0x0, 0x3, [{r1, 0x0, 0x10000}, {r1, 0x0, 0x0, 0x1000}, {r1, 0x0, 0x1000000, 0x1000000000000}]}) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) (async) write$FUSE_INTERRUPT(r1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async) keyctl$clear(0x7, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2]) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000100)=""/69, 0x45}], 0x2, 0x8cc, 0x0) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000001c0)={0x0, 0x3, [{r1, 0x0, 0x10000}, {r1, 0x0, 0x0, 0x1000}, {r1, 0x0, 0x1000000, 0x1000000000000}]}) (async) 18.039194755s ago: executing program 7 (id=8054): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/229, 0xe5}, {0x0}, {&(0x7f0000003f40)=""/4100, 0x1004}, {&(0x7f0000001880)=""/143, 0x8f}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000180)=""/254, 0xfe}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x2100, 0x0) 17.983957676s ago: executing program 37 (id=8054): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/229, 0xe5}, {0x0}, {&(0x7f0000003f40)=""/4100, 0x1004}, {&(0x7f0000001880)=""/143, 0x8f}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000180)=""/254, 0xfe}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x2100, 0x0) 3.347633061s ago: executing program 8 (id=8225): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="2e0f31f30f59ae1eff66b9b20100000f32baf80c66b82fd7788166efbafc0cecba430066edf087290f01c926260f35670f06f2216cd4", 0x36}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)={0x1ac, 0x3a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0xfb, 0xc7, 0x0, 0x0, @binary="487d60c11baa29064b24a30075b984862608ca67a03534205c6b24d8196aef55149c9197100761e65e60d94e0d95300192d93cff94bdc954f0fc8c0075389f2641017f19d4bb9d9c5858903700e3e82364c85fb68bb169590e943da516d2c50bcb350d55189d4bf24efbbd284179c374c032eda7e589274d0be43027cd8e07f81d94721adcb7ae17a5fc25cf3b1e3ba88ed0da2d55bc9fc8b20ba339a640e0b61e5b5fa33597e0d14cb4c25ae70842315f1fd0aa150c486e52a6840145a2dcb2b51828425c2e321ea8c0223487bbc57f04f1366be372c76c0132cb3c3b45072ea3c0481cfbdc5463900291675bcea61eb49acb9af81dcf"}, @generic="99ed7d40d23da42bfef26f6fc3bf566532ec7d45e42254184472849a2b4885d8e697b1e158cac01cdcf43789951199601f332ac2b0ee20827e4404459ae8089e4b94ff8a041fbd581b4779f2eeddc09e1b6492084378c0e9e6c38eddbc08d4b94a87cc454dcfa0898fd72e4b8ad1bbae381c09ed4c09085aa23b2d64b2ae1028ef2250293b70a683beac3c659564beaec45ecc04b3", @typed={0x8, 0x95, 0x0, 0x0, @u32=0x7}]}, 0x1ac}, {&(0x7f0000000340)={0x13b4, 0x1f, 0x10, 0x70bd28, 0x25dfdbfc, "", [@nested={0x51, 0x28, 0x0, 0x1, [@generic="f92ba58e00b81cabd578556b6d", @typed={0x8, 0x109, 0x0, 0x0, @pid=r1}, @generic="ac86a2806f9a083951a22373d25e79250da0a2fa44bb147e72a3f7d2f997bec74f9d9b2ef339dc424bc9a7a60cdf79fa64047d23", @nested={0x4, 0x81}]}, @generic="c892fe1b434a333525125e2dd8b401db25b2edf1095bc586f2976893dd268864a51bf377f59f799b12ad0f6905946b12ed0eb380bd7d8d3ed0add40fb46fd5beb0349a7062ea259e8e31a67ee31a10bb88998e3d01bc", @typed={0x1004, 0x13d, 0x0, 0x0, @binary="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"}, @nested={0xf9, 0x57, 0x0, 0x1, [@generic="ec4adc23a6cd9f467af68d43caa1b7d236b4e3cf2ae8ed8315d9bcbbf3077086c453ec3bb9a4e086c76c2a1510371284d9e6805ad0aa22e11d443aeff5d1f984d498207b08c9383ac9aef97038a3f34bf37215a923f3771f704fb10541c922d9809fad3d4e094d23cf94aa7ab62629f49ddc71ee207ed6c5dfefa717c57c2861fe7106659f796e521a1e6fd4bffa01d6af8877dec28157e75ae01359ff1b25fc68a7408fd947942eace18e5ff0842b1b4f87916ec503ef8a837f055b3ba00bcab1f6caa3cbdfceeba2e704018e6be5a5ef7cb68ee4dc5dceeb57e71646e93b10a5421924d036beb5ed5ab2c8f70be11bec51a81760"]}, @nested={0x31, 0xe5, 0x0, 0x1, [@generic="8931bbdb12397026262e1b58333b853193ac30fb3b5706d770ce28287b7c3f559f7e25abb9caa75468283c6c6d"]}, @nested={0x8, 0xf1, 0x0, 0x1, [@nested={0x4, 0x133}]}, @generic="1fe480f54937218760463888b21021a7ecc4e1f7080f276f61eaaf8f75ca375733d7265757586c0c5d33b15802ea9bb04e7271e4974c5fe29fe57a54bdd9be34bd0fee26e8c1fb9da7c9402c0fb9b906f6dece131e3ea2c1a9e6421b4476dd", @generic="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", @nested={0x5f, 0x13a, 0x0, 0x1, [@generic="91cd49b7a6252b7e506d8b8d69409e8057b3c443350525a51d019e741574975ec95b6cfb93ff4606362021e16e6fb6ae1a6eef5c7591a31c82412a5ebf3cc0e71b7ae9cf7b64da4ddeaf0afedf0deeade73597aa42602a", @typed={0x4, 0x2d}]}]}, 0x13b4}, {&(0x7f0000003740)={0x10c, 0x26, 0x10, 0x70bd26, 0x25dfdbfc, "", [@nested={0x1e, 0xd8, 0x0, 0x1, [@generic="77ac901d084413079784bb7d09fcbb87f669b3c1cf26", @nested={0x4, 0xfd}]}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0xfffffffffffffffb}, @typed={0xc, 0x109, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x83, 0x0, 0x0, @fd=r2}, @nested={0x28, 0x2b, 0x0, 0x1, [@typed={0x7, 0x149, 0x0, 0x0, @str='!/\x00'}, @typed={0x8, 0xc6, 0x0, 0x0, @u32=0x1ff}, @typed={0xc, 0xfd, 0x0, 0x0, @u64=0x8000000000000001}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r3}]}, @typed={0x94, 0x45, 0x0, 0x0, @binary="d1f7f7744473db4aa0bab4a838c1348194c2f78c4a4f6049415778c94dce07ad1e53e6d382804129abd8dffc9f7c233f56d836137c6256415d79caef7bb986958fd2d6e9d4acbb45ea18fab0066207da54381afa2a69ddbe515c522847c7debfdb94139f2b3bdd08da7b5abdd221bbc8d6960bf87970bead73a4572f4a45cc118f7a5e5c61f046536c946b7e1a3aec37"}]}, 0x10c}, {&(0x7f0000003880)={0x330, 0x30, 0x20, 0x70bd25, 0x25dfdbfc, "", [@generic="0a879c1b7115b28a5f94a78171a4fd194269a41ac6c768bbeb84cf980e799c3c223864f4cd6f2f856b8594fcad7ac873aacefb8773b452c1e09569cb9d083ec485ef9626a1e002227a25d1fd10a8754aff134cf8650826ac783d181129abbbb7797800f0bdbb531c4d35cce05d1d6387dd4ea650787799aabc3dbd5b38c1d530f812e4452e190a5a5eb9e327715320e2f8c6318e3c28d5ee5ac7744276086d93170ce64a3eb91f13081b167dab6c93766ce61c7bd9b420cc61e9328a119b0413e8eceb9b39dbf208853c2b6e19b22f70d597c7fd3e8897f6de", @nested={0x4, 0x3c}, @generic="02d6b7", @nested={0x112, 0xe0, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @u32=0x50}, @typed={0x4, 0x11d}, @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="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"]}, @nested={0x8f, 0x117, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xa7, 0x0, 0x0, @ipv4=@multicast2}, @generic="65f63c4fce744fbdb8e1524d765aee3ec23ce5b37c91ce8d7c7fcec786ee81da97269637cacf4367ad3d8831a71d68ad16bd7a5dad885ac444d033c575e2d33b07afc8913173ed9cbf8aa857d16fba1a73147b8211781c34014a67c94eaa214f6a40d45007b110", @typed={0x6, 0xb3, 0x0, 0x0, @str='!\x00'}]}, @generic="317d06a0ec8c4cbd2d91694046461516983956c6dd8590d9290fec0456c50e2757f7a631699d1d5e19f1b7d4d2f53b7c8fab823721b244ab80202eb89be3fa97e57cba076bbe4b78ae78c132786cdbe4f021dd68d1a261cdcc9ae231bd0bfd920d8687a88fc67b87a3cdab69b58c8fa256ecffd9d0fdf6379571a6c7da7812bbf23c174dae8bfa2c74684e298fc4d942edf9be01", @typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@multicast1}]}, 0x330}], 0x4, &(0x7f0000003bc0)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x30, 0x4000880}, 0x20080d0) 3.234073523s ago: executing program 8 (id=8227): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa000007f) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') 3.185353124s ago: executing program 8 (id=8228): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x40047705, 0x0) 2.309870569s ago: executing program 8 (id=8242): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000580)={0x10}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) read$FUSE(r0, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x10ae) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r5, 0x112, 0x4, 0x0, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000fcb000), 0x4) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) 1.950908636s ago: executing program 9 (id=8248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x402, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$netlink(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000140)={0x100008, 0x10010e, 0x20000, {r1}}, 0x20) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000040)={'\x00', 0x8, 0x2, 0x3}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x20000}], 0x2) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0xb, 0x1a, 0x2b, &(0x7f0000000280)}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000001c0)=0x1, 0x4) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x129200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 1.69595012s ago: executing program 9 (id=8254): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) fchdir(r0) (async, rerun: 32) r3 = getpid() (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async) ioprio_set$pid(0x3, r3, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) sendfile(r4, r4, 0x0, 0x1200000000000) (async) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000000)={0xdddd1000, 0x11000}) (async, rerun: 64) socket(0x11, 0x3, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x84, 0x1, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_PAYLOAD={0x70, 0xa, "ca3cbe8736a7f0588789e8ce110e7cbe1091faa7c3c6d895811358b71b31fc2644001f2e843a7ab2f98857fd9e7db16f62ca43471ca2a52542df4a72e5b8a7e199af6af8166b260bf31c480f0b410ca800ad05db18b7e59c09d9ec957e69621f17fdcebd795e006cc7a7169a"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000084}, 0x20008001) 1.566109992s ago: executing program 9 (id=8257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r2, 0xb812000) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r5) (async, rerun: 64) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xa) (async, rerun: 64) r6 = dup2(r2, r3) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x400}) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 32) getsockopt$bt_BT_POWER(r7, 0x112, 0x4, 0x0, &(0x7f0000000000)) (async) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x30}}, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) eventfd(0x1) (async) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7f, 0x0, r8}) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r11, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) (async) r13 = getpid() syz_pidfd_open(r13, 0x0) (async) fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x2, r13}) (async) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000100)) (async) sendmsg$tipc(r10, &(0x7f0000000500)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008010}, 0x80f5) 1.262363668s ago: executing program 0 (id=8260): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r3 = socket(0x15, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) getdents(r2, &(0x7f00000003c0)=""/4135, 0x1027) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) open$dir(&(0x7f00000011c0)='./file0\x00', 0x4040, 0x3b) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000240)) fcntl$setpipe(r4, 0x407, 0x10ae) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) 1.261954808s ago: executing program 9 (id=8261): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) unshare(0x2040400) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) getpeername$packet(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00000003c0)=""/31, &(0x7f0000000400)=0x1f) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x4d, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x2, 0x46000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000081000/0x400000)=nil) 1.259749917s ago: executing program 8 (id=8262): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7, 0x2b9}, 0x10) r1 = dup(r0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f81900010a00000000030000000600f200b79faad47cd14059fc353bc541000000ff1d6f66e698f2a49a8e7e87edc357b6826ee681a014a8cebe9985a73578caef50cc2dcc44cae7db4ede5490a5c6019d12c8cb87feb4e5a1742108c864828f0754e2fcc29edce67d7ef54f134b6296ea2e20b12bdaa511a7446a87c76d56"], 0x1c}}, 0x8000) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0xfffff000) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000bc0)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00\x00\x00\x00\x00') keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$link(0x8, 0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100001,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) recvmmsg(r7, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002b80)=""/4095, 0xfff}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000008c0)=""/240, 0xf0}], 0x3}, 0x8}], 0x1, 0x12002, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) fcntl$getownex(r10, 0x10, &(0x7f0000003640)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r10, @ANYRESDEC=r6], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r11 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r12, 0x0, 0x0, 0x80800) preadv(r11, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000030000000c0002"], 0x20}}, 0x4000084) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 1.258398128s ago: executing program 3 (id=8263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000) ioctl$EVIOCRMFF(r6, 0x40044581, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="c4020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003040200000008000100", @ANYRES32=r8, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r9 = openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x83f, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r12) syz_fuse_handle_req(r10, &(0x7f00000021c0)="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", 0x2000, &(0x7f000000e600)={&(0x7f0000000180)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x62, 0x10000, 0x4, 0x7, 0x5, 0xfffffff8, 0x0, 0x0, 0x80, 0x6}}, &(0x7f0000000200)={0x18, 0x0, 0x5, {0x1000}}, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x8, {0x2}}, 0x0, &(0x7f0000000440)={0x60, 0x0, 0x3, {{0x6, 0x6890, 0x5, 0x2, 0x6c1, 0x1, 0x1, 0xff}}}, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x78, 0x0, 0x5496, {0xffffffffffff8db9, 0x8c, 0x0, {0x5, 0xffff, 0x2, 0xfffffffffffffffa, 0x7, 0x0, 0x2f7b, 0xf03, 0x1, 0x8000, 0xb4d6, 0x0, 0x0, 0x5, 0x6}}}, &(0x7f0000000c40)={0x90, 0x0, 0x10001, {0xd235, 0x3, 0x0, 0x9, 0x7, 0x64c, {0x4, 0x0, 0x100, 0x3, 0xa7b, 0x7f, 0x9, 0x8000000, 0x1000, 0x2000, 0x2, 0xee00, 0x0, 0xffffffda, 0x80}}}, &(0x7f0000000b00)={0x10, 0xfffffffffffffffe, 0x81}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r9, 0x40043311, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1.037689642s ago: executing program 3 (id=8264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1b5, 0x0, &(0x7f0000000600)="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"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000dc0)={r2, 0x5, 0x0, [0xffff, 0x7f, 0xffff, 0x0, 0x400], [0x7, 0xc4cc, 0x81, 0x1, 0x100000000, 0x7, 0x2, 0x605e2dfc, 0x0, 0xfff, 0x532b86a1, 0x6, 0x7, 0x7, 0x8, 0x8000000000000000, 0x8, 0x1, 0x5d, 0xff, 0x0, 0xa, 0x8, 0x4, 0x7, 0x8000000000000001, 0x1, 0x5, 0x8, 0x2, 0x7, 0x3, 0x7, 0xfffffffffffffff8, 0x2, 0x7, 0x80000000, 0x7, 0xfffe0000, 0x6, 0x4, 0xffffffffffffffff, 0x1, 0x2, 0x8a4, 0xff, 0x4, 0x6, 0x32, 0x38000, 0x100000001, 0x7fffffffffffffff, 0x0, 0x70, 0x6, 0x6b, 0x40, 0x8, 0x9, 0x5, 0x3, 0xfffffffffffffff7, 0x7fff, 0x1, 0x7fffffffffffffff, 0x9, 0xb, 0xec, 0x0, 0x100000000, 0x10, 0x4, 0xa3b6, 0x34c9, 0x400000000000000, 0x647b, 0x81, 0x5, 0xd, 0xe6d, 0x6, 0x8, 0x5, 0x7f, 0x2, 0x8000000000000001, 0x5, 0x3, 0x7, 0x2, 0x7, 0x100, 0x3, 0xb8, 0x5, 0x3, 0xffffffffffff297d, 0x1ff, 0x5, 0x3, 0x8, 0x2, 0x7fff, 0xfffffffffffffffb, 0x4, 0x1200000, 0xdab, 0x0, 0x4, 0x6, 0x8, 0x0, 0x8, 0x401, 0x3303ff99, 0x5, 0x8000000000000001, 0xf, 0x5, 0x0, 0x8]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000008c0)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x44, 0x0, &(0x7f0000000900)=[@reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 943.793473ms ago: executing program 8 (id=8265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="660f388227c4c2a5a9750c0fc7a9060000000f07b9ae0200000f3266baf80cb81a11ae80ef66bafc0c66ed0fc73c2e0f20e035800000000f22e066b815000f00d00f01c3", 0x44}], 0x1, 0x20, &(0x7f0000000200), 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000040)="6049b18cda166476659b2593a09f80ca064b4f9c89d38072b836e9bc09bacdac23f9413cfdcf16dc8296d6f3ac7124f2ecb00f4521a42670") ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xffffffffffffff80, 0x0, &(0x7f00000000c0)=[@decrefs={0x400c6314}, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 931.689933ms ago: executing program 3 (id=8266): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1012) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 896.057154ms ago: executing program 3 (id=8267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x14, 0x5, 0x70bd24, 0x25dfdb7b, {0xa, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "edb7e5a88ce15e9a5f810094ef288b474691b52fe388f0b2ad365b601a2a2a132693ca3719d51ff36517ecf607"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 803.784116ms ago: executing program 3 (id=8268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_SECUREBITS(0x1b) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in6=@private1, 0x4e22, 0x2, 0x4e22, 0x3, 0xa, 0x20, 0xa0, 0x8}, {0x7, 0x11, 0x5, 0x9, 0x7102, 0x5, 0x0, 0x7}, {0x2, 0xffffffff7fffffff, 0x3, 0x8}, 0x1, 0x6e6bba, 0x2, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9f5, 0x4}}, 0xe8) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80000001}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r3, &(0x7f0000000140), 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_GET_SECUREBITS(0x1b) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in6=@private1, 0x4e22, 0x2, 0x4e22, 0x3, 0xa, 0x20, 0xa0, 0x8}, {0x7, 0x11, 0x5, 0x9, 0x7102, 0x5, 0x0, 0x7}, {0x2, 0xffffffff7fffffff, 0x3, 0x8}, 0x1, 0x6e6bba, 0x2, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9f5, 0x4}}, 0xe8) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80000001}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) (async) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') (async) write$tcp_mem(r3, &(0x7f0000000140), 0x48) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0}) (async) 690.373857ms ago: executing program 3 (id=8269): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000539000/0x4000)=nil, 0x4000, 0x300000b, 0x11, r2, 0x45809000) r3 = dup(r1) socket$nl_audit(0x10, 0x3, 0x9) socket$inet(0x2, 0x5, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0xfffffffffffffe7f) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000001c0)={0x8, 0xffffffffffffffff, 0x12}}) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000311ffc)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)={0x2c, 0x12, 0x100, 0xfffffffe, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x9, 0x88, 0x0, 0x1, [@generic="985098a0af"]}]}]}, 0x2c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000053a000/0x4000)=nil, 0x4000}, 