last executing test programs: 5m11.128851335s ago: executing program 3 (id=311): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) (async, rerun: 64) r3 = dup(0xffffffffffffffff) (rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) (async, rerun: 32) read$FUSE(r3, 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) 5m11.035929387s ago: executing program 3 (id=319): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x92e00, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) (async) close_range(r2, r2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x3f, 0x0, 0x0, 0x9, 0x1ed7}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@wrmsr={0x1e, 0x20, {0x2a3, 0x9}}, @wrmsr={0x1e, 0x20, {0xaa6, 0x2}}, @wr_crn={0x46, 0x20, {0x0, 0x80}}, @uexit={0x0, 0x18, 0x5b08}, @wrmsr={0x1e, 0x20, {0x8c5, 0x80000001}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0x8ef}}, @code={0xa, 0x5c, {"410f20a7672e0f01c267f3450fc7b20000008043db9192b700008fa9c801ab0100000066baf80cb808389f87ef66bafc0cb851000000ef260f78d6460f005e09c461895f8a255400000f32"}}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @uexit={0x0, 0x18, 0xa444}, @wrmsr={0x1e, 0x20, {0x2da, 0xa}}, @wrmsr={0x1e, 0x20, {0x8b3, 0x10000}}, @wr_crn={0x46, 0x20, {0x3, 0x106d8ad1}}, @uexit={0x0, 0x18, 0x70}, @wrmsr={0x1e, 0x20, {0x1, 0x8f}}, @rdmsr={0x32, 0x18, {0x2c9}}, @wrmsr={0x1e, 0x20, {0x491, 0x40}}, @code={0xa, 0x73, {"440f20c03501000000440f22c04a0fc7ace4000000000f381d1f66baf80cb8e4f99583ef66bafc0c66edb9b10800000f32b9c2020000b8c3ac0000ba000000000f3041d2e5b9800000c00f3235008000000f302e6426420f01c4b8010000000f01c1"}}, @code={0xa, 0x71, {"c46278f3d9b9660a0000b83a000000ba000000000f30440f20c03501000000440f22c0660f57a0001000002e650f38f922c744240006000000c7442402af653a45c7442406000000000f011c240f01cff3440f2c4d000f094d0fc79a112fcfa9"}}, @wrmsr={0x1e, 0x20, {0x287, 0x4}}, @cpuid={0x14, 0x18, {0x10, 0x3bbd}}, @wrmsr={0x1e, 0x20, {0x95f, 0x4}}, @wrmsr={0x1e, 0x20, {0xa8a, 0x7f}}, @wr_crn={0x46, 0x20, {0x4, 0xf31c}}, @cpuid={0x14, 0x18, {0x5, 0xf13c}}, @cpuid={0x14, 0x18, {0x2, 0xd842}}], 0x3d8}) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000700)) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) write(0xffffffffffffffff, &(0x7f0000000040)="260000002200470105000710", 0xc) (async) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000020002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) r8 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r8], 0x20}}, 0x40816) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 5m11.035794757s ago: executing program 3 (id=320): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x40000000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 5m11.030553857s ago: executing program 3 (id=321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x4000011, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000600)=""/207, 0xcf}], 0x3, 0x3, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.006649957s ago: executing program 3 (id=324): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x8000, 0xfffb, 0x7f, 0x19, "2144e03d760700"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500001e0800034000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20048051) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES8], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="4d01000000000000002f00e50414090b00920000", 0x5e0, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @broadcast}, 0x14) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7) (async) r5 = syz_open_pts(r1, 0x20800) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x800, 0x0) dup3(r5, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x44) 5m10.947521648s ago: executing program 3 (id=329): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x57) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1080) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r8, 0x1, 0x1}, 0x14) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) socket(0x23, 0x80002, 0xfff) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c616c616d653d212528292d5c292a2c64657275673d3078303030303030303030303030303030342c00b675a16eab86eb79fbe2b23d7a37cc5aeb1d82e3f7eb2ccd0c4891d4dab3c1"]) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_bcm(0x1d, 0x2, 0x2) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x24000004) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="050000007402b8f4191d7ada", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}}, {{0x0, 0x9e10e829a8486a96, &(0x7f0000000100), 0x10000000000002c9}}], 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="050000007402b8f4191d7ada", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}}, {{0x0, 0x9e10e829a8486a96, &(0x7f0000000100), 0x10000000000002c9}}], 0x2, 0x0) read$FUSE(r10, &(0x7f00000029c0)={0x2020}, 0x2020) 5m10.905453009s ago: executing program 32 (id=329): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x57) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1080) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r8, 0x1, 0x1}, 0x14) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) socket(0x23, 0x80002, 0xfff) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c616c616d653d212528292d5c292a2c64657275673d3078303030303030303030303030303030342c00b675a16eab86eb79fbe2b23d7a37cc5aeb1d82e3f7eb2ccd0c4891d4dab3c1"]) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_bcm(0x1d, 0x2, 0x2) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x24000004) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="050000007402b8f4191d7ada", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}}, {{0x0, 0x9e10e829a8486a96, &(0x7f0000000100), 0x10000000000002c9}}], 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="050000007402b8f4191d7ada", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000a40)="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", 0x1000}], 0x3}}, {{0x0, 0x9e10e829a8486a96, &(0x7f0000000100), 0x10000000000002c9}}], 0x2, 0x0) read$FUSE(r10, &(0x7f00000029c0)={0x2020}, 0x2020) 2m40.421778303s ago: executing program 4 (id=3624): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2m37.389386022s ago: executing program 4 (id=3678): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x1}}], 0x1, 0x44000840) 2m37.375320002s ago: executing program 4 (id=3679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7ff, 0x2, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m37.302610664s ago: executing program 4 (id=3683): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 2m37.302447544s ago: executing program 4 (id=3685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0xff, 0xffff, 0x6}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2}}, @val={0x76, 0x6, {0x4, 0x6, 0x26, 0x4}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0) 2m37.205237055s ago: executing program 4 (id=3691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3504, 0x2, 0x2, 0x0, 0x12}, [@algo_crypt={0x48, 0x2, {{'xts-camellia-asm\x00'}}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x180}}, 0x0) 2m37.148398486s ago: executing program 33 (id=3691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3504, 0x2, 0x2, 0x0, 0x12}, [@algo_crypt={0x48, 0x2, {{'xts-camellia-asm\x00'}}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x180}}, 0x0) 1m41.74117298s ago: executing program 1 (id=4542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fe8000000000000000000000000000bbfc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000300000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000100000000000000040105007f0000010000ff000000000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000040000000fc000000000000000000000000000000000000003300000000000000ac1414aa0000000000000000000000000000003401ca2e7802"], 0x1bc}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0}) 1m41.636232072s ago: executing program 1 (id=4543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r1, 0x401) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000), 0xfffffffffffffe2e) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.633763252s ago: executing program 1 (id=4545): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x7, 0x2}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r1}, r2, 0x2, @unused=[0x2, 0x1, 0xfffffffffffffff5, 0x1], @subvolid=0x9}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001080)={'virt_wifi0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/syz1\x00', 0x200002, 0x0) close_range(r3, r0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000003540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003500)={&(0x7f0000001140)={0x23a0, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb0c, 0x3, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x92}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "b96d0a0ab5a7542744103e43ba5b891428fbc19749f9a25d8a084a3c2288365a206a001660e16dbdac771030907214b7c2ea20091bc453ec5a11c233f1cf11068cdb75dcbcc2abda9f5c00ddd8e2edd5fa245b203713bf072238d9fe99bd3fea4f689e2187f07f23ffd0d5c470d61996bbe72e8324516d2d4941"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "fa258b26311e626aae797fa1eacffb2c34e749ed8e6e4a0dca67c4a142cbcefc3d44fe4f04"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "098295fb83c3a3fa212f97d80f517e83442624ca3cbd5658a88c55701ed38e4e9c2a86dfa5a315f7cba6148b87a8f67cfc43554c862971506d19515b488e6e9e9885ca85bb11aca8ee"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10000}]}, {0x5e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "8a7803ca81dee817fc56a640a2f548770d9e89b42be421de0ecd48f6a4d5fa94b8b9ef9c3462c068dc7a0cbe295eca6a904dfabc773b2845f693b13fe1c8d9629317dd4cba16131253c5fdcaffa5fdd945cda50fc5ec3bf4899efc32371e8be01b81b9474afdc9dc0e0e131bba68ebdbd330738641ee19d5f16d07591db735d64912df6e69d8bda24df8d24bf3c341ab946e5df5d62e893d"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "03cd15231fb78e32d96e9ee6a7b40ebb7f71ff5262c42074df57514766033f2554eed4b73414b88eed3753954ab0ae30f22925e869c6cbad920ff0fa2d64725ca73f1768bd03be1cfc6c1926f4a576f57e0f8522e7531eba891eea6198ee38474dd077f57f117275da2f3570eefd908f2fcf08ff48"}, @NFTA_DATA_VALUE={0x14, 0x1, "5af2210d94bd27b98b88e8ae701b9840"}]}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x2e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "dc5a3afd1d1826cdb748789e76933a53232558c241c77d0e0970f43808f86903c8e608b675d99cb8b92635e8734c2551146a22a7430e77b1bb7350ad16cd906c9ee2ef00c814e1bd41f67d8f960695a7d7cee602d01bc365a3d20aa71cc1473772080c7ee409f3801c5e209cb3741f3bf7481e9179e46a3aee315f4ddc78a7f89f"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xbf943e8b88221b42}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x60, 0x1, "7c56b238d5a6d6d386720d3d0daaee44e38e02341e9f4d8076827fdce3568c8a89ace2c145508984d5717d1c1b32f0170d8c18d631ec9ca39cd0855d9bbe2d216c2c92c43e6af5d5388e7b70479acc18dee32038501c7819c10ca7fb"}, @NFTA_DATA_VALUE={0x42, 0x1, "4cbdb8f1f3bca8a4e5993917dd983efeadd3e92d2d873e64800ee64c9ac4b2a344e70cf77691b9e3b2572c8e70e002c191f26e16d2413bcdedd5151cc4e6"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x12, 0x1, "9a04cc04c2add87322537e2d6259"}, @NFTA_DATA_VALUE={0xe6, 0x1, "2ddd454b31211a13aead1f05662d1f73c67dca9af08b52d9371430428597db2c69dc94e41e8837bbd3472fae9fdd5b27c0ba90c179ec77e32030eb9fe1407867a139cbe5f0a41f388502b8d543aeb3c71d3a9eb73fcf927581c1b22a7f91579799e4a7216df55fa9ef7a82c8b7825c889920dc35dc68bb432fac0e0401dddd9213fa9e24e6b37df1299f97ecf94635a745eb065f749938abf10154fa3f87dd1f847987ede8d8fc0729d474859b2ad8eb5f24f873a8e8c9486847b28afb6103d649614115fbfe39cec19cf828316dbb6a502c26be1097dc0a05745b82fd43eb2e146b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "aac910a092726a1c4170d781046cac9e582a1e600a97caee0d809927f044f1e78d3b39c38772370b577b9f2bc77092abe6845c73597b25ceef5ca0d5288e7fb1d77910371b84fe57da434e4e1971a7fab974402378202e354fc54e093bc4c069328865c0c4df9cd9e27c2c858781bac1e99f8527d1c875c241b3246c5d776351da350213eb8c706a978da5f1cbc4e479dd"}]}, {0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "be6ac53833fc99e77e51d27bae307a6acdb9e38a0a590f5bb9846a599be4a11d557d79d78080fad418ce39857c1e602a92e800901dbcbe442f1e22651018392af59b861b7b1ab13e1ca96dfcc97a1391233517af53d431b5287beff57d7ca05e4d62ffbb938f332bbc48b39466af5c16059f9965f7ff53904953bf892bcf8d95748ed47b0f6206034702462ea11300c36d5e356c0a86d3e6f49d11d74d585eacafdc017d7f74ede696eb8024c349deac3bc2bc09ce1b0ec500e85bfab4"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x1e, 0x1, "38a8fae37f58abcee05628def0f1bff15765d0b1f69ac116fa9c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x10, 0x1, "361f0f70b9c7161f947a99b5"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x57, 0x1, "2a11cc286556ab0103c621fea21fb9c8e2ea02bde6621b55215ef728130433f41c9b13f18ce73acd38d4f710e49645fbc76c0a3efbd19f4c41d339152595e35c4d41d937f796a8e3e591be766dd2fb89ac7d09"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1878, 0x3, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x65, 0x1, "bb97f4bde801be6ccb6830d393e685b817195975221ddf0f09cadf126f247ff6c7608c4c9f92001d5b839c005bf0df2fb879583be9c3dc13ab07948d73e5677662fcc776ab8350185529b373e04f66b79b01e678ff4a0e17c380d4a4284cef8350"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x62, 0x1, "d6e4a934de45e47e44636ad07a69c3f71adf9a9ee009a4f02ff9b410a1ffc4bd8673488e12572977ea11adf3cc9af19b439a2b24bc378b2b5c1bd7d5b3a8d5d09db7cc8116189a4887fc71d676770971bf45d3147ad11fc47bc278eb60cc"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "5ee3527e0243fc3236e8aea32ec0bdb77f"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "20914e1ec5fb3deb13cabe7ffb9ada550eb2bd2d8532c5"}, @NFTA_SET_ELEM_KEY_END={0x1f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "a58bbcb91b0d1e234a6e73dcbf97d8be709e1e94441a8dba85aeff1ea0ed6ff95d286d29ca18e72a42f24c9d302c1f6aa8ae004abe57b0b5c118de7797ad203d45a7b56864d551c9dffb8725eb01dfe9fdad0167e94c2de78ada0d80a065045a8c02a88ea33d257f7b95f4b71723c4f7001297af1ecb6085d26808a355094188d6bf4484d411844e1bcef9a3a492c981fa4240a83244e013ace82207bb08fd"}, @NFTA_DATA_VALUE={0xd3, 0x1, "e8a4ad0cfee82941951bb5f9c986780591961bbebdc71b97df99fb8f2cccb1cd203e38ad92f8623b342d1833cce8c5cafad5b14bf1d08628d7eed43594fd9ae3778d85de1be56b2aca3e12ad4fbabc72dafc8768482fa19433a470aaf2c57e3e439dcd0d06453de128d7861064d18fcd95de3ee7c631ebc720637c5576838ebc6f56fe2fbf57a73998cb9cc4b9627813970665ee7ca2e67c738d7033631e18b11ca624ede54587dd1df936d7e1e4b37dbd40adcd963c283649e53167fff1fe9a2034dc8ab99bcb371f6af2def3f0ae"}, @NFTA_DATA_VALUE={0x37, 0x1, "5ea9748503fc4bc781d70aaad80482fa98fd299168703ff41502121c1ddbaef4c97732f8fab2802ffbe2a2fe87f01809f82466"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x13e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9b, 0x1, "2e0d6d220e9c03c9760d328159dd290a122246f3ff5ee84f5965fa58b38b07779272eb610672ff02366489903b90eb5bdaf0a016b9df67dad7987206a7cbe8c319d686d1edf7544b5aa9d7bc5507813d0ed4f278b93b22e1164de37fe5204b9ee4e1256db9f0f7e75bbc9ec2949bffc19ce08b1c4073fcbf0f0855d08693351827dbba8b89d83bb8a718c71a4c1dbbc7b1f12c7ca4d08f"}, @NFTA_DATA_VALUE={0x50, 0x1, "113f2fba60991c61722fab49cfad18f55d7ad863e6fcd7361ab47911e1f7608197e52fd0e612cb268a98896bef1cc21af970959e06f43045146c507da2f1d2461d34d776fc11f21de247d18f"}, @NFTA_DATA_VALUE={0x1004, 0x1, "d97ea691d0384dc2824615eb0adc20ab2a3d5700d5eecd30a5010dca9f00fb5f9a3cdb196c0a37dd99e52c07fc08d2e2baa02ee003ba1bf6c7e955f52624645927b5ca207d5a68ae342f4e985578015ae5318c3c92e63f083ec8abce070442af60519eb4a2b759221f896d562677127a5b3a953d3aa75acf568586f8d644645f8f3bb1ef2cb2f7d120bfe2cc0393236995a0dac8524d2c3a1d238b5dcc541450a56e250a7ae23111d38443dc817dc53052cd17dfa91f8a4c026304230fc965c35cd5df4e7f61e84f4ca480a78ffda9da371810b393145e50fe5f4349f7517f310664ad71cb66f1c2b8f45dce10b2c8c3367f285e278fef88f1547aeeb8531e28dfb07a7f0b8b1b0bd93a008f5a00dd21dcf65a548699b080bb7df9951b06bfc3aab22d6f0ace1334c535c17e356c5874e612d72c76c137f0888aa4db751215e85af82b431ff48269bd5614ec7f12eb5eb09db809c99c4ae54125f7ea10ce5e5d9e391e5901078443e9fdef363b97b7d9dd6dbec1c33eba23992cbcefb003a01c8d7d80883c988fa929bb7fdeab624cdbf1022713f59fb2f90785497208937f7f448541f18131b40611b5969205983dd8697bf5f7f871377c6c7d5b003288fe033e27bf9098e5426c6350478308301503a83dfb4c076f59d0aa0943433b2bfc6a7718a42df406101e6007b514cf8a879858e11e38fba3a1aa69d1bb781a2d6e8f7527aca503f81fc51ce100253aca934de23f4996e17dbbc655a8e81984b77ab685c3f3318aa14e2a929c755916b2ebee9390c4f99695679d9fb45283992edced12ed0708728b2d876e2b7c77229346ec5f560a1d61013c54f90dbbffc68ed2c4dd572f8841175fcd2c571102c7307a899bf53af448cf382945f7c78f3736f75116b9872bcbfb1c5408c534b8f782e65abdbb5e8343578e57937fb0a60310bb7391bc22a56d5e4de629561d9feb09ed65b0d0c1d4d7c139f3cebc839d9748479d29083097ae51935705d9d4817745035a3dd464f937f3b598f1ea491dc76c90a53f592d28feff40798f8dd646d75f94910a51e0f67a21412d42eb658268e4da2c077eeb981b2cb5752eadae3cf6df5ec05d8c0756c48d45212920040fef9f8eef23c18dc8f8c9cd086bd65077162d91b2ce96778745e9f14d89d6e66caa96e4f1524102905f87571f91fd83623662f2136d3a4b2e9861131fdbe81935ca40bb269cdad615a97c0d158ef99c1500a4b0afbb38abb622f1981a4b25ec2c0886f3243bc96545c25b03fd5f0676fcfb8fabde64ede5feed03eca4dfada0a9cb0c6b4053e8fe7d78c5c14cada76b30b9ef6f6c1149c5ec41b8438e0c21412e6d4a678c9ece29c3db5c0423f0bef3bf354e22250be8c9f3d669752c83c2c98585176190d7bd5ca092c79ddf5471c9f580144881a7676c22c7b0f948fed9ffdeda56ded8174c4262282f2752e3d87e6a1aa6bc43a8fc75e30953a821f389ade0c5f4e29de71c1da03b06faa87170a30d4004a3362c1e0e953851997811ae198ca2139708cb72c36c8d560752543feab5f7322e3cd2707afd340031c0f04d759e90a4f2673b1adf4e27b7263000db0d53ff5d8e9e65e671b793644362be771321cc7b5a3673ae6a3657711c2ab7c07e03dff47587b500c2fbda29f8a3b2b18a0f2bd77dbdcb6bf658891a8b5acf5b24c33d12f9ca975d065f7eb51aba5a69a732bf8bb34dc341d10704a18570e61d24085fe7d30281d9c3719214854a1bb84d2af62d9f38de931494eff2be7ef1b87ac1076b721f4b36419ff8211e305e0417cc053b88d93dca0cda801497229e1c78eae8c8bc8fa9d9201a236223f60f677615b36243e64cd89424359daaaefbc70a2425c94f20714c165494f09feb92bb8e6b7ad0aae2905a460c9578cb2905e7f4f1eb37a5a25aab693d8dce84493db9c1539ad15f36bbbe099529ea76606e9e896b7eef654ff44270a4dc6cd8505005ebfdf38e4cb160f3af6981606cae390fee2a4e5e2d29ccea35af1f49bea5009d2d2999c3e5c7c8b791218331498aa03614c0711debeaf8179a8eb99d3a6642e990ef04f93896a56e73afdc8bcba9b4f67ea8d7703b6f856ff8f4f99cbbd196d24a2d8f530c0fcce61e85cd9611e45091b449baa10c0426c3920198db969d2b