0x2}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRES64=r5]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) mmap(&(0x7f000053d000/0x2000)=nil, 0x2000, 0x2, 0x1010, r3, 0xe8641000) write$FUSE_INIT(r3, &(0x7f0000000300)={0x50, 0x0, r6, {0x7, 0x2b, 0x4, 0x0, 0x9, 0xc000, 0xfffff2dd, 0x2, 0x0, 0x0, 0x10, 0x6}}, 0x50) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f0000000140)=0x9) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) fchdir(r0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) 474.227371ms ago: executing program 9 (id=8270): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x208600, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000480)=[{{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r2, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x6e22, 0x2, @empty, 0xb}, 0x1c) listen(r3, 0x204) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0xfffffdca}], 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 347.810114ms ago: executing program 9 (id=8271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1802, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x3d, r2}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000a80)={'filter\x00', 0xb001, 0x4, 0x408, 0x0, 0x110, 0x0, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @broadcast, 0x4}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x16, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="d82d6bab2c9c", {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz1\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000040)={0x800001, r10}) close_range(r0, 0xffffffffffffffff, 0x0) 287.369465ms ago: executing program 0 (id=8272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair(0x26, 0x6, 0xc0000, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x0, 0x0, 0x0}) 241.625816ms ago: executing program 0 (id=8273): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES16=r1, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x2, 0xfffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) 167.565217ms ago: executing program 0 (id=8274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = gettid() wait4(0x0, &(0x7f00000000c0), 0x1000000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xffffffffffffffa4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)) socket(0x2, 0x3, 0xfffffffc) r6 = eventfd2(0x6, 0x80800) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC]) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r9, 0x1, 0x28, &(0x7f0000000080)=0x4, 0x4) read(r9, &(0x7f0000000040)=""/12, 0xc) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000056000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r6, @ANYRES64=r5, @ANYRESOCT], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x800000, r6}) r10 = syz_open_dev$rtc(&(0x7f0000000100), 0x6, 0x501000) ioctl$RTC_UIE_ON(r10, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) 15.483599ms ago: executing program 0 (id=8275): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) ioprio_get$uid(0x3, r1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 0s ago: executing program 0 (id=8276): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x2025, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x20004040) kernel console output (not intermixed with test programs): 436] ? __cfi_try_charge_memcg+0x10/0x10 [ 460.412668][T23436] ? __alloc_pages_noprof+0x30d/0x6c0 [ 460.412695][T23436] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 460.412721][T23436] ? __folio_batch_add_and_move+0x2ab/0x370 [ 460.412748][T23436] __mem_cgroup_charge+0xf6/0x410 [ 460.412779][T23436] ? __kasan_check_write+0x18/0x20 [ 460.412809][T23436] ? _raw_spin_lock+0x8c/0x120 [ 460.412834][T23436] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 460.412866][T23436] shmem_alloc_and_add_folio+0x86d/0x1050 [ 460.412905][T23436] ? put_swap_device+0x130/0x130 [ 460.412940][T23436] ? shmem_huge_global_enabled+0x2da/0x360 [ 460.412977][T23436] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 460.413013][T23436] ? __kasan_check_write+0x18/0x20 [ 460.413043][T23436] ? _raw_spin_lock+0x8c/0x120 [ 460.413072][T23436] shmem_get_folio_gfp+0x5f0/0x1380 [ 460.413109][T23436] ? shmem_get_folio+0xc0/0xc0 [ 460.413143][T23436] ? follow_page_pte+0xa5c/0xb90 [ 460.413170][T23436] ? inode_to_bdi+0x6d/0x100 [ 460.413198][T23436] shmem_write_begin+0xf4/0x270 [ 460.413237][T23436] generic_perform_write+0x330/0x960 [ 460.413269][T23436] ? __cfi_generic_perform_write+0x10/0x10 [ 460.413297][T23436] ? down_write+0xe9/0x2a0 [ 460.413330][T23436] ? file_update_time+0xa3/0x220 [ 460.413373][T23436] shmem_file_write_iter+0x105/0x130 [ 460.413400][T23436] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 460.413427][T23436] __kernel_write_iter+0x395/0x830 [ 460.413460][T23436] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 460.413487][T23436] ? __cfi___kernel_write_iter+0x10/0x10 [ 460.413518][T23436] ? get_dump_page+0x160/0x220 [ 460.413543][T23436] ? __asan_memset+0x39/0x50 [ 460.413572][T23436] ? iov_iter_bvec+0xc0/0x180 [ 460.413608][T23436] dump_user_range+0xb06/0xdf0 [ 460.413648][T23436] ? __cfi_dump_emit+0x10/0x10 [ 460.413679][T23436] ? __cfi_dump_user_range+0x10/0x10 [ 460.413711][T23436] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 460.413744][T23436] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 460.413777][T23436] elf_core_dump+0x2cd9/0x3810 [ 460.413804][T23436] ? __cfi_elf_core_dump+0x10/0x10 [ 460.413834][T23436] ? dump_interrupted+0xf0/0xf0 [ 460.413864][T23436] ? filp_open+0x182/0x1d0 [ 460.413890][T23436] ? 0xffffffffff600000 [ 460.413909][T23436] ? freezing_slow_path+0x113/0x160 [ 460.413940][T23436] do_coredump+0x1bfa/0x2bd0 [ 460.413975][T23436] ? __cfi_do_coredump+0x10/0x10 [ 460.414004][T23436] ? asm_exc_page_fault+0x2b/0x30 [ 460.414045][T23436] ? __kasan_slab_free+0x6a/0x80 [ 460.414080][T23436] ? kmem_cache_free+0x1c1/0x510 [ 460.414112][T23436] ? get_signal+0xa75/0x14f0 [ 460.414139][T23436] get_signal+0x11fd/0x14f0 [ 460.414169][T23436] arch_do_signal_or_restart+0x96/0x720 [ 460.414203][T23436] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 460.414241][T23436] irqentry_exit_to_user_mode+0x4e/0xb0 [ 460.414279][T23436] irqentry_exit+0x16/0x60 [ 460.414312][T23436] exc_page_fault+0x66/0xc0 [ 460.414347][T23436] asm_exc_page_fault+0x2b/0x30 [ 460.414385][T23436] RIP: 0033:0x2000000011b1 [ 460.414407][T23436] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.414428][T23436] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 460.414453][T23436] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 460.414472][T23436] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 460.414490][T23436] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 460.414510][T23436] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 460.414526][T23436] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 460.414547][T23436] [ 460.857069][ T411] wacom 0003:056A:0217.0023: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 460.960066][T23436] memory: usage 290164kB, limit 307200kB, failcnt 19229 [ 460.967581][T23436] memory+swap: usage 408760kB, limit 9007199254740988kB, failcnt 0 [ 460.976195][T23436] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 460.983105][T23436] Memory cgroup stats for /syz8: [ 460.983282][T23436] cache 296865792 [ 460.991893][T23436] rss 229376 [ 460.995104][T23436] rss_huge 0 [ 460.998319][T23436] shmem 296865792 [ 461.001998][T23436] mapped_file 0 [ 461.005474][T23436] dirty 0 [ 461.008430][T23436] writeback 0 [ 461.011753][T23436] workingset_refault_anon 178 [ 461.016558][T23436] workingset_refault_file 0 [ 461.021088][T23436] swap 121442304 [ 461.024680][T23436] swapcached 32768 [ 461.028431][T23436] pgpgin 678527 [ 461.031904][T23436] pgpgout 607519 [ 461.035501][T23436] pgfault 415583 [ 461.039071][T23436] pgmajfault 44 [ 461.042545][T23436] inactive_anon 269565952 [ 461.047018][T23436] active_anon 27561984 [ 461.051103][T23436] inactive_file 0 [ 461.054781][T23436] active_file 0 [ 461.058256][T23436] unevictable 0 [ 461.061731][T23436] hierarchical_memory_limit 314572800 [ 461.067159][T23436] hierarchical_memsw_limit 9223372036854771712 [ 461.073333][T23436] total_cache 296865792 [ 461.077772][T23436] total_rss 229376 [ 461.081530][T23436] total_rss_huge 0 [ 461.085272][T23436] total_shmem 296865792 [ 461.089505][T23436] total_mapped_file 0 [ 461.093510][T23436] total_dirty 0 [ 461.096996][T23436] total_writeback 0 [ 461.100855][T23436] total_workingset_refault_anon 178 [ 461.106075][T23436] total_workingset_refault_file 0 [ 461.111445][T23436] total_swap 121442304 [ 461.115561][T23436] total_swapcached 32768 [ 461.119871][T23436] total_pgpgin 678527 [ 461.123888][T23436] total_pgpgout 607519 [ 461.128127][T23436] total_pgfault 415583 [ 461.132306][T23436] total_pgmajfault 44 [ 461.136605][T23436] total_inactive_anon 269565952 [ 461.141804][T23436] total_active_anon 27561984 [ 461.146464][T23436] total_inactive_file 0 [ 461.150670][T23436] total_active_file 0 [ 461.154731][T23436] total_unevictable 0 [ 461.158743][T23436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23453,uid=0 [ 461.173767][T23436] Memory cgroup out of memory: Killed process 23453 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:49920kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 461.221302][ T411] usb 1-1: USB disconnect, device number 63 [ 461.387877][T23438] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 461.439676][T23438] CPU: 0 UID: 0 PID: 23438 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 461.439720][T23438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.439736][T23438] Call Trace: [ 461.439744][T23438] [ 461.439755][T23438] __dump_stack+0x21/0x30 [ 461.439789][T23438] dump_stack_lvl+0x10c/0x190 [ 461.439817][T23438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 461.439846][T23438] ? ___ratelimit+0x3f7/0x5a0 [ 461.439877][T23438] dump_stack+0x19/0x20 [ 461.439910][T23438] dump_header+0xd7/0x490 [ 461.439945][T23438] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 461.439971][T23438] oom_kill_process+0x4c0/0x7e0 [ 461.439995][T23438] ? sched_clock_cpu+0x75/0x400 [ 461.440024][T23438] out_of_memory+0x7ee/0xbd0 [ 461.440047][T23438] ? __cfi_out_of_memory+0x10/0x10 [ 461.440069][T23438] ? mutex_lock_killable+0x92/0x1c0 [ 461.440103][T23438] ? __cfi_mutex_lock_killable+0x10/0x10 [ 461.440143][T23438] mem_cgroup_out_of_memory+0x279/0x350 [ 461.440176][T23438] ? drain_obj_stock+0xed0/0xed0 [ 461.440209][T23438] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 461.440242][T23438] try_charge_memcg+0x8f7/0xde0 [ 461.440269][T23438] ? __cfi_try_charge_memcg+0x10/0x10 [ 461.440296][T23438] ? __alloc_pages_noprof+0x30d/0x6c0 [ 461.440332][T23438] ? folio_add_new_anon_rmap+0x475/0x910 [ 461.440366][T23438] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 461.440393][T23438] __mem_cgroup_charge+0xf6/0x410 [ 461.440423][T23438] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 461.440455][T23438] shmem_alloc_and_add_folio+0x86d/0x1050 [ 461.440495][T23438] ? put_swap_device+0x130/0x130 [ 461.440532][T23438] ? shmem_huge_global_enabled+0x2da/0x360 [ 461.440568][T23438] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 461.440602][T23438] ? __kasan_check_write+0x18/0x20 [ 461.440631][T23438] ? _raw_spin_lock+0x8c/0x120 [ 461.440655][T23438] shmem_get_folio_gfp+0x5f0/0x1380 [ 461.440688][T23438] ? shmem_get_folio+0xc0/0xc0 [ 461.440718][T23438] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 461.440745][T23438] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 461.440774][T23438] ? inode_to_bdi+0x6d/0x100 [ 461.440801][T23438] shmem_write_begin+0xf4/0x270 [ 461.440839][T23438] generic_perform_write+0x330/0x960 [ 461.440870][T23438] ? __cfi_generic_perform_write+0x10/0x10 [ 461.440899][T23438] ? down_write+0xe9/0x2a0 [ 461.440932][T23438] ? mnt_get_write_access_file+0x1af/0x3b0 [ 461.440958][T23438] ? mnt_put_write_access_file+0xc2/0x100 [ 461.440985][T23438] ? file_update_time+0x1ef/0x220 [ 461.441013][T23438] shmem_file_write_iter+0x105/0x130 [ 461.441039][T23438] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 461.441065][T23438] __kernel_write_iter+0x395/0x830 [ 461.441097][T23438] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 461.441123][T23438] ? __cfi___kernel_write_iter+0x10/0x10 [ 461.441156][T23438] ? __asan_memset+0x39/0x50 [ 461.441184][T23438] ? iov_iter_bvec+0xc0/0x180 [ 461.441220][T23438] dump_user_range+0xb06/0xdf0 [ 461.441253][T23438] ? __cfi_dump_emit+0x10/0x10 [ 461.441283][T23438] ? __cfi_dump_user_range+0x10/0x10 [ 461.441322][T23438] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 461.441355][T23438] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 461.441386][T23438] elf_core_dump+0x2cd9/0x3810 [ 461.441410][T23438] ? __cfi_elf_core_dump+0x10/0x10 [ 461.441437][T23438] ? dump_interrupted+0xf0/0xf0 [ 461.441466][T23438] ? filp_open+0x182/0x1d0 [ 461.441492][T23438] ? 0xffffffffff600000 [ 461.441512][T23438] ? freezing_slow_path+0x113/0x160 [ 461.441544][T23438] do_coredump+0x1bfa/0x2bd0 [ 461.441579][T23438] ? __cfi_do_coredump+0x10/0x10 [ 461.441609][T23438] ? asm_exc_page_fault+0x2b/0x30 [ 461.441652][T23438] ? __kasan_slab_free+0x6a/0x80 [ 461.441687][T23438] ? kmem_cache_free+0x1c1/0x510 [ 461.441719][T23438] ? get_signal+0xa75/0x14f0 [ 461.441748][T23438] get_signal+0x11fd/0x14f0 [ 461.441778][T23438] arch_do_signal_or_restart+0x96/0x720 [ 461.441812][T23438] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 461.441849][T23438] irqentry_exit_to_user_mode+0x4e/0xb0 [ 461.441887][T23438] irqentry_exit+0x16/0x60 [ 461.441922][T23438] exc_page_fault+0x66/0xc0 [ 461.441957][T23438] asm_exc_page_fault+0x2b/0x30 [ 461.441987][T23438] RIP: 0033:0x2000000011b1 [ 461.442009][T23438] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 461.442032][T23438] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 461.442056][T23438] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 461.442076][T23438] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 461.442095][T23438] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 461.442115][T23438] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 461.442133][T23438] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 461.442155][T23438] [ 461.442166][T23438] memory: usage 304476kB, limit 307200kB, failcnt 20742 [ 462.002556][T23563] rust_binder: 1217: no such ref 4294967294 [ 462.059867][T23563] rust_binder: 1217: no such ref 2 [ 462.065053][T23563] rust_binder: 1217: no such ref 4 [ 462.070203][T23563] rust_binder: Write failure EINVAL in pid:1217 [ 462.273038][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 462.273060][ T36] audit: type=1400 audit(1999997509.147:1525): avc: denied { accept } for pid=23559 comm="syz.0.7642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.366307][T23438] memory+swap: usage 411928kB, limit 9007199254740988kB, failcnt 0 [ 462.401136][T23438] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 462.409591][T23575] veth0_vlan: entered allmulticast mode [ 462.423158][T23438] Memory cgroup stats for /syz8: [ 462.423337][T23438] cache 294125568 [ 462.439212][T23438] rss 241664 [ 462.442533][T23438] rss_huge 0 [ 462.446064][T23438] shmem 294125568 [ 462.449821][T23438] mapped_file 0 [ 462.453367][T23438] dirty 0 [ 462.456907][T23438] writeback 0 [ 462.460253][T23438] workingset_refault_anon 181 [ 462.465003][T23438] workingset_refault_file 0 [ 462.471087][T23438] swap 127311872 [ 462.474713][T23438] swapcached 143360 [ 462.478893][T23438] pgpgin 686648 [ 462.482653][T23438] pgpgout 616281 [ 462.486704][T23438] pgfault 416110 [ 462.495390][T23438] pgmajfault 47 [ 462.499847][T23438] inactive_anon 48304128 [ 462.504200][T23438] active_anon 246198272 [ 462.508524][T23438] inactive_file 0 [ 462.519379][T23438] active_file 0 [ 462.525058][T23438] unevictable 0 [ 462.528855][T23438] hierarchical_memory_limit 314572800 [ 462.534986][T23438] hierarchical_memsw_limit 9223372036854771712 [ 462.541378][T23438] total_cache 294125568 [ 462.546349][T23587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1229 [ 462.546593][T23438] total_rss 241664 [ 462.565074][T23438] total_rss_huge 0 [ 462.568849][T23438] total_shmem 294125568 [ 462.573119][T23438] total_mapped_file 0 [ 462.577228][T23438] total_dirty 0 [ 462.577225][ T411] rust_binder: 23578: removing orphan mapping 0:1024 [ 462.587547][T23438] total_writeback 0 [ 462.591535][T23438] total_workingset_refault_anon 181 [ 462.592974][ T36] audit: type=1400 audit(1999997509.446:1526): avc: denied { unlink } for pid=23590 comm="syz.3.7651" name="#105" dev="tmpfs" ino=2275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.602327][T23438] total_workingset_refault_file 0 [ 462.622146][T23591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32814 sclass=netlink_route_socket pid=23591 comm=syz.3.7651 [ 462.646672][T23438] total_swap 127311872 [ 462.651063][T23438] total_swapcached 143360 [ 462.655617][T23438] total_pgpgin 686648 [ 462.659992][T23438] total_pgpgout 616281 [ 462.664245][T23438] total_pgfault 416110 [ 462.669051][T23438] total_pgmajfault 47 [ 462.674222][T23438] total_inactive_anon 48304128 [ 462.681080][T23438] total_active_anon 246198272 [ 462.686036][T23438] total_inactive_file 0 [ 462.690547][T23438] total_active_file 0 [ 462.694547][T23438] total_unevictable 0 [ 462.709020][T23438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23438,uid=0 [ 462.710576][T23595] rust_binder: Read failure Err(EAGAIN) in pid:437 [ 462.724524][T23438] Memory cgroup out of memory: Killed process 23438 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 462.766441][ T36] audit: type=1400 audit(1999997509.614:1527): avc: denied { mounton } for pid=23597 comm="syz.7.7655" path="/139/file0" dev="ramfs" ino=94045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 462.775707][T23601] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 462.874015][T23440] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 462.892281][T23601] rust_binder: Read failure Err(EFAULT) in pid:959 [ 462.913527][ T36] audit: type=1400 audit(1999997509.745:1528): avc: denied { append } for pid=23603 comm="syz.7.7656" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 462.930123][T23440] CPU: 1 UID: 0 PID: 23440 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 462.930171][T23440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.930189][T23440] Call Trace: [ 462.930198][T23440] [ 462.930208][T23440] __dump_stack+0x21/0x30 [ 462.930256][T23440] dump_stack_lvl+0x10c/0x190 [ 462.930286][T23440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 