926246cd73acc6074ab3ba65b96dccd8ca35d1bb74a8992203b64e93c4a3a344df4be6354f545a5ed39cfc77288513b50227ab63d5874fce15cc6a8eaac92e70c44c903c875927deceeda91c31cff35d5bb00f7fc2525149fd7c0ebd8ec1ca0204c6ce47ca10bdef9d0e916db5216821bb24dcf95615073230a112e9d20b69e91b7f4f60618c4d6c11e3ababd6154ac1f4132c0196c579cf6e89e7ba1ad97e5c529b913de667f89c8f56c306269b12e5eb53245bc800b83842b4c622b5f23ad715d4a56563852605d866c245e0cd3a42503c904c92989e7c1625071420ee8920c7184b2332a6ae1defa54f6515c7729115d5292104dac10f8ee1f9afc639c496daa0df21375fd8701c1c1b1b233566f850569f58c73e44240daa326f8074c73580fcf45c6fc16bdbf40bbbef193589c068e8aacd0852d53421452f10fd73a1cc032d1dd9030d65e3e2aabb5c4c29bbe7eb8554fbafa6a55d206de5ca3b622ef87528b54a079c901c56d7fd2254b15fe67befae960359ba960fb832f390ab30cf97d1d73e3d3d61e0c755d7af94810731f440a518af81fd998366779b4bc2a705505f8efdac7855d3167b1e608644de66514386c9e389c2a406cde3928b70d9cca63eedf6bafebb7641d8deb0991560d860815294cab37a69757c422e1e301e402e4d301f9943f8912b7fa66881ce27990ef266aa505c7298539fc49923bbc70fbf3e6fed06cba378a1af642af850d9faab9b12fd0c2257ef0aaad5b9558a7850893f5a99905de3b297bd86be3a2928beb328d46597de46dad3e80557abeacb5b0b9577fdd9181ebb52a712c521e2c332804ce7bfe607342975e34296f3e9554e493153c7a875aeef10dad39f38073af82e46e329f2a1be94d3a56ac2c5f7f53f326125feeb5eb78d320c305a79a46133f74334acc68d0b77ac31e38279c3f1cc7e847d2c72d65fcb862c82a96b3e2003b55fdf514ffec252502539ac215047e32c208b51daa07860b2973b98b3f39295f08338430bc231ec1853c2b1bc03fe7c58b0e2b320181f8c4d2028194369f112545b4fc6e41313671a133ac141ff2b7a34a0304d1249f902ef16a6eb3436a0b362e39a38eebf03e62d67d2191d3227efce5000768232272f55cdf0b68790cdc88d1a8ced312fd9f9d89fd1a6acc449f0d7ff4b070b45fc3680234e1a1e1d7be03135b67bd89b28ac9d4b56d8ffe6789ed3606d1f1ebe77504591ff66cc5ae2a5a4e98a1b05ec99bb9a424a5314003cbbf522a353eb5e7cb39f8e9583f74fb85d27dc2f2d50c092d9d2611c2dcd1a706460141d38ba2b70ee21688e30ab34aadd52d2802cd317347f396cf7bd0b9937952c6ba9e7ede01a18294d478d5d8136c2d3dbb68faa94368819e58acb44e4c32a66c7c275816da2f842ef035632c334f3bdfdc891341db2a2f2c4bc73dceb6e4172e258fb3f39e72ae23973c0051f657cbebb6a13d7d5eeffd0d2a9315b0e0247f24fd95537a93545be0c176b2e7e0b887021e5cb29fd9c9cac98fb0ee6a5d1fb15bd39263129c004797f075275d45d58e23daa9c637dde4fd544bc72d6e62d3a1fa122bd477b14c95c02764e29d8e02339e55e794175ad82fb1b4a55f044aa6ce5ff821b78e99e31792000857c3dbef0e3c9873a323139509ca4e5406dc3aac3f39fd909456e7ce580e5273e0f914cf1b048d40340ee54e5d264ff82190083f30fa69a28a28107445a0d0c2fc4469265dc10959c88ab74edbd940f0d8552c06923f8d9a1ee62216994493f046fa518ba6d9b7388028ce44f2a25717c192490b2773a2a3b6894e939cf756e27b2fcef24a15133a8f9018b384f1be695104d03929c4a0c44b45036a1960b6b5c25eda3f2ca2a93e51768964d9981bed36e2dfa633852d405e44889e9bdd4b23f78d8b7255764831d3a4490db17b4404952a04e92f9128bbde65c80cd667b2ff1a97699901ebada107c4b6142312f1b938150c8af743a5ce1ac69a5034fecd1d2e6bd0c378672ecb34a51e277d14ac7ad4ac62d95f02fd093802e67b973eabf045ee9a4dcf8a91bb2a46e1b1a31d6bd2624873020511d67f2c2b83f9a77d2cacbdcfca627dc99c1a0143b3da187a460202f010187887f6380fb055f147b5218075c3eb0e84552252962813bf3cbb1760d1edf0978cf8bd32eb3737b05b7b9551cb1c301e285f766fe539c1422a5c63379c1ea921b904b3820881319b58597a94416470fd66d53d9b6d8ebd84f8621d6b041e81709ba8d9f1453ba61d83d9cd8f097a320b76101e4092396eb7bae79488e2be61a2908b060c256226f73148b744669b71d0c4d63266292d45b50a00fac8bffabbe8be0f80f11bab290204e489a4a128dd838d0590685de4906519c4bfbb777b8b922f5c0991ddd0b565cf6d99d3c81a81e10d39acc34115f7e3dfd305d96eb8c24c37e1b67622db837781ca725e7ff04ab6a06b096a968703a3bb5c127ba1087698b265eb53989b36db6c28829dd5eeef1e45110ba95b23456fbb8619286ca0701a3881f5b6b98df66bcd9f3ef869f6bd0b9c1a38f131c08594d69b63b6f1d34b711881f1f08805be16e2fb2f5f8bf534f6e2c25e8c1ccfc01d64a95a42f97d6b032ce46f5c819f9546d99c626465559a285a52d15a2a137098cfeae19f215275598f28c3c4d9d0dcfbaf11ca1fb8b1a0bbb7b3b5859c3e25abf8ffb2085936c49b95659a7dab2c875f25c0c6cd178a29e89b674de277a510029a20c1c09780df0118ba45feacd6732c3264e8b73902fdd108778ddd4626ee66e103722efdcd03a17235f57b390912de4b82d21060c841c437e582ce4ae8ffa68a7383ba737c7b320a5629143130e738a2786930e781dbfeffe1212ff8b6c2a3e01893573a38b84e11422a33bc41aedc9e57866f1706ee4fa4da3d1ffdab3f998939719130ecf8c22d7299651cc5ca3d0203382176cc35c94aa4abf3444bdfd681290d325f9c0dbd8ed8fa5e3c72b107c29629d016d47bff685f470574955ed201e10d444255fd27210785cc8161d3dc14554cbcbb6160ada8f588a90eab12f7580249662e51e369b07b35ce06ddd97e056383f36cda342b70c30107fc58b18fb1432bcadba90ac5816558931e1db2a3dc67afdb4ac98c4521370ae8381b8e3e13d6fddb65aab59e6c0e73b34f6d1e1fbfa847e8ba7f9dd887a49c2e987ece2cdf365b820b1cb10fc3b8e69e6973eaf49b142824d341000847aabe76f8c19600fd6233e0bc63140b4af9730ef0ae1c821179fc6b71bc29c587ce156b49a4257ebf9420e517d94326215b506feb8112b153fb87e1918b93992d26dd2ffc10697589147ee939fd54f82f25f8348e8b174bff03c6e3113eba52ce8a82557171d26c9debce967086feb4715e0600836b011c6130d9673b0f6199315a08c78d16f6aa77880c3e8ff6d2793faaf610aebcb205f27751c55b6358c62c1ef7528dd6eb4e175fb68d60d7ed611fd02f829791af9b1c23a7812075d1552862bf82a69eb6828ecdf6c12db0231b6de4fbe4c905073d4fede6a68d06666d4211941ff16509170f61a0a12f8f1b333e1222475b2fdde3ed95f3731c35055c67119b6e43897685256ce4bfb5a25228c29d996b5d7bedd"}]}, @NFTA_SET_ELEM_KEY={0x2e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "10181b491bd69ad7b1bb4199b48eb37ad24d7b60b5e0ccdadef464b1e60d3491bfde255666b0"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "ebe7e03abc2f48a45d2d21a4433c19f0bdacf158d5743f8adbfa9830ac5c01d2ddb9e4a5c8e83433f0fb9a1616910d7af266d23c53eeebdd"}, @NFTA_DATA_VALUE={0xd1, 0x1, "745b056d59427f663a17c2967f9e71d9cf26cbe2f40e48a6acad7cb8aa2229e6ddc00f69e0a8fec0c5f3f994414f8607016d887df9afdcae30e7a93651d8b53aa8c064f2a1e900cbf9f371960df2c170a86b1cfa4b98bf62d52ecc5482f8941f7735fcd75d186ebaa01bf63b17f179938a03af68c162643fed4a5dd6c5369d64de540979bd1bd429951976d13bfae7e796133f252830f33efd2c15d0c994c6e150548adcd33d006d4467e31d311c97f11275e5c6f569f07c3408150fddccd459f0499aa6417d2bc9f1e04f5096"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "c98e3705fbdef4326102cc573da8246f5e2cae01bbbef52217beea597ab7c9992d7b044509158a3b657690f3902d4d2558092f958a6de5c6575bc57db24e242e40a1aa8f5179d7707174cb731e20ed6916eaf884136ac35dfda5d71e9090a6e3110c5f568b4ca6c25d1c1a04f97dbb2deaa8144fd7c22e971525b483288ac10e38665efbc5d65684ba23ed68e18f9efa60a4e857e068ab1cf167d8b2f5afe46567e9be275098c0762dee6f19b3676f79ae02ff4a3cad082df50960c85c9054fa60cb24bae86d792e2191abfcddf4a2c979eb"}, @NFTA_DATA_VALUE={0x6, 0x1, 'QX'}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x43, 0x1, "96cb4874fa9170b7df48b3f14a2070e946ce750e81060130ef4086fa0e478751f1b04100711c9f32c03c348b7a46fd4d6caf7a2a91b7b0303abd3d291fc770"}]}]}]}]}, 0x23a0}, 0x1, 0x0, 0x0, 0x4000040}, 0x200040c0) getsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000003580), &(0x7f00000035c0)=0x4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x5) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000003600)=@can, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003680)=""/135, 0x87}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/64, 0x40}], 0x3, &(0x7f0000003800)=""/17, 0x11}, 0xb}, {{&(0x7f0000003840)=@xdp, 0x80, &(0x7f0000003940)=[{&(0x7f00000038c0)=""/112, 0x70}], 0x1, &(0x7f0000003980)=""/2, 0x2}, 0x7fffffff}], 0x2, 0x20, &(0x7f0000003a40)) pipe2(&(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000003c00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x982839ea23a48023}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b00)={0xa0, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb025}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff0001}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40020}, 0xc0) setsockopt(r5, 0x5, 0x6, &(0x7f0000003c40)="bed41789c06a2715962a4576d35acf331be9b7ced3c3ad9bf09b32223fdf272d11f14d5e99950edc54241a88a2257579a2e1f53bf34b82c8c14667f6f9590e9d66b2422cf11a4cc501a061c1794f10496415184ae5fede37de90016407f0394a80f6429eed302df20c4075d0bc0832d049541cce2289b49306a2e8e7437f934356a289a0926cb48c0ff25cde343f424bc97fd3ea1d6eb710373b154bf1b699cb02b1d597c94ff8e8879426ffede830f75102c9b3853923ec9541915a80e7284b01b72d4e17e1dffff9fd325709b7751909d3fa77e14e8a86d5dd7542c73f56bc6dcf613a067d95a949ce1e87967b969c8c5f5dd373ccb7686a7c0414424c6e70e47e91de0542cc1ebfc7cdb646db27c8b3c841ec429f5151426210968af0fa6bb459faf720804dc78a0f98c033cb04948940c754d852f09e212daa014807889726d1b67f6e2ffcadb81a9558200ffa5224488f9c46a75aebbed1b15e749267ff8477bcf2506c9fa2a7d138cb667f7d020d1d819f466b898d363e5edf2248413236e64d07ac02f41a93517f518e083350d69f2f3b039a46045611f57fff0e8aa5fca4eb24c655010b649415107bdb6f347e4da4a4fa97a251f0de220da01234a71e7d5bd97cad7eec1d3d82c0956fe2897f1507f54f3fce24432f15430ccc3ba212eaf4d0c386c100e1160da4351ef442d77394f3a1c7fef173846af741d4e6a73993ed6ec720cb2eb14f025bcdd66dddea404b524d1af5fbda084f7e2b2ef4ba3c319b49f077837f8584b7334d159d8d9763e5318f7c5c6c6be6145da59f1ca6b43394cc9bf3b5dc80dfdea1587c385fd7f4edf41e8b6431ec13364146effdb9263cd24f066dbdf015034885b844c582e83c4690b5fd08903edaf377ab8dad8ff35a7c1b345547deb150c7010597c1e4142c2140522ecbb661fa4879aa9da6990219cb2055506048a4b7d36fcf1058efbb14eed123a48cdf9b65f81c00b526ef2bc0eb92d52889ae9265afde15d2e27efb3b4c7d633140858e0625c64028b2392c09b59a6203ccde169f0e4a834f170422e6d5123e7a97f83cf761fe5bcfeaf7f4ac0b5e439ab086859a8458df72cb38a9034672a8eb0d617043a98242f5216f95178e62342d1aeef90d5f5835a047fe8e37a97d977afe595cfbc77f72a3d10b5cf89decaf2425a53a8a6dabd93c3ba90512060898525c1f5884f420edc7ed1cde68d2f237eba923f9b9ca7d1c6db8b181682915ee58bf0052269ad275b2af79dce334671002c5929fd69a2642b02236cfbbae556d25f4690b5c5110088d2ee8b5cbab8f704fdc84d0f6526889a5f0cbe291b512c8b03b1f1956154801360fdd6678063e3ec24734b1d3315e9c7db7340dad5f32fd5fb5bfecf145d127570518644842f980574bd3d60e57b4ce737988d85b45b935a90722ef0c1f0d580ef414a90e0a9b673f86fb8c5107dddaca046844985106f5e5eba064a7a8256a1419eab604ddc22027d72a9ef2033ff2257fa1849d0ddea102515d1d0f516b2570435ae883076c03587be06f699ffc9e67e6a87ff1eb3eb4ae15992aa581af7fbfe3743cf280ce2864810d6f5be0c1f65ba5d85d29bb200d2ce7842b4837f5ab1128f4e21cb1198c72d745840a59e7e7133f46ddc215c3e36d6f3078b43440c55f56d66964874a4823027448e9feaa8d41ec05dca2c0c91ad480c89707379857875e1607b4e0bb8086a0502362dbce8cc6b9f819ad08bc3c4652850ea54addec4a0dab8e89c89487453d6610b4f24a69e83c1a44858995284c0dadce1e880252750d7ba2a47c9a0a95f1acd9c27bee1db0fdb02898df2e40f31f2261856e079200ba2f29302a262e7f937d061486bdf84c921525028240f461ac6630c4b94368a55facaa3a3770e16de067fd2b59d4ba3d756641be9545e79a51b7d7d168fbcc885fda558a4f2ed864349b33affe61214af78c78836529b936c5f15019de22b618cb3befec8bef4d281ae1918ba16d96f30fb72c8b9a49948bcb34404b89cc8bb91f9c3f7aafc4e80913aabbe55f0d7d01085be8706c1f9da4435bf93c0aeb727a5dcb6eaf95f7b5c3f77a81618454060f38df7e31c9cf143f86f376bd3451813c4095dc4e1419bf02d9f25ca9cc8d8d0e80dc663dde36ba7bae49c362c4fbd897d0f1e5f014f9e404d0dea3218712a74240ef0d57b6444a45b50b02ef0a7d242d8d63282fd71ef08827d1f593e40b854a34c7dc89622886e33f806e4ce5ad15fd65f65e67fb02973f358275877888b7e12e3708eff46d19e98fcf741c39b1e2af511e744c5afc856d96de09dfae42c5d0f1a472a6904514c4059943dcd468753b35ad9155468550906164e45458d14836ba4fd8fdca2df19e8538f0e2f6c7ddda4ef83a33f79da20f6b3a9de048283471629e8e2bb96472fea33e503d95decc6076454e693e95831eb2b3b6d9fe01471852bbf42acfa3239c4723c2b95730652f041bfc304b5641ec850afed0a51c64c1831d58f111f8872e3351a690e992ece3e5ea41ed882759bcf0f733c10c513cc59dad94a5b92ece65cc68e5dbbade99065847a4ed1336caeb96d86ddebe9744dd26a71130ec1365430d36764070d05592f5c351a51ee96dc34a4f3461974e965118aa7be7fc244ea5ed03a1fd8acafdc45dd0db848afe020a956992f00a5762df5f7ab6547a9af0a58ff76378e741437fff1bd49dccbfc5a7420cadc999ccb507505ab013963ae6fcf791289d98c076a7e2648a106dac9bd206836449b7b105534090b6cf78de37f3c7430c05db15b1944bb729de5992c9a799d7ee4e9eb629c4edeec8b392f8cb480f03cc95fbb519125342a780191dcb3e7ed9ae6426ed2474e630a69679dfe10c20c556889d30d6845dc29807b5fa019ad8ee37069d6693f53fce5bae0d25cc9d17e9343dac7fcc9a900b5c2a9d6ff2c5df4eca6a2fc0eed2e5d7796dbd277650df0d96a12f3fd3857302f62549ac163e356adf42cefedfd66f5c012fdbd9651c0d0db1f95c6fe66643fe9a90e1e1281f839025280f310d3db36a2792c8d543b81598599c6e2f85f04387aa8e726b231876858a48836c8b7847dca436c652a20428b1589377afca1afeafc2ac162d7a1c7f6c19a1254fa2a4dfea547e7d86962ba17b9f9efb9a605771b5dc10ccfe4ccdd2d122ba48a1e5a238be5eba236e56ce40dcb3c3b614f25e727f440e39e2882dacf357256644ebd3622b4072ad0bbb51766ebca42b03c7736c20649e341bef4c47bea69fb0d2a23822eced516c28f8a5d9282bcce46ac7093a8d389a4491437e50cec2323ef4971f5585362ccdc00c3ae8a107219b94eff3ede208c4c4fe13fb5bddde3bbe940056a2cbf4071dd0db4990dcfac9d4bae2c5c1b14a89563595551340cebe4b99358314d7a454bfaf46f588696cdf07a937658557583ac893c1da9082761733b20cab9854b897a2d8ae304eecc6fb18d8ff813c9882c3203316ec535d12efe20d01e3c57a96bed065d2671f2069a36b2313ff74bb6fde7c80912b94346baaf55e7ac0d2280957abbda3dcc5364909fc8c21e5be0c5c2a79e91599daeda64d8f6b1b43b82293da4820df7fbed591f0e5dcebce38ed3cad1f48dec2d4dab873563156070322f0dd7d6c0fb79053c481b46166edf04cca47e435cf927cc777c9830d2fb5f80240ca920fda53821c63bee75807ea62fd05504999ff8a1396062d0ec009d524947982a3a50b34c1b2657b6c94185e193bd3a9021f6bb437c8e2983068af21931c5f58af23d2ad3f477e7a3d1833c58f700141c3b175254352d49c9ff67b1d3dfec515613fe4a0e72724a557073780ae8e7a0243b816e49a2e2f95faf8ae6fdd3ec75d9c865023f905576f5fc87444e15f0a789ff88556f8444879d57860c76a9c4d37b4c038a6c4eed0d9d97b4fbd477cb67cc2ced51962507ecc76870468c26242227d1bed3e4a33801efc5a861af27acfaa08c23c5eecd876b73f8881cab98c6bb934b573803d7479b30eb688c8bcdf33bddbc93ae288b20e0c229a039eac4e06eeb53b030f6f2f8a2ddd756ca1343d107aad1b3c8747da42ca02d32c6916a270b35c05eb75f8d03b3131d63375f68832ad9d93f252f26751154e0ecd3b4a068d3fd2fbc445dc6394c703f772eaaecbb6a3e9f2a2237b0279bd6fd537894bc59ccf02d0ec5ec74b746f318fe9690046c28914753b407dc562e33a575dda4ca29697d31e01a6c195f70450dcbd6f2028c71e9331db6364c7c3a208944c881b85b4c928e6ee0dbf642350220ddee51fc3d616cb759bc9293a05048ce627e7120014585470fe2406294b97a576094100442563569408419b5d22632cfe3e4b9489399f0fda295c7e567ce2da5388f586286be83ac5e108b4a81f6f1288765af1c636de7a7ea5ff18d1bc0b984480c2aa087980d7cbd4defd167d1a99f9b924c4c817599a8d9bfb5cd8ca27a7eea1645652508ffc3ac7bf50b044916288dd3798e665b01aad4a82a6b6e90676b4fbbe87154e7175a18d410d542c18d532ad6aecef9649b3c3462440dfc0611576c09a875015e669015a00f5cd7883303a640efd79c8662f1fa9fdf2e341ce7852b576151f4c99b73ed2396ea42e276c00fe518c8080764266df1babe24201ba3b5adbf91dc7787b9d0b32609300c3469e2a1ce3e5d93855af1682f04edf5d0bc367d5768d0257116b55995235be459053e5e77fc8a2c1e9a6b80146f2cc822ba0421fab9e01d998943121a0c7cf515b3a1bf292d3601fa9736ca5f68482f9ea6146bed7a842f9ac5098084f979d33929dac4324ed2af79cc5091e117e3479751f14ab9f93721f1cd6eb87d4d39009b028b95af1c20c84446fba0434c9645248eb519a17cca34179548fd235b5c20ca17a53a70c8e0303ac78b1fd7197810a8e41d3e1a8fd694464f04b8dfe82aac33442e0d63cf70372eb547653d030ffa95964b05a96302765f922719c6444f890dc458e007da25f1e947c84af9c036b311fdfeaac1d43246a69e4895b1d259fb1d7f2c5a5a196edc94867fcd27dd50331522f072a62a66eedae90ef9448533219b4699eb3780c24d5761211162f4a3a0e224dc3060f47e735f3c50a1dc90a95d41677295ea560682abf86a2f086c418f25e3a203ab668e92b95443c95dffc890ee0114959beeb01976aab749e319b2e43a99cdead884a50808ca406a57b34e16077b36ba834d93381fa45326add50b56a5d381e3f835daa464926786ead543877dabf4642604eaa1dbf1f54a8a4f2c05b50223cfeaf860edbce8057ae13eeb21b04476698aabf5604d1ffeca766c8aa51b2d5a737298d87ffacb213c70414c26231379b4941fce0411344a418524e4b6f44d8031515cb14d4c022bd9103c81c4063cc4ad69cb38cd82db008ca3bde86b528978c4cf5b77c56caa367f1a0f558336cb73d05a42a0d9e0c588de2778a21aa6c6adfb3d2c5a5dc14484b80bb5d71a70e209f508790be299bd3e0b5ff0c0c4f107153227c6cd8e3c8cbb8038387885e918956041f8fa13fdbabc72de4bf5994d247e7bfe6c1431202bf45c7d4efe1be968f835e762a0c3a2744a64c9848b60c01bad3174736b3cb162b67d332aca110a5782bb012e37d54b9b5cb6ff3304d22d8207e1deba347576d5827a33f412553f9fd6661ebda7daba0d89f692c4867283b18f3062b1cdf72dabd86c07bf7d25a796b3099f93511cc6f67b7489069670b4d82d2b215e43d5a96a317dacd155bedea978010a419cfc04d711f2e2985d3aa8137aef2d306", 0x1000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r6, &(0x7f0000006cc0)={0x18, 0x0, r7, {0xcc}}, 0x18) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000006d40), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000006e80)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006e40)={&(0x7f0000006d80)={0x88, r9, 0x8, 0x70bd2b, 0x18, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000006ec0)={'\x00', 0x4271, 0x6, 0xf8, 0x0, 0x9, 0x2, 0xe6ef0000, '\x00', 0xeb}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000070c0), r4) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000007400)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000073c0)={&(0x7f0000007100)={0x2bc, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3fd74d94e45093293e0bbc9f7520a83089a1cad271"}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf246}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x422}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe0}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x5fdc58a9e58f01a4}, 0x4000041) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007480), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000007540)={&(0x7f0000007440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000007500)={&(0x7f00000074c0)={0x14, r12, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000075c0), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000007680)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x80820}, 0xc, &(0x7f0000007640)={&(0x7f0000007600)={0x1c, r13, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000895}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f00000076c0)={0x25}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000007bc0)={&(0x7f0000007700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007b80)={&(0x7f0000007780)={0x3cc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x38c, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c23f1f81d11ed9c65d78d6097633a69a3d44481b219efd58410a59acb4068fa"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @loopback, 0x4}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x175, @private2, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "be7e7c29a55375935132d68db0bbf1919856e4f12f65041c245ec2c74bf1b4b8"}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b5c260a5590db5fc6f859372ac550d3ea7cbb761ee027d52db14cfe04a52186"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b5a18b8d471aebfccd7a47cde92b0a40a6b2e2843d77be441d6a1d526e62b7ff"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x3cc}, 