462.930316][T23440] ? ___ratelimit+0x3f7/0x5a0 [ 462.930350][T23440] dump_stack+0x19/0x20 [ 462.930379][T23440] dump_header+0xd7/0x490 [ 462.930417][T23440] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 462.930446][T23440] oom_kill_process+0x4c0/0x7e0 [ 462.930470][T23440] ? sched_clock_cpu+0x75/0x400 [ 462.930502][T23440] out_of_memory+0x7ee/0xbd0 [ 462.930527][T23440] ? __cfi_out_of_memory+0x10/0x10 [ 462.930552][T23440] ? mutex_lock_killable+0x104/0x1c0 [ 462.930589][T23440] ? __cfi_mutex_lock_killable+0x10/0x10 [ 462.930627][T23440] mem_cgroup_out_of_memory+0x279/0x350 [ 462.930663][T23440] ? drain_obj_stock+0xed0/0xed0 [ 462.930699][T23440] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 462.930734][T23440] try_charge_memcg+0x8f7/0xde0 [ 462.930763][T23440] ? __cfi_try_charge_memcg+0x10/0x10 [ 462.930792][T23440] ? __alloc_pages_noprof+0x30d/0x6c0 [ 462.930821][T23440] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 462.930849][T23440] ? __folio_batch_add_and_move+0x2fe/0x370 [ 462.930876][T23440] __mem_cgroup_charge+0xf6/0x410 [ 462.930909][T23440] ? __kasan_check_write+0x18/0x20 [ 462.930940][T23440] ? _raw_spin_lock+0x8c/0x120 [ 462.930967][T23440] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 462.931002][T23440] shmem_alloc_and_add_folio+0x86d/0x1050 [ 462.931046][T23440] ? put_swap_device+0x130/0x130 [ 462.931085][T23440] ? shmem_huge_global_enabled+0x2da/0x360 [ 462.931144][T23440] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 462.931182][T23440] ? __kasan_check_write+0x18/0x20 [ 462.931219][T23440] ? _raw_spin_lock+0x8c/0x120 [ 462.931247][T23440] shmem_get_folio_gfp+0x5f0/0x1380 [ 462.931286][T23440] ? shmem_get_folio+0xc0/0xc0 [ 462.931321][T23440] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 462.931354][T23440] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 462.931386][T23440] ? inode_to_bdi+0x6d/0x100 [ 462.931418][T23440] shmem_write_begin+0xf4/0x270 [ 462.931460][T23440] generic_perform_write+0x330/0x960 [ 462.931494][T23440] ? __cfi_generic_perform_write+0x10/0x10 [ 462.931525][T23440] ? down_write+0xe9/0x2a0 [ 462.931562][T23440] ? mnt_get_write_access_file+0x1af/0x3b0 [ 462.931590][T23440] ? mnt_put_write_access_file+0xc2/0x100 [ 462.931618][T23440] ? file_update_time+0x1ef/0x220 [ 462.931649][T23440] shmem_file_write_iter+0x105/0x130 [ 462.931677][T23440] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 462.931705][T23440] __kernel_write_iter+0x395/0x830 [ 462.931738][T23440] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 462.931768][T23440] ? __cfi___kernel_write_iter+0x10/0x10 [ 462.931801][T23440] ? get_dump_page+0x160/0x220 [ 462.931827][T23440] ? __asan_memset+0x39/0x50 [ 462.931857][T23440] ? iov_iter_bvec+0xc0/0x180 [ 462.931897][T23440] dump_user_range+0xb06/0xdf0 [ 462.931933][T23440] ? __cfi_dump_emit+0x10/0x10 [ 462.931964][T23440] ? __cfi_dump_user_range+0x10/0x10 [ 462.931999][T23440] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 462.932033][T23440] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 462.932068][T23440] elf_core_dump+0x2cd9/0x3810 [ 462.932097][T23440] ? __cfi_elf_core_dump+0x10/0x10 [ 462.932129][T23440] ? dump_interrupted+0xf0/0xf0 [ 462.932161][T23440] ? filp_open+0x182/0x1d0 [ 462.932189][T23440] ? 0xffffffffff600000 [ 462.932208][T23440] ? freezing_slow_path+0x113/0x160 [ 462.932247][T23440] do_coredump+0x1bfa/0x2bd0 [ 462.932283][T23440] ? __cfi_do_coredump+0x10/0x10 [ 462.932315][T23440] ? asm_exc_page_fault+0x2b/0x30 [ 462.932357][T23440] ? __kasan_slab_free+0x6a/0x80 [ 462.932395][T23440] ? kmem_cache_free+0x1c1/0x510 [ 462.932427][T23440] ? get_signal+0xa75/0x14f0 [ 462.932456][T23440] get_signal+0x11fd/0x14f0 [ 462.932487][T23440] arch_do_signal_or_restart+0x96/0x720 [ 462.932523][T23440] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 462.932562][T23440] irqentry_exit_to_user_mode+0x4e/0xb0 [ 462.932601][T23440] irqentry_exit+0x16/0x60 [ 462.932637][T23440] exc_page_fault+0x66/0xc0 [ 462.932675][T23440] asm_exc_page_fault+0x2b/0x30 [ 462.932706][T23440] RIP: 0033:0x2000000011b1 [ 462.932727][T23440] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 462.932751][T23440] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 462.932778][T23440] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 462.932799][T23440] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 462.932821][T23440] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 462.932841][T23440] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 462.932859][T23440] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 462.932883][T23440] [ 462.932893][T23440] memory: usage 307192kB, limit 307200kB, failcnt 21153 [ 463.075331][ T8815] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 463.080346][T23440] memory+swap: usage 399112kB, limit 9007199254740988kB, failcnt 0 [ 463.271981][ T8815] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 463.277489][T23440] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 463.296223][ T8815] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 463.300817][T23440] Memory cgroup stats for [ 463.309628][ T8815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 463.310619][T23440] /syz8 [ 463.324389][ T8815] usb 4-1: config 1 has no interface number 0 [ 463.325321][T23440] : [ 463.329770][ T8815] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 463.341631][T23440] cache 287600640 [ 463.353353][ T8815] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 463.356203][T23440] rss 229376 [ 463.360854][ T8815] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 463.365420][T23440] rss_huge 0 [ 463.385404][ T8815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.391221][T23440] shmem 287600640 [ 463.560245][T23440] mapped_file 0 [ 463.563728][T23440] dirty 0 [ 463.566818][T23440] writeback 0 [ 463.570186][T23440] workingset_refault_anon 181 [ 463.574890][T23440] workingset_refault_file 0 [ 463.579453][T23440] swap 120827904 [ 463.583132][T23440] swapcached 32768 [ 463.588445][T23440] pgpgin 691727 [ 463.592022][T23440] pgpgout 622981 [ 463.595583][T23440] pgfault 416428 [ 463.599382][T23440] pgmajfault 47 [ 463.603673][T23440] inactive_anon 55275520 [ 463.608072][T23440] active_anon 232587264 [ 463.612331][T23440] inactive_file 0 [ 463.616224][T23440] active_file 0 [ 463.619738][T23440] unevictable 0 [ 463.623425][T23440] hierarchical_memory_limit 314572800 [ 463.624553][ T36] audit: type=1400 audit(1999997510.419:1529): avc: denied { getopt } for pid=23622 comm="syz.8.7662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 463.628923][T23440] hierarchical_memsw_limit 9223372036854771712 [ 463.657335][T23440] total_cache 287600640 [ 463.661650][T23440] total_rss 229376 [ 463.661896][ T36] audit: type=1400 audit(1999997510.447:1530): avc: denied { map } for pid=23622 comm="syz.8.7662" path="socket:[94137]" dev="sockfs" ino=94137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.665506][T23440] total_rss_huge 0 [ 463.709615][T23440] total_shmem 287600640 [ 463.713905][T23440] total_mapped_file 0 [ 463.715890][ T36] audit: type=1400 audit(1999997510.447:1531): avc: denied { read } for pid=23622 comm="syz.8.7662" path="socket:[94137]" dev="sockfs" ino=94137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 463.723271][T23440] total_dirty 0 [ 463.742193][ T36] audit: type=1400 audit(1999997510.475:1532): avc: denied { map } for pid=23622 comm="syz.8.7662" path="socket:[94351]" dev="sockfs" ino=94351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 463.744878][T23630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.768674][T23440] total_writeback 0 [ 463.780302][T23630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.780379][T23440] total_workingset_refault_anon 181 [ 463.796764][T23440] total_workingset_refault_file 0 [ 463.802821][T23440] total_swap 120827904 [ 463.807879][T23440] total_swapcached 32768 [ 463.812289][T23440] total_pgpgin 691727 [ 463.818018][T23440] total_pgpgout 622981 [ 463.822540][T23440] total_pgfault 416428 [ 463.826981][T23440] total_pgmajfault 47 [ 463.831138][T23440] total_inactive_anon 55275520 [ 463.837305][T23440] total_active_anon 232587264 [ 463.842008][T23440] total_inactive_file 0 [ 463.846275][T23440] total_active_file 0 [ 463.850291][T23440] total_unevictable 0 [ 463.854274][T23440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23430,uid=0 [ 463.869241][T23440] Memory cgroup out of memory: Killed process 23430 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:51584kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 464.106848][T23444] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 464.152881][T23444] CPU: 1 UID: 0 PID: 23444 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 464.152928][T23444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.152944][T23444] Call Trace: [ 464.152954][T23444] [ 464.152965][T23444] __dump_stack+0x21/0x30 [ 464.153002][T23444] dump_stack_lvl+0x10c/0x190 [ 464.153030][T23444] ? __cfi_dump_stack_lvl+0x10/0x10 [ 464.153058][T23444] ? ___ratelimit+0x3f7/0x5a0 [ 464.153091][T23444] dump_stack+0x19/0x20 [ 464.153118][T23444] dump_header+0xd7/0x490 [ 464.153155][T23444] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 464.153181][T23444] oom_kill_process+0x4c0/0x7e0 [ 464.153205][T23444] ? sched_clock_cpu+0x75/0x400 [ 464.153235][T23444] out_of_memory+0x7ee/0xbd0 [ 464.153259][T23444] ? __cfi_out_of_memory+0x10/0x10 [ 464.153281][T23444] ? mutex_lock_killable+0x92/0x1c0 [ 464.153316][T23444] ? __cfi_mutex_lock_killable+0x10/0x10 [ 464.153363][T23444] mem_cgroup_out_of_memory+0x279/0x350 [ 464.153397][T23444] ? drain_obj_stock+0xed0/0xed0 [ 464.153432][T23444] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 464.153465][T23444] try_charge_memcg+0x8f7/0xde0 [ 464.153494][T23444] ? __cfi_try_charge_memcg+0x10/0x10 [ 464.153522][T23444] ? __alloc_pages_noprof+0x30d/0x6c0 [ 464.153551][T23444] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 464.153577][T23444] ? __folio_batch_add_and_move+0x2ab/0x370 [ 464.153604][T23444] __mem_cgroup_charge+0xf6/0x410 [ 464.153634][T23444] ? __kasan_check_write+0x18/0x20 [ 464.153670][T23444] ? _raw_spin_lock+0x8c/0x120 [ 464.153695][T23444] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 464.153728][T23444] shmem_alloc_and_add_folio+0x86d/0x1050 [ 464.153769][T23444] ? put_swap_device+0x130/0x130 [ 464.153806][T23444] ? shmem_huge_global_enabled+0x2da/0x360 [ 464.153842][T23444] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 464.153878][T23444] ? __kasan_check_write+0x18/0x20 [ 464.153908][T23444] ? _raw_spin_lock+0x8c/0x120 [ 464.153933][T23444] shmem_get_folio_gfp+0x5f0/0x1380 [ 464.153972][T23444] ? shmem_get_folio+0xc0/0xc0 [ 464.154005][T23444] ? follow_page_pte+0xa5c/0xb90 [ 464.154031][T23444] ? inode_to_bdi+0x6d/0x100 [ 464.154059][T23444] shmem_write_begin+0xf4/0x270 [ 464.154094][T23444] generic_perform_write+0x330/0x960 [ 464.154125][T23444] ? __cfi_generic_perform_write+0x10/0x10 [ 464.154150][T23444] ? down_write+0xe9/0x2a0 [ 464.154183][T23444] ? file_update_time+0xa3/0x220 [ 464.154209][T23444] shmem_file_write_iter+0x105/0x130 [ 464.154233][T23444] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 464.154256][T23444] __kernel_write_iter+0x395/0x830 [ 464.154286][T23444] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 464.154313][T23444] ? __cfi___kernel_write_iter+0x10/0x10 [ 464.154350][T23444] ? get_dump_page+0x160/0x220 [ 464.154374][T23444] ? __asan_memset+0x39/0x50 [ 464.154402][T23444] ? iov_iter_bvec+0xc0/0x180 [ 464.154438][T23444] dump_user_range+0xb06/0xdf0 [ 464.154471][T23444] ? __cfi_dump_emit+0x10/0x10 [ 464.154499][T23444] ? __cfi_dump_user_range+0x10/0x10 [ 464.154528][T23444] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 464.154559][T23444] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 464.154593][T23444] elf_core_dump+0x2cd9/0x3810 [ 464.154619][T23444] ? __cfi_elf_core_dump+0x10/0x10 [ 464.154650][T23444] ? dump_interrupted+0xf0/0xf0 [ 464.154680][T23444] ? filp_open+0x182/0x1d0 [ 464.154709][T23444] ? 0xffffffffff600000 [ 464.154728][T23444] ? freezing_slow_path+0x113/0x160 [ 464.154757][T23444] do_coredump+0x1bfa/0x2bd0 [ 464.154788][T23444] ? __cfi_do_coredump+0x10/0x10 [ 464.154816][T23444] ? asm_exc_page_fault+0x2b/0x30 [ 464.154854][T23444] ? __kasan_slab_free+0x6a/0x80 [ 464.154889][T23444] ? kmem_cache_free+0x1c1/0x510 [ 464.154918][T23444] ? get_signal+0xa75/0x14f0 [ 464.154944][T23444] get_signal+0x11fd/0x14f0 [ 464.154974][T23444] arch_do_signal_or_restart+0x96/0x720 [ 464.155007][T23444] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 464.155040][T23444] irqentry_exit_to_user_mode+0x4e/0xb0 [ 464.155075][T23444] irqentry_exit+0x16/0x60 [ 464.155109][T23444] exc_page_fault+0x66/0xc0 [ 464.155142][T23444] asm_exc_page_fault+0x2b/0x30 [ 464.155172][T23444] RIP: 0033:0x2000000011b1 [ 464.155193][T23444] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 464.155215][T23444] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 464.155239][T23444] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 464.155258][T23444] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 464.155276][T23444] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 464.155295][T23444] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 464.155312][T23444] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 464.155342][T23444] [ 464.761807][T23444] memory: usage 307036kB, limit 307200kB, failcnt 23727 [ 464.775607][T23651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.775766][T23651] rust_binder: Error while translating object. [ 464.782536][T23444] memory+swap: usage 427408kB, limit 9007199254740988kB, failcnt 0 [ 464.796778][T23444] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 464.803662][T23444] Memory cgroup stats for /syz8: [ 464.803830][T23444] cache 314310656 [ 464.812473][T23444] rss 200704 [ 464.815694][T23444] rss_huge 0 [ 464.817256][T23651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 464.818978][T23444] shmem 314310656 [ 464.818990][T23444] mapped_file 0 [ 464.818998][T23444] dirty 0 [ 464.819007][T23444] writeback 0 [ 464.819015][T23444] workingset_refault_anon 191 [ 464.819026][T23444] workingset_refault_file 0 [ 464.851097][T23444] swap 123629568 [ 464.854666][T23444] swapcached 65536 [ 464.858407][T23444] pgpgin 709753 [ 464.861908][T23444] pgpgout 634490 [ 464.865471][T23444] pgfault 420493 [ 464.869034][T23444] pgmajfault 57 [ 464.872567][T23444] inactive_anon 259162112 [ 464.877087][T23444] active_anon 54349824 [ 464.881256][T23444] inactive_file 0 [ 464.884947][T23444] active_file 0 [ 464.888428][T23444] unevictable 0 [ 464.891908][T23444] hierarchical_memory_limit 314572800 [ 464.897422][T23444] hierarchical_memsw_limit 9223372036854771712 [ 464.903614][T23444] total_cache 314310656 [ 464.907791][T23444] total_rss 200704 [ 464.911527][T23444] total_rss_huge 0 [ 464.915305][T23444] total_shmem 314310656 [ 464.919490][T23444] total_mapped_file 0 [ 464.920227][T23651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:467 [ 464.923481][T23444] total_dirty 0 [ 464.923494][T23444] total_writeback 0 [ 464.923505][T23444] total_workingset_refault_anon 191 [ 464.945454][T23444] total_workingset_refault_file 0 [ 464.950627][T23444] total_swap 123629568 [ 464.954716][T23444] total_swapcached 65536 [ 464.958997][T23444] total_pgpgin 709753 [ 464.963000][T23444] total_pgpgout 634490 [ 464.967084][T23444] total_pgfault 420493 [ 464.971289][T23444] total_pgmajfault 57 [ 464.975292][T23444] total_inactive_anon 259162112 [ 464.980173][T23444] total_active_anon 54349824 [ 464.984777][T23444] total_inactive_file 0 [ 464.988965][T23444] total_active_file 0 [ 464.993013][T23444] total_unevictable 0 [ 464.997010][T23444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23428,uid=0 [ 465.012133][T23444] Memory cgroup out of memory: Killed process 23428 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 465.058147][T23445] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 465.149551][T23445] CPU: 1 UID: 0 PID: 23445 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 465.149592][T23445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.149609][T23445] Call Trace: [ 465.149618][T23445] [ 465.149628][T23445] __dump_stack+0x21/0x30 [ 465.149665][T23445] dump_stack_lvl+0x10c/0x190 [ 465.149695][T23445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 465.149725][T23445] ? ___ratelimit+0x3f7/0x5a0 [ 465.149757][T23445] dump_stack+0x19/0x20 [ 465.149786][T23445] dump_header+0xd7/0x490 [ 465.149822][T23445] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 465.149849][T23445] oom_kill_process+0x4c0/0x7e0 [ 465.149873][T23445] ? sched_clock_cpu+0x75/0x400 [ 465.149903][T23445] out_of_memory+0x7ee/0xbd0 [ 465.149927][T23445] ? __cfi_out_of_memory+0x10/0x10 [ 465.149950][T23445] ? mutex_lock_killable+0x104/0x1c0 [ 465.149985][T23445] ? __cfi_mutex_lock_killable+0x10/0x10 [ 465.150031][T23445] mem_cgroup_out_of_memory+0x279/0x350 [ 465.150065][T23445] ? drain_obj_stock+0xed0/0xed0 [ 465.150101][T23445] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 465.150133][T23445] try_charge_memcg+0x8f7/0xde0 [ 465.150163][T23445] ? __cfi_try_charge_memcg+0x10/0x10 [ 465.150190][T23445] ? __alloc_pages_noprof+0x30d/0x6c0 [ 465.150218][T23445] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 465.150247][T23445] __mem_cgroup_charge+0xf6/0x410 [ 465.150278][T23445] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 465.150311][T23445] shmem_alloc_and_add_folio+0x86d/0x1050 [ 465.150350][T23445] ? __rcu_read_unlock+0xc0/0xc0 [ 465.150377][T23445] ? put_swap_device+0x130/0x130 [ 465.150414][T23445] ? shmem_huge_global_enabled+0x2da/0x360 [ 465.150451][T23445] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 465.150486][T23445] ? __kasan_check_write+0x18/0x20 [ 465.150516][T23445] ? _raw_spin_lock+0x8c/0x120 [ 465.150543][T23445] shmem_get_folio_gfp+0x5f0/0x1380 [ 465.150581][T23445] ? shmem_get_folio+0xc0/0xc0 [ 465.150614][T23445] ? follow_page_pte+0xa5c/0xb90 [ 465.150640][T23445] ? inode_to_bdi+0x6d/0x100 [ 465.150668][T23445] shmem_write_begin+0xf4/0x270 [ 465.150705][T23445] generic_perform_write+0x330/0x960 [ 465.150736][T23445] ? __cfi_generic_perform_write+0x10/0x10 [ 465.150764][T23445] ? down_write+0xe9/0x2a0 [ 465.150799][T23445] ? file_update_time+0xa3/0x220 [ 465.150825][T23445] shmem_file_write_iter+0x105/0x130 [ 465.150851][T23445] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 465.150886][T23445] __kernel_write_iter+0x395/0x830 [ 465.150937][T23445] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 465.150964][T23445] ? __cfi___kernel_write_iter+0x10/0x10 [ 465.151000][T23445] ? get_dump_page+0x160/0x220 [ 465.151024][T23445] ? __asan_memset+0x39/0x50 [ 465.151053][T23445] ? iov_iter_bvec+0xc0/0x180 [ 465.151088][T23445] dump_user_range+0xb06/0xdf0 [ 465.151121][T23445] ? __cfi_dump_emit+0x10/0x10 [ 465.151151][T23445] ? __cfi_dump_user_range+0x10/0x10 [ 465.151182][T23445] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 465.151213][T23445] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 465.151245][T23445] elf_core_dump+0x2cd9/0x3810 [ 465.151272][T23445] ? __cfi_elf_core_dump+0x10/0x10 [ 465.151302][T23445] ? dump_interrupted+0xf0/0xf0 [ 465.151331][T23445] ? filp_open+0x182/0x1d0 [ 465.151355][T23445] ? 