0x1, 0x0, 0x0, 0xabfa1cd7a18ad3b1}, 0xc004) 1m41.553595294s ago: executing program 1 (id=4547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.553359463s ago: executing program 1 (id=4548): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x1ff, 0x0, &(0x7f000001a000/0x4000)=nil}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/114, 0x85e3dbeac2ac4db6, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r1, 0xce33a000) 1m41.425469536s ago: executing program 1 (id=4551): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0209c203090000002dbd7000fbdbdf2502001800000004d5"], 0x48}}, 0x8000040) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r3}}, 0x20) r4 = dup(r2) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000140)={0x1, 0x5}) setsockopt$inet6_int(r4, 0x29, 0x24, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000004) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0xd, @remote, 0x3}, {0xa, 0x4e22, 0x0, @private0}, 0x0, {[0x7b3, 0x0, 0x11, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc, 0x2, 0x0, 0x0, 0x7, 0xc6a}, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1m41.420855686s ago: executing program 34 (id=4551): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0209c203090000002dbd7000fbdbdf2502001800000004d5"], 0x48}}, 0x8000040) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r3}}, 0x20) r4 = dup(r2) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000140)={0x1, 0x5}) setsockopt$inet6_int(r4, 0x29, 0x24, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000004) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0xd, @remote, 0x3}, {0xa, 0x4e22, 0x0, @private0}, 0x0, {[0x7b3, 0x0, 0x11, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc, 0x2, 0x0, 0x0, 0x7, 0xc6a}, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 17.5688687s ago: executing program 6 (id=5628): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) epoll_pwait2(r1, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000880), &(0x7f00000008c0)={[0x839]}, 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/251, 0xfb}], 0x6}}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/57, 0x39}], 0x1, &(0x7f0000000680)=""/209, 0xd1}, 0xa8}, {{&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)=""/205, 0xcd}, 0x80000000}], 0x3, 0x46, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 17.56835235s ago: executing program 6 (id=5629): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x2005c080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{0xf65, 0x0, 0x2000000004}, {0x8fc, 0x0, 0xfff}, {0x8d9, 0x0, 0xfffffffffffffff4}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) (rerun: 64) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r7, 0x1000006, 0x13, r5, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r7, 0x8, 0x8010, r8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r2}, @enter_looper], 0x53, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43"}) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async, rerun: 64) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="60affb53687d50bbf1b911b40f6226886e2096196ce78e725f7d9c471a5e354ebb31144ab0375ac843be192a04d166d0c52216dc90555a17b33dfcdc413634309583ebf32c31457c061b80967daa889783db68380881fd45026043fb2941a410b97cb0b531a14c175ddc0766c618553136bd8042f303e05ef9fbc42e2ac6e4a476f0b1b9422dce7ba2b55e3fc7a3ba381bae92c8cff19d4100b031f9a18efa4144016861e9fb2fa651f9a62d59f66504998d46ae93742c952193493d9a379c4de1ba58e07549bae7b0ad555c7c40dc4f21920b6e4d7033f4b85d56e8e9b55930eb9d", 0xe2}, {&(0x7f0000000300)="852695e9bdf21fe9ba321548e679d6d580000000781ca5b837e424a700000081d9ebb2d268cbe16493aaad73000000000000000000", 0x35}, {&(0x7f0000000480)="fcc0ccd5497b9b276db9ff6206fa894a56b36c60b06d8861f21ec41d77f3d7963c6c7942590c4e326cc82dcbbcda024fd049f7f6d9fe2987fae64e2d0670b4fe9cf1f9f309c3ba6640ca58b9eae49d269da170c9ac0eb0b81d464efd82c433c91f7abc816ac1651d5f4d06cb76877383289a71c485fa82169f6579504490249dbfb94ca3ff545fa35218351846834f68119ca7de30a70348b0d544c108cac921b662e02530d92beb89e35928f77416d1581879c08a3775a417f3217b6de71080b5bb68379de2920b8726a778cf9723f34d2cff164685a632a435a0bf0000", 0xde}, {&(0x7f0000000580)="8ba3d9241f01c68d50e029c5caa6cadda5cb1027a39929741020bc34f8a5e5076de7e4bebc6d98417a57496378e1e4fa6c7022d61f2090c920a623641be013ede138aacd55c6c624d22db15ee514536c2620bee33e28a64ed493be45f13ef0e83b123225ab027a1f7b3614d3f7306af8473f77f54ccba0ebf96703331644659e5bde07", 0x83}], 0x4, 0x96b5, 0xdf5, 0x1) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r10, &(0x7f00000000c0), 0xffffff21) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched_retired(r9, 0x0, 0x9080) (async, rerun: 32) syz_io_uring_setup(0x3b48, 0x0, 0x0, 0x0) (rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 17.568130199s ago: executing program 6 (id=5630): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x411}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x411}) ioctl$UFFDIO_CONTINUE(r2, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048080}, 0x20048800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r3], 0x60}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf252a00000006000600ffff000008000200", @ANYRES32=0x0, @ANYBLOB="0c0005000200aaaaaaaa0900060006000200000006000600ffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000040) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x1bc}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x1bc}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0xa242) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="580100001000330600020000fcdbdf2520010000000000000000000000000001ac1e000100000000000000000000000000000000000200000200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000002332000000ac1e0001000000000000000000000000fdffff2019ffffff00000000000000000000000000000000cd2d00000000000008000000000000000000000000000000000040000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000002000000000000000000f9ff48000200656362286369706865725f6e756c6c2900000000000080000000000000000000000000000000000000feec0d18000000000000000000000000000000000000000000000020001700030000"], 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) (async) sendmsg$nl_xfrm(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="580100001000330600020000fcdbdf2520010000000000000000000000000001ac1e000100000000000000000000000000000000000200000200000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000002332000000ac1e0001000000000000000000000000fdffff2019ffffff00000000000000000000000000000000cd2d00000000000008000000000000000000000000000000000040000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000002000000000000000000f9ff48000200656362286369706865725f6e756c6c2900000000000080000000000000000000000000000000000000feec0d18000000000000000000000000000000000000000000000020001700030000"], 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab38fc179f9f9e91dc1ddaaca7bd6447a4b4e00d9683dd010000000000000000030000000000000000000002000000000000000000ecff00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c551240460fba6e00000000000000000000000000000000001000", [0x4, 0x40000000000000]}}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) io_setup(0x6, &(0x7f0000000140)) (async) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) shutdown(r8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000040)=0x2) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000040)=0x2) 17.481703891s ago: executing program 6 (id=5631): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) 17.467816001s ago: executing program 6 (id=5632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0xff, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x21, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, '!4'}]}}, 0x0}, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x4) sendfile(r0, r0, 0x0, 0x7ffff000) 16.958158701s ago: executing program 6 (id=5636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1800) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) (async) 6.68861016s ago: executing program 2 (id=5823): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x10, 0x6, 0x4a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @mcast2, 0x40, 0x700, 0xc, 0x8}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) r4 = syz_usb_connect$cdc_ecm(0x2, 0x151, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffc91, 0x1, 0x1, 0x3, 0x160, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, 'X'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3ff, 0x8}, [@mdlm_detail={0xf4, 0x24, 0x13, 0x8, "e2b329abb9462c526788ce53594c9771dc1bc67b3e0ad1a5d7b7882aecc15fd189bf9cf791a16e4c9d1973008a9fa654beee1d6e53413609c3beca15491f5a265c7aa025df89e907fdfa1691babaa34d90ee6ad20028cb85eda6c6d70f15c55189f8d775414479ceae66d219f7980f8f15491860c7e43d249e48a9e2de2cd1b0467535901e00d38cb595fbd70080bdad3f7fa8ddae16e54b4db552ebca3faa5b9131c57c664b70305f2d45958accbc2d754cf087c245e60b6522bd50c86abbef556c8af6566a3140d6d31a2ed9743551b04e3d4ea2bc8d7f2406318ca22dc34245267f43e32c9f9c07b405e815a44fab"}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x6, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x4, 0x9c}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0xff, 0x4, 0x10}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "4335f8b10377c450e8d81ae698541f76"}]}, 0x1, [{0x4, &(0x7f00000005c0)=@string={0x0, 0x3, "7ec9f6710f64ab8318cdaea966a369d61cf5029dbb126a94885ac9f5ac15c64c8819bb3c0cfebfdd1528fd3215059ac8f63f574f6d527af029812a4abcde03121ff6a47803d30c46f178b8db5537effe4e0d5e3a4470b7447921a51f18bba3ea5ae3906fb2d415db1f27f61a9db5c3d58802177f7392702d3affd5f2fc7c61aa2130d77ddc3a8d363463957e4d52c02d258f9b16ef010f7f1055d9a7bf4dbbc087bfede9ca1c1098013aac4b29f5f60c4b7bfa627e0dded17898eb3204a5b33bee0eed4721f3205f6aa06f6144abee0a225067c37ade1ef55d82db99c1b8e5c48e03b6252ff7d08b276b806adabf31e94a4f7dd202"}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x40, 0x13, 0x11, {0x11, 0x22, "ea3e0afba75c1ece5a0eb4d949300b"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x0, 0x13, 0xb1, "d062235817cb9bf3038396499ebe2cb17dad59bbdde698e442e594658e15f2c0d383c0650b7e012fd6a9555566eeb47da9890563a213cf95985064ce569293e1c0c85ee2780650197b2bc75393f108f2e9eaa1ea7c05fc5424b51b29c25071a983107641d860df896fd8b9ccfbf9355563fce6f3d064acebf4d855af1950c20e197bd194c6963e8ae1b5461c863ce28c3def707ec11ca96c165584be99787badd9aa1c620c66b1df2f10b87344eeb1ad59"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}}) 3.634260919s ago: executing program 2 (id=5862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000140)={0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000003c0), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.55703436s ago: executing program 35 (id=5636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1800) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) (async) 1.55671471s ago: executing program 2 (id=5880): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572010000000000000000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="39000000130003470000005600000025000000195e1a9098199eaf09fd17e5ffff080004000000000000000000000000000000000000000000fab13504eb534e3a2f2e7b9de623247c4d04f07ee9cd6be2a052a73e8c16a39fe9f1f6f6d343911cc0899e7293e520f3", 0x69}], 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xac, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x53}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 1.448736732s ago: executing program 2 (id=5884): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165242, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d099010203010902"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.364476013s ago: executing program 0 (id=5889): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/219, 0xdb) personality(0x5400004) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r4, r4) socket$inet6_icmp(0xa, 0x2, 0x3a) writev(r2, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) socket$unix(0x1, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.357429643s ago: executing program 0 (id=5890): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="b5a498d8143a60f9620f02e681beac10324da80c0a267dafdd4e96b0929ef8b3f00ee544c1938edc3dfb80db205e54aa1e573ff8e4e4f4d0925c6e2888d13cc3cc9892e40dd4fb9fdc806815805e079212cd35615a6f7d4c1a25c922c9aa96c145ba14ff6daa711ecc93e4a29838396459810ec5c315f3941a10cf519fb2ff7a026f24ea2a4d600a0aaf150f6d55cacf98bf875fb641804c2fe6ae38895e70d0f6ce9c6b8180724636a982f983a5a1e515a4ac6f569b44a4ce305b1b5b") r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x180, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x160, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf83}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc000}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x50}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x24000802}, 0x800) 1.339435614s ago: executing program 0 (id=5892): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB=',rootmode=00000000000020000,user_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) unshare(0x22020600) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4093, 0xffd}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = socket(0x11, 0x1, 0x2c102ced) write(r7, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) close_range(r7, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x117) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 729.286706ms ago: executing program 7 (id=5902): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x8ee49000) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x46, 0x14000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/53) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 717.298076ms ago: executing program 7 (id=5903): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7, 0x1}, 0x14) r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='utf8\x9e8R\x8b\x843\xbasb\xe44\xf9t\xd8Sn5\x1a\xc2\xb1\xaa\xce\x0eo\xb8F\x9fE\xc1\x88pi\xd5\xd0aa\x8bJ\x8a\xd9\xfb\xcei\r6^\xf5\xd9\xe8\xdf%\x85_\xc7\xd1\xca\xaf\x84\xa9\x90\xfe~\xeac\xc374\xc57\xc4\xd3\x03\xe7}\x0e=\xd8\xfb\xa3\x82\x01\x04{\xa0L\xe7\f\xba\x8b\xa1\x014T\xf8p\xad\xa8\xc6\x10\x0fS\xc5\x05\x1eMt\xef\xd3a\xd9\x82]\xbft=\x84:\xee\xf3\xd1\x15\xcd\x9aN\x9f\xcf_\xe7\x93\xa3\x95\xe2-\xc9\x03\xe9\x03\x13-}\xf6\xdc#\x9a|W\xb0\x98\xb0\xc9si(|1\x9df\x88\xe4\xc4\xcf\xaa\x16\xdd\x10\xae-\v\xccN\xbc\xe9Jd\xc6\xee#\xf2sc\xd7\xd4\xa4\xc0\xa8\xdc\xbd\x12(u\xbdX\xd2f\x13w\xedki\xcaId\xe1\x06\x05W\xfb', &(0x7f0000000140)='\x00\x00\xf2n)\xff\x8a\t\xe2\xe3q>', 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x800}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r3, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7, 0x1}, 0x14) (async) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='utf8\x9e8R\x8b\x843\xbasb\xe44\xf9t\xd8Sn5\x1a\xc2\xb1\xaa\xce\x0eo\xb8F\x9fE\xc1\x88pi\xd5\xd0aa\x8bJ\x8a\xd9\xfb\xcei\r6^\xf5\xd9\xe8\xdf%\x85_\xc7\xd1\xca\xaf\x84\xa9\x90\xfe~\xeac\xc374\xc57\xc4\xd3\x03\xe7}\x0e=\xd8\xfb\xa3\x82\x01\x04{\xa0L\xe7\f\xba\x8b\xa1\x014T\xf8p\xad\xa8\xc6\x10\x0fS\xc5\x05\x1eMt\xef\xd3a\xd9\x82]\xbft=\x84:\xee\xf3\xd1\x15\xcd\x9aN\x9f\xcf_\xe7\x93\xa3\x95\xe2-\xc9\x03\xe9\x03\x13-}\xf6\xdc#\x9a|W\xb0\x98\xb0\xc9si(|1\x9df\x88\xe4\xc4\xcf\xaa\x16\xdd\x10\xae-\v\xccN\xbc\xe9Jd\xc6\xee#\xf2sc\xd7\xd4\xa4\xc0\xa8\xdc\xbd\x12(u\xbdX\xd2f\x13w\xedki\xcaId\xe1\x06\x05W\xfb', &(0x7f0000000140)='\x00\x00\xf2n)\xff\x8a\t\xe2\xe3q>', 0x0) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x800}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async) preadv2(r3, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (async) 661.538367ms ago: executing program 7 (id=5904): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635008200000f3066b98804000066b89d6800006a17580000000000300fc76c000f224466b9800000c00f3266350100000066b85100000066ba0000000f3066b82d006600d3d3ba000000000f30f0281dba4000b006ee67dad5660f3880360400", 0x69}], 0x1, 0x40, 0x0, 0x14) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x800000008, 0x100, 0x2000000002, 0x20000000009f95, 0x1, 0xfffffffffffffffd, 0x200005, 0xffffffffffffffff, 0x0, 0x5aca24c4, 0x7fffffefffffffff, 0x80000100962, 0x4, 0x200, 0x8], 0x8080000, 0x132c0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x9, 0x0, 0x5, 0x4b}}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x16803}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000140)={'macvlan0\x00', @link_local}) 554.023049ms ago: executing program 0 (id=5905): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x12, r0, 0x56a31000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 535.06566ms ago: executing program 0 (id=5906): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = geteuid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) r7 = syz_open_pts(0xffffffffffffffff, 0x220880) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000380)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1001000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}], [{@obj_user={'obj_user', 0x3d, '$'}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_gt={'uid>', r8}}]}}) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r10, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r13, r13) fsetxattr$system_posix_acl(r0, &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x1}, [{0x2, 0x2c2f29a42a1ef82a, r8}, {0x2, 0x3, r1}, {0x2, 0x2, r8}, {0x2, 0x2, r8}, {0x2, 0x2, r1}, {0x2, 0x0, r1}, {0x2, 0x4, r8}, {0x2, 0xc, r11}], {0x4, 0x6}, [{0x8, 0x7, r9}, {0x8, 0x0, r9}, {0x8, 0x4, r6}, {0x8, 0x2, r13}, {0x8, 0x1, r5}], {0x10, 0x1}, {0x20, 0x1}}, 0x8c, 0x3) 477.621961ms ago: executing program 0 (id=5907): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000004300000009000000000000001400000000000000290000003e000000ffffff7f00000000580000000000000029000000040000003c080000000000000105000000000005020003c910fe88000000000000ceaf8e0222eb8610c20400000002c910fe8000000000000000000000000000400401090106000120000000140000000000000029000000430000000500000000000000180000000000000029000000390000002e0002070000000014"], 