0xffffffffff600000 [ 465.151374][T23445] ? freezing_slow_path+0x113/0x160 [ 465.151403][T23445] do_coredump+0x1bfa/0x2bd0 [ 465.151436][T23445] ? __cfi_do_coredump+0x10/0x10 [ 465.151464][T23445] ? asm_exc_page_fault+0x2b/0x30 [ 465.151503][T23445] ? __kasan_slab_free+0x6a/0x80 [ 465.151538][T23445] ? kmem_cache_free+0x1c1/0x510 [ 465.151568][T23445] ? get_signal+0xa75/0x14f0 [ 465.151595][T23445] get_signal+0x11fd/0x14f0 [ 465.151624][T23445] arch_do_signal_or_restart+0x96/0x720 [ 465.151657][T23445] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 465.151693][T23445] irqentry_exit_to_user_mode+0x4e/0xb0 [ 465.151730][T23445] irqentry_exit+0x16/0x60 [ 465.151763][T23445] exc_page_fault+0x66/0xc0 [ 465.151796][T23445] asm_exc_page_fault+0x2b/0x30 [ 465.151824][T23445] RIP: 0033:0x2000000011b1 [ 465.151843][T23445] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 465.151864][T23445] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 465.151886][T23445] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 465.151905][T23445] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 465.151922][T23445] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 465.151940][T23445] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 465.151957][T23445] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 465.151977][T23445] [ 465.688961][T23445] memory: usage 302868kB, limit 307200kB, failcnt 24425 [ 465.696047][T23445] memory+swap: usage 426348kB, limit 9007199254740988kB, failcnt 0 [ 465.704336][T23445] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 465.711358][T23445] Memory cgroup stats for /syz8: [ 465.711537][T23445] cache 310468608 [ 465.720264][T23445] rss 204800 [ 465.723486][T23445] rss_huge 0 [ 465.726736][T23445] shmem 310468608 [ 465.730387][T23445] mapped_file 0 [ 465.733872][T23445] dirty 0 [ 465.736927][T23445] writeback 0 [ 465.740252][T23445] workingset_refault_anon 195 [ 465.744943][T23445] workingset_refault_file 0 [ 465.749492][T23445] swap 126218240 [ 465.753072][T23445] swapcached 151552 [ 465.756895][T23445] pgpgin 717661 [ 465.760399][T23445] pgpgout 643314 [ 465.763969][T23445] pgfault 420745 [ 465.767531][T23445] pgmajfault 61 [ 465.771027][T23445] inactive_anon 290299904 [ 465.775382][T23445] active_anon 20086784 [ 465.779478][T23445] inactive_file 0 [ 465.783328][T23445] active_file 0 [ 465.786827][T23445] unevictable 0 [ 465.790314][T23445] hierarchical_memory_limit 314572800 [ 465.795731][T23445] hierarchical_memsw_limit 9223372036854771712 [ 465.801927][T23445] total_cache 310468608 [ 465.806110][T23445] total_rss 204800 [ 465.809993][T23445] total_rss_huge 0 [ 465.813772][T23445] total_shmem 310468608 [ 465.818035][T23445] total_mapped_file 0 [ 465.822039][T23445] total_dirty 0 [ 465.825646][T23445] total_writeback 0 [ 465.829481][T23445] total_workingset_refault_anon 195 [ 465.834751][T23445] total_workingset_refault_file 0 [ 465.839834][T23445] total_swap 126218240 [ 465.844019][T23445] total_swapcached 151552 [ 465.848423][T23445] total_pgpgin 717661 [ 465.852425][T23445] total_pgpgout 643314 [ 465.856537][T23445] total_pgfault 420745 [ 465.860615][T23445] total_pgmajfault 61 [ 465.864608][T23445] total_inactive_anon 290299904 [ 465.869540][T23445] total_active_anon 20086784 [ 465.874147][T23445] total_inactive_file 0 [ 465.878350][T23445] total_active_file 0 [ 465.890680][T23445] total_unevictable 0 [ 465.894890][T23445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23449,uid=0 [ 465.909886][T23445] Memory cgroup out of memory: Killed process 23449 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 466.027303][ T64] usb 4-1: USB disconnect, device number 40 [ 466.090908][T23442] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 466.133112][T23442] CPU: 0 UID: 0 PID: 23442 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 466.133154][T23442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.133173][T23442] Call Trace: [ 466.133181][T23442] [ 466.133199][T23442] __dump_stack+0x21/0x30 [ 466.133236][T23442] dump_stack_lvl+0x10c/0x190 [ 466.133267][T23442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 466.133297][T23442] ? ___ratelimit+0x3f7/0x5a0 [ 466.133331][T23442] dump_stack+0x19/0x20 [ 466.133360][T23442] dump_header+0xd7/0x490 [ 466.133397][T23442] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 466.133425][T23442] oom_kill_process+0x4c0/0x7e0 [ 466.133451][T23442] ? sched_clock_cpu+0x75/0x400 [ 466.133482][T23442] out_of_memory+0x7ee/0xbd0 [ 466.133506][T23442] ? __cfi_out_of_memory+0x10/0x10 [ 466.133530][T23442] ? mutex_lock_killable+0x104/0x1c0 [ 466.133565][T23442] ? __cfi_mutex_lock_killable+0x10/0x10 [ 466.133601][T23442] mem_cgroup_out_of_memory+0x279/0x350 [ 466.133635][T23442] ? drain_obj_stock+0xed0/0xed0 [ 466.133669][T23442] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 466.133702][T23442] try_charge_memcg+0x8f7/0xde0 [ 466.133731][T23442] ? __cfi_try_charge_memcg+0x10/0x10 [ 466.133758][T23442] ? __alloc_pages_noprof+0x30d/0x6c0 [ 466.133786][T23442] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 466.133815][T23442] __mem_cgroup_charge+0xf6/0x410 [ 466.133847][T23442] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 466.133877][T23442] ? _raw_spin_unlock+0x45/0x60 [ 466.133905][T23442] shmem_alloc_and_add_folio+0x86d/0x1050 [ 466.133946][T23442] ? put_swap_device+0x130/0x130 [ 466.133983][T23442] ? shmem_huge_global_enabled+0x2da/0x360 [ 466.134019][T23442] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 466.134055][T23442] ? __kasan_check_write+0x18/0x20 [ 466.134085][T23442] ? _raw_spin_lock+0x8c/0x120 [ 466.134110][T23442] shmem_get_folio_gfp+0x5f0/0x1380 [ 466.134153][T23442] ? shmem_get_folio+0xc0/0xc0 [ 466.134195][T23442] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 466.134225][T23442] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 466.134254][T23442] ? inode_to_bdi+0x6d/0x100 [ 466.134282][T23442] shmem_write_begin+0xf4/0x270 [ 466.134319][T23442] generic_perform_write+0x330/0x960 [ 466.134352][T23442] ? __cfi_generic_perform_write+0x10/0x10 [ 466.134381][T23442] ? down_write+0xe9/0x2a0 [ 466.134415][T23442] ? mnt_get_write_access_file+0x1af/0x3b0 [ 466.134443][T23442] ? mnt_put_write_access_file+0xc2/0x100 [ 466.134470][T23442] ? file_update_time+0x1ef/0x220 [ 466.134497][T23442] shmem_file_write_iter+0x105/0x130 [ 466.134524][T23442] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 466.134551][T23442] __kernel_write_iter+0x395/0x830 [ 466.134583][T23442] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 466.134610][T23442] ? __cfi___kernel_write_iter+0x10/0x10 [ 466.134642][T23442] ? get_dump_page+0x160/0x220 [ 466.134667][T23442] ? __asan_memset+0x39/0x50 [ 466.134696][T23442] ? iov_iter_bvec+0xc0/0x180 [ 466.134733][T23442] dump_user_range+0xb06/0xdf0 [ 466.134766][T23442] ? __cfi_dump_emit+0x10/0x10 [ 466.134796][T23442] ? __cfi_dump_user_range+0x10/0x10 [ 466.134829][T23442] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 466.134873][T23442] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 466.134906][T23442] elf_core_dump+0x2cd9/0x3810 [ 466.134932][T23442] ? __cfi_elf_core_dump+0x10/0x10 [ 466.134962][T23442] ? dump_interrupted+0xf0/0xf0 [ 466.134990][T23442] ? filp_open+0x182/0x1d0 [ 466.135016][T23442] ? 0xffffffffff600000 [ 466.135033][T23442] ? freezing_slow_path+0x113/0x160 [ 466.135063][T23442] do_coredump+0x1bfa/0x2bd0 [ 466.135095][T23442] ? __cfi_do_coredump+0x10/0x10 [ 466.135123][T23442] ? asm_exc_page_fault+0x2b/0x30 [ 466.135163][T23442] ? __kasan_slab_free+0x6a/0x80 [ 466.135220][T23442] ? kmem_cache_free+0x1c1/0x510 [ 466.135257][T23442] ? get_signal+0xa75/0x14f0 [ 466.135285][T23442] get_signal+0x11fd/0x14f0 [ 466.135315][T23442] arch_do_signal_or_restart+0x96/0x720 [ 466.135349][T23442] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 466.135387][T23442] irqentry_exit_to_user_mode+0x4e/0xb0 [ 466.135424][T23442] irqentry_exit+0x16/0x60 [ 466.135459][T23442] exc_page_fault+0x66/0xc0 [ 466.135495][T23442] asm_exc_page_fault+0x2b/0x30 [ 466.135525][T23442] RIP: 0033:0x2000000011b1 [ 466.135546][T23442] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.135568][T23442] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 466.135592][T23442] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 466.135612][T23442] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 466.135630][T23442] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 466.135650][T23442] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 466.135668][T23442] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 466.135689][T23442] [ 466.141348][T23442] memory: usage 303176kB, limit 307200kB, failcnt 26458 [ 466.656646][ T36] audit: type=1400 audit(1999997513.225:1533): avc: denied { wake_alarm } for pid=23660 comm="syz.3.7674" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 466.739652][T23668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.742224][ T36] audit: type=1400 audit(1999997513.328:1534): avc: denied { ioctl } for pid=23665 comm="syz.7.7676" path="socket:[95242]" dev="sockfs" ino=95242 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 466.780454][T23442] memory+swap: usage 384672kB, limit 9007199254740988kB, failcnt 0 [ 466.804761][T23667] /dev/rnullb0: Can't open blockdev [ 466.828221][T23442] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 466.859116][T23442] Memory cgroup stats for /syz8: [ 466.863631][T23442] cache 272105472 [ 466.885923][T23676] 9pnet_fd: Insufficient options for proto=fd [ 466.892321][T23442] rss 229376 [ 466.894113][T23678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.895636][T23442] rss_huge 0 [ 466.896300][T23678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479 [ 466.902082][T23442] shmem 272105472 [ 466.902100][T23442] mapped_file 0 [ 466.902109][T23442] dirty 0 [ 466.902118][T23442] writeback 0 [ 466.937790][T23682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 466.940134][T23442] workingset_refault_anon 195 [ 466.955199][T23442] workingset_refault_file 0 [ 466.956291][T23676] /dev/rnullb0: Can't open blockdev [ 466.959811][T23442] swap 121303040 [ 466.968729][T23442] swapcached 32768 [ 466.978486][T23442] pgpgin 719056 [ 466.982093][T23442] pgpgout 654098 [ 466.985660][T23442] pgfault 420760 [ 466.999998][T23687] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 467.000033][T23687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 467.009978][T23442] pgmajfault 61 [ 467.026388][T23691] /dev/rnullb0: Can't open blockdev [ 467.032955][T23442] inactive_anon 264794112 [ 467.033012][T23687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:481 [ 467.038810][T23442] active_anon 7553024 [ 467.052662][T23442] inactive_file 0 [ 467.056657][T23442] active_file 0 [ 467.060393][T23442] unevictable 0 [ 467.078072][T23442] hierarchical_memory_limit 314572800 [ 467.089433][T23442] hierarchical_memsw_limit 9223372036854771712 [ 467.105664][T23442] total_cache 272105472 [ 467.112942][T23442] total_rss 229376 [ 467.117017][T23442] total_rss_huge 0 [ 467.120997][T23442] total_shmem 272105472 [ 467.127865][T23705] rust_binder: Failed copying remainder into alloc: EFAULT [ 467.127893][T23705] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 467.135379][T23442] total_mapped_file 0 [ 467.151183][T23705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 467.151218][T23705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1260 [ 467.161450][T23442] total_dirty 0 [ 467.174388][T23442] total_writeback 0 [ 467.178291][T23442] total_workingset_refault_anon 195 [ 467.183627][T23442] total_workingset_refault_file 0 [ 467.188763][T23442] total_swap 121303040 [ 467.192925][T23442] total_swapcached 32768 [ 467.194439][T23708] bpf: Bad value for 'mode' [ 467.203130][T23442] total_pgpgin 719056 [ 467.207836][T23442] total_pgpgout 654098 [ 467.213308][T23442] total_pgfault 420760 [ 467.217863][T23442] total_pgmajfault 61 [ 467.221936][T23442] total_inactive_anon 264794112 [ 467.227073][T23442] total_active_anon 7553024 [ 467.231766][T23442] total_inactive_file 0 [ 467.237345][T23442] total_active_file 0 [ 467.241431][T23442] total_unevictable 0 [ 467.245490][T23442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23447,uid=0 [ 467.260772][T23442] Memory cgroup out of memory: Killed process 23447 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 467.576850][T23427] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 467.586560][T23427] CPU: 1 UID: 0 PID: 23427 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 467.586602][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.586617][T23427] Call Trace: [ 467.586624][T23427] [ 467.586632][T23427] __dump_stack+0x21/0x30 [ 467.586663][T23427] dump_stack_lvl+0x10c/0x190 [ 467.586692][T23427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 467.586719][T23427] ? ___ratelimit+0x3f7/0x5a0 [ 467.586751][T23427] dump_stack+0x19/0x20 [ 467.586789][T23427] dump_header+0xd7/0x490 [ 467.586825][T23427] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 467.586852][T23427] oom_kill_process+0x4c0/0x7e0 [ 467.586876][T23427] ? sched_clock_cpu+0x75/0x400 [ 467.586906][T23427] out_of_memory+0x7ee/0xbd0 [ 467.586929][T23427] ? __cfi_out_of_memory+0x10/0x10 [ 467.586952][T23427] ? mutex_lock_killable+0x92/0x1c0 [ 467.586987][T23427] ? __cfi_mutex_lock_killable+0x10/0x10 [ 467.587030][T23427] mem_cgroup_out_of_memory+0x279/0x350 [ 467.587064][T23427] ? drain_obj_stock+0xed0/0xed0 [ 467.587099][T23427] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 467.587132][T23427] try_charge_memcg+0x8f7/0xde0 [ 467.587161][T23427] ? __cfi_try_charge_memcg+0x10/0x10 [ 467.587194][T23427] ? __alloc_pages_noprof+0x30d/0x6c0 [ 467.587221][T23427] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 467.587248][T23427] ? __folio_batch_add_and_move+0x2ab/0x370 [ 467.587274][T23427] __mem_cgroup_charge+0xf6/0x410 [ 467.587304][T23427] ? __kasan_check_write+0x18/0x20 [ 467.587334][T23427] ? _raw_spin_lock+0x8c/0x120 [ 467.587360][T23427] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 467.587392][T23427] shmem_alloc_and_add_folio+0x86d/0x1050 [ 467.587430][T23427] ? finish_task_switch+0x13a/0x780 [ 467.587458][T23427] ? put_swap_device+0x130/0x130 [ 467.587495][T23427] ? shmem_huge_global_enabled+0x2da/0x360 [ 467.587532][T23427] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 467.587567][T23427] ? __kasan_check_write+0x18/0x20 [ 467.587596][T23427] ? _raw_spin_lock+0x8c/0x120 [ 467.587622][T23427] shmem_get_folio_gfp+0x5f0/0x1380 [ 467.587660][T23427] ? shmem_get_folio+0xc0/0xc0 [ 467.587692][T23427] ? follow_page_pte+0xa5c/0xb90 [ 467.587719][T23427] ? inode_to_bdi+0x6d/0x100 [ 467.587746][T23427] shmem_write_begin+0xf4/0x270 [ 467.587779][T23427] generic_perform_write+0x330/0x960 [ 467.587806][T23427] ? __cfi_generic_perform_write+0x10/0x10 [ 467.587831][T23427] ? down_write+0xe9/0x2a0 [ 467.587860][T23427] ? file_update_time+0xa3/0x220 [ 467.587885][T23427] shmem_file_write_iter+0x105/0x130 [ 467.587907][T23427] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 467.587929][T23427] __kernel_write_iter+0x395/0x830 [ 467.587958][T23427] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 467.587985][T23427] ? __cfi___kernel_write_iter+0x10/0x10 [ 467.588017][T23427] ? get_dump_page+0x160/0x220 [ 467.588047][T23427] ? __asan_memset+0x39/0x50 [ 467.588076][T23427] ? iov_iter_bvec+0xc0/0x180 [ 467.588119][T23427] dump_user_range+0xb06/0xdf0 [ 467.588152][T23427] ? __cfi_dump_emit+0x10/0x10 [ 467.588182][T23427] ? __cfi_dump_user_range+0x10/0x10 [ 467.588214][T23427] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 467.588247][T23427] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 467.588280][T23427] elf_core_dump+0x2cd9/0x3810 [ 467.588307][T23427] ? __cfi_elf_core_dump+0x10/0x10 [ 467.588338][T23427] ? dump_interrupted+0xf0/0xf0 [ 467.588368][T23427] ? filp_open+0x182/0x1d0 [ 467.588393][T23427] ? 0xffffffffff600000 [ 467.588412][T23427] ? freezing_slow_path+0x113/0x160 [ 467.588442][T23427] do_coredump+0x1bfa/0x2bd0 [ 467.588476][T23427] ? __cfi_do_coredump+0x10/0x10 [ 467.588505][T23427] ? asm_exc_page_fault+0x2b/0x30 [ 467.588546][T23427] ? __kasan_slab_free+0x6a/0x80 [ 467.588580][T23427] ? kmem_cache_free+0x1c1/0x510 [ 467.588611][T23427] ? get_signal+0xa75/0x14f0 [ 467.588638][T23427] get_signal+0x11fd/0x14f0 [ 467.588668][T23427] arch_do_signal_or_restart+0x96/0x720 [ 467.588702][T23427] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 467.588738][T23427] irqentry_exit_to_user_mode+0x4e/0xb0 [ 467.588769][T23427] irqentry_exit+0x16/0x60 [ 467.588799][T23427] exc_page_fault+0x66/0xc0 [ 467.588827][T23427] asm_exc_page_fault+0x2b/0x30 [ 467.588853][T23427] RIP: 0033:0x2000000011b1 [ 467.588871][T23427] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 467.588889][T23427] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 467.588909][T23427] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 467.588925][T23427] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 467.588940][T23427] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 467.588956][T23427] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 467.588970][T23427] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 467.588988][T23427] [ 467.964795][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 467.964815][ T36] audit: type=1326 audit(1999997514.422:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 467.966238][T23427] memory: usage 307200kB, limit 307200kB, failcnt 28835 [ 467.977521][ T36] audit: type=1326 audit(1999997514.422:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 467.989467][T23427] memory+swap: usage 428052kB, limit 9007199254740988kB, failcnt 0 [ 468.004966][ T36] audit: type=1326 audit(1999997514.422:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.034880][T23427] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.062055][ T36] audit: type=1326 audit(1999997514.422:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.064941][T23427] Memory cgroup stats for /syz8 [ 468.091102][ T36] audit: type=1326 audit(1999997514.422:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.096603][T23427] : [ 468.104637][T23722] rust_binder: 982: no such ref 1 [ 468.125278][ T36] audit: type=1326 audit(1999997514.422:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.134116][T23427] cache 309481472 [ 468.156749][ T36] audit: type=1326 audit(1999997514.422:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.181343][T23725] rust_binder: 1269: no such ref 0 [ 468.187102][ T36] audit: type=1326 audit(1999997514.422:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.187138][ T36] audit: type=1326 audit(1999997514.422:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.187166][ T36] audit: type=1326 audit(1999997514.422:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.0.