0xd0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="b9429ace099d8a4a67d1ba18dff000fc25898d45d32c6508ff5e9e350e7e0de3d4b9a4c8d7238becaec779a2b572d8d0c35b6139cdd8b40edb4eafbc93a0805eeeb9d70a8db2effd2253afd9f209d0f028fb4c24fa8b87e1b9b6f4b76adff7829ee9844f82d8964b38de00e8ba796d64efbaf0ede47e3611eebfc9840389", 0x7e}, {&(0x7f00000002c0)="c8fe7607c0c0f2cb67216ded6c49f13afbe6b8ad8788a76745cbaa607d5b1773c86d2e0745da632bf6ce755bb0a1822990743bb7cc8dacf695072654c7a4d8e0328d23b5eb63e8d7a0e219415905950bd69889660a9678cecafb716a13c1843a7e15c1af05a9bbc11f14e569af917c849702b6685cd9c8310da46911386690d3982c910a26b3aadea03d9de75998906ce222cbef1e0fbb6bff403ea2ad56c9c7661e1eb587df216f2ca6d5423344ca0df317360d5553105ff84f3250674bafbd07d239db10e5f45423b5746f8e89ad49e9dd81718661b826f9acf2177cb65d3c5804e6eb7a1359dbbbd20ed52125ced56812", 0xf2}], 0x2, &(0x7f0000000480)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x8001}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x1, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x88}}], 0x2, 0xc8000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fsopen(&(0x7f0000000100)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x3e) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) close_range(r2, 0xffffffffffffffff, 0x2) 390.401883ms ago: executing program 7 (id=5908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x5, 0x0, [{0x9, 0x5, 0x0, 0x0, @irqchip={0x9, 0x5}}, {0x9, 0x1, 0x1, 0x0, @adapter={0x1ff, 0x8, 0x1, 0x4, 0xffffffff}}, {0x8, 0x3, 0x0, 0x0, @msi={0x2, 0x80000000, 0x7d3c, 0x8000}}, {0x1, 0x1, 0x1, 0x0, @sint={0x1, 0xff}}, {0x10001, 0x2, 0x0, 0x0, @adapter={0x800, 0xb6b, 0x7, 0x2, 0x6}}]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000300)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000380)=[@dead_binder_done, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9c, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000640)=[@register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 378.771073ms ago: executing program 7 (id=5909): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x5e23, @multicast1=0xe0000201}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}], 0x18}}], 0x2, 0x44880) r3 = dup(r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2800000012000105e6209489413d5200100000bdd8e4000c000000000000000000000005000000b112ed56"], 0x28}], 0x1}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) sendfile(r5, r5, 0x0, 0x1200000000000) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}]}}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x44081, 0x0) getsockopt$MRT(r6, 0x0, 0xd0, &(0x7f0000000280), 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) 294.689284ms ago: executing program 7 (id=5910): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) shutdown(r0, 0x1) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 293.445974ms ago: executing program 5 (id=5911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7, 0x0, 0x2, 0x5}, 0x10) (rerun: 64) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xba, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0xda1bf000) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0xffffffffffffffff) (async, rerun: 64) lseek(0xffffffffffffffff, 0x1ff, 0x4) (async, rerun: 64) mprotect(&(0x7f0000386000/0x2000)=nil, 0x2000, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) keyctl$get_keyring_id(0x0, r4, 0x9) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r7, 0x8000000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (rerun: 32) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x8000000) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000100)={[0x0, 0x9, 0xffff0001, 0x0, 0x2, 0x5, 0x8, 0x8, 0xffff1675, 0x9, 0x2, 0x40000000, 0x72, 0x6, 0x0, 0xdc1, 0x6, 0x1, 0x4f, 0x3, 0x9, 0x9, 0x3, 0xfff, 0x5, 0x3, 0xa, 0x6, 0x4, 0x8, 0x1, 0xe000, 0x1, 0x9ce4, 0x3, 0x6, 0x7, 0xfffffed8, 0x3, 0x9, 0x2, 0x8, 0xc000000, 0x8001, 0x4, 0x200, 0x10000, 0x2, 0x5, 0x101, 0x8c11, 0x6, 0x0, 0x2f, 0xfff, 0x8000, 0x8, 0x20, 0x7, 0xa1, 0xb5dbb209, 0x4, 0x2, 0x1000, 0xa, 0x6, 0x9, 0x9, 0x3, 0x5, 0x3, 0xffffffff, 0x5, 0x1, 0x83, 0x8ab7, 0x9, 0xe, 0x8, 0x3, 0x2, 0x0, 0xe0dc, 0x4, 0x6, 0x0, 0xffff7075, 0x5, 0x400007, 0xab, 0x3, 0x9, 0x4, 0x8000, 0x1000, 0x4, 0x5, 0x6, 0x1c47, 0x8000, 0x4, 0x10000, 0x7, 0x6, 0x9, 0x6, 0x1, 0x8, 0x2, 0x607, 0x4, 0x5, 0x1, 0x5, 0x7, 0xa4, 0x4, 0xd14, 0x7e, 0x1, 0x6, 0x9, 0x5, 0x1, 0x4, 0x1, 0x401, 0x3, 0x101, 0xff, 0x6, 0x6, 0x5, 0x3, 0xfffffffb, 0x3, 0xcf8, 0xa2b, 0x9, 0x2, 0x5d, 0xfff, 0x84, 0x6, 0x0, 0x8, 0x7, 0x1, 0x8, 0x7, 0x1ff, 0x1ff, 0x5, 0x3, 0x7, 0xcc9, 0x61, 0x5, 0x29, 0x8, 0xed7, 0x0, 0x800, 0x1, 0x5, 0x9, 0x101, 0x8, 0x9, 0x10001, 0xadb0, 0x53, 0x897, 0xf, 0x9, 0x3, 0x4, 0x7, 0x3, 0x5, 0x10000, 0x3ff, 0x3ff, 0x7ff, 0x0, 0x2, 0x3, 0x1000, 0x3abef80e, 0x8, 0x9, 0x2, 0x8, 0x8, 0x2, 0x5a4, 0x7fff, 0x15, 0xfffff001, 0x7, 0xf, 0x400, 0x5, 0x200, 0x5, 0x41, 0x4, 0xa, 0x3, 0x0, 0x5, 0x5, 0x5, 0x5, 0xf, 0xe, 0x8, 0x4867, 0x9, 0x569, 0xfffffffc, 0x4, 0xc, 0x8, 0x101, 0xd, 0x8, 0x3, 0x875, 0x4, 0x8, 0x8, 0x2, 0xb6, 0x81, 0xfffffffb, 0x2, 0x7, 0xa, 0x8, 0x5, 0x4, 0x0, 0x4, 0xff, 0x2, 0x2, 0x4, 0x1, 0xc, 0x80000001, 0xcc83, 0x10000, 0x9, 0x4, 0x8, 0x3, 0x9, 0x1, 0x812, 0x3, 0xab, 0x0, 0x1, 0xfff, 0xd5f, 0x4, 0x8, 0x8001, 0x6, 0x3, 0x1, 0x40, 0x4, 0x7, 0x1, 0x200, 0x6, 0x8, 0xc5, 0xe, 0x80000001, 0x6, 0xd63b, 0x0, 0x3ff, 0x5, 0x40, 0xffff, 0x400, 0xffff, 0x7, 0x3, 0x8d5f, 0x0, 0x7, 0x101, 0x4, 0x3, 0x229, 0x0, 0x800, 0x1, 0x7ff, 0x6, 0x1, 0x5, 0xff, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x8, 0x5, 0x3, 0x6, 0xfff, 0x3, 0xffffffff, 0x4, 0x200, 0xfffffffe, 0x1, 0x800, 0x4, 0x10, 0x1, 0x5, 0x1, 0x81, 0xffffffe5, 0x1ff, 0x96, 0x0, 0x41c7e16, 0xbc, 0x101, 0x57f1, 0xfff, 0x9, 0x8, 0x6, 0x1, 0xb, 0x800, 0x4, 0x8, 0x7, 0x67bd, 0x7, 0x84, 0xffffffd3, 0x6, 0x7b3eecbe, 0x7ce11d91, 0x0, 0x9, 0xe2, 0x7fff, 0x7, 0x40, 0x2, 0x167820, 0x0, 0x8, 0x4, 0xfffffffa, 0x8000, 0x7ff, 0xbbdb, 0x6, 0x81, 0x0, 0xffff, 0x3, 0x0, 0x200, 0x2, 0x9, 0x7fff, 0x5, 0x4, 0xb99, 0x0, 0x6, 0x6, 0xe9, 0x6, 0x7, 0x3ff, 0x3, 0x9, 0x0, 0x8, 0x7f, 0x0, 0x8, 0x3, 0x1, 0x1, 0x40, 0xffff0000, 0x2, 0x1, 0x7ff, 0x4, 0xfffffff9, 0x8, 0x2, 0x100000, 0x1, 0x9, 0x7, 0x1, 0xb, 0x2, 0x5, 0xfffffff7, 0x0, 0x0, 0x2, 0x5, 0xd, 0x2, 0xff, 0x31e, 0x7b, 0x4, 0xc, 0xc8, 0x8000, 0x40000009, 0x81, 0xcc, 0x98, 0x401, 0x4, 0x7, 0x6, 0x8, 0x3, 0x5, 0x4d, 0x7ff, 0xe, 0x3ab4, 0x3, 0x3, 0xfade, 0x8, 0x9, 0x8, 0x2, 0x9, 0x3e, 0x7, 0x40000000, 0x5, 0x7, 0x1, 0x1, 0x4, 0x7, 0x8, 0x8001, 0x1e7, 0x8, 0xfffffffd, 0x100, 0x7, 0xff7, 0x419, 0x100, 0x7, 0x2, 0x2, 0x2, 0x3, 0x9e0a, 0x3, 0x814, 0xd, 0x8, 0x7, 0x3, 0xe, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x7, 0x5, 0x6, 0x9, 0x4, 0x6, 0x2, 0x400, 0xbc7, 0x8, 0x0, 0x7, 0x2, 0x401, 0x7fffffff, 0x5, 0x1, 0x7, 0x5, 0xd55, 0xe, 0xffffffff, 0x0, 0x9, 0x7, 0x800, 0x7, 0x6, 0x5, 0x20000002, 0x694c, 0x5, 0x8, 0x0, 0xe1d, 0x3ff, 0x90, 0x0, 0xfffffff7, 0x3, 0x7f, 0x8, 0x8001, 0xdefa, 0x80000000, 0x4, 0x8, 0x4, 0x80000001, 0x800, 0x2, 0x0, 0x7, 0x3ff, 0x1893, 0x8, 0x5, 0x9, 0x6, 0x5, 0x9, 0x590, 0x6, 0x8, 0x89, 0x2, 0x7, 0x2, 0x9, 0x5f5, 0xff, 0xfff, 0x2, 0x6, 0x5, 0x6, 0x7, 0x7, 0x4, 0xa, 0x1000, 0x4, 0x0, 0x29c, 0xc68, 0xa, 0x7, 0x7, 0x7, 0x4, 0x8000, 0xcc84, 0x5, 0x30, 0x6, 0x8, 0x3, 0x200, 0x6, 0x7, 0xf, 0x1, 0x8, 0x4, 0x98f, 0xe, 0xe, 0x80ba, 0x3, 0x7ff, 0xe, 0x401, 0x4e, 0xffffffff, 0x7, 0x5, 0x5, 0x6d, 0x7e, 0x5, 0x5, 0x7, 0x99b, 0x3f, 0x2, 0x0, 0xbf4, 0x0, 0x1, 0x7ee, 0x9, 0x1, 0x340000, 0x4, 0x8, 0x4, 0x9, 0x8, 0x5, 0x3, 0xff, 0x800, 0x7ff, 0xfffffff8, 0xca6, 0x5, 0x5, 0x8, 0xf, 0x5, 0x5, 0x468, 0xb4, 0x2, 0x9, 0x5c5, 0x0, 0xfffff9d1, 0xff, 0xd, 0x0, 0x6, 0xff, 0x8c63, 0x0, 0x80000000, 0x101, 0x7, 0x10001, 0x7, 0x5, 0x2, 0xfffffff7, 0x6, 0x9, 0x7ff, 0x10001, 0x5, 0x6, 0x8d9a, 0xff, 0xffffffff, 0x6, 0xb, 0x7fffffff, 0x5, 0x0, 0x1825, 0x2, 0x4, 0x5, 0x4, 0x2, 0x2f, 0x3, 0x3, 0x7, 0xb37, 0xb76d, 0xbf, 0x3, 0x6, 0xa79, 0x8001, 0x4, 0x6a, 0x80000003, 0x5, 0xc15b, 0x0, 0xfffffffc, 0xef8, 0x7f, 0x7, 0x7fffffff, 0xb846, 0x81, 0x0, 0xc, 0x8, 0x9, 0x48900, 0x4, 0x8, 0x9, 0x3, 0x2ae6, 0x9, 0xffff, 0x0, 0x5, 0x5, 0x84e, 0x5, 0x4, 0x1, 0x0, 0x6, 0x3, 0x8, 0x35, 0xef1, 0x8, 0x9, 0x7b50060e, 0xdd0, 0x9, 0xfffffff7, 0x7fffffff, 0x79, 0x4, 0x89aa, 0x42e73309, 0x8, 0x1, 0xf2, 0x5, 0x7f, 0x4, 0xfffffffe, 0x7fffffff, 0x9fd, 0x4, 0x9, 0x6, 0x10001, 0x7, 0x9, 0x3, 0x8000, 0x101, 0x9, 0xa0, 0x5bb1, 0x77, 0x10, 0x10001, 0x7f, 0xd, 0x7f, 0x6, 0xc8, 0x1, 0x78, 0x101, 0x7, 0x8, 0x7, 0xdba, 0x0, 0x8, 0xa6e7d16f, 0x509116bd, 0x6, 0x4, 0xbe0, 0x1, 0x0, 0x497, 0xe, 0xc79, 0x5, 0x2a6c, 0x2, 0x5, 0x6, 0x5, 0x8, 0x2ea, 0x0, 0x8, 0x0, 0x1, 0x8, 0x7f, 0x200, 0x1d, 0x7, 0x5, 0x3833ffd, 0x1, 0x4, 0x4, 0x3, 0xff, 0xad, 0x8, 0x33, 0xfffffff2, 0x6, 0x8, 0x5, 0x101, 0x8, 0x7, 0x0, 0x9, 0x23, 0x7ff, 0x3b78, 0x101, 0xfffffffc, 0x0, 0x6, 0x3, 0xffffffff, 0x7, 0x1, 0x6, 0x2, 0x6, 0x5, 0x4, 0x80, 0x6, 0x4, 0xc, 0x8, 0x5, 0x10, 0x4b, 0x2, 0x2de, 0x100, 0x400, 0x10, 0x7314, 0x10, 0x200, 0xfc, 0xfffffff7, 0x4, 0x400, 0x2, 0x6, 0xffffffff, 0x1, 0x8, 0xfffffffb, 0x10, 0x4, 0x2, 0x4, 0x1, 0xe56, 0xe, 0x3, 0xfffff001, 0x8, 0x6, 0x9, 0x5, 0x4, 0x3, 0x4, 0x2, 0x80, 0x200, 0x4, 0x8, 0x52, 0x5, 0x6, 0x1, 0x7, 0x0, 0x1ff, 0x2, 0x100, 0x0, 0x1, 0x6, 0x8, 0xfffffff9, 0x4, 0x4, 0x20002, 0x5, 0x8, 0x2, 0x4, 0x81, 0x2, 0xfa4, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x3, 0x3, 0x7, 0x1, 0x7, 0x5, 0x5, 0x6, 0x7, 0x3, 0x7f, 0x6, 0x6, 0x101, 0x0, 0x5bd, 0x0, 0x3, 0x7, 0x5982, 0x3e, 0x0, 0xfd, 0x2, 0xa1, 0x7, 0x6, 0x800, 0x5, 0x4, 0x7fffffff, 0x5, 0xd, 0x7ff, 0x3, 0x7, 0x9, 0x5, 0x80000001, 0x81, 0x6, 0x7, 0xeb, 0xffffb899, 0x6, 0x71, 0xf97c, 0x8, 0xfffffffa, 0x4, 0x8, 0x9, 0x1, 0x7, 0x7, 0xa, 0x4c1, 0x0, 0x50, 0x3143ddd4, 0x6, 0x2, 0xc, 0xfffffff6, 0x7ff, 0x8, 0x3, 0x5e54, 0x7fff, 0x3, 0x9, 0x2, 0xe1d, 0x1, 0x4, 0xd9, 0x0, 0x66a3, 0x7f, 0x8000, 0xbfad, 0x401, 0x401, 0xb, 0x8000, 0x80000001, 0x2, 0x6f9b, 0x3, 0x8, 0x7ff, 0xa0a0, 0x1, 0x1, 0x5, 0x5, 0x0, 0x92100000, 0x1000, 0x8, 0x47]}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) (async) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r9, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) (async) socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x275a, 0x0) 292.617724ms ago: executing program 5 (id=5912): unshare(0x6020280) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsmount(0xffffffffffffffff, 0x1, 0x82) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@loopback, @empty, 0x0, "99ab767ac05fe58cc1d31f342747860df3ce3c131da6aa47b38dd1f37d6c04dd", 0x6, 0x1, 0x4, 0x8001}, 0x3c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010100}, 0x184, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7ff}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0x7f, [0xfffffffd, 0x1], 0x9}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) accept(r4, 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) socket$inet(0x2, 0x80000, 0x100) listxattr(0x0, &(0x7f0000000100)=""/85, 0x55) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 289.371604ms ago: executing program 5 (id=5913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, r6, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r10, 0x80045518, &(0x7f0000000040)=0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 277.144744ms ago: executing program 5 (id=5914): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x4, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000280)={0x0, 0xc5ba, 0x40, 0x1, 0xc3}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x2) sendfile(r3, r0, 0x0, 0x7ffff000) 267.589785ms ago: executing program 5 (id=5915): unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02f5ffffffffffffff000000000001"], 0xfdef) 201.537096ms ago: executing program 5 (id=5916): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) r0 = dup(0xffffffffffffffff) io_setup(0x5, &(0x7f0000000480)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x4040, r2, &(0x7f00000004c0)='2', 0x1, 0x0, 0x0, 0x2}]) recvmmsg$unix(r2, &(0x7f000000b000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/247, 0xf7}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/14, 0xe}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f00000006c0)=""/39, 0x27}], 0x7}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/222, 0xde}, {&(0x7f0000000a40)=""/154, 0x9a}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)=""/24, 0x18}, {&(0x7f0000000cc0)=""/73, 0x49}, {&(0x7f0000000d40)=""/75, 0x4b}, {&(0x7f0000000dc0)=""/13, 0xd}, {&(0x7f0000000e00)=""/235, 0xeb}], 0x5}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000f80)=""/162, 0xa2}, {&(0x7f0000001040)=""/32, 0x20}, {&(0x7f0000001080)=""/21, 0x15}, {&(0x7f00000010c0)=""/229, 0xe5}, {&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/170, 0xaa}], 0x6, &(0x7f0000001380)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004400), 0x6e, &(0x7f0000005480)=[{&(0x7f00000013c0)=""/58, 0x3a}, {&(0x7f0000004480)=""/4096, 0x1000}], 0x2, &(0x7f00000054c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000005540)=@abs, 0x6e, &(0x7f0000006b80)=[{&(0x7f00000055c0)=""/184, 0xb8}, {&(0x7f0000005680)=""/30, 0x1e}, {&(0x7f00000056c0)=""/57, 0x39}, {&(0x7f0000005700)=""/160, 0xa0}, {&(0x7f00000057c0)=""/242, 0xf2}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/194, 0xc2}, {&(0x7f00000069c0)=""/254, 0xfe}, {&(0x7f0000006ac0)=""/22, 0x16}, {&(0x7f0000006b00)=""/125, 0x7d}], 0xa, &(0x7f0000006c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000006cc0), 0x6e, &(0x7f0000009ec0)=[{&(0x7f0000006d40)=""/130, 0x82}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/192, 0xc0}, {&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000008ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000009f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f000000af80)=[{&(0x7f0000009f80)=""/4096, 0x1000}], 0x1, &(0x7f000000afc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x9, 0x1, &(0x7f000000b240)={0x0, 0x989680}) write$FUSE_DIRENTPLUS(r0, 0x0, 0xb0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write$bt_hci(0xffffffffffffffff, 0x0, 0xe) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x801) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 69.566339ms ago: executing program 2 (id=5917): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) rt_sigsuspend(0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0xd, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0xc0, 0x19, 0x8}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x5, 0xb5}, {0xeeef0000, 0xdddd0000, 0x10, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x80}, {0x6000, 0x100000, 0x0, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xdddd1000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x82, 0xf7, 0x83}, {0xdddd1000, 0xf000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x6, 0x0, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x1, 0x1000, 0x3, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0xa, 0x4, 0x5e, 0xff]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newtaction={0x838, 0x31, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{0x4}, {0x820, 0x1, [@m_ipt={0x2dc, 0x10, 0x0, 0x0, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x11b, 0x6, {0x1, 'security\x00', 0x5, 0x1000, "700e333d32a3399651d91fe864e836ec68fa16315db00864e3afbf18ee8056c80ffbd37d3cef1b38f1d5c85c46e33898ab0f4a6a5d842547f64c4917cadb569c66f2a0166c2b53ba35990c0c127b9c610b1f5c6970371a10c5c71fc0ac0359ac95fe88a1b9ce525aa9be75fe2feffcb6b9e718cbba7171aa7274c257dc2b48a769b12d0e43e5edf8b1f0988336c75c4be6d3466ea311227137399e6789236f2eb2a21c4445393410f3606fc9e6792efce5923f09bcd62ddec482214379c9b03b7b6841de8e0978ae8ba8af159be04cf3128d6b9475ea261cc5a7b9e0c0aee37d3c92567ed87c7d61bdf3ae46515db1c901"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x2c, 0x6, {0x38f, 'nat\x00', 0xac, 0x1ff, "9c5d"}}]}, {0xf6, 0x6, "1f7ab4fda55284bf5ccc9332e232f238fd510db3eb5eac920780babb8157f0ded133a8617e7edffafaa47e81a795f1f005869154dde8c0c11ae56878985766b20abadfd777e0c92c54ee55730c7e54a0d464010fb542bcccd5a59461ed23caf2ce0da6bc8cb2c3c68e09ca8133c32b455b73665143970a555854fee4ee93e2433f70a20014279204f33436583f65be99952edf6a0274af9401a1e98bef13bf316868de113895c7d6ff9d82b7cdb01ee66c9f6923501b19b2bf04df714833f9223aa90b6275614147a7d3b4e4b88c04633b5f96972732336f544038d2258bb029eefb33d6db246c937ff4f85ae59919132a71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ipt={0x1c0, 0x14, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe6, 0x6, {0x0, 'filter\x00', 0x1, 0x2, "d5d310b2a348fc698b31f3aab4e61712e27694c4920f8bfa576cbe8860fd409d9e72b5f608d490d191389d148cfbfeaa68e360d58cf231d704c77a5cbd3407028b7a1cf127ea37e90e84561499fe9f82e2c1650667b0c35e108eee0bf0010e7fa44b90ff69855fac15b8fb5618ec6918462a2d670cbb4202eeab5f5f8a1e02bce72150f7ddf30638817212450ea9db678dd5509731940006aa70f478f47efa556e207c51d1197363b8df0c524c42b07492ed02b3db6d6c688047a1a7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x470f5c3d}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x98, 0x6, "b32158e28481b1ef7b7a8e054e0f69f78f8de6d6771cf6878ca03ba5a1e7ec77e44917bcf9796b437ce53e67e11697b6fb77c7d6b183d49a15ba01f9020ad833ea8067afc72e6d81f1aca9096460ef601853705b488d94ed9e256b80477f33fcfc75974c3339853858be82fbb4ae12d93633db9b7006e5318d8c05feaa8beea508731643ee2871dd437806876357b31939832207"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x1d0, 0x21, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xe4, 0x6, {0x1000, 'nat\x00', 0x0, 0x1ff, "5b3d6c4704e5c708a76ffa37f5fc44c9bd45cf69b8c82aa9d1675b86f4d2b26f38baf33ebe84ce44c5c859c2305f46925373a45725240d09ab8b4ac8c57261305110db72181ff3e0650deb3874402300fb2ac1274851ee69bae9aa5ba2e4fdd34acae7fe62707376908e22693d1bf8c3787240b4984bb4d552b87735947f01100c9a7bde7f7e73a32c8bf518654835ca506ae8ac46e57fe46d7070638137bae4c19ed01b9d38a9527a22c94a02006784a3f4528bef7a2bdb7003"}}, @TCA_IPT_TARG={0x4b, 0x6, {0x3, 'mangle\x00', 0x2, 0x1, "e0c98189569c4be68005c7e189c71998608e44a8bcd1f840fb8e44f29afae74ab4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}]}, {0x68, 0x6, "bf6a8cf1196ac95dafbd17248e98fbc2ba0fe0f06d4a3a0beea524d3a5ba50fabeaad811cb7b6cc7306a8e2814ba0f55e7b8298138ce83ab8842c7069259d9ff7b75130b92696c0e6c353036af018cff8bdbff8030af8dde8264c5796701d60aa3053dfd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x1b0, 0x6, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa0, 0x6, {0xd1e4, 'raw\x00', 0xc9, 0x4, "f30b65c874040ca5fc4bc2b8705da16858b9c63737cf146ab7294f005b13f84a611d947794628dd02682f00cac1217541f960b1a324dc5440f83eab7b6d0de73eed1179d99338fe9a85defbcc88cab9e4c9c1ab8c45ea069aab4822d4782337425b74bb1c08ee1b36d75a66373a4223c62904345dddc"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}]}, {0xd5, 0x6, "c727f2a8796e5b16a30a8ad26a73fad7f698e4e91cdcfbfba87b1b7bcc2575242eaeb1618652eb6363280f624e838ea5f3ebc0f5c29066e2655191ebcfdd3ab4b9a5f1b0201570e79336e85ac9d3d2b2ae94e82bcd7c8b512c5d9297e8e4e27c0fd3b6a6665d7c1c75988bd97bccb80368627db8d664d97f1ae1735656bb91ebbf7f64d3395fbf0b79e41e059feed4b97f7e85718a5dcdd2615454ef39d5085dd9c733723c87ed3abdbb9df0d5ec02aed43fc35b9271d2a2ec7e6f654492f4582aab49be6361c9393f55b7bf525dd987f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x838}, 0x1, 0x0, 0x0, 0x8080}, 0x4009080) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0x7fffffff, 0x101, 0xd265b691525e0d0c}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000006c0)={0x0, 0x0, 0xf, 0x1}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000ac0)={0x0, 0x8, 0x1, [0x8000000000000000, 0x9, 0x7fff, 0x7, 0x3e4], [0xc117, 0x4, 0xfffffffffffffb92, 0x1, 0x1ff, 0x6, 0x3, 0x8001, 0x2, 0x0, 0x3, 0xe, 0xdac, 0x0, 0x6, 0xfff, 0x10000, 0xd9cf, 0x235b, 0x6, 0x200, 0x3, 0x7fffffff, 0x3f, 0xc020, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x7, 0x5, 0x8a7, 0x7fffffffffffffff, 0x1ff, 0x1, 0x401, 0x5, 0xbc, 0x3, 0x0, 0x5, 0x4, 0x10001, 0x2, 0x2, 0x100000000, 0x800000000000, 0x1, 0x5, 0x6, 0x6c, 0x6, 0x17, 0x9, 0x8, 0x6fe9, 0xfffffffffffffff7, 0x485, 0x7, 0xa, 0x4, 0x1, 0x1, 0x6, 0x6000000, 0x0, 0x8000000000000000, 0x9, 0x7f, 0x7a, 0x8, 0x100000000, 0x8000000000000001, 0x7, 0x2, 0x3, 0x80000000, 0x8000, 0xe, 0x1, 0x1, 0x4, 0x3, 0x0, 0x2, 0x7ff, 0x2, 0x2, 0x5, 0x100000000, 0x400, 0x6, 0xe, 0x5, 0xff00000, 0x8000, 0x0, 0x7f, 0x0, 0x4, 0x100000000, 0x7, 0xff, 0x727, 0x7fff, 0x2, 0xea8, 0x5, 0x4, 0x1bd5000000, 0xe, 0xed, 0xe625, 0x1, 0x5, 0x6, 0x9, 0xe, 0x3, 0x1, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000f00)={0x12, 0x5, {0x6, @struct={0x0, 0xa}, r5, 0x9, 0x1, 0x29, 0x1, 0x80, 0xb0, @struct={0x66, 0xfffffeff}, 0x6, 0x6, [0x9, 0x4, 0x80000000, 0xe, 0xffffffffffffffff, 0x3]}, {0x7, @struct={0x0, 0x7373}, r6, 0x6, 0xb, 0x3, 0x9, 0x9, 0x2d, @usage=0x7, 0xd, 0x7d, [0xfffffffffffffffb, 0x2, 0x3, 0x3, 0x8, 0x4]}, {0x2, @usage=0x80000000, r7, 0x3, 0x3, 0xff, 0xae3, 0x8001, 0x0, @struct={0xb, 0x10001}, 0x9, 0x7, [0x4a9f, 0x2, 0x9, 0x1020, 0x101, 0x5]}, {0x2, 0x2, 0x9}}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d61783d3030303030b07f303030b03031373737373737373737372c00"]) 0s ago: executing program 2 (id=5918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000100)=@random={'security.', '\x00'}) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000007032107020000009c699c75dec1d0887b8f54485b06c979e69b480e246fd2828470e2771ab06fbb6c2c7a33d20596a8d857667fa2a9a5fa41a614cfb800d4a25ff76bd4aa57cd798895d90eaef2399fa2baacc1f8dbe5483c35ed09bd9d0cb6ef235af5291becdee9c3839808f0db52eecb859364cab97fdfb83467de8ab6938241ffa2bf9261d2e801100467cd6c2363c5482111356381b1517aad203b90af16687edbcecbeb88823a12566b804fb5e0e682cbde3203ebd0737b5eb3712f29e10593c133ee5ea90e6c8c24077af41fe475de9fa258cd190e7d2ca75b808f"], 0x18}}], 0x1, 0x4044000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x27, &(0x7f00000002c0)=0x20000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x40) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd\a\x00fdno,', @ANYRESHEX=r2, @ANYRES8=r1, @ANYRESHEX=r4, @ANYBLOB="2c6e8d78617474722c0027048b8bad0df43a5c5b3d774a2284a90c32a7cbc5b1b2ec7f354151", @ANYRES8=r1]) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0xfe, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x4, 0x0, 0x7, 0x7, 0x0, 0x2}, {0x8000000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0xfc}, {0x4, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xf, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x24, 0x0, 0xfe}, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x48}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x3, 0x1, 0x200000000000000]}) mount(&(0x7f0000000240)=@md0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x100802, &(0x7f0000000600)='mounts\x00') write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r11, &(0x7f00000029c0)={0x2020}, 0x2020) r12 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r12, 0x4c00, 0x3) ioctl$TIOCSPTLCK(r12, 0x40045431, &(0x7f0000000200)=0x1) kernel console output (not intermixed with test programs): t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.990088][T14889] rss 49152 [ 294.990098][T14889] rss_huge 0 [ 294.990105][T14889] shmem 314384384 [ 295.120263][ T9] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 295.124494][T14889] mapped_file 0 [ 295.129656][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.134319][T14889] dirty 0 [ 295.138903][ T9] usb 3-1: config 0 has no interface number 0 [ 295.143474][T14889] writeback 0 [ 295.151831][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 295.155189][T14889] workingset_refault_anon 158 [ 295.160936][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.165090][T14889] workingset_refault_file 0 [ 295.169805][ T9] usb 3-1: Product: syz [ 295.174510][T14889] swap 127856640 [ 295.200576][ T9] usb 3-1: Manufacturer: syz [ 295.205896][T14889] swapcached 139264 [ 295.220857][ T9] usb 3-1: SerialNumber: syz [ 295.236882][T14889] pgpgin 510465 [ 295.250497][ T9] usb 3-1: config 0 descriptor?? [ 295.254882][T14889] pgpgout 434687 [ 295.265839][ T9] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 295.270526][T14889] pgfault 144636 [ 295.294712][ T9] usb 3-1: No valid video chain found. [ 295.301497][T14889] pgmajfault 78 [ 295.467706][T14971] rust_binder: Failed copying into alloc: EFAULT [ 295.470658][T14889] inactive_anon 219684864 [ 295.474022][T14971] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 295.474070][T14971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 295.479673][T14889] active_anon 94887936 [ 295.483324][T14971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:129 [ 295.489470][T14889] inactive_file 0 [ 295.528243][T14889] active_file 0 [ 295.531910][T14889] unevictable 0 [ 295.535467][T14889] hierarchical_memory_limit 314572800 [ 295.540921][T14889] hierarchical_memsw_limit 9223372036854771712 [ 295.547088][T14889] total_cache 314384384 [ 295.551280][T14889] total_rss 49152 [ 295.554910][T14889] total_rss_huge 0 [ 295.558613][T14889] total_shmem 314384384 [ 295.562802][T14889] total_mapped_file 0 [ 295.566783][T14889] total_dirty 0 [ 295.570256][T14889] total_writeback 0 [ 295.574061][T14889] total_workingset_refault_anon 158 [ 295.579534][T14889] total_workingset_refault_file 0 [ 295.584611][T14889] total_swap 127856640 [ 295.588735][T14889] total_swapcached 139264 [ 295.593100][T14889] total_pgpgin 510465 [ 295.597082][T14889] total_pgpgout 434687 [ 295.601187][T14889] total_pgfault 144636 [ 295.605286][T14889] total_pgmajfault 78 [ 295.606052][ T9] usb 3-1: USB disconnect, device number 27 [ 295.609323][T14889] total_inactive_anon 219684864 [ 295.620105][T14889] total_active_anon 94887936 [ 295.624705][T14889] total_inactive_file 0 [ 295.628869][T14889] total_active_file 0 [ 295.632896][T14889] total_unevictable 0 [ 295.636927][T14889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14874,uid=0 [ 295.652233][T14889] Memory cgroup out of memory: Killed process 14874 (syz.5.4992) total-vm:90036kB, anon-rss:1012kB, file-rss:52252kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 295.788705][T14877] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 295.835973][T14877] CPU: 1 UID: 0 PID: 14877 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 295.836012][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.836026][T14877] Call Trace: [ 295.836034][T14877] [ 295.836043][T14877] __dump_stack+0x21/0x30 [ 295.836075][T14877] dump_stack_lvl+0x10c/0x190 [ 295.836101][T14877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 295.836129][T14877] ? ___ratelimit+0x3f7/0x5a0 [ 295.836215][T14877] dump_stack+0x19/0x20 [ 295.836242][T14877] dump_header+0xd7/0x490 [ 295.836263][T14877] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 295.836290][T14877] oom_kill_process+0x4c0/0x7e0 [ 295.836313][T14877] ? sched_clock_cpu+0x75/0x400 [ 295.836341][T14877] out_of_memory+0x7ee/0xbd0 [ 295.836365][T14877] ? __cfi_out_of_memory+0x10/0x10 [ 295.836387][T14877] ? mutex_lock_killable+0x104/0x1c0 [ 295.836409][T14877] ? __cfi_mutex_lock_killable+0x10/0x10 [ 295.836434][T14877] mem_cgroup_out_of_memory+0x279/0x350 [ 295.836455][T14877] ? drain_obj_stock+0xed0/0xed0 [ 295.836477][T14877] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 295.836497][T14877] try_charge_memcg+0x8f7/0xde0 [ 295.836526][T14877] ? __cfi_try_charge_memcg+0x10/0x10 [ 295.836553][T14877] ? __alloc_pages_noprof+0x31f/0x7b0 [ 295.836580][T14877] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 295.836606][T14877] ? __folio_batch_add_and_move+0x2ab/0x370 [ 295.836632][T14877] __mem_cgroup_charge+0xf6/0x410 [ 295.836662][T14877] ? _raw_spin_lock+0x8c/0x120 [ 295.836689][T14877] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 295.836719][T14877] shmem_alloc_and_add_folio+0x86d/0x1050 [ 295.836746][T14877] ? put_swap_device+0x130/0x130 [ 295.836769][T14877] ? shmem_huge_global_enabled+0x2da/0x360 [ 295.836791][T14877] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 295.836813][T14877] ? __kasan_check_write+0x18/0x20 [ 295.836842][T14877] ? _raw_spin_lock+0x8c/0x120 [ 295.836870][T14877] shmem_get_folio_gfp+0x5f0/0x1380 [ 295.836893][T14877] ? shmem_get_folio+0xc0/0xc0 [ 295.836913][T14877] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 295.836942][T14877] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 295.836970][T14877] ? inode_to_bdi+0x6d/0x100 [ 295.836997][T14877] shmem_write_begin+0xf4/0x270 [ 295.837021][T14877] generic_perform_write+0x330/0x960 [ 295.837052][T14877] ? __cfi_generic_perform_write+0x10/0x10 [ 295.837080][T14877] ? down_write+0xe9/0x2a0 [ 295.837103][T14877] ? mnt_get_write_access_file+0x1af/0x3b0 [ 295.837130][T14877] ? mnt_put_write_access_file+0xc2/0x100 [ 295.837164][T14877] ? file_update_time+0x1ef/0x220 [ 295.837192][T14877] shmem_file_write_iter+0x105/0x130 [ 295.837218][T14877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 295.837244][T14877] __kernel_write_iter+0x395/0x830 [ 295.837270][T14877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 295.837297][T14877] ? __cfi___kernel_write_iter+0x10/0x10 [ 295.837316][T14877] ? get_dump_page+0x160/0x220 [ 295.837341][T14877] ? __asan_memset+0x39/0x50 [ 295.837369][T14877] ? iov_iter_bvec+0xc0/0x180 [ 295.837392][T14877] dump_user_range+0xb06/0xdf0 [ 295.837412][T14877] ? __cfi_dump_emit+0x10/0x10 [ 295.837441][T14877] ? __cfi_dump_user_range+0x10/0x10 [ 295.837461][T14877] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 295.837490][T14877] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 295.837520][T14877] elf_core_dump+0x2cd9/0x3810 [ 295.837548][T14877] ? __cfi_elf_core_dump+0x10/0x10 [ 295.837577][T14877] ? dump_interrupted+0xf0/0xf0 [ 295.837606][T14877] ? filp_open+0x182/0x1d0 [ 295.837631][T14877] ? 0xffffffffff600000 [ 295.837649][T14877] do_coredump+0x1bfa/0x2bd0 [ 295.837681][T14877] ? __cfi_do_coredump+0x10/0x10 [ 295.837710][T14877] ? asm_exc_page_fault+0x2b/0x30 [ 295.837739][T14877] ? __kasan_slab_free+0x6a/0x80 [ 295.837761][T14877] ? kmem_cache_free+0x1c1/0x510 [ 295.837790][T14877] ? get_signal+0xa75/0x14f0 [ 295.837816][T14877] get_signal+0x11fd/0x14f0 [ 295.837844][T14877] arch_do_signal_or_restart+0x96/0x720 [ 295.837875][T14877] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 295.837908][T14877] irqentry_exit_to_user_mode+0x4e/0xb0 [ 295.837932][T14877] irqentry_exit+0x16/0x60 [ 295.837955][T14877] exc_page_fault+0x66/0xc0 [ 295.837977][T14877] asm_exc_page_fault+0x2b/0x30 [ 295.837998][T14877] RIP: 0033:0x7fc19aa4f927 [ 295.838017][T14877] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 295.838035][T14877] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 295.838057][T14877] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 295.838073][T14877] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 295.838089][T14877] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.838104][T14877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.838117][T14877] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 295.838137][T14877] [ 295.838242][T14877] memory: usage 307196kB, limit 307200kB, failcnt 64318 [ 295.893658][T14989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.977134][T14877] memory+swap: usage 408204kB, limit 9007199254740988kB, failcnt 0 [ 296.341771][T14877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 296.348756][T14877] Memory cgroup stats for /syz5: [ 296.348899][T14877] cache 314302464 [ 296.359185][T14877] rss 212992 [ 296.362419][T14877] rss_huge 0 [ 296.365626][T14877] shmem 314302464 [ 296.375834][T14877] mapped_file 0 [ 296.379396][T14877] dirty 0 [ 296.382411][T14877] writeback 8192 [ 296.385971][T14877] workingset_refault_anon 164 [ 296.391065][T14877] workingset_refault_file 0 [ 296.399183][T14877] swap 127913984 [ 296.402815][T14877] swapcached 81920 [ 296.406547][T14877] pgpgin 518444 [ 296.425918][T14877] pgpgout 442666 [ 296.436285][T14877] pgfault 145178 [ 296.440470][T14877] pgmajfault 84 [ 296.443951][T14877] inactive_anon 238952448 [ 296.448300][T14877] active_anon 75620352 [ 296.454618][T14877] inactive_file 0 [ 296.458517][T14877] active_file 0 [ 296.462206][T14877] unevictable 0 [ 296.465736][T14877] hierarchical_memory_limit 314572800 [ 296.471460][T14877] hierarchical_memsw_limit 9223372036854771712 [ 296.477637][T14877] total_cache 314302464 [ 296.482040][T14877] total_rss 212992 [ 296.485785][T14877] total_rss_huge 0 [ 296.489866][T14877] total_shmem 314302464 [ 296.494156][T14877] total_mapped_file 0 [ 296.505919][T14877] total_dirty 0 [ 296.509672][T14877] total_writeback 8192 [ 296.519290][T14877] total_workingset_refault_anon 164 [ 296.524525][T14877] total_workingset_refault_file 0 [ 296.535067][T15010] netlink: 'syz.5.5025': attribute type 63 has an invalid length. [ 296.545240][T14877] total_swap 127913984 [ 296.562034][T14877] total_swapcached 81920 [ 296.562438][T15010] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5025'. [ 296.566423][T14877] total_pgpgin 518444 [ 296.599330][T15017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.603124][T15010] gretap0: entered allmulticast mode [ 296.622509][T14877] total_pgpgout 442666 [ 296.636662][T14877] total_pgfault 145178 [ 296.644456][T15010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 296.648340][T15020] loop2: detected capacity change from 0 to 7 [ 296.669369][T14877] total_pgmajfault 84 [ 296.678818][T14877] total_inactive_anon 238952448 [ 296.684240][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.693858][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.703135][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 296.712505][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.721667][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.729560][T13319] loop2: unable to read partition table [ 296.735890][T14877] total_active_anon 75620352 [ 296.740550][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.740583][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.749197][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.758260][T14877] total_inactive_file 0 [ 296.766754][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.770926][T14877] total_active_file 0 [ 296.779907][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.791849][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.799792][T15020] loop2: unable to read partition table [ 296.805522][T15020] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 296.808892][T15017] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 296.819225][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.836580][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.844880][T14877] total_unevictable 0 [ 296.845527][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.848904][T14877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 296.858039][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.859136][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.869231][T14877] ,cpuset= [ 296.872833][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.874325][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.885027][T14877] syz5 [ 296.885137][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.892967][T14877] ,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14880,uid=0 [ 296.959288][T14877] Memory cgroup out of memory: Killed process 14880 (syz.5.4992) total-vm:90036kB, anon-rss:1012kB, file-rss:50716kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 297.028923][T14906] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 297.070544][T14906] CPU: 1 UID: 0 PID: 14906 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 297.070582][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.070596][T14906] Call Trace: [ 297.070604][T14906] [ 297.070613][T14906] __dump_stack+0x21/0x30 [ 297.070645][T14906] dump_stack_lvl+0x10c/0x190 [ 297.070671][T14906] ? __cfi_dump_stack_lvl+0x10/0x10 [ 297.070698][T14906] ? ___ratelimit+0x3f7/0x5a0 [ 297.070719][T14906] dump_stack+0x19/0x20 [ 297.070744][T14906] dump_header+0xd7/0x490 [ 297.070766][T14906] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 297.070794][T14906] oom_kill_process+0x4c0/0x7e0 [ 297.070818][T14906] ? sched_clock_cpu+0x75/0x400 [ 297.070845][T14906] out_of_memory+0x7ee/0xbd0 [ 297.070869][T14906] ? __cfi_out_of_memory+0x10/0x10 [ 297.070893][T14906] ? mutex_lock_killable+0x104/0x1c0 [ 297.070916][T14906] ? __cfi_mutex_lock_killable+0x10/0x10 [ 297.070941][T14906] mem_cgroup_out_of_memory+0x279/0x350 [ 297.070962][T14906] ? drain_obj_stock+0xed0/0xed0 [ 297.070985][T14906] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 297.071005][T14906] try_charge_memcg+0x8f7/0xde0 [ 297.071033][T14906] ? __cfi_try_charge_memcg+0x10/0x10 [ 297.071060][T14906] ? __alloc_pages_noprof+0x31f/0x7b0 [ 297.071086][T14906] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 297.071111][T14906] ? __folio_batch_add_and_move+0x2ab/0x370 [ 297.071136][T14906] __mem_cgroup_charge+0xf6/0x410 [ 297.071166][T14906] ? _raw_spin_lock+0x8c/0x120 [ 297.071202][T14906] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 297.071233][T14906] shmem_alloc_and_add_folio+0x86d/0x1050 [ 297.071259][T14906] ? put_swap_device+0x130/0x130 [ 297.071283][T14906] ? shmem_huge_global_enabled+0x2da/0x360 [ 297.071306][T14906] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 297.071329][T14906] ? __kasan_check_write+0x18/0x20 [ 297.071358][T14906] ? _raw_spin_lock+0x8c/0x120 [ 297.071386][T14906] shmem_get_folio_gfp+0x5f0/0x1380 [ 297.071410][T14906] ? shmem_get_folio+0xc0/0xc0 [ 297.071430][T14906] ? follow_page_pte+0xa5c/0xb90 [ 297.071455][T14906] ? inode_to_bdi+0x6d/0x100 [ 297.071482][T14906] shmem_write_begin+0xf4/0x270 [ 297.071505][T14906] generic_perform_write+0x330/0x960 [ 297.071533][T14906] ? __cfi_generic_perform_write+0x10/0x10 [ 297.071559][T14906] ? down_write+0xe9/0x2a0 [ 297.071582][T14906] ? file_update_time+0xa3/0x220 [ 297.071608][T14906] shmem_file_write_iter+0x105/0x130 [ 297.071635][T14906] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 297.071660][T14906] __kernel_write_iter+0x395/0x830 [ 297.071679][T14906] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 297.071705][T14906] ? __cfi___kernel_write_iter+0x10/0x10 [ 297.071725][T14906] ? get_dump_page+0x160/0x220 [ 297.071750][T14906] ? __asan_memset+0x39/0x50 [ 297.071778][T14906] ? iov_iter_bvec+0xc0/0x180 [ 297.071802][T14906] dump_user_range+0xb06/0xdf0 [ 297.071823][T14906] ? __cfi_dump_emit+0x10/0x10 [ 297.071852][T14906] ? __cfi_dump_user_range+0x10/0x10 [ 297.071872][T14906] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 297.071902][T14906] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 297.071932][T14906] elf_core_dump+0x2cd9/0x3810 [ 297.071959][T14906] ? __cfi_elf_core_dump+0x10/0x10 [ 297.071990][T14906] ? dump_interrupted+0xf0/0xf0 [ 297.072019][T14906] ? filp_open+0x182/0x1d0 [ 297.072045][T14906] ? 