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7e78e9a9 code=0x7fc00000 [ 468.187695][T23427] rss 1036288 [ 468.219718][T23729] netlink: 'syz.0.7698': attribute type 27 has an invalid length. [ 468.225762][T23427] rss_huge 0 [ 468.247885][T23725] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 468.250710][T23427] shmem 309481472 [ 468.276147][T23730] SELinux: policydb magic number 0x60c92e84 does not match expected magic number 0xf97cff8c [ 468.280130][T23427] mapped_file 0 [ 468.312958][T23725] rust_binder: Write failure EINVAL in pid:1269 [ 468.326635][T23427] dirty 0 [ 468.326650][T23427] writeback 0 [ 468.326658][T23427] workingset_refault_anon 204 [ 468.326668][T23427] workingset_refault_file 0 [ 468.326678][T23427] swap 123752448 [ 468.359630][T23730] SELinux: failed to load policy [ 468.361363][T23427] swapcached 4075520 [ 468.382072][T23732] /dev/rnullb0: Can't open blockdev [ 468.387372][T23427] pgpgin 738374 [ 468.390453][T23732] ext4: Unknown parameter 'exfat' [ 468.403313][T23427] pgpgout 663107 [ 468.442599][T23427] pgfault 422798 [ 468.461400][T23427] pgmajfault 70 [ 468.465174][T23427] inactive_anon 80633856 [ 468.469445][T23427] active_anon 233938944 [ 468.479023][T23427] inactive_file 0 [ 468.482967][T23427] active_file 0 [ 468.486511][T23427] unevictable 0 [ 468.490110][T23427] hierarchical_memory_limit 314572800 [ 468.495941][T23427] hierarchical_memsw_limit 9223372036854771712 [ 468.509018][T23427] total_cache 309481472 [ 468.513220][T23427] total_rss 1036288 [ 468.525110][T23427] total_rss_huge 0 [ 468.529057][T23427] total_shmem 309481472 [ 468.533295][T23427] total_mapped_file 0 [ 468.537711][T23427] total_dirty 0 [ 468.541791][T23427] total_writeback 0 [ 468.545715][T23427] total_workingset_refault_anon 204 [ 468.551404][T23427] total_workingset_refault_file 0 [ 468.556532][T23427] total_swap 123752448 [ 468.561117][T23427] total_swapcached 4075520 [ 468.565612][T23427] total_pgpgin 738374 [ 468.569708][T23427] total_pgpgout 663107 [ 468.573931][T23427] total_pgfault 422798 [ 468.578021][T23427] total_pgmajfault 70 [ 468.582088][T23427] total_inactive_anon 80633856 [ 468.586872][T23427] total_active_anon 233938944 [ 468.591823][T23427] total_inactive_file 0 [ 468.596105][T23427] total_active_file 0 [ 468.601996][T23427] total_unevictable 0 [ 468.606663][T23427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23445,uid=0 [ 468.621699][T23427] Memory cgroup out of memory: Killed process 23445 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 468.674664][T23427] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 468.687879][T23427] CPU: 1 UID: 0 PID: 23427 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 468.687926][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.687941][T23427] Call Trace: [ 468.687949][T23427] [ 468.687959][T23427] __dump_stack+0x21/0x30 [ 468.687995][T23427] dump_stack_lvl+0x10c/0x190 [ 468.688022][T23427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 468.688050][T23427] ? ___ratelimit+0x3f7/0x5a0 [ 468.688081][T23427] dump_stack+0x19/0x20 [ 468.688107][T23427] dump_header+0xd7/0x490 [ 468.688142][T23427] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 468.688168][T23427] oom_kill_process+0x4c0/0x7e0 [ 468.688191][T23427] ? sched_clock_cpu+0x75/0x400 [ 468.688219][T23427] out_of_memory+0x7ee/0xbd0 [ 468.688242][T23427] ? __cfi_out_of_memory+0x10/0x10 [ 468.688264][T23427] ? mutex_lock_killable+0x104/0x1c0 [ 468.688298][T23427] ? __cfi_mutex_lock_killable+0x10/0x10 [ 468.688333][T23427] mem_cgroup_out_of_memory+0x279/0x350 [ 468.688365][T23427] ? drain_obj_stock+0xed0/0xed0 [ 468.688398][T23427] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 468.688430][T23427] try_charge_memcg+0x8f7/0xde0 [ 468.688458][T23427] ? __cfi_try_charge_memcg+0x10/0x10 [ 468.688484][T23427] ? __alloc_pages_noprof+0x30d/0x6c0 [ 468.688511][T23427] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 468.688536][T23427] ? __folio_batch_add_and_move+0x2ab/0x370 [ 468.688562][T23427] __mem_cgroup_charge+0xf6/0x410 [ 468.688590][T23427] ? __kasan_check_write+0x18/0x20 [ 468.688618][T23427] ? _raw_spin_lock+0x8c/0x120 [ 468.688643][T23427] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 468.688674][T23427] shmem_alloc_and_add_folio+0x86d/0x1050 [ 468.688711][T23427] ? finish_task_switch+0x13a/0x780 [ 468.688738][T23427] ? put_swap_device+0x130/0x130 [ 468.688775][T23427] ? shmem_huge_global_enabled+0x2da/0x360 [ 468.688810][T23427] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 468.688846][T23427] ? __kasan_check_write+0x18/0x20 [ 468.688874][T23427] ? _raw_spin_lock+0x8c/0x120 [ 468.688899][T23427] shmem_get_folio_gfp+0x5f0/0x1380 [ 468.688943][T23427] ? shmem_get_folio+0xc0/0xc0 [ 468.688975][T23427] ? follow_page_pte+0xa5c/0xb90 [ 468.689001][T23427] ? inode_to_bdi+0x6d/0x100 [ 468.689029][T23427] shmem_write_begin+0xf4/0x270 [ 468.689066][T23427] generic_perform_write+0x330/0x960 [ 468.689098][T23427] ? __cfi_generic_perform_write+0x10/0x10 [ 468.689127][T23427] ? down_write+0xe9/0x2a0 [ 468.689162][T23427] ? file_update_time+0xa3/0x220 [ 468.689189][T23427] shmem_file_write_iter+0x105/0x130 [ 468.689216][T23427] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 468.689242][T23427] __kernel_write_iter+0x395/0x830 [ 468.689273][T23427] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 468.689301][T23427] ? __cfi___kernel_write_iter+0x10/0x10 [ 468.689331][T23427] ? get_dump_page+0x160/0x220 [ 468.689355][T23427] ? __asan_memset+0x39/0x50 [ 468.689384][T23427] ? iov_iter_bvec+0xc0/0x180 [ 468.689419][T23427] dump_user_range+0xb06/0xdf0 [ 468.689452][T23427] ? __cfi_dump_emit+0x10/0x10 [ 468.689481][T23427] ? __cfi_dump_user_range+0x10/0x10 [ 468.689513][T23427] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 468.689545][T23427] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 468.689578][T23427] elf_core_dump+0x2cd9/0x3810 [ 468.689604][T23427] ? __cfi_elf_core_dump+0x10/0x10 [ 468.689635][T23427] ? dump_interrupted+0xf0/0xf0 [ 468.689664][T23427] ? filp_open+0x182/0x1d0 [ 468.689689][T23427] ? 0xffffffffff600000 [ 468.689708][T23427] ? freezing_slow_path+0x113/0x160 [ 468.689738][T23427] do_coredump+0x1bfa/0x2bd0 [ 468.689770][T23427] ? __cfi_do_coredump+0x10/0x10 [ 468.689799][T23427] ? asm_exc_page_fault+0x2b/0x30 [ 468.689838][T23427] ? __kasan_slab_free+0x6a/0x80 [ 468.689873][T23427] ? kmem_cache_free+0x1c1/0x510 [ 468.689916][T23427] ? get_signal+0xa75/0x14f0 [ 468.689943][T23427] get_signal+0x11fd/0x14f0 [ 468.689972][T23427] arch_do_signal_or_restart+0x96/0x720 [ 468.690006][T23427] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 468.690043][T23427] irqentry_exit_to_user_mode+0x4e/0xb0 [ 468.690078][T23427] irqentry_exit+0x16/0x60 [ 468.690112][T23427] exc_page_fault+0x66/0xc0 [ 468.690145][T23427] asm_exc_page_fault+0x2b/0x30 [ 468.690174][T23427] RIP: 0033:0x2000000011b1 [ 468.690194][T23427] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 468.690216][T23427] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 468.690239][T23427] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 468.690257][T23427] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 468.690275][T23427] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 468.690294][T23427] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 468.690311][T23427] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 468.690331][T23427] [ 469.191077][T23427] memory: usage 275372kB, limit 307200kB, failcnt 29271 [ 469.199956][T23427] memory+swap: usage 393216kB, limit 9007199254740988kB, failcnt 0 [ 469.209160][T23427] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 469.216496][T23427] Memory cgroup stats for /syz8: [ 469.216664][T23427] cache 273825792 [ 469.227398][T23427] rss 1024000 [ 469.230797][T23427] rss_huge 0 [ 469.234272][T23427] shmem 273825792 [ 469.237984][T23427] mapped_file 0 [ 469.241461][T23427] dirty 0 [ 469.244798][T23427] writeback 303104 [ 469.248553][T23427] workingset_refault_anon 204 [ 469.253320][T23427] workingset_refault_file 0 [ 469.259852][T23427] swap 123322368 [ 469.263779][T23427] swapcached 4395008 [ 469.267970][T23427] pgpgin 738376 [ 469.271453][T23427] pgpgout 671739 [ 469.275023][T23427] pgfault 422798 [ 469.278934][T23427] pgmajfault 70 [ 469.282410][T23427] inactive_anon 56557568 [ 469.309070][T23427] active_anon 222502912 [ 469.313291][T23427] inactive_file 0 [ 469.336709][T23427] active_file 0 [ 469.350693][T23427] unevictable 0 [ 469.361717][T23427] hierarchical_memory_limit 314572800 [ 469.368435][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7713'. [ 469.382855][T23427] hierarchical_memsw_limit 9223372036854771712 [ 469.389057][T23427] total_cache 273825792 [ 469.393237][T23427] total_rss 1024000 [ 469.414456][T23427] total_rss_huge 0 [ 469.418322][T23427] total_shmem 273825792 [ 469.422629][T23427] total_mapped_file 0 [ 469.426726][T23427] total_dirty 0 [ 469.430274][T23427] total_writeback 303104 [ 469.434636][T23427] total_workingset_refault_anon 204 [ 469.439889][T23427] total_workingset_refault_file 0 [ 469.445047][T23427] total_swap 123322368 [ 469.449240][T23427] total_swapcached 4395008 [ 469.453762][T23427] total_pgpgin 738376 [ 469.457820][T23427] total_pgpgout 671739 [ 469.462046][T23427] total_pgfault 422798 [ 469.466136][T23427] total_pgmajfault 70 [ 469.470174][T23427] total_inactive_anon 56557568 [ 469.475115][T23427] total_active_anon 222502912 [ 469.479869][T23427] total_inactive_file 0 [ 469.484708][T23427] total_active_file 0 [ 469.488856][T23427] total_unevictable 0 [ 469.492959][T23427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23441,uid=0 [ 469.508124][T23427] Memory cgroup out of memory: Killed process 23441 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:56832kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 469.543270][T23773] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7714'. [ 469.614485][T23427] syz.8.7608 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 469.624314][T23427] CPU: 1 UID: 0 PID: 23427 Comm: syz.8.7608 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 469.624349][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.624363][T23427] Call Trace: [ 469.624371][T23427] [ 469.624380][T23427] __dump_stack+0x21/0x30 [ 469.624414][T23427] dump_stack_lvl+0x10c/0x190 [ 469.624442][T23427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 469.624471][T23427] ? ___ratelimit+0x3f7/0x5a0 [ 469.624504][T23427] dump_stack+0x19/0x20 [ 469.624531][T23427] dump_header+0xd7/0x490 [ 469.624567][T23427] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 469.624594][T23427] oom_kill_process+0x4c0/0x7e0 [ 469.624617][T23427] ? sched_clock_cpu+0x75/0x400 [ 469.624646][T23427] out_of_memory+0x7ee/0xbd0 [ 469.624666][T23427] ? __cfi_out_of_memory+0x10/0x10 [ 469.624688][T23427] ? mutex_lock_killable+0x104/0x1c0 [ 469.624722][T23427] ? __cfi_mutex_lock_killable+0x10/0x10 [ 469.624759][T23427] mem_cgroup_out_of_memory+0x279/0x350 [ 469.624794][T23427] ? drain_obj_stock+0xed0/0xed0 [ 469.624826][T23427] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 469.624865][T23427] try_charge_memcg+0x8f7/0xde0 [ 469.624893][T23427] ? __cfi_try_charge_memcg+0x10/0x10 [ 469.624919][T23427] ? __alloc_pages_noprof+0x30d/0x6c0 [ 469.624945][T23427] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 469.624969][T23427] ? __folio_batch_add_and_move+0x2ab/0x370 [ 469.624995][T23427] __mem_cgroup_charge+0xf6/0x410 [ 469.625023][T23427] ? __kasan_check_write+0x18/0x20 [ 469.625051][T23427] ? _raw_spin_lock+0x8c/0x120 [ 469.625076][T23427] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 469.625108][T23427] shmem_alloc_and_add_folio+0x86d/0x1050 [ 469.625145][T23427] ? finish_task_switch+0x13a/0x780 [ 469.625172][T23427] ? put_swap_device+0x130/0x130 [ 469.625208][T23427] ? shmem_huge_global_enabled+0x2da/0x360 [ 469.625244][T23427] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 469.625278][T23427] ? __kasan_check_write+0x18/0x20 [ 469.625306][T23427] ? _raw_spin_lock+0x8c/0x120 [ 469.625332][T23427] shmem_get_folio_gfp+0x5f0/0x1380 [ 469.625368][T23427] ? shmem_get_folio+0xc0/0xc0 [ 469.625400][T23427] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 469.625429][T23427] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 469.625458][T23427] ? inode_to_bdi+0x6d/0x100 [ 469.625485][T23427] shmem_write_begin+0xf4/0x270 [ 469.625522][T23427] generic_perform_write+0x330/0x960 [ 469.625553][T23427] ? __cfi_generic_perform_write+0x10/0x10 [ 469.625581][T23427] ? down_write+0xe9/0x2a0 [ 469.625616][T23427] ? mnt_get_write_access_file+0x1af/0x3b0 [ 469.625642][T23427] ? mnt_put_write_access_file+0xc2/0x100 [ 469.625669][T23427] ? file_update_time+0x1ef/0x220 [ 469.625696][T23427] shmem_file_write_iter+0x105/0x130 [ 469.625722][T23427] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 469.625748][T23427] __kernel_write_iter+0x395/0x830 [ 469.625780][T23427] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 469.625808][T23427] ? __cfi___kernel_write_iter+0x10/0x10 [ 469.625839][T23427] ? get_dump_page+0x160/0x220 [ 469.625869][T23427] ? __asan_memset+0x39/0x50 [ 469.625898][T23427] ? iov_iter_bvec+0xc0/0x180 [ 469.625933][T23427] dump_user_range+0xb06/0xdf0 [ 469.625967][T23427] ? __cfi_dump_emit+0x10/0x10 [ 469.625996][T23427] ? __cfi_dump_user_range+0x10/0x10 [ 469.626028][T23427] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 469.626060][T23427] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 469.626093][T23427] elf_core_dump+0x2cd9/0x3810 [ 469.626119][T23427] ? __cfi_elf_core_dump+0x10/0x10 [ 469.626150][T23427] ? dump_interrupted+0xf0/0xf0 [ 469.626179][T23427] ? filp_open+0x182/0x1d0 [ 469.626204][T23427] ? 0xffffffffff600000 [ 469.626222][T23427] ? freezing_slow_path+0x113/0x160 [ 469.626253][T23427] do_coredump+0x1bfa/0x2bd0 [ 469.626286][T23427] ? __cfi_do_coredump+0x10/0x10 [ 469.626320][T23427] ? asm_exc_page_fault+0x2b/0x30 [ 469.626361][T23427] ? __kasan_slab_free+0x6a/0x80 [ 469.626395][T23427] ? kmem_cache_free+0x1c1/0x510 [ 469.626425][T23427] ? get_signal+0xa75/0x14f0 [ 469.626453][T23427] get_signal+0x11fd/0x14f0 [ 469.626482][T23427] arch_do_signal_or_restart+0x96/0x720 [ 469.626515][T23427] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 469.626553][T23427] irqentry_exit_to_user_mode+0x4e/0xb0 [ 469.626589][T23427] irqentry_exit+0x16/0x60 [ 469.626623][T23427] exc_page_fault+0x66/0xc0 [ 469.626657][T23427] asm_exc_page_fault+0x2b/0x30 [ 469.626686][T23427] RIP: 0033:0x2000000011b1 [ 469.626707][T23427] Code: 00 00 00 00 00 00 00 00 00 05 00 00 00 18 00 01 80 14 00 02 00 73 79 7a 5f 74 75 6e 00 00 00 00 00 00 00 00 00 04 00 03 80 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.626729][T23427] RSP: 002b:00002000000001c8 EFLAGS: 00010217 [ 469.626751][T23427] RAX: 0000000000000000 RBX: 00007f0743db6080 RCX: 00007f0743b8e9a9 [ 469.626769][T23427] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000008080 [ 469.626787][T23427] RBP: 00007f0743c10d69 R08: 0000200000000280 R09: 0000200000000280 [ 469.626805][T23427] R10: 0000200000000240 R11: 0000000000000202 R12: 0000000000000000 [ 469.626821][T23427] R13: 0000000000000000 R14: 00007f0743db6080 R15: 00007fff89a3f428 [ 469.626842][T23427] [ 469.627108][T23427] memory: usage 307052kB, limit 307200kB, failcnt 31008 [ 470.160929][T23427] memory+swap: usage 398284kB, limit 9007199254740988kB, failcnt 0 [ 470.184656][T23427] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 470.186965][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7716'. [ 470.205929][T23427] Memory cgroup stats for /syz8: [ 470.206089][T23427] cache 283312128 [ 470.225894][T23427] rss 7921664 [ 470.236653][T23427] rss_huge 0 [ 470.247413][T23427] shmem 283312128 [ 470.254573][T23427] mapped_file 0 [ 470.258088][T23427] dirty 0 [ 470.277165][T23427] writeback 0 [ 470.291488][T23427] workingset_refault_anon 268 [ 470.296292][T23427] workingset_refault_file 0 [ 470.319559][T23427] swap 117010432 [ 470.334241][T23427] swapcached 131072 [ 470.348774][T23427] pgpgin 754068 [ 470.353070][T23427] pgpgout 684479 [ 470.357054][T23427] pgfault 424820 [ 470.362371][T23427] pgmajfault 90 [ 470.366077][T23427] inactive_anon 207966208 [ 470.370543][T23427] active_anon 83288064 [ 470.378228][T23427] inactive_file 0 [ 470.382731][T23427] active_file 0 [ 470.383014][T23789] rust_binder: 1312: no such ref 3 [ 470.386212][T23427] unevictable 0 [ 470.394924][T23427] hierarchical_memory_limit 314572800 [ 470.400353][T23427] hierarchical_memsw_limit 9223372036854771712 [ 470.407924][T23427] total_cache 283312128 [ 470.412488][T23427] total_rss 7921664 [ 470.430860][T23427] total_rss_huge 0 [ 470.455234][T23427] total_shmem 283312128 [ 470.470241][T23427] total_mapped_file 0 [ 470.474345][T23427] total_dirty 0 [ 470.477919][T23427] total_writeback 0 [ 470.492816][T23427] total_workingset_refault_anon 268 [ 470.503582][T23427] total_workingset_refault_file 0 [ 470.514351][T23427] total_swap 117010432 [ 470.525123][T23427] total_swapcached 131072 [ 470.536033][T23427] total_pgpgin 754068 [ 470.554762][T23427] total_pgpgout 684479 [ 470.565566][T23427] total_pgfault 424820 [ 470.574925][T23427] total_pgmajfault 90 [ 470.580257][T23427] total_inactive_anon 207966208 [ 470.585138][T23427] total_active_anon 83288064 [ 470.600663][T23427] total_inactive_file 0 [ 470.622145][T23427] total_active_file 0 [ 470.628032][T23427] total_unevictable 0 [ 470.632058][T23427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7608,pid=23444,uid=0 [ 470.676601][T23427] Memory cgroup out of memory: Killed process 23444 (syz.8.7608) total-vm:90100kB, anon-rss:960kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 