0xffffffffff600000 [ 297.072062][T14906] do_coredump+0x1bfa/0x2bd0 [ 297.072095][T14906] ? __cfi_do_coredump+0x10/0x10 [ 297.072124][T14906] ? asm_exc_page_fault+0x2b/0x30 [ 297.072154][T14906] ? __kasan_slab_free+0x6a/0x80 [ 297.072177][T14906] ? kmem_cache_free+0x1c1/0x510 [ 297.072214][T14906] ? get_signal+0xa75/0x14f0 [ 297.072239][T14906] get_signal+0x11fd/0x14f0 [ 297.072266][T14906] arch_do_signal_or_restart+0x96/0x720 [ 297.072296][T14906] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 297.072330][T14906] irqentry_exit_to_user_mode+0x4e/0xb0 [ 297.072355][T14906] irqentry_exit+0x16/0x60 [ 297.072378][T14906] exc_page_fault+0x66/0xc0 [ 297.072401][T14906] asm_exc_page_fault+0x2b/0x30 [ 297.072423][T14906] RIP: 0033:0x7fc19aa4f927 [ 297.072440][T14906] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 297.072459][T14906] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 297.072480][T14906] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 297.072496][T14906] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 297.072512][T14906] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 297.072526][T14906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.072540][T14906] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 297.072558][T14906] [ 297.072567][T14906] memory: usage 292268kB, limit 307200kB, failcnt 64912 [ 297.179135][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 297.264353][T14906] memory+swap: usage 408936kB, limit 9007199254740988kB, failcnt 0 [ 297.390061][T15038] rust_binder: 239: no such ref 1 [ 297.447080][T14906] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 297.450240][T15038] rust_binder: 239: no such ref 2 [ 297.478358][T14906] Memory cgroup stats for [ 297.483863][T15038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 297.494005][T14906] /syz5: [ 297.585969][T14906] cache 314376192 [ 297.592677][T14906] rss 196608 [ 297.595918][T14906] rss_huge 0 [ 297.599200][T14906] shmem 314376192 [ 297.602898][T14906] mapped_file 0 [ 297.606394][T14906] dirty 0 [ 297.609370][T14906] writeback 0 [ 297.612663][T14906] workingset_refault_anon 168 [ 297.617328][T14906] workingset_refault_file 0 [ 297.621878][T14906] swap 127954944 [ 297.625720][T14906] swapcached 40960 [ 297.629544][T14906] pgpgin 526104 [ 297.633053][T14906] pgpgout 450326 [ 297.636619][T14906] pgfault 145784 [ 297.637525][ T36] audit: type=1400 audit(1756861929.480:48882): avc: denied { link } for pid=15041 comm="syz.0.5036" name="file1" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 297.640210][T14906] pgmajfault 88 [ 297.663827][ T9] usb 3-1: device descriptor read/64, error -71 [ 297.666370][T14906] inactive_anon 229593088 [ 297.676787][T14906] active_anon 84979712 [ 297.680933][T14906] inactive_file 0 [ 297.684705][T14906] active_file 0 [ 297.688227][T14906] unevictable 0 [ 297.691905][T14906] hierarchical_memory_limit 314572800 [ 297.697439][T14906] hierarchical_memsw_limit 9223372036854771712 [ 297.703691][T14906] total_cache 314376192 [ 297.708005][T14906] total_rss 196608 [ 297.711786][T14906] total_rss_huge 0 [ 297.715608][T14906] total_shmem 314376192 [ 297.719851][T14906] total_mapped_file 0 [ 297.723934][T14906] total_dirty 0 [ 297.727616][T14906] total_writeback 0 [ 297.731662][T14906] total_workingset_refault_anon 168 [ 297.736910][T14906] total_workingset_refault_file 0 [ 297.742571][T14906] total_swap 127954944 [ 297.746691][T14906] total_swapcached 40960 [ 297.750992][T14906] total_pgpgin 526104 [ 297.755112][T14906] total_pgpgout 450326 [ 297.759244][T14906] total_pgfault 145784 [ 297.763407][T14906] total_pgmajfault 88 [ 297.767449][T14906] total_inactive_anon 229593088 [ 297.772353][T14906] total_active_anon 84979712 [ 297.777039][T14906] total_inactive_file 0 [ 297.781331][T14906] total_active_file 0 [ 297.785359][T14906] total_unevictable 0 [ 297.789447][T14906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14875,uid=0 [ 297.804786][T14906] Memory cgroup out of memory: Killed process 14875 (syz.5.4992) total-vm:90036kB, anon-rss:1012kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 297.929218][ T9] usb 3-1: device descriptor read/64, error -71 [ 298.003071][T14894] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 298.049154][T14894] CPU: 1 UID: 0 PID: 14894 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 298.049192][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.049204][T14894] Call Trace: [ 298.049211][T14894] [ 298.049220][T14894] __dump_stack+0x21/0x30 [ 298.049252][T14894] dump_stack_lvl+0x10c/0x190 [ 298.049279][T14894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 298.049304][T14894] ? ___ratelimit+0x3f7/0x5a0 [ 298.049325][T14894] dump_stack+0x19/0x20 [ 298.049350][T14894] dump_header+0xd7/0x490 [ 298.049371][T14894] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 298.049408][T14894] oom_kill_process+0x4c0/0x7e0 [ 298.049432][T14894] ? sched_clock_cpu+0x75/0x400 [ 298.049459][T14894] out_of_memory+0x7ee/0xbd0 [ 298.049482][T14894] ? __cfi_out_of_memory+0x10/0x10 [ 298.049504][T14894] ? mutex_lock_killable+0x92/0x1c0 [ 298.049526][T14894] ? __cfi_mutex_lock_killable+0x10/0x10 [ 298.049550][T14894] mem_cgroup_out_of_memory+0x279/0x350 [ 298.049570][T14894] ? drain_obj_stock+0xed0/0xed0 [ 298.049592][T14894] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 298.049611][T14894] try_charge_memcg+0x8f7/0xde0 [ 298.049639][T14894] ? __cfi_try_charge_memcg+0x10/0x10 [ 298.049666][T14894] ? __alloc_pages_noprof+0x31f/0x7b0 [ 298.049693][T14894] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 298.049718][T14894] ? __folio_batch_add_and_move+0x2ab/0x370 [ 298.049744][T14894] __mem_cgroup_charge+0xf6/0x410 [ 298.049773][T14894] ? _raw_spin_lock+0x8c/0x120 [ 298.049800][T14894] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 298.049831][T14894] shmem_alloc_and_add_folio+0x86d/0x1050 [ 298.049859][T14894] ? put_swap_device+0x130/0x130 [ 298.049882][T14894] ? shmem_huge_global_enabled+0x2da/0x360 [ 298.049905][T14894] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 298.049928][T14894] ? __kasan_check_write+0x18/0x20 [ 298.049957][T14894] ? _raw_spin_lock+0x8c/0x120 [ 298.049983][T14894] shmem_get_folio_gfp+0x5f0/0x1380 [ 298.050007][T14894] ? shmem_get_folio+0xc0/0xc0 [ 298.050026][T14894] ? follow_page_pte+0xa5c/0xb90 [ 298.050052][T14894] ? inode_to_bdi+0x6d/0x100 [ 298.050078][T14894] shmem_write_begin+0xf4/0x270 [ 298.050102][T14894] generic_perform_write+0x330/0x960 [ 298.050132][T14894] ? __cfi_generic_perform_write+0x10/0x10 [ 298.050158][T14894] ? down_write+0xe9/0x2a0 [ 298.050182][T14894] ? file_update_time+0xa3/0x220 [ 298.050207][T14894] shmem_file_write_iter+0x105/0x130 [ 298.050231][T14894] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 298.050256][T14894] __kernel_write_iter+0x395/0x830 [ 298.050276][T14894] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 298.050302][T14894] ? __cfi___kernel_write_iter+0x10/0x10 [ 298.050323][T14894] ? get_dump_page+0x160/0x220 [ 298.050347][T14894] ? __asan_memset+0x39/0x50 [ 298.050376][T14894] ? iov_iter_bvec+0xc0/0x180 [ 298.050407][T14894] dump_user_range+0xb06/0xdf0 [ 298.050429][T14894] ? __cfi_dump_emit+0x10/0x10 [ 298.050460][T14894] ? __cfi_dump_user_range+0x10/0x10 [ 298.050480][T14894] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 298.050510][T14894] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 298.050541][T14894] elf_core_dump+0x2cd9/0x3810 [ 298.050568][T14894] ? __cfi_elf_core_dump+0x10/0x10 [ 298.050598][T14894] ? dump_interrupted+0xf0/0xf0 [ 298.050627][T14894] ? filp_open+0x182/0x1d0 [ 298.050658][T14894] ? 0xffffffffff600000 [ 298.050677][T14894] do_coredump+0x1bfa/0x2bd0 [ 298.050709][T14894] ? __cfi_do_coredump+0x10/0x10 [ 298.050737][T14894] ? asm_exc_page_fault+0x2b/0x30 [ 298.050766][T14894] ? __kasan_slab_free+0x6a/0x80 [ 298.050787][T14894] ? kmem_cache_free+0x1c1/0x510 [ 298.050816][T14894] ? get_signal+0xa75/0x14f0 [ 298.050842][T14894] get_signal+0x11fd/0x14f0 [ 298.050869][T14894] arch_do_signal_or_restart+0x96/0x720 [ 298.050900][T14894] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 298.050933][T14894] irqentry_exit_to_user_mode+0x4e/0xb0 [ 298.050959][T14894] irqentry_exit+0x16/0x60 [ 298.050981][T14894] exc_page_fault+0x66/0xc0 [ 298.051004][T14894] asm_exc_page_fault+0x2b/0x30 [ 298.051025][T14894] RIP: 0033:0x7fc19aa4f927 [ 298.051043][T14894] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 298.051063][T14894] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 298.051085][T14894] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 298.051101][T14894] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 298.051117][T14894] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.051132][T14894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.051147][T14894] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 298.051165][T14894] [ 298.319168][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 298.322568][T14894] memory: usage 307160kB, limit 307200kB, failcnt 68798 [ 298.345885][ T36] audit: type=1400 audit(1756861930.200:48883): avc: denied { setattr } for pid=15051 comm="syz.0.5039" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 298.348426][T14894] memory+swap: usage 430280kB, limit 9007199254740988kB, failcnt 0 [ 298.374465][ T36] audit: type=1400 audit(1756861930.200:48884): avc: denied { mounton } for pid=15051 comm="syz.0.5039" path="/87/file0" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 298.375971][T14894] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 298.375988][T14894] Memory cgroup stats for /syz5: [ 298.376112][T14894] cache 314146816 [ 298.479946][ T9] usb 3-1: device descriptor read/64, error -71 [ 298.487906][T14894] rss 192512 [ 298.487921][T14894] rss_huge 0 [ 298.487931][T14894] shmem 314146816 [ 298.625812][T14894] mapped_file 0 [ 298.629322][T14894] dirty 0 [ 298.632327][T14894] writeback 28672 [ 298.635962][T14894] workingset_refault_anon 171 [ 298.640766][T14894] workingset_refault_file 0 [ 298.645274][T14894] swap 127832064 [ 298.648828][T14894] swapcached 118784 [ 298.669166][T14894] pgpgin 536056 [ 298.672668][T14894] pgpgout 460312 [ 298.676232][T14894] pgfault 146387 [ 298.699136][T14894] pgmajfault 91 [ 298.702657][T14894] inactive_anon 118476800 [ 298.706994][T14894] active_anon 194203648 [ 298.737850][T14894] inactive_file 0 [ 298.741573][T14894] active_file 0 [ 298.745054][T14894] unevictable 0 [ 298.748517][T14894] hierarchical_memory_limit 314572800 [ 298.768305][T14894] hierarchical_memsw_limit 9223372036854771712 [ 298.780076][T14894] total_cache 314146816 [ 298.784362][T14894] total_rss 192512 [ 298.788097][T14894] total_rss_huge 0 [ 298.793784][T14894] total_shmem 314146816 [ 298.798155][T14894] total_mapped_file 0 [ 298.802195][T14894] total_dirty 0 [ 298.805658][T14894] total_writeback 28672 [ 298.811244][T14894] total_workingset_refault_anon 171 [ 298.816487][T14894] total_workingset_refault_file 0 [ 298.821647][T14894] total_swap 127832064 [ 298.825753][T14894] total_swapcached 118784 [ 298.830182][T14894] total_pgpgin 536056 [ 298.834190][T14894] total_pgpgout 460312 [ 298.838334][T14894] total_pgfault 146387 [ 298.842449][T14894] total_pgmajfault 91 [ 298.846452][T14894] total_inactive_anon 118476800 [ 298.851339][T14894] total_active_anon 194203648 [ 298.856038][T14894] total_inactive_file 0 [ 298.860359][T14894] total_active_file 0 [ 298.864447][T14894] total_unevictable 0 [ 298.868533][T14894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14903,uid=0 [ 298.884025][T14894] Memory cgroup out of memory: Killed process 14903 (syz.5.4992) total-vm:90168kB, anon-rss:1016kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 298.884682][ T9] usb 3-1: device descriptor read/64, error -71 [ 298.923766][T15055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.936586][T14897] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 298.942136][T15055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.999134][T14897] CPU: 0 UID: 0 PID: 14897 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 298.999174][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.999188][T14897] Call Trace: [ 298.999196][T14897] [ 298.999210][T14897] __dump_stack+0x21/0x30 [ 298.999243][T14897] dump_stack_lvl+0x10c/0x190 [ 298.999271][T14897] ? __cfi_dump_stack_lvl+0x10/0x10 [ 298.999298][T14897] ? ___ratelimit+0x3f7/0x5a0 [ 298.999319][T14897] dump_stack+0x19/0x20 [ 298.999342][T14897] dump_header+0xd7/0x490 [ 298.999363][T14897] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 298.999400][T14897] oom_kill_process+0x4c0/0x7e0 [ 298.999424][T14897] ? sched_clock_cpu+0x75/0x400 [ 298.999453][T14897] out_of_memory+0x7ee/0xbd0 [ 298.999476][T14897] ? __cfi_out_of_memory+0x10/0x10 [ 298.999498][T14897] ? mutex_lock_killable+0x104/0x1c0 [ 298.999521][T14897] ? __cfi_mutex_lock_killable+0x10/0x10 [ 298.999545][T14897] mem_cgroup_out_of_memory+0x279/0x350 [ 298.999567][T14897] ? drain_obj_stock+0xed0/0xed0 [ 298.999587][T14897] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 298.999607][T14897] try_charge_memcg+0x8f7/0xde0 [ 298.999635][T14897] ? __cfi_try_charge_memcg+0x10/0x10 [ 298.999661][T14897] ? __alloc_pages_noprof+0x31f/0x7b0 [ 298.999688][T14897] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 298.999714][T14897] ? __folio_batch_add_and_move+0x2ab/0x370 [ 298.999740][T14897] __mem_cgroup_charge+0xf6/0x410 [ 298.999769][T14897] ? _raw_spin_lock+0x8c/0x120 [ 298.999795][T14897] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 298.999825][T14897] shmem_alloc_and_add_folio+0x86d/0x1050 [ 298.999852][T14897] ? put_swap_device+0x130/0x130 [ 298.999875][T14897] ? shmem_huge_global_enabled+0x2da/0x360 [ 298.999897][T14897] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 298.999918][T14897] ? __kasan_check_write+0x18/0x20 [ 298.999947][T14897] ? _raw_spin_lock+0x8c/0x120 [ 298.999975][T14897] shmem_get_folio_gfp+0x5f0/0x1380 [ 298.999998][T14897] ? shmem_get_folio+0xc0/0xc0 [ 299.000017][T14897] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 299.000046][T14897] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 299.000073][T14897] ? inode_to_bdi+0x6d/0x100 [ 299.000100][T14897] shmem_write_begin+0xf4/0x270 [ 299.000122][T14897] generic_perform_write+0x330/0x960 [ 299.000152][T14897] ? __cfi_generic_perform_write+0x10/0x10 [ 299.000180][T14897] ? down_write+0xe9/0x2a0 [ 299.000202][T14897] ? mnt_get_write_access_file+0x1af/0x3b0 [ 299.000230][T14897] ? mnt_put_write_access_file+0xc2/0x100 [ 299.000257][T14897] ? file_update_time+0x1ef/0x220 [ 299.000284][T14897] shmem_file_write_iter+0x105/0x130 [ 299.000310][T14897] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 299.000336][T14897] __kernel_write_iter+0x395/0x830 [ 299.000355][T14897] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 299.000388][T14897] ? __cfi___kernel_write_iter+0x10/0x10 [ 299.000406][T14897] ? get_dump_page+0x160/0x220 [ 299.000430][T14897] ? __asan_memset+0x39/0x50 [ 299.000457][T14897] ? iov_iter_bvec+0xc0/0x180 [ 299.000480][T14897] dump_user_range+0xb06/0xdf0 [ 299.000501][T14897] ? __cfi_dump_emit+0x10/0x10 [ 299.000531][T14897] ? __cfi_dump_user_range+0x10/0x10 [ 299.000551][T14897] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 299.000581][T14897] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 299.000613][T14897] elf_core_dump+0x2cd9/0x3810 [ 299.000640][T14897] ? __cfi_elf_core_dump+0x10/0x10 [ 299.000670][T14897] ? dump_interrupted+0xf0/0xf0 [ 299.000700][T14897] ? filp_open+0x182/0x1d0 [ 299.000726][T14897] ? 0xffffffffff600000 [ 299.000744][T14897] do_coredump+0x1bfa/0x2bd0 [ 299.000777][T14897] ? __cfi_do_coredump+0x10/0x10 [ 299.000806][T14897] ? asm_exc_page_fault+0x2b/0x30 [ 299.000836][T14897] ? __kasan_slab_free+0x6a/0x80 [ 299.000858][T14897] ? kmem_cache_free+0x1c1/0x510 [ 299.000888][T14897] ? get_signal+0xa75/0x14f0 [ 299.000915][T14897] get_signal+0x11fd/0x14f0 [ 299.000942][T14897] arch_do_signal_or_restart+0x96/0x720 [ 299.000973][T14897] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 299.001007][T14897] irqentry_exit_to_user_mode+0x4e/0xb0 [ 299.001032][T14897] irqentry_exit+0x16/0x60 [ 299.001055][T14897] exc_page_fault+0x66/0xc0 [ 299.001079][T14897] asm_exc_page_fault+0x2b/0x30 [ 299.001101][T14897] RIP: 0033:0x7fc19aa4f927 [ 299.001120][T14897] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 299.001139][T14897] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 299.001160][T14897] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 299.001176][T14897] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 299.001192][T14897] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 299.001207][T14897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.001221][T14897] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 299.001239][T14897] [ 299.005670][T14897] memory: usage 306980kB, limit 307200kB, failcnt 69607 [ 299.490208][T14897] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 299.490545][ T9] usb usb3-port1: attempt power cycle [ 299.498778][T14897] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 299.511938][T14897] Memory cgroup stats for /syz5: [ 299.512078][T14897] cache 314470400 [ 299.520819][T14897] rss 86016 [ 299.524035][T14897] rss_huge 0 [ 299.527662][T14897] shmem 314470400 [ 299.531612][T14897] mapped_file 0 [ 299.535193][T14897] dirty 0 [ 299.538193][T14897] writeback 0 [ 299.541601][T14897] workingset_refault_anon 176 [ 299.546319][T14897] workingset_refault_file 0 [ 299.550898][T14897] swap 127950848 [ 299.554533][T14897] swapcached 45056 [ 299.558270][T14897] pgpgin 545491 [ 299.561793][T14897] pgpgout 469713 [ 299.565379][T14897] pgfault 146920 [ 299.568935][T14897] pgmajfault 96 [ 299.572509][T14897] inactive_anon 207876096 [ 299.576841][T14897] active_anon 106577920 [ 299.581378][T14897] inactive_file 0 [ 299.585091][T14897] active_file 0 [ 299.585659][T15059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5042'. [ 299.588586][T14897] unevictable 0 [ 299.601014][T14897] hierarchical_memory_limit 314572800 [ 299.606382][T14897] hierarchical_memsw_limit 9223372036854771712 [ 299.612545][T14897] total_cache 314470400 [ 299.616700][T14897] total_rss 86016 [ 299.620343][T14897] total_rss_huge 0 [ 299.624066][T14897] total_shmem 314470400 [ 299.628207][T14897] total_mapped_file 0 [ 299.632209][T14897] total_dirty 0 [ 299.635673][T14897] total_writeback 0 [ 299.639508][T14897] total_workingset_refault_anon 176 [ 299.644705][T14897] total_workingset_refault_file 0 [ 299.649756][T14897] total_swap 127950848 [ 299.653843][T14897] total_swapcached 45056 [ 299.658105][T14897] total_pgpgin 545491 [ 299.662320][T14897] total_pgpgout 469713 [ 299.666408][T14897] total_pgfault 146920 [ 299.670520][T14897] total_pgmajfault 96 [ 299.674525][T14897] total_inactive_anon 207876096 [ 299.679435][T14897] total_active_anon 106577920 [ 299.684136][T14897] total_inactive_file 0 [ 299.688290][T14897] total_active_file 0 [ 299.692298][T14897] total_unevictable 0 [ 299.696376][T14897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14897,uid=0 [ 299.711379][T14897] Memory cgroup out of memory: Killed process 14897 (syz.5.4992) total-vm:90168kB, anon-rss:1116kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 299.849155][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 299.858789][T14904] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 299.939186][T14904] CPU: 0 UID: 0 PID: 14904 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 299.939222][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.939236][T14904] Call Trace: [ 299.939242][T14904] [ 299.939250][T14904] __dump_stack+0x21/0x30 [ 299.939282][T14904] dump_stack_lvl+0x10c/0x190 [ 299.939313][T14904] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.939338][T14904] ? ___ratelimit+0x3f7/0x5a0 [ 299.939359][T14904] dump_stack+0x19/0x20 [ 299.939383][T14904] dump_header+0xd7/0x490 [ 299.939404][T14904] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 299.939430][T14904] oom_kill_process+0x4c0/0x7e0 [ 299.939453][T14904] ? sched_clock_cpu+0x75/0x400 [ 299.939478][T14904] out_of_memory+0x7ee/0xbd0 [ 299.939501][T14904] ? __cfi_out_of_memory+0x10/0x10 [ 299.939523][T14904] ? mutex_lock_killable+0x92/0x1c0 [ 299.939545][T14904] ? __cfi_mutex_lock_killable+0x10/0x10 [ 299.939568][T14904] mem_cgroup_out_of_memory+0x279/0x350 [ 299.939589][T14904] ? drain_obj_stock+0xed0/0xed0 [ 299.939610][T14904] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 299.939630][T14904] try_charge_memcg+0x8f7/0xde0 [ 299.939656][T14904] ? __cfi_try_charge_memcg+0x10/0x10 [ 299.939681][T14904] ? __alloc_pages_noprof+0x31f/0x7b0 [ 299.939704][T14904] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 299.939730][T14904] ? __folio_batch_add_and_move+0x2ab/0x370 [ 299.939756][T14904] __mem_cgroup_charge+0xf6/0x410 [ 299.939785][T14904] ? _raw_spin_lock+0x8c/0x120 [ 299.939812][T14904] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 299.939844][T14904] shmem_alloc_and_add_folio+0x86d/0x1050 [ 299.939870][T14904] ? put_swap_device+0x130/0x130 [ 299.939893][T14904] ? shmem_huge_global_enabled+0x2da/0x360 [ 299.939916][T14904] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 299.939938][T14904] ? __kasan_check_write+0x18/0x20 [ 299.939967][T14904] ? _raw_spin_lock+0x8c/0x120 [ 299.939994][T14904] shmem_get_folio_gfp+0x5f0/0x1380 [ 299.940019][T14904] ? shmem_get_folio+0xc0/0xc0 [ 299.940039][T14904] ? follow_page_pte+0xa5c/0xb90 [ 299.940065][T14904] ? inode_to_bdi+0x6d/0x100 [ 299.940093][T14904] shmem_write_begin+0xf4/0x270 [ 299.940125][T14904] generic_perform_write+0x330/0x960 [ 299.940157][T14904] ? __cfi_generic_perform_write+0x10/0x10 [ 299.940183][T14904] ? down_write+0xe9/0x2a0 [ 299.940206][T14904] ? file_update_time+0xa3/0x220 [ 299.940231][T14904] shmem_file_write_iter+0x105/0x130 [ 299.940257][T14904] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 299.940283][T14904] __kernel_write_iter+0x395/0x830 [ 299.940303][T14904] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 299.940330][T14904] ? __cfi___kernel_write_iter+0x10/0x10 [ 299.940349][T14904] ? get_dump_page+0x160/0x220 [ 299.940374][T14904] ? __asan_memset+0x39/0x50 [ 299.940403][T14904] ? iov_iter_bvec+0xc0/0x180 [ 299.940427][T14904] dump_user_range+0xb06/0xdf0 [ 299.940449][T14904] ? __cfi_dump_emit+0x10/0x10 [ 299.940479][T14904] ? __cfi_dump_user_range+0x10/0x10 [ 299.940499][T14904] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 299.940530][T14904] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 299.940560][T14904] elf_core_dump+0x2cd9/0x3810 [ 299.940587][T14904] ? __cfi_elf_core_dump+0x10/0x10 [ 299.940617][T14904] ? dump_interrupted+0xf0/0xf0 [ 299.940645][T14904] ? filp_open+0x182/0x1d0 [ 299.940672][T14904] ? 0xffffffffff600000 [ 299.940690][T14904] do_coredump+0x1bfa/0x2bd0 [ 299.940724][T14904] ? __cfi_do_coredump+0x10/0x10 [ 299.940752][T14904] ? asm_exc_page_fault+0x2b/0x30 [ 299.940782][T14904] ? __kasan_slab_free+0x6a/0x80 [ 299.940805][T14904] ? kmem_cache_free+0x1c1/0x510 [ 299.940835][T14904] ? get_signal+0xa75/0x14f0 [ 299.940861][T14904] get_signal+0x11fd/0x14f0 [ 299.940890][T14904] arch_do_signal_or_restart+0x96/0x720 [ 299.940919][T14904] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 299.940952][T14904] irqentry_exit_to_user_mode+0x4e/0xb0 [ 299.940978][T14904] irqentry_exit+0x16/0x60 [ 299.941001][T14904] exc_page_fault+0x66/0xc0 [ 299.941024][T14904] asm_exc_page_fault+0x2b/0x30 [ 299.941046][T14904] RIP: 0033:0x7fc19aa4f927 [ 299.941064][T14904] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 299.941084][T14904] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 299.941113][T14904] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 299.941129][T14904] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 299.941145][T14904] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 299.941160][T14904] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.941176][T14904] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 299.941195][T14904] [ 299.941284][T14904] memory: usage 302488kB, limit 307200kB, failcnt 71868 [ 300.080282][T15063] veth0_to_batadv: mtu less than device minimum [ 300.080805][ T9] usb 3-1: device descriptor read/8, error -71 [ 300.367305][ T36] audit: type=1326 audit(1756861932.220:48885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15057 comm="syz.0.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbd8ebe9 code=0x7fc00000 [ 300.378811][T14904] memory+swap: usage 419288kB, limit 9007199254740988kB, failcnt 0 [ 300.452208][T14904] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 300.459162][T14904] Memory cgroup stats for /syz5: [ 300.459300][T14904] cache 292216832 [ 300.467898][T14904] rss 73728 [ 300.471107][T14904] rss_huge 0 [ 300.474415][T14904] shmem 292216832 [ 300.478060][T14904] mapped_file 0 [ 300.481911][T14904] dirty 0 [ 300.484885][T14904] writeback 40960 [ 300.488527][T14904] workingset_refault_anon 177 [ 300.493323][T14904] workingset_refault_file 0 [ 300.497867][T14904] swap 127942656 [ 300.501508][T14904] swapcached 53248 [ 300.505303][T14904] pgpgin 549820 [ 300.508817][T14904] pgpgout 479472 [ 300.512475][T14904] pgfault 147153 [ 300.516086][T14904] pgmajfault 97 [ 300.519631][T14904] inactive_anon 291991552 [ 300.532409][T14904] active_anon 307200 [ 300.536391][T14904] inactive_file 0 [ 300.554193][T14904] active_file 0 [ 300.558581][T14904] unevictable 0 [ 300.562440][T14904] hierarchical_memory_limit 314572800 [ 300.568162][T14904] hierarchical_memsw_limit 9223372036854771712 [ 300.574747][T14904] total_cache 292216832 [ 300.578989][T14904] total_rss 73728 [ 300.582856][T14904] total_rss_huge 0 [ 300.586728][T14904] total_shmem 292216832 [ 300.591257][T14904] total_mapped_file 0 [ 300.599231][T14904] total_dirty 0 [ 300.612063][T14904] total_writeback 40960 [ 300.617614][T14904] total_workingset_refault_anon 177 [ 300.635509][T14904] total_workingset_refault_file 0 [ 300.649922][T14904] total_swap 127942656 [ 300.654149][T14904] total_swapcached 53248 [ 300.655897][ T36] audit: type=1326 audit(1756861932.500:48886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15075 comm="syz.0.5047" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bfbd8ebe9 code=0x0 [ 300.658408][T14904] total_pgpgin 549820 [ 300.658418][T14904] total_pgpgout 479472 [ 300.658426][T14904] total_pgfault 147153 [ 300.658434][T14904] total_pgmajfault 97 [ 300.705902][T14904] total_inactive_anon 291991552 [ 300.711786][T14904] total_active_anon 307200 [ 300.716326][T14904] total_inactive_file 0 [ 300.728562][ T9] usb 3-1: device descriptor read/8, error -71 [ 300.740048][T14904] total_active_file 0 [ 300.744100][T14904] total_unevictable 0 [ 300.748286][T14904] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14893,uid=0 [ 300.764347][T14904] Memory cgroup out of memory: Killed process 14893 (syz.5.4992) total-vm:90168kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 300.883982][T14879] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 300.893640][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 300.946720][T14879] CPU: 0 UID: 0 PID: 14879 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 300.946760][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.946774][T14879] Call Trace: [ 300.946782][T14879] [ 300.946790][T14879] __dump_stack+0x21/0x30 [ 300.946824][T14879] dump_stack_lvl+0x10c/0x190 [ 300.946851][T14879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 300.946878][T14879] ? ___ratelimit+0x3f7/0x5a0 [ 300.946901][T14879] dump_stack+0x19/0x20 [ 300.946927][T14879] dump_header+0xd7/0x490 [ 300.946948][T14879] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 300.946976][T14879] oom_kill_process+0x4c0/0x7e0 [ 300.947001][T14879] ? sched_clock_cpu+0x75/0x400 [ 300.947029][T14879] out_of_memory+0x7ee/0xbd0 [ 300.947052][T14879] ? __cfi_out_of_memory+0x10/0x10 [ 300.947075][T14879] ? mutex_lock_killable+0x104/0x1c0 [ 300.947097][T14879] ? __cfi_mutex_lock_killable+0x10/0x10 [ 300.947121][T14879] mem_cgroup_out_of_memory+0x279/0x350 [ 300.947142][T14879] ? drain_obj_stock+0xed0/0xed0 [ 300.947164][T14879] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 300.947186][T14879] try_charge_memcg+0x8f7/0xde0 [ 300.947215][T14879] ? __cfi_try_charge_memcg+0x10/0x10 [ 300.947243][T14879] ? __alloc_pages_noprof+0x31f/0x7b0 [ 300.947271][T14879] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 300.947297][T14879] ? __folio_batch_add_and_move+0x2ab/0x370 [ 300.947322][T14879] __mem_cgroup_charge+0xf6/0x410 [ 300.947360][T14879] ? _raw_spin_lock+0x8c/0x120 [ 300.947388][T14879] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 300.947419][T14879] shmem_alloc_and_add_folio+0x86d/0x1050 [ 300.947445][T14879] ? put_swap_device+0x130/0x130 [ 300.947468][T14879] ? shmem_huge_global_enabled+0x2da/0x360 [ 300.947490][T14879] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 300.947513][T14879] ? __kasan_check_write+0x18/0x20 [ 300.947557][T14879] ? _raw_spin_lock+0x8c/0x120 [ 300.947584][T14879] shmem_get_folio_gfp+0x5f0/0x1380 [ 300.947608][T14879] ? shmem_get_folio+0xc0/0xc0 [ 300.947628][T14879] ? follow_page_pte+0xa5c/0xb90 [ 300.947654][T14879] ? inode_to_bdi+0x6d/0x100 [ 300.947682][T14879] shmem_write_begin+0xf4/0x270 [ 300.947707][T14879] generic_perform_write+0x330/0x960 [ 300.947737][T14879] ? __cfi_generic_perform_write+0x10/0x10 [ 300.947770][T14879] ? down_write+0xe9/0x2a0 [ 300.947794][T14879] ? file_update_time+0xa3/0x220 [ 300.947822][T14879] shmem_file_write_iter+0x105/0x130 [ 300.947848][T14879] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 300.947874][T14879] __kernel_write_iter+0x395/0x830 [ 300.947895][T14879] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 300.947922][T14879] ? __cfi___kernel_write_iter+0x10/0x10 [ 300.947941][T14879] ? get_dump_page+0x160/0x220 [ 300.947963][T14879] ? __asan_memset+0x39/0x50 [ 300.947991][T14879] ? iov_iter_bvec+0xc0/0x180 [ 300.948014][T14879] dump_user_range+0xb06/0xdf0 [ 300.948035][T14879] ? __cfi_dump_emit+0x10/0x10 [ 300.948065][T14879] ? __cfi_dump_user_range+0x10/0x10 [ 300.948085][T14879] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 300.948115][T14879] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 300.948146][T14879] elf_core_dump+0x2cd9/0x3810 [ 300.948174][T14879] ? __cfi_elf_core_dump+0x10/0x10 [ 300.948204][T14879] ? dump_interrupted+0xf0/0xf0 [ 300.948233][T14879] ? filp_open+0x182/0x1d0 [ 300.948260][T14879] ? 0xffffffffff600000 [ 300.948279][T14879] do_coredump+0x1bfa/0x2bd0 [ 300.948311][T14879] ? __cfi_do_coredump+0x10/0x10 [ 300.948350][T14879] ? asm_exc_page_fault+0x2b/0x30 [ 300.948380][T14879] ? __kasan_slab_free+0x6a/0x80 [ 300.948402][T14879] ? kmem_cache_free+0x1c1/0x510 [ 300.948432][T14879] ? get_signal+0xa75/0x14f0 [ 300.948458][T14879] get_signal+0x11fd/0x14f0 [ 300.948486][T14879] arch_do_signal_or_restart+0x96/0x720 [ 300.948518][T14879] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 300.948552][T14879] irqentry_exit_to_user_mode+0x4e/0xb0 [ 300.948577][T14879] irqentry_exit+0x16/0x60 [ 300.948599][T14879] exc_page_fault+0x66/0xc0 [ 300.948622][T14879] asm_exc_page_fault+0x2b/0x30 [ 300.948643][T14879] RIP: 0033:0x7fc19aa4f927 [ 300.948661][T14879] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 300.948680][T14879] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 300.948700][T14879] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 300.948717][T14879] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 300.948733][T14879] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 300.948748][T14879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 300.948762][T14879] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 300.948781][T14879] [ 301.371856][T14879] memory: usage 307200kB, limit 307200kB, failcnt 74026 [ 301.415917][T14879] memory+swap: usage 431492kB, limit 9007199254740988kB, failcnt 0 [ 301.425246][T14879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 301.432207][T14879] Memory cgroup stats for /syz5: [ 301.432360][T14879] cache 313540608 [ 301.445147][T14879] rss 258048 [ 301.448399][T14879] rss_huge 0 [ 301.451756][T14879] shmem 313540608 [ 301.455539][T14879] mapped_file 0 [ 301.459064][T14879] dirty 0 [ 301.469545][T14879] writeback 0 [ 301.472948][T14879] workingset_refault_anon 189 [ 301.477754][T14879] workingset_refault_file 0 [ 301.482333][T14879] swap 127291392 [ 301.485965][T14879] swapcached 704512 [ 301.489877][T14879] pgpgin 566498 [ 301.493373][T14879] pgpgout 490745 [ 301.496993][T14879] pgfault 147977 [ 301.500631][T14879] pgmajfault 109 [ 301.504215][T14879] inactive_anon 241426432 [ 301.508611][T14879] active_anon 72470528 [ 301.512786][T14879] inactive_file 0 [ 301.516456][T14879] active_file 0 [ 301.519157][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 301.519992][T14879] unevictable 0 [ 301.531424][T14879] hierarchical_memory_limit 314572800 [ 301.536836][T14879] hierarchical_memsw_limit 9223372036854771712 [ 301.540316][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.543291][T14879] total_cache 313540608 [ 301.553978][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.558325][T14879] total_rss 258048 [ 301.567895][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 301.572033][T14879] total_rss_huge 0 [ 301.580730][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.584662][T14879] total_shmem 313540608 [ 301.593372][ T10] usb 7-1: config 0 descriptor?? [ 301.596859][T14879] total_mapped_file 0 [ 301.605766][T14879] total_dirty 0 [ 301.608658][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 301.609511][T14879] total_writeback 0 [ 301.617740][ T9] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.621049][T14879] total_workingset_refault_anon 189 [ 301.631791][ T9] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.637311][T14879] total_workingset_refault_file 0 [ 301.646807][ T9] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 301.652156][T14879] total_swap 127291392 [ 301.663150][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 301.667962][T14879] total_swapcached 704512 [ 301.677944][T14879] total_pgpgin 566498 [ 301.682158][T14879] total_pgpgout 490745 [ 301.686311][T14879] total_pgfault 147977 [ 301.686398][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 301.690745][T14879] total_pgmajfault 