470.710238][T23794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 470.710273][T23794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1316 [ 470.826088][ T2565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 470.841652][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 471.121844][T23811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:997 [ 471.281729][T23829] futex_wake_op: syz.0.7731 tries to shift op by -1; fix this program [ 471.510249][T23843] can0: slcan on ptm0. [ 471.610059][T23842] can0 (unregistered): slcan off ptm0. [ 471.734902][T23853] rust_binder: Failed copying remainder into alloc: EFAULT [ 471.734934][T23853] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 471.797380][T22770] Bluetooth: hci0: Frame reassembly failed (-84) [ 471.803310][T23853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 471.812401][T23853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1339 [ 471.859773][T23866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.906812][T23866] rust_binder: Error in use_page_slow: ESRCH [ 471.913410][T23866] rust_binder: use_range failure ESRCH [ 471.924333][T23872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7741'. [ 471.970963][T23866] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 471.970995][T23866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 471.995677][T23872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7741'. [ 472.026725][T23866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1015 [ 472.057785][T23883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.090308][T23879] rust_binder: 1342: no such ref 3 [ 472.120381][T23883] rust_binder: 506: no such ref 0 [ 472.324311][ T4180] Bluetooth: hci1: Frame reassembly failed (-84) [ 472.836801][ T4180] Bluetooth: hci2: Frame reassembly failed (-84) [ 472.961227][T23950] netlink: 'syz.0.7758': attribute type 6 has an invalid length. [ 472.969174][T23950] netlink: 6016 bytes leftover after parsing attributes in process `syz.0.7758'. [ 473.152986][T23966] binder: Unknown parameter 'defcontext01777777777777777777777' [ 473.624111][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 473.624133][ T36] audit: type=1400 audit(1999997519.761:1629): avc: denied { create } for pid=23983 comm="syz.0.7770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 473.658656][T23988] rust_binder: Read failure Err(EAGAIN) in pid:1047 [ 473.666299][ T36] audit: type=1400 audit(1999997519.808:1630): avc: denied { read } for pid=23987 comm="syz.0.7772" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 473.701996][ T36] audit: type=1400 audit(1999997519.808:1631): avc: denied { open } for pid=23987 comm="syz.0.7772" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 473.740954][ T36] audit: type=1400 audit(1999997519.874:1632): avc: denied { ioctl } for pid=23987 comm="syz.0.7772" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 473.990425][ T2565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 473.990437][T23941] Bluetooth: hci0: command 0x1003 tx timeout [ 474.326410][T24004] netlink: 'syz.8.7777': attribute type 40 has an invalid length. [ 474.503609][T23995] Bluetooth: hci1: command 0x1003 tx timeout [ 474.509864][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 474.652516][T22770] Bluetooth: hci1: Frame reassembly failed (-84) [ 474.714071][ T36] audit: type=1400 audit(1999997520.781:1633): avc: denied { write } for pid=24029 comm="syz.3.7780" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 474.870562][T24038] rust_binder: Write failure EFAULT in pid:1369 [ 474.880678][T24041] /dev/rnullb0: Can't open blockdev [ 474.917681][T24045] netlink: 'syz.3.7785': attribute type 12 has an invalid length. [ 475.016777][T23995] Bluetooth: hci2: command 0x1003 tx timeout [ 475.016780][T23915] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 475.058275][T24069] tipc: New replicast peer: 255.255.255.255 [ 475.065059][T24069] tipc: Enabled bearer , priority 10 [ 475.073012][ T36] audit: type=1400 audit(1999997521.127:1634): avc: denied { create } for pid=24070 comm="syz.7.7794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 475.211385][T24095] netlink: 100 bytes leftover after parsing attributes in process `syz.8.7801'. [ 475.237658][T24097] binder: Unknown parameter ' ' [ 475.243920][T24097] binder: Unknown parameter ' ' [ 475.968190][ T64] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 476.128587][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 476.135904][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.144835][ T64] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 476.152472][ T64] usb 4-1: can't read configurations, error -61 [ 476.256851][ T8815] tipc: Node number set to 1086498465 [ 476.288914][ T64] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 476.449315][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 476.455930][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.464750][ T64] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 476.472419][ T64] usb 4-1: can't read configurations, error -61 [ 476.478799][ T64] usb usb4-port1: attempt power cycle [ 476.733861][ T36] audit: type=1400 audit(1999997522.670:1635): avc: denied { getopt } for pid=24260 comm="syz.8.7815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 476.807020][T24272] batadv_slave_1: entered promiscuous mode [ 476.812923][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 476.821582][T24275] batadv_slave_1: left promiscuous mode [ 476.844862][ T64] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 476.866559][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 476.879652][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.881180][T24287] binder: Bad value for 'defcontext' [ 476.889096][ T64] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 476.901203][ T64] usb 4-1: can't read configurations, error -61 [ 476.918381][T24292] /dev/rnullb0: Can't open blockdev [ 477.038331][ T64] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 477.083578][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 477.091556][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.103123][ T64] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 477.110734][ T64] usb 4-1: can't read configurations, error -61 [ 477.117498][ T64] usb usb4-port1: unable to enumerate USB device [ 477.122800][ T36] audit: type=1400 audit(1999997523.035:1636): avc: denied { read } for pid=24300 comm="syz.8.7827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 477.354909][T24321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.434353][ T36] audit: type=1400 audit(1999997523.335:1637): avc: denied { shutdown } for pid=24325 comm="syz.0.7836" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 477.434888][T24326] 9pnet_fd: Insufficient options for proto=fd [ 477.527338][ T36] audit: type=1400 audit(1999997523.409:1638): avc: denied { ioctl } for pid=24332 comm="syz.0.7838" path="socket:[96811]" dev="sockfs" ino=96811 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.582117][T24334] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.582591][T24334] rust_binder: Error in use_page_slow: ESRCH [ 477.589163][T24334] rust_binder: use_range failure ESRCH [ 477.595251][T24334] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 477.600753][T24334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 477.608915][T24334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1089 [ 478.514635][T24352] netlink: 124 bytes leftover after parsing attributes in process `syz.7.7845'. [ 478.632760][T24359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.689140][T24363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:528 [ 478.741159][T24368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.750906][T24368] rust_binder: Error in use_page_slow: ESRCH [ 478.757423][T24368] rust_binder: use_range failure ESRCH [ 478.763600][T24368] rust_binder: Failed to allocate buffer. len:1080, is_oneway:true [ 478.776151][T24368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 478.784506][T24368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1102 [ 478.811569][T24374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1104 [ 479.127031][T24389] rust_binder: 1540: no such ref 3 [ 479.141635][T24389] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 479.317287][T24398] rust_binder: Write failure EFAULT in pid:1549 [ 479.354386][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 479.354409][ T36] audit: type=1400 audit(1999997525.121:1646): avc: denied { accept } for pid=24407 comm="syz.3.7860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 479.480436][T24421] rust_binder: Error while translating object. [ 479.480485][T24421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 479.487344][T24421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1567 [ 479.523823][ T36] audit: type=1400 audit(1999997525.280:1647): avc: denied { execute } for pid=24423 comm="syz.3.7866" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:shell_exec_t:s0" [ 479.660501][ T36] audit: type=1400 audit(1999997525.411:1648): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=877 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 479.682240][ T36] audit: type=1400 audit(1999997525.411:1649): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=877 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 479.719841][ T36] audit: type=1400 audit(1999997525.411:1650): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=877 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 479.774045][ T36] audit: type=1326 audit(1999997525.505:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24375 comm="syz.7.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c418e9a9 code=0x7fc00000 [ 479.934969][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7876'. [ 480.223051][ T36] audit: type=1400 audit(1999997525.935:1652): avc: denied { bind } for pid=24463 comm="syz.7.7879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.301646][T24468] netlink: 'syz.7.7880': attribute type 3 has an invalid length. [ 480.329985][T24468] netlink: 944 bytes leftover after parsing attributes in process `syz.7.7880'. [ 480.351582][ T36] audit: type=1400 audit(1999997526.066:1653): avc: denied { mounton } for pid=24467 comm="syz.7.7880" path="/syzcgroup/unified/syz7" dev="pstore" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 480.790547][ T36] audit: type=1400 audit(1999997526.477:1654): avc: denied { write } for pid=24486 comm="syz.3.7885" path="socket:[97522]" dev="sockfs" ino=97522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.053791][T24500] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7890'. [ 481.366833][T24512] 9pnet_fd: Insufficient options for proto=fd [ 481.398118][T24514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.400141][T24514] rust_binder: Got transaction with invalid offset. [ 481.406954][T24514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 481.414255][T24514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560 [ 481.449208][T24518] binder: Bad value for 'max' [ 481.506485][ T36] audit: type=1400 audit(1999997527.142:1655): avc: denied { unmount } for pid=21084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 481.599283][T24528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.600294][T24528] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 481.607439][T24528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 481.615569][T24528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:572 [ 481.693426][T24531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7903'. [ 481.713392][T24531] rust_binder: 574: no such ref 2 [ 481.718545][T24531] rust_binder: Write failure EFAULT in pid:574 [ 481.997334][T24536] rust_binder: Write failure EFAULT in pid:1597 [ 482.101468][T24544] devpts: called with bogus options [ 482.578772][T24563] netlink: 'syz.7.7914': attribute type 6 has an invalid length. [ 483.132125][ T4180] Bluetooth: hci1: Frame reassembly failed (-84) [ 483.296727][T24623] incfs: Options parsing error. -22 [ 483.318571][T24623] incfs: mount failed -22 [ 483.411499][T24629] devpts: called with bogus options [ 483.464326][T24633] : renamed from bond_slave_0 [ 484.061503][T24664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7948'. [ 485.008006][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 485.008052][ T36] audit: type=1400 audit(1999997530.416:1664): avc: denied { ioctl } for pid=24687 comm="syz.3.7957" path="socket:[98712]" dev="sockfs" ino=98712 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 485.160953][ T36] audit: type=1400 audit(1999997530.556:1665): avc: denied { write } for pid=24702 comm="syz.8.7963" path="socket:[98746]" dev="sockfs" ino=98746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.200562][ T36] audit: type=1400 audit(1999997530.593:1666): avc: denied { map } for pid=24705 comm="syz.8.7964" path="socket:[97900]" dev="sockfs" ino=97900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.225053][ T36] audit: type=1400 audit(1999997530.593:1667): avc: denied { accept } for pid=24705 comm="syz.8.7964" path="socket:[97900]" dev="sockfs" ino=97900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.274876][ T36] audit: type=1400 audit(1999997530.668:1668): avc: denied { bind } for pid=24721 comm="syz.8.7968" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.295221][T23915] Bluetooth: hci1: command 0x1003 tx timeout [ 485.301216][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 485.303788][ T36] audit: type=1400 audit(1999997530.668:1669): avc: denied { name_bind } for pid=24721 comm="syz.8.7968" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 485.326573][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 485.333857][ T36] audit: type=1400 audit(1999997530.668:1670): avc: denied { node_bind } for pid=24721 comm="syz.8.7968" saddr=::ffff:100.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 485.538071][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.564525][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 485.584482][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.595816][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.616764][ T31] usb 4-1: Product: syz [ 485.621165][ T31] usb 4-1: Manufacturer: syz [ 485.632805][ T31] usb 4-1: SerialNumber: syz [ 485.867288][T24695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 485.904357][T24742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 486.001600][ T36] audit: type=1400 audit(1999997531.342:1671): avc: denied { create } for pid=24748 comm="syz.0.7975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 486.028031][ T36] audit: type=1400 audit(1999997531.342:1672): avc: denied { sys_admin } for pid=24748 comm="syz.0.7975" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 486.517237][T24695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.613747][T24753] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 486.614097][ T36] audit: type=1400 audit(1999997531.912:1673): avc: denied { read write } for pid=24751 comm="syz.0.7976" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 486.615693][T24753] rust_binder: Error in use_page_slow: ESRCH [ 486.645270][T24753] rust_binder: use_range failure ESRCH [ 486.651354][T24753] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 486.656848][T24753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 486.664921][T24753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1136 [ 486.738910][ T31] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 486.754622][ T31] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 486.762118][ T31] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 486.872462][T24757] netlink: 'syz.8.7977': attribute type 58 has an invalid length. [ 486.953178][ T31] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 486.959417][ T31] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 486.966201][ T31] wwan wwan0: port wwan0mbim0 attached [ 486.973405][ T31] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 487.029741][T24766] SELinux: security_context_str_to_sid (sy{te_uÝGй ‰:ÿß) failed with errno=-22 [ 487.146195][ T148] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 487.238720][ T64] usb 4-1: USB disconnect, device number 45 [ 487.245583][T24795] rust_binder: 648: no such ref 2 [ 487.250768][T24795] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 487.250788][T24795] rust_binder: Read failure Err(EFAULT) in pid:648 [ 487.258982][ T64] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 487.336809][ T64] wwan wwan0: port wwan0mbim0 disconnected [ 487.582132][T24853] binder: Bad value for 'max' [ 487.809432][T24867] fuse: Unknown parameter '' [ 487.860037][T24873] rust_binder: Error in use_page_slow: ESRCH [ 487.860065][T24873] rust_binder: use_range failure ESRCH [ 487.866147][T24873] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 487.871851][T24873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 487.879776][T24873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1635 [ 487.915157][T24864] /dev/rnullb0: Can't open blockdev [ 487.948560][T24875] rust_binder: Read failure Err(EAGAIN) in pid:1161 [ 487.972497][T24877] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 488.005598][T24877] rust_binder: Write failure EINVAL in pid:1637 [ 488.053181][T24893] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 488.142183][T24901] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 488.204155][T24910] netlink: 5 bytes leftover after parsing attributes in process `syz.8.8014'. [ 488.213546][T24910] 0ªö»ôM: renamed from gretap0 (while UP) [ 488.220760][T24910] 0ªö»ôM: entered allmulticast mode [ 488.226471][T24910] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 488.244072][T24910] devpts: called with bogus options [ 488.471435][T24934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8022'. [ 488.520056][T24940] overlayfs: failed to clone lowerpath [ 489.100935][T24973] /dev/rnullb0: Can't open blockdev [ 490.227067][T25002] netlink: 188 bytes leftover after parsing attributes in process `syz.8.8046'. [ 490.236702][T25003] netlink: 188 bytes leftover after parsing attributes in process `syz.8.8046'. [ 490.369815][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 490.369839][ T36] audit: type=1400 audit(1999997535.429:1691): avc: denied { setattr } for pid=25004 comm="syz.7.8047" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 491.450992][T25025] incfs: Options parsing error. -22 [ 491.456435][T25025] incfs: mount failed -22 [ 491.558816][ T36] audit: type=1400 audit(1999997536.542:1692): avc: denied { mounton } for pid=25029 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 491.603596][T25029] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.610721][T25029] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.617939][T25029] bridge_slave_0: entered allmulticast mode [ 491.625451][T25029] bridge_slave_0: entered promiscuous mode [ 491.632363][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.639436][T25029] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.646620][T25029] bridge_slave_1: entered allmulticast mode [ 491.652903][T25029] bridge_slave_1: entered promiscuous mode [ 491.659095][ T4180] bridge_slave_1: left allmulticast mode [ 491.664833][ T4180] bridge_slave_1: left promiscuous mode [ 491.670515][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.678169][ T4180] bridge_slave_0: left allmulticast mode [ 491.683906][ T4180] bridge_slave_0: left promiscuous mode [ 491.689551][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.847270][ T4180] veth1_macvtap: left promiscuous mode [ 491.852888][ T4180] veth0_vlan: left promiscuous mode [ 491.895547][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.902948][T25029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.910293][T25029] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.917341][T25029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.940413][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.947810][T22783] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.957542][T22770] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.964635][T22770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.977027][T22783] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.984162][T22783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.019036][T25029] veth0_vlan: entered promiscuous mode [ 492.034556][T25029] veth1_macvtap: entered promiscuous mode [ 492.074184][ T36] audit: type=1400 audit(1999997537.019:1693): avc: denied { mounton } for pid=25029 comm="syz-executor" path="/root/syzkaller.Q9TSvV/syz-tmp" dev="sda1" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 492.104559][ T36] audit: type=1400 audit(1999997537.019:1694): avc: denied { mounton } for pid=25029 comm="syz-executor" path="/root/syzkaller.Q9TSvV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 492.156426][ T36] audit: type=1400 audit(1999997537.019:1695): avc: denied { mounton } for pid=25029 comm="syz-executor" path="/root/syzkaller.Q9TSvV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=100008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 492.189962][ T36] audit: type=1400 audit(1999997537.057:1696): avc: denied { mounton } for pid=25029 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 492.213783][ T36] audit: type=1400 audit(1999997537.057:1697): avc: denied { mounton } for pid=25029 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 492.416576][T25074] binder: Bad value for 'stats' [ 492.438125][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8069'. [ 492.450312][T25076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=25076 comm=syz.9.8069 [ 492.514825][T25084] veth0_vlan: entered allmulticast mode [ 492.526092][ T36] audit: type=1326 audit(1999997537.450:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz.3.8070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7fc00000 [ 492.586272][T25088] rust_binder: Read failure Err(EAGAIN) in pid:1659 [ 492.685245][T25099] /dev/rnullb0: Can't open blockdev [ 492.708208][T25101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 492.723798][T22783] Bluetooth: hci1: Frame reassembly failed (-84) [ 492.810682][T25115] overlayfs: failed to clone lowerpath [ 492.980080][T25129] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 492.980126][T25129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 492.988223][T25129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:25 [ 494.202030][T25144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 494.212724][T25144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 494.219344][T25144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:33 [ 494.247419][T25148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.265421][T25148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.829283][ T36] audit: type=1400 audit(1999997539.601:1699): avc: denied { mount } for pid=25166 comm="syz.0.8100" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 494.832161][T25167] devpts: called with bogus options [ 494.858514][ T36] audit: type=1400 audit(1999997539.601:1700): avc: denied { remount } for pid=25166 comm="syz.0.8100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 494.860246][T25167] /dev/rnullb0: Can't open blockdev [ 494.900485][T25169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 494.944059][T23915] Bluetooth: hci1: command 0x1003 tx timeout [ 494.944114][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 495.904426][T25188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 495.995213][T25194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 495.995598][T25194] rust_binder: Error in use_page_slow: ESRCH [ 496.002066][T25194] rust_binder: use_range failure ESRCH [ 496.008216][T25194] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 496.013855][T25194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 496.021916][T25194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1201 [ 496.152066][ T8815] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 496.327408][ T8815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.339036][ T8815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.349180][ T8815] usb 4-1: New USB device found, idVendor=1477, idProduct=1025, bcdDevice= 0.00 [ 496.357228][T25215] fuse: Bad value for 'user_id' [ 496.358605][ T8815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.363220][T25215] fuse: Bad value for 'user_id' [ 496.376688][ T8815] usb 4-1: config 0 descriptor?? [ 496.813462][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 496.813484][ T36] audit: type=1400 audit(1999997541.453:1703): avc: denied { create } for pid=25243 comm="syz.8.8123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 496.817160][ T8815] hid-generic 0003:1477:1025.0024: unknown main item tag 0x0 [ 496.850345][ T8815] hid-generic 0003:1477:1025.0024: hidraw0: USB HID v0.02 Device [HID 1477:1025] on usb-dummy_hcd.3-1/input0 [ 496.877393][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8125'. [ 496.949648][T25258] rust_binder: Write failure EFAULT in pid:1210 [ 497.029175][T25269] tipc: Enabling of bearer rejected, failed to enable media [ 497.046176][ T8815] usb 4-1: USB disconnect, device number 46 [ 497.053368][ T36] audit: type=1400 audit(1999997541.687:1704): avc: denied { getopt } for pid=25268 comm="syz.0.8131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 497.073306][ T36] audit: type=1326 audit(1999997541.696:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.100719][ T36] audit: type=1326 audit(1999997541.696:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.124387][ T36] audit: type=1326 audit(1999997541.696:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.148000][ T36] audit: type=1326 audit(1999997541.696:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.172348][ T36] audit: type=1326 audit(1999997541.696:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.196081][ T36] audit: type=1326 audit(1999997541.696:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.221404][ T36] audit: type=1326 audit(1999997541.696:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.245553][ T36] audit: type=1326 audit(1999997541.696:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.3.8107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c3b8e9a9 code=0x7ffc0000 [ 497.268359][ T31] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 497.289839][ T31] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 497.395509][T25286] rust_binder: 47: no such ref 2 [ 497.400689][T25286] rust_binder: Write failure EFAULT in pid:47 [ 497.455549][T25301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 497.535460][T25308] tmpfs: Invalid uid '0x00000000ffffffff' [ 497.708853][T25320] rust_binder: Write failure EFAULT in pid:1678 [ 497.749335][T25322] rust_binder: Error while translating object. [ 497.766658][T25322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 497.773050][T25322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1680 [ 498.097754][ T31] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 498.279544][ T31] usb 4-1: device descriptor read/64, error -71 [ 498.536510][ T31] usb 4-1: device descriptor read/64, error -71 [ 498.792669][ T31] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 498.931726][ T31] usb 4-1: device descriptor read/64, error -71 [ 499.188255][ T31] usb 4-1: device descriptor read/64, error -71 [ 499.305984][ T31] usb usb4-port1: attempt power cycle [ 499.669291][ T31] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 499.691775][ T31] usb 4-1: device descriptor read/8, error -71 [ 499.830828][ T31] usb 4-1: device descriptor read/8, error -71 [ 500.086293][ T31] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 500.108848][ T31] usb 4-1: device descriptor read/8, error -71 [ 500.141345][T25328] fuse: Bad value for 'fd' [ 500.268959][ T31] usb 4-1: device descriptor read/8, error -71 [ 500.365730][T25330] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.372815][T25330] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.380126][T25330] bridge_slave_0: entered allmulticast mode [ 500.385746][ T31] usb usb4-port1: unable to enumerate USB device [ 500.386826][T25330] bridge_slave_0: entered promiscuous mode [ 500.399156][T25330] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.406369][T25330] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.413539][T25330] bridge_slave_1: entered allmulticast mode [ 500.420019][T25330] bridge_slave_1: entered promiscuous mode [ 500.472968][T25330] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.480060][T25330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.487432][T25330] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.494540][T25330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.518538][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.526160][T22783] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.536256][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.543442][ T4180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.553390][T22783] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.560511][T22783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.603390][T25330] veth0_vlan: entered promiscuous mode [ 500.618470][T25330] veth1_macvtap: entered promiscuous mode [ 500.984246][ T31] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 501.144581][ T327] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 501.145786][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.163172][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.173122][ T31] usb 9-1: New USB device found, idVendor=1477, idProduct=1025, bcdDevice= 0.00 [ 501.182409][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.193004][ T31] usb 9-1: config 0 descriptor?? [ 501.316812][ T327] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 501.326057][ T327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.335056][ T327] usb 10-1: config 0 descriptor?? [ 501.454631][ T8815] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 501.615311][ T8815] usb 4-1: Using ep0 maxpacket: 8 [ 501.621793][ T8815] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 501.629711][ T31] hid-generic 0003:1477:1025.0026: unknown main item tag 0x0 [ 501.631715][ T8815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.646580][ T31] hid-generic 0003:1477:1025.0026: hidraw0: USB HID v0.02 Device [HID 1477:1025] on usb-dummy_hcd.8-1/input0 [ 501.668633][ T8815] usb 4-1: config 0 descriptor?? [ 501.852201][ T305] usb 9-1: USB disconnect, device number 16 [ 501.889098][ T8815] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 502.194927][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 502.195010][ T36] audit: type=1326 audit(1999997546.495:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25340 comm="syz.8.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca7dc1265 code=0x7ffc0000 [ 502.302224][ T36] audit: type=1326 audit(1999997546.598:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25340 comm="syz.8.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca7dc1265 code=0x7ffc0000 [ 502.409319][ T36] audit: type=1326 audit(1999997546.691:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25340 comm="syz.8.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcca7d8e9a9 code=0x7ffc0000 [ 502.439073][T25343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 502.439551][T25343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 502.446080][T25343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 502.459588][ T327] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 502.479835][ T327] asix 10-1:0.0: probe with driver asix failed with error -71 [ 502.491663][ T327] usb 10-1: USB disconnect, device number 3 [ 502.496334][T25364] tmpfs: Invalid uid '0x00000000ffffffff' [ 502.542250][ T8815] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 502.549506][T25370] __vm_enough_memory: pid: 25370, comm: syz.8.8164, bytes: 18014402804453376 not enough memory for the allocation [ 502.554013][ T8815] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 502.588725][ T8815] asix 4-1:0.0: probe with driver asix failed with error -71 [ 502.596799][T25374] binder: Unknown parameter 'defcontext01777777777777777777777' [ 502.601781][ T8815] usb 4-1: USB disconnect, device number 51 [ 502.606465][T25374] 8021q: VLANs not supported on lo [ 502.803936][T25377] netlink: 72 bytes leftover after parsing attributes in process `syz.8.8167'. [ 502.812519][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 502.813640][T23915] Bluetooth: hci1: command 0x1003 tx timeout [ 502.821157][T25377] netlink: 'syz.8.8167': attribute type 12 has an invalid length. [ 502.855209][ T36] audit: type=1400 audit(1999997547.103:1767): avc: denied { map } for pid=25376 comm="syz.8.8167" path="socket:[101765]" dev="sockfs" ino=101765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 502.890315][T25384] tap0: tun_chr_ioctl cmd 1074025673 [ 502.895970][T25382] tap0: tun_chr_ioctl cmd 1074025675 [ 502.901792][T25382] tap0: persist enabled [ 502.906024][T25384] tap0: tun_chr_ioctl cmd 1074025675 [ 502.911841][T25384] tap0: persist enabled [ 502.916091][T25382] tap0: tun_chr_ioctl cmd 1074025675 [ 502.921669][T25382] tap0: persist enabled [ 502.958264][T25393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.021988][T25395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8174'. [ 503.153142][T25395] rust_binder: Error in use_page_slow: ESRCH [ 503.153196][T25395] rust_binder: use_range failure ESRCH [ 503.181086][T25395] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 503.199008][T25395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 503.209796][T25395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1238 [ 503.220136][T25401] binder: Bad value for 'stats' [ 503.264066][ T36] audit: type=1400 audit(1999997547.496:1768): avc: denied { getattr } for pid=25405 comm="syz.3.8177" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 503.306347][T25393] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 503.379079][T25419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.433849][T25421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.516232][T25426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.535425][T25428] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.596651][T25429] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 503.603204][T25429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 503.611371][T25429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:101 [ 503.845046][ T36] audit: type=1400 audit(1999997548.029:1769): avc: denied { mounton } for pid=25427 comm="syz.9.8183" path="/31/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 503.901687][T25434] netlink: 'syz.8.8184': attribute type 46 has an invalid length. [ 503.909733][T25434] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8184'. [ 503.934915][T25444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.936806][T25444] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 503.943332][T25444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 503.951453][T25444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:43 [ 503.977445][ T36] audit: type=1400 audit(1999997548.151:1770): avc: denied { bind } for pid=25448 comm="syz.8.8189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 503.978520][T25449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 504.008191][T25449] rust_binder: Error while translating object. [ 504.014911][T25449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 504.021204][T25449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 504.052351][ T36] audit: type=1400 audit(1999997548.226:1771): avc: denied { bind } for pid=25451 comm="syz.0.8190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.074034][T25458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 504.107391][T25461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 504.364333][ T36] audit: type=1400 audit(1999997548.525:1772): avc: denied { name_bind } for pid=25487 comm="syz.8.8202" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 504.479468][ T36] audit: type=1400 audit(1999997548.628:1773): avc: denied { mount } for pid=25496 comm="syz.8.8204" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 504.903802][T25523] netlink: 64 bytes leftover after parsing attributes in process `syz.9.8208'. [ 505.168890][T25528] rust_binder: Write failure EFAULT in pid:119 [ 505.207276][ T327] rust_binder: 25525: removing orphan mapping 0:4120 [ 505.603534][T25550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 505.683581][T25552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 506.149619][T25571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 506.160196][T22770] veth1_macvtap: left promiscuous mode [ 506.172372][T22770] veth0_vlan: left promiscuous mode [ 506.724695][T25601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 506.822069][T25609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 506.842878][T25609] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 166) [ 506.842910][T25609] rust_binder: Error while translating object. [ 506.864161][T25609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 506.875914][T25609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 507.180282][T25626] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8250'. [ 507.316087][T25634] fuse: Unknown parameter 'rootm' [ 507.528542][T25646] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8242'. [ 507.867948][T25669] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 507.893138][T25672] rust_binder: Read failure Err(EAGAIN) in pid:1274 [ 507.893210][T25669] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 507.941475][T25669] rust_binder: 1737: no such ref 2 [ 507.947054][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 507.947075][ T36] audit: type=1400 audit(1999997551.864:1778): avc: denied { map } for pid=25673 comm="syz.9.8257" path="socket:[103931]" dev="sockfs" ino=103931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 507.978988][T25679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 507.987742][T25669] rust_binder: Read failure Err(EAGAIN) in pid:1737 [ 508.025177][ T36] audit: type=1400 audit(1999997551.864:1779): avc: denied { read } for pid=25673 comm="syz.9.8257" path="socket:[103931]" dev="sockfs" ino=103931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 508.237287][T25693] random: crng reseeded on system resumption [ 508.243505][ T36] audit: type=1400 audit(1999997552.145:1780): avc: denied { read write } for pid=25690 comm="syz.3.8263" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 508.296941][ T36] audit: type=1400 audit(1999997552.145:1781): avc: denied { ioctl open } for pid=25690 comm="syz.3.8263" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 508.398175][ T36] audit: type=1400 audit(1999997552.295:1782): avc: denied { accept } for pid=25689 comm="syz.8.8262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 508.400392][T25694] /dev/rnullb0: Can't open blockdev [ 508.509201][T25706] rust_binder: 25702 RLIMIT_NICE not set [ 508.518606][ T305] rust_binder: 25701: removing orphan mapping 0:1048 [ 508.659119][T25717] syz.3.8268 (25717): /proc/25716/oom_adj is deprecated, please use /proc/25716/oom_score_adj instead. [ 508.694638][T25717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 508.694676][T25717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1754 [ 508.711103][T25717] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 508.723443][T25717] rust_binder: Read failure Err(EFAULT) in pid:1754 [ 508.745607][ T327] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 508.948700][ T327] usb 9-1: Using ep0 maxpacket: 16 [ 508.962312][ T327] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.987869][ T327] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.017470][ T327] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.044593][ T327] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.054187][ T327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.067722][ T327] usb 9-1: config 0 descriptor?? [ 509.243320][T25735] fuse: Bad value for 'fd' [ 509.344386][ T64] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 509.389593][T25740] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8274'. [ 509.506024][ T64] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 509.511884][ T36] audit: type=1400 audit(1999997553.333:1783): avc: denied { remount } for pid=25743 comm="syz.0.8276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 509.514640][ T64] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 509.535956][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.547651][ T64] usb 10-1: config 220 has no interface number 2 [ 509.552297][ T327] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 509.559364][ T64] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 509.570192][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.580081][ T64] usb 10-1: config 220 interface 0 has no altsetting 0 [ 509.586859][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.593361][ T64] usb 10-1: config 220 interface 76 has no altsetting 0 [ 509.600948][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.607613][ T64] usb 10-1: config 220 interface 1 has no altsetting 0 [ 509.615226][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.623627][ T64] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 509.629211][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.638285][ T64] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.646148][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.654552][ T64] usb 10-1: Product: syz [ 509.661989][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.666348][ T64] usb 10-1: Manufacturer: syz [ 509.673762][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.678417][ T64] usb 10-1: SerialNumber: syz [ 509.685810][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.697709][ T327] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 509.707009][ T327] ================================================================== [ 509.715116][ T327] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 509.722870][ T327] Read of size 896 at addr ffff88812a695f01 by task kworker/0:3/327 [ 509.730855][ T327] [ 509.733289][ T327] CPU: 0 UID: 0 PID: 327 Comm: kworker/0:3 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 509.733315][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.733329][ T327] Workqueue: usb_hub_wq hub_event [ 509.733359][ T327] Call Trace: [ 509.733366][ T327] [ 509.733375][ T327] __dump_stack+0x21/0x30 [ 509.733399][ T327] dump_stack_lvl+0x10c/0x190 [ 509.733420][ T327] ? __cfi_dump_stack_lvl+0x10/0x10 [ 509.733441][ T327] ? __cfi__printk+0x10/0x10 [ 509.733467][ T327] print_address_description+0x71/0x220 [ 509.733485][ T327] print_report+0x4a/0x70 [ 509.733500][ T327] kasan_report+0x163/0x1a0 [ 509.733527][ T327] ? mon_bin_event+0x12c1/0x23e0 [ 509.733549][ T327] ? mon_bin_event+0x12c1/0x23e0 [ 509.733571][ T327] kasan_check_range+0x299/0x2a0 [ 509.733586][ T327] ? mon_bin_event+0x12c1/0x23e0 [ 509.733608][ T327] __asan_memcpy+0x31/0x80 [ 509.733629][ T327] mon_bin_event+0x12c1/0x23e0 [ 509.733652][ T327] ? mon_bin_complete+0x50/0x50 [ 509.733677][ T327] ? __kmalloc_noprof+0x1b1/0x450 [ 509.733699][ T327] ? __hid_request+0x1e5/0x410 [ 509.733722][ T327] ? hid_connect+0x49a/0x1a20 [ 509.733743][ T327] ? hid_hw_start+0xcb/0x160 [ 509.733765][ T327] ? ms_probe+0x194/0x460 [ 509.733785][ T327] ? __cfi_mon_bin_submit+0x10/0x10 [ 509.733807][ T327] mon_bin_submit+0x2b/0x40 [ 509.733827][ T327] mon_submit+0x1b9/0x230 [ 509.733846][ T327] usb_hcd_submit_urb+0x12d/0x1a20 [ 509.733862][ T327] ? bus_probe_device+0x18b/0x270 [ 509.733883][ T327] ? usb_probe_device+0x1d4/0x380 [ 509.733908][ T327] ? really_probe+0x2d3/0x890 [ 509.733935][ T327] ? __driver_probe_device+0x198/0x280 [ 509.733961][ T327] ? driver_probe_device+0x54/0x3f0 [ 509.733987][ T327] ? __device_attach_driver+0x2f1/0x4b0 [ 509.734014][ T327] usb_submit_urb+0x111b/0x1800 [ 509.734036][ T327] usb_start_wait_urb+0x11b/0x2f0 [ 509.734059][ T327] ? usb_api_blocking_completion+0xd0/0xd0 [ 509.734082][ T327] ? __kasan_kmalloc+0x96/0xb0 [ 509.734108][ T327] ? __kasan_check_write+0x18/0x20 [ 509.734130][ T327] ? usb_alloc_urb+0x9b/0x200 [ 509.734149][ T327] usb_control_msg+0x25a/0x490 [ 509.734171][ T327] usbhid_raw_request+0x457/0x590 [ 509.734193][ T327] __hid_request+0x1e5/0x410 [ 509.734217][ T327] hidinput_connect+0x241b/0x3340 [ 509.734255][ T327] hid_connect+0x49a/0x1a20 [ 509.734279][ T327] ? usbhid_start+0x1a67/0x2530 [ 509.734298][ T327] ? __cfi_hid_connect+0x10/0x10 [ 509.734323][ T327] hid_hw_start+0xcb/0x160 [ 509.734346][ T327] ms_probe+0x194/0x460 [ 509.734367][ T327] hid_device_probe+0x2c4/0x5d0 [ 509.734393][ T327] ? __cfi_hid_device_probe+0x10/0x10 [ 509.734417][ T327] really_probe+0x2d3/0x890 [ 509.734444][ T327] __driver_probe_device+0x198/0x280 [ 509.734470][ T327] driver_probe_device+0x54/0x3f0 [ 509.734496][ T327] ? __device_attach_driver+0x2db/0x4b0 [ 509.734523][ T327] __device_attach_driver+0x2f1/0x4b0 [ 509.734550][ T327] bus_for_each_drv+0x25d/0x2f0 [ 509.734570][ T327] ? __cfi___device_attach_driver+0x10/0x10 [ 509.734598][ T327] ? __cfi_bus_for_each_drv+0x10/0x10 [ 509.734618][ T327] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 509.734639][ T327] __device_attach+0x2bd/0x3a0 [ 509.734664][ T327] ? device_attach+0x40/0x40 [ 509.734688][ T327] ? _raw_spin_lock+0x8c/0x120 [ 509.734706][ T327] ? __cfi__raw_spin_lock+0x10/0x10 [ 509.734726][ T327] device_initial_probe+0x1e/0x30 [ 509.734751][ T327] bus_probe_device+0x18b/0x270 [ 509.734772][ T327] device_add+0x80c/0xc00 [ 509.734797][ T327] hid_add_device+0x39b/0x560 [ 509.734822][ T327] usbhid_probe+0xde3/0x12b0 [ 509.734844][ T327] usb_probe_interface+0x696/0xc00 [ 509.734871][ T327] ? __cfi_usb_probe_interface+0x10/0x10 [ 509.734898][ T327] really_probe+0x2d3/0x890 [ 509.734925][ T327] __driver_probe_device+0x198/0x280 [ 509.734951][ T327] driver_probe_device+0x54/0x3f0 [ 509.734977][ T327] ? __device_attach_driver+0x2db/0x4b0 [ 509.735004][ T327] __device_attach_driver+0x2f1/0x4b0 [ 509.735031][ T327] bus_for_each_drv+0x25d/0x2f0 [ 509.735051][ T327] ? __cfi___device_attach_driver+0x10/0x10 [ 509.735078][ T327] ? __cfi_bus_for_each_drv+0x10/0x10 [ 509.735099][ T327] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 509.735119][ T327] __device_attach+0x2bd/0x3a0 [ 509.735144][ T327] ? device_attach+0x40/0x40 [ 509.735168][ T327] ? _raw_spin_lock+0x8c/0x120 [ 509.735186][ T327] ? __cfi__raw_spin_lock+0x10/0x10 [ 509.735205][ T327] device_initial_probe+0x1e/0x30 [ 509.735235][ T327] bus_probe_device+0x18b/0x270 [ 509.735255][ T327] device_add+0x80c/0xc00 [ 509.735280][ T327] usb_set_configuration+0x1ad4/0x20b0 [ 509.735309][ T327] usb_generic_driver_probe+0x95/0x160 [ 509.735331][ T327] usb_probe_device+0x1d4/0x380 [ 509.735356][ T327] ? __cfi_usb_probe_device+0x10/0x10 [ 509.735382][ T327] really_probe+0x2d3/0x890 [ 509.735409][ T327] __driver_probe_device+0x198/0x280 [ 509.735435][ T327] driver_probe_device+0x54/0x3f0 [ 509.735461][ T327] ? __device_attach_driver+0x2db/0x4b0 [ 509.735488][ T327] __device_attach_driver+0x2f1/0x4b0 [ 509.735515][ T327] bus_for_each_drv+0x25d/0x2f0 [ 509.735535][ T327] ? __cfi___device_attach_driver+0x10/0x10 [ 509.735562][ T327] ? __cfi_bus_for_each_drv+0x10/0x10 [ 509.735583][ T327] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 509.735604][ T327] __device_attach+0x2bd/0x3a0 [ 509.735629][ T327] ? device_attach+0x40/0x40 [ 509.735653][ T327] ? _raw_spin_lock+0x8c/0x120 [ 509.735670][ T327] ? __cfi__raw_spin_lock+0x10/0x10 [ 509.735689][ T327] device_initial_probe+0x1e/0x30 [ 509.735714][ T327] bus_probe_device+0x18b/0x270 [ 509.735734][ T327] device_add+0x80c/0xc00 [ 509.735758][ T327] usb_new_device+0x9ed/0x1590 [ 509.735781][ T327] ? __cfi_usb_new_device+0x10/0x10 [ 509.735805][ T327] hub_event+0x2c81/0x4270 [ 509.735837][ T327] ? __cfi_hub_event+0x10/0x10 [ 509.735861][ T327] ? __kasan_check_write+0x18/0x20 [ 509.735882][ T327] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 509.735906][ T327] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 509.735925][ T327] ? kick_pool+0xb9/0x550 [ 509.735941][ T327] process_scheduled_works+0x7d5/0x1020 [ 509.735969][ T327] worker_thread+0xc58/0x1250 [ 509.735997][ T327] kthread+0x2c7/0x370 [ 509.736012][ T327] ? __cfi_worker_thread+0x10/0x10 [ 509.736036][ T327] ? __cfi_kthread+0x10/0x10 [ 509.736050][ T327] ret_from_fork+0x64/0xa0 [ 509.736072][ T327] ? __cfi_kthread+0x10/0x10 [ 509.736087][ T327] ret_from_fork_asm+0x1a/0x30 [ 509.736111][ T327] [ 509.736119][ T327] [ 510.360625][ T327] Allocated by task 327: [ 510.364903][ T327] kasan_save_track+0x3e/0x80 [ 510.369604][ T327] kasan_save_alloc_info+0x40/0x50 [ 510.374758][ T327] __kasan_kmalloc+0x96/0xb0 [ 510.379359][ T327] __kmalloc_noprof+0x1b1/0x450 [ 510.384229][ T327] __hid_request+0xa9/0x410 [ 510.388749][ T327] hidinput_connect+0x241b/0x3340 [ 510.393785][ T327] hid_connect+0x49a/0x1a20 [ 510.398815][ T327] hid_hw_start+0xcb/0x160 [ 510.403245][ T327] ms_probe+0x194/0x460 [ 510.407413][ T327] hid_device_probe+0x2c4/0x5d0 [ 510.412303][ T327] really_probe+0x2d3/0x890 [ 510.416815][ T327] __driver_probe_device+0x198/0x280 [ 510.422139][ T327] driver_probe_device+0x54/0x3f0 [ 510.427176][ T327] __device_attach_driver+0x2f1/0x4b0 [ 510.432559][ T327] bus_for_each_drv+0x25d/0x2f0 [ 510.437501][ T327] __device_attach+0x2bd/0x3a0 [ 510.442279][ T327] device_initial_probe+0x1e/0x30 [ 510.447312][ T327] bus_probe_device+0x18b/0x270 [ 510.452164][ T327] device_add+0x80c/0xc00 [ 510.456518][ T327] hid_add_device+0x39b/0x560 [ 510.461196][ T327] usbhid_probe+0xde3/0x12b0 [ 510.465786][ T327] usb_probe_interface+0x696/0xc00 [ 510.471078][ T327] really_probe+0x2d3/0x890 [ 510.475612][ T327] __driver_probe_device+0x198/0x280 [ 510.480904][ T327] driver_probe_device+0x54/0x3f0 [ 510.486018][ T327] __device_attach_driver+0x2f1/0x4b0 [ 510.491403][ T327] bus_for_each_drv+0x25d/0x2f0 [ 510.496255][ T327] __device_attach+0x2bd/0x3a0 [ 510.501021][ T327] device_initial_probe+0x1e/0x30 [ 510.506066][ T327] bus_probe_device+0x18b/0x270 [ 510.510948][ T327] device_add+0x80c/0xc00 [ 510.515461][ T327] usb_set_configuration+0x1ad4/0x20b0 [ 510.520925][ T327] usb_generic_driver_probe+0x95/0x160 [ 510.526400][ T327] usb_probe_device+0x1d4/0x380 [ 510.531359][ T327] really_probe+0x2d3/0x890 [ 510.535971][ T327] __driver_probe_device+0x198/0x280 [ 510.541269][ T327] driver_probe_device+0x54/0x3f0 [ 510.546319][ T327] __device_attach_driver+0x2f1/0x4b0 [ 510.551702][ T327] bus_for_each_drv+0x25d/0x2f0 [ 510.556558][ T327] __device_attach+0x2bd/0x3a0 [ 510.561327][ T327] device_initial_probe+0x1e/0x30 [ 510.566357][ T327] bus_probe_device+0x18b/0x270 [ 510.571218][ T327] device_add+0x80c/0xc00 [ 510.575635][ T327] usb_new_device+0x9ed/0x1590 [ 510.580403][ T327] hub_event+0x2c81/0x4270 [ 510.584835][ T327] process_scheduled_works+0x7d5/0x1020 [ 510.590498][ T327] worker_thread+0xc58/0x1250 [ 510.595188][ T327] kthread+0x2c7/0x370 [ 510.599277][ T327] ret_from_fork+0x64/0xa0 [ 510.603698][ T327] ret_from_fork_asm+0x1a/0x30 [ 510.608470][ T327] [ 510.610811][ T327] The buggy address belongs to the object at ffff88812a695f00 [ 510.610811][ T327] which belongs to the cache kmalloc-8 of size 8 [ 510.624513][ T327] The buggy address is located 1 bytes inside of [ 510.624513][ T327] allocated 7-byte region [ffff88812a695f00, ffff88812a695f07) [ 510.638311][ T327] [ 510.640631][ T327] The buggy address belongs to the physical page: [ 510.647044][ T327] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a695 [ 510.656022][ T327] flags: 0x4000000000000000(zone=1) [ 510.661244][ T327] page_type: f5(slab) [ 510.665243][ T327] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 510.673829][ T327] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 510.682414][ T327] page dumped because: kasan: bad access detected [ 510.688932][ T327] page_owner tracks the page as allocated [ 510.694820][ T327] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13910, tgid 13910 (syz-executor), ts 286525718562, free_ts 286478128952 [ 510.714352][ T327] post_alloc_hook+0x3b9/0x3f0 [ 510.719115][ T327] prep_new_page+0x1c/0x120 [ 510.723611][ T327] get_page_from_freelist+0x46bb/0x4750 [ 510.729153][ T327] __alloc_pages_noprof+0x30d/0x6c0 [ 510.734346][ T327] alloc_slab_page+0x6b/0x1f0 [ 510.739026][ T327] allocate_slab+0x69/0x440 [ 510.743547][ T327] ___slab_alloc+0x59a/0x8b0 [ 510.748142][ T327] __kmalloc_node_track_caller_noprof+0x23a/0x440 [ 510.754557][ T327] kstrdup+0x4d/0x140 [ 510.758536][ T327] kstrdup_const+0x45/0x60 [ 510.762948][ T327] __kernfs_new_node+0x9d/0x700 [ 510.767815][ T327] kernfs_new_node+0x154/0x280 [ 510.772597][ T327] kernfs_create_dir_ns+0x4b/0x130 [ 510.777710][ T327] sysfs_create_dir_ns+0x11b/0x200 [ 510.782839][ T327] kobject_add_internal+0x703/0xc20 [ 510.788480][ T327] kobject_init_and_add+0x126/0x190 [ 510.793689][ T327] page last free pid 13916 tgid 13913 stack trace: [ 510.800300][ T327] free_unref_page+0xae5/0xdd0 [ 510.805063][ T327] __free_pages+0x6b/0x3b0 [ 510.809484][ T327] free_pages+0x86/0x90 [ 510.813639][ T327] pgd_free+0x1b3/0x1d0 [ 510.817803][ T327] __mmdrop+0xb2/0x3a0 [ 510.821966][ T327] finish_task_switch+0x2a9/0x780 [ 510.826989][ T327] __schedule+0x1333/0x1e00 [ 510.831494][ T327] preempt_schedule_common+0x2d/0x60 [ 510.836780][ T327] preempt_schedule+0xb0/0xd0 [ 510.841469][ T327] preempt_schedule_thunk+0x1a/0x40 [ 510.846689][ T327] up_write+0x9f/0x280 [ 510.850754][ T327] copy_mm+0x1655/0x1c20 [ 510.855011][ T327] copy_process+0x123c/0x3220 [ 510.859681][ T327] kernel_clone+0x23f/0x830 [ 510.864184][ T327] __x64_sys_clone+0x18c/0x1f0 [ 510.868942][ T327] x64_sys_call+0x2b3c/0x2ee0 [ 510.873626][ T327] [ 510.875949][ T327] Memory state around the buggy address: [ 510.881571][ T327] ffff88812a695e00: 05 fc fc fc fa fc fc fc 06 fc fc fc fa fc fc fc [ 510.889624][ T327] ffff88812a695e80: 05 fc fc fc fa fc fc fc 06 fc fc fc 05 fc fc fc [ 510.897673][ T327] >ffff88812a695f00: 07 fc fc fc fa fc fc fc 05 fc fc fc 05 fc fc fc [ 510.905724][ T327] ^ [ 510.909791][ T327] ffff88812a695f80: fa fc fc fc 04 fc fc fc 05 fc fc fc 05 fc fc fc [ 510.917851][ T327] ffff88812a696000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.925907][ T327] ================================================================== [ 510.933972][ T327] Disabling lock debugging due to kernel taint [ 510.957049][ T327] microsoft 0003:045E:07DA.0027: No inputs registered, leaving [ 510.957248][T25704] rust_binder: 127: no such ref 0 [ 510.969910][ T327] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 510.975192][T25704] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 510.988591][T25704] rust_binder: Write failure EINVAL in pid:127 [ 511.002225][ T36] audit: type=1400 audit(1999997554.727:1784): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 511.019763][ T327] microsoft 0003:045E:07DA.0027: no inputs found [ 511.034755][ T36] audit: type=1400 audit(1999997554.727:1785): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.037451][ T327] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 511.058633][ T36] audit: type=1400 audit(1999997554.727:1786): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.077693][ T327] usb 9-1: USB disconnect, device number 17 [ 511.088711][ T36] audit: type=1400 audit(1999997554.727:1787): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.221369][ T64] usb 10-1: selecting invalid altsetting 0 [ 511.227615][ T64] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 511.234293][ T64] usb 10-1: No valid video chain found. [ 511.244663][ T64] usb 10-1: USB disconnect, device number 4