109 [ 301.699684][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.704300][T14879] total_inactive_anon 241426432 [ 301.711813][ T9] usb 3-1: Product: ሠ[ 301.716937][T14879] total_active_anon 72470528 [ 301.720845][ T9] usb 3-1: Manufacturer: ṳ艼蛼秺㋙ [ 301.725833][T14879] total_inactive_file 0 [ 301.731870][ T9] usb 3-1: SerialNumber: ᛶ䔎諺赾痟롢騚Ṟî¼ç¬‡æ˜ä°‰æ•ºáƒ¶ï®”긑ﵨ㗬滞悑㔛ￋ鲤ꑑ﹖咆䪋㭅壶䮣冸ꗱ肑훳è–ä¯å®™ï„®ç”­é€žåŸ­ï­¾æ“£æ½²ï°Ÿì±†ë®ƒç–¯ë„„樫å á…“è‘涅퓲考罡ࡤᅮतí栶郗ꦂ욒餋èƒé¢¶é‡¦æ°«å±·ê²¡ã·„簆ᵅ픢-㟇%ῳê±ï™¹çŸ²æ¦ˆäŸºïŠŸíœ– [ 301.736260][T14879] total_active_file 0 [ 301.768722][T15082] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 301.776186][T14879] total_unevictable 0 [ 301.780387][T14879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14900,uid=0 [ 301.795472][T14879] Memory cgroup out of memory: Killed process 14900 (syz.5.4992) total-vm:90168kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 301.967832][T14887] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 301.989261][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 301.995560][ T36] audit: type=1400 audit(1756861933.830:48887): avc: denied { map } for pid=15081 comm="syz.2.5049" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 302.019241][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 302.029519][ T10] isku 0003:1E7D:319C.0013: item fetching failed at offset 6/7 [ 302.037293][ T10] isku 0003:1E7D:319C.0013: parse failed [ 302.038229][T14887] CPU: 1 UID: 0 PID: 14887 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 302.038259][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.038278][T14887] Call Trace: [ 302.038285][T14887] [ 302.038293][T14887] __dump_stack+0x21/0x30 [ 302.038321][T14887] dump_stack_lvl+0x10c/0x190 [ 302.038344][T14887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 302.038367][T14887] ? ___ratelimit+0x3f7/0x5a0 [ 302.038386][T14887] dump_stack+0x19/0x20 [ 302.038409][T14887] dump_header+0xd7/0x490 [ 302.038428][T14887] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 302.038453][T14887] oom_kill_process+0x4c0/0x7e0 [ 302.038474][T14887] ? sched_clock_cpu+0x75/0x400 [ 302.038499][T14887] out_of_memory+0x7ee/0xbd0 [ 302.038519][T14887] ? __cfi_out_of_memory+0x10/0x10 [ 302.038540][T14887] ? mutex_lock_killable+0x92/0x1c0 [ 302.038560][T14887] ? __cfi_mutex_lock_killable+0x10/0x10 [ 302.038582][T14887] mem_cgroup_out_of_memory+0x279/0x350 [ 302.038601][T14887] ? drain_obj_stock+0xed0/0xed0 [ 302.038619][T14887] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 302.038637][T14887] try_charge_memcg+0x8f7/0xde0 [ 302.038662][T14887] ? __cfi_try_charge_memcg+0x10/0x10 [ 302.038685][T14887] ? __alloc_pages_noprof+0x31f/0x7b0 [ 302.038708][T14887] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 302.038732][T14887] ? __folio_batch_add_and_move+0x2ab/0x370 [ 302.038754][T14887] __mem_cgroup_charge+0xf6/0x410 [ 302.038779][T14887] ? _raw_spin_lock+0x8c/0x120 [ 302.038803][T14887] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 302.038830][T14887] shmem_alloc_and_add_folio+0x86d/0x1050 [ 302.038852][T14887] ? put_swap_device+0x130/0x130 [ 302.038873][T14887] ? shmem_huge_global_enabled+0x2da/0x360 [ 302.038893][T14887] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 302.038913][T14887] ? __kasan_check_write+0x18/0x20 [ 302.038937][T14887] ? _raw_spin_lock+0x8c/0x120 [ 302.038961][T14887] shmem_get_folio_gfp+0x5f0/0x1380 [ 302.038982][T14887] ? shmem_get_folio+0xc0/0xc0 [ 302.038999][T14887] ? follow_page_pte+0xa5c/0xb90 [ 302.039022][T14887] ? inode_to_bdi+0x6d/0x100 [ 302.039046][T14887] shmem_write_begin+0xf4/0x270 [ 302.039067][T14887] generic_perform_write+0x330/0x960 [ 302.039101][T14887] ? __cfi_generic_perform_write+0x10/0x10 [ 302.039125][T14887] ? down_write+0xe9/0x2a0 [ 302.039146][T14887] ? file_update_time+0xa3/0x220 [ 302.039170][T14887] shmem_file_write_iter+0x105/0x130 [ 302.039194][T14887] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 302.039218][T14887] __kernel_write_iter+0x395/0x830 [ 302.039235][T14887] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 302.039258][T14887] ? __cfi___kernel_write_iter+0x10/0x10 [ 302.039275][T14887] ? get_dump_page+0x160/0x220 [ 302.039296][T14887] ? __asan_memset+0x39/0x50 [ 302.039320][T14887] ? iov_iter_bvec+0xc0/0x180 [ 302.039341][T14887] dump_user_range+0xb06/0xdf0 [ 302.039360][T14887] ? __cfi_dump_emit+0x10/0x10 [ 302.039385][T14887] ? __cfi_dump_user_range+0x10/0x10 [ 302.039403][T14887] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 302.039431][T14887] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 302.039457][T14887] elf_core_dump+0x2cd9/0x3810 [ 302.039480][T14887] ? __cfi_elf_core_dump+0x10/0x10 [ 302.039507][T14887] ? dump_interrupted+0xf0/0xf0 [ 302.039532][T14887] ? filp_open+0x182/0x1d0 [ 302.039554][T14887] ? 0xffffffffff600000 [ 302.039569][T14887] do_coredump+0x1bfa/0x2bd0 [ 302.039598][T14887] ? __cfi_do_coredump+0x10/0x10 [ 302.039623][T14887] ? asm_exc_page_fault+0x2b/0x30 [ 302.039649][T14887] ? __kasan_slab_free+0x6a/0x80 [ 302.039669][T14887] ? kmem_cache_free+0x1c1/0x510 [ 302.039695][T14887] ? get_signal+0xa75/0x14f0 [ 302.039718][T14887] get_signal+0x11fd/0x14f0 [ 302.039741][T14887] arch_do_signal_or_restart+0x96/0x720 [ 302.039769][T14887] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 302.039798][T14887] irqentry_exit_to_user_mode+0x4e/0xb0 [ 302.039820][T14887] irqentry_exit+0x16/0x60 [ 302.039840][T14887] exc_page_fault+0x66/0xc0 [ 302.039859][T14887] asm_exc_page_fault+0x2b/0x30 [ 302.039878][T14887] RIP: 0033:0x7fc19aa4f927 [ 302.039894][T14887] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 302.039911][T14887] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 302.039930][T14887] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 302.039943][T14887] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 302.039957][T14887] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 302.039970][T14887] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.039982][T14887] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 302.039998][T14887] [ 302.050155][T14887] memory: usage 302012kB, limit 307200kB, failcnt 77134 [ 302.086645][ T9] usb 3-1: USB disconnect, device number 31 [ 302.239178][T15077] rust_binder: got new transaction with bad transaction stack [ 302.269144][ T36] audit: type=1400 audit(1756861933.830:48888): avc: denied { execute } for pid=15081 comm="syz.2.5049" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 302.309137][T14887] memory+swap: usage 426988kB, limit 9007199254740988kB, failcnt 0 [ 302.319174][ T10] isku 0003:1E7D:319C.0013: probe with driver isku failed with error -22 [ 302.354856][T15088] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5050'. [ 302.412875][T15077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242 [ 302.502076][T14887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 302.519153][ T10] usb 7-1: USB disconnect, device number 12 [ 302.522745][T14887] Memory cgroup stats for /syz5: [ 302.594007][T14887] cache 314376192 [ 302.602864][T14887] rss 176128 [ 302.606094][T14887] rss_huge 0 [ 302.609446][T14887] shmem 314376192 [ 302.613087][T14887] mapped_file 0 [ 302.616538][T14887] dirty 0 [ 302.619689][T14887] writeback 0 [ 302.622999][T14887] workingset_refault_anon 190 [ 302.627677][T14887] workingset_refault_file 0 [ 302.632529][T14887] swap 127950848 [ 302.636233][T14887] swapcached 45056 [ 302.640276][T14887] pgpgin 576247 [ 302.643789][T14887] pgpgout 500469 [ 302.647355][T14887] pgfault 148254 [ 302.650959][T14887] pgmajfault 110 [ 302.654543][T14887] inactive_anon 149225472 [ 302.658895][T14887] active_anon 165347328 [ 302.663197][T14887] inactive_file 0 [ 302.666840][T14887] active_file 0 [ 302.670340][T14887] unevictable 0 [ 302.673809][T14887] hierarchical_memory_limit 314572800 [ 302.679381][T14887] hierarchical_memsw_limit 9223372036854771712 [ 302.685540][T14887] total_cache 314376192 [ 302.689731][T14887] total_rss 176128 [ 302.693454][T14887] total_rss_huge 0 [ 302.697160][T14887] total_shmem 314376192 [ 302.701347][T14887] total_mapped_file 0 [ 302.705328][T14887] total_dirty 0 [ 302.708792][T14887] total_writeback 0 [ 302.712613][T14887] total_workingset_refault_anon 190 [ 302.717810][T14887] total_workingset_refault_file 0 [ 302.722860][T14887] total_swap 127950848 [ 302.726946][T14887] total_swapcached 45056 [ 302.731255][T14887] total_pgpgin 576247 [ 302.735274][T14887] total_pgpgout 500469 [ 302.739369][T14887] total_pgfault 148254 [ 302.743530][T14887] total_pgmajfault 110 [ 302.747584][T14887] total_inactive_anon 149225472 [ 302.752476][T14887] total_active_anon 165347328 [ 302.757156][T14887] total_inactive_file 0 [ 302.761354][T14887] total_active_file 0 [ 302.765429][T14887] total_unevictable 0 [ 302.769457][T14887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14889,uid=0 [ 302.784425][T14887] Memory cgroup out of memory: Killed process 14889 (syz.5.4992) total-vm:90168kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 302.858092][T14876] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 302.870213][T14876] CPU: 1 UID: 0 PID: 14876 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 302.870250][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.870263][T14876] Call Trace: [ 302.870271][T14876] [ 302.870279][T14876] __dump_stack+0x21/0x30 [ 302.870312][T14876] dump_stack_lvl+0x10c/0x190 [ 302.870340][T14876] ? __cfi_dump_stack_lvl+0x10/0x10 [ 302.870443][T14876] ? ___ratelimit+0x3f7/0x5a0 [ 302.870463][T14876] dump_stack+0x19/0x20 [ 302.870490][T14876] dump_header+0xd7/0x490 [ 302.870511][T14876] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 302.870539][T14876] oom_kill_process+0x4c0/0x7e0 [ 302.870563][T14876] ? sched_clock_cpu+0x75/0x400 [ 302.870592][T14876] out_of_memory+0x7ee/0xbd0 [ 302.870616][T14876] ? __cfi_out_of_memory+0x10/0x10 [ 302.870641][T14876] ? mutex_lock_killable+0x104/0x1c0 [ 302.870665][T14876] ? __cfi_mutex_lock_killable+0x10/0x10 [ 302.870691][T14876] mem_cgroup_out_of_memory+0x279/0x350 [ 302.870712][T14876] ? drain_obj_stock+0xed0/0xed0 [ 302.870734][T14876] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 302.870756][T14876] try_charge_memcg+0x8f7/0xde0 [ 302.870792][T14876] ? __cfi_try_charge_memcg+0x10/0x10 [ 302.870827][T14876] ? __alloc_pages_noprof+0x31f/0x7b0 [ 302.870854][T14876] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 302.870882][T14876] ? __folio_batch_add_and_move+0x2ab/0x370 [ 302.870910][T14876] __mem_cgroup_charge+0xf6/0x410 [ 302.870941][T14876] ? _raw_spin_lock+0x8c/0x120 [ 302.870975][T14876] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 302.871008][T14876] shmem_alloc_and_add_folio+0x86d/0x1050 [ 302.871038][T14876] ? put_swap_device+0x130/0x130 [ 302.871061][T14876] ? shmem_huge_global_enabled+0x2da/0x360 [ 302.871096][T14876] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 302.871119][T14876] ? __kasan_check_write+0x18/0x20 [ 302.871149][T14876] ? _raw_spin_lock+0x8c/0x120 [ 302.871177][T14876] shmem_get_folio_gfp+0x5f0/0x1380 [ 302.871203][T14876] ? shmem_get_folio+0xc0/0xc0 [ 302.871225][T14876] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 302.871256][T14876] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 302.871288][T14876] ? inode_to_bdi+0x6d/0x100 [ 302.871318][T14876] shmem_write_begin+0xf4/0x270 [ 302.871341][T14876] generic_perform_write+0x330/0x960 [ 302.871373][T14876] ? __cfi_generic_perform_write+0x10/0x10 [ 302.871413][T14876] ? down_write+0xe9/0x2a0 [ 302.871439][T14876] ? mnt_get_write_access_file+0x1af/0x3b0 [ 302.871466][T14876] ? mnt_put_write_access_file+0xc2/0x100 [ 302.871495][T14876] ? file_update_time+0x1ef/0x220 [ 302.871524][T14876] shmem_file_write_iter+0x105/0x130 [ 302.871552][T14876] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 302.871581][T14876] __kernel_write_iter+0x395/0x830 [ 302.871627][T14876] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 302.871655][T14876] ? __cfi___kernel_write_iter+0x10/0x10 [ 302.871677][T14876] ? get_dump_page+0x160/0x220 [ 302.871703][T14876] ? __asan_memset+0x39/0x50 [ 302.871733][T14876] ? iov_iter_bvec+0xc0/0x180 [ 302.871758][T14876] dump_user_range+0xb06/0xdf0 [ 302.871780][T14876] ? __cfi_dump_emit+0x10/0x10 [ 302.871811][T14876] ? __cfi_dump_user_range+0x10/0x10 [ 302.871833][T14876] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 302.871877][T14876] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 302.871911][T14876] elf_core_dump+0x2cd9/0x3810 [ 302.871941][T14876] ? __cfi_elf_core_dump+0x10/0x10 [ 302.871973][T14876] ? dump_interrupted+0xf0/0xf0 [ 302.872003][T14876] ? filp_open+0x182/0x1d0 [ 302.872030][T14876] ? 0xffffffffff600000 [ 302.872049][T14876] do_coredump+0x1bfa/0x2bd0 [ 302.872139][T14876] ? __cfi_do_coredump+0x10/0x10 [ 302.872166][T14876] ? asm_exc_page_fault+0x2b/0x30 [ 302.872194][T14876] ? __kasan_slab_free+0x6a/0x80 [ 302.872215][T14876] ? kmem_cache_free+0x1c1/0x510 [ 302.872243][T14876] ? get_signal+0xa75/0x14f0 [ 302.872270][T14876] get_signal+0x11fd/0x14f0 [ 302.872294][T14876] arch_do_signal_or_restart+0x96/0x720 [ 302.872323][T14876] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 302.872353][T14876] irqentry_exit_to_user_mode+0x4e/0xb0 [ 302.872377][T14876] irqentry_exit+0x16/0x60 [ 302.872400][T14876] exc_page_fault+0x66/0xc0 [ 302.872422][T14876] asm_exc_page_fault+0x2b/0x30 [ 302.872444][T14876] RIP: 0033:0x7fc19aa4f927 [ 302.872463][T14876] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 302.872482][T14876] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 302.872504][T14876] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 302.872521][T14876] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 302.872536][T14876] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 302.872551][T14876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.872566][T14876] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 302.872584][T14876] [ 302.872667][T14876] memory: usage 307200kB, limit 307200kB, failcnt 78609 [ 302.912744][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 302.915396][T14876] memory+swap: usage 418412kB, limit 9007199254740988kB, failcnt 0 [ 303.067701][ T8394] rust_binder: 15068: removing orphan mapping 0:24 [ 303.071587][T14876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 303.099168][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 303.102746][T14876] Memory cgroup stats for [ 303.110119][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 303.114346][T14876] /syz5 [ 303.119943][ T9] usb 3-1: config 0 has no interface number 0 [ 303.124618][T14876] : [ 303.151362][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 303.152850][T14876] cache 274255872 [ 303.164440][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.166185][T14876] rss 167936 [ 303.171249][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.176264][T14876] rss_huge 0 [ 303.188010][ T9] usb 3-1: Product: syz [ 303.189149][T14876] shmem 274255872 [ 303.200457][ T9] usb 3-1: Manufacturer: syz [ 303.204015][T14876] mapped_file 0 [ 303.204026][T14876] dirty 0 [ 303.204034][T14876] writeback 0 [ 303.222050][ T9] usb 3-1: SerialNumber: syz [ 303.223689][T14876] workingset_refault_anon 190 [ 303.242416][ T9] usb 3-1: config 0 descriptor?? [ 303.246491][T14876] workingset_refault_file 0 [ 303.265325][ T9] smsc75xx v1.0.0 [ 303.268282][T14876] swap 127913984 [ 303.304866][T15097] incfs_lookup_dentry err:-13 [ 303.308095][T14876] swapcached 81920 [ 303.319049][T15097] incfs: Can't find or create .index dir in ./bus [ 303.324074][T14876] pgpgin 577536 [ 303.338561][T15097] incfs: mount failed -13 [ 303.340057][T14876] pgpgout 511545 [ 303.525409][T14876] pgfault 148335 [ 303.529033][T14876] pgmajfault 110 [ 303.532678][T14876] inactive_anon 60194816 [ 303.536985][T14876] active_anon 214167552 [ 303.541223][T14876] inactive_file 0 [ 303.544929][T14876] active_file 0 [ 303.548448][T14876] unevictable 0 [ 303.551989][T14876] hierarchical_memory_limit 314572800 [ 303.557483][T14876] hierarchical_memsw_limit 9223372036854771712 [ 303.563760][T14876] total_cache 274255872 [ 303.568001][T14876] total_rss 167936 [ 303.571886][T14876] total_rss_huge 0 [ 303.575686][T14876] total_shmem 274255872 [ 303.579979][T14876] total_mapped_file 0 [ 303.584036][T14876] total_dirty 0 [ 303.587569][T14876] total_writeback 0 [ 303.591553][T14876] total_workingset_refault_anon 190 [ 303.596835][T14876] total_workingset_refault_file 0 [ 303.601972][T14876] total_swap 127913984 [ 303.606114][T14876] total_swapcached 81920 [ 303.610486][T14876] total_pgpgin 577536 [ 303.614528][T14876] total_pgpgout 511545 [ 303.618665][T14876] total_pgfault 148335 [ 303.622844][T14876] total_pgmajfault 110 [ 303.626989][T14876] total_inactive_anon 60194816 [ 303.641392][T14876] total_active_anon 214167552 [ 303.646382][T14876] total_inactive_file 0 [ 303.651170][T14876] total_active_file 0 [ 303.662054][T14876] total_unevictable 0 [ 303.666858][T14876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5 [ 303.666919][T15099] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.685567][T14876] ,task_memcg=/syz5,task=syz.5.4992,pid=14887,uid=0 [ 303.692376][T14876] Memory cgroup out of memory: Killed process 14887 (syz.5.4992) total-vm:90168kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 303.799643][T14879] syz.5.4992 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 303.819223][T14879] CPU: 0 UID: 0 PID: 14879 Comm: syz.5.4992 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 303.819264][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.819279][T14879] Call Trace: [ 303.819286][T14879] [ 303.819301][T14879] __dump_stack+0x21/0x30 [ 303.819335][T14879] dump_stack_lvl+0x10c/0x190 [ 303.819361][T14879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 303.819387][T14879] ? ___ratelimit+0x3f7/0x5a0 [ 303.819409][T14879] dump_stack+0x19/0x20 [ 303.819434][T14879] dump_header+0xd7/0x490 [ 303.819455][T14879] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 303.819483][T14879] oom_kill_process+0x4c0/0x7e0 [ 303.819507][T14879] ? sched_clock_cpu+0x75/0x400 [ 303.819536][T14879] out_of_memory+0x7ee/0xbd0 [ 303.819560][T14879] ? __cfi_out_of_memory+0x10/0x10 [ 303.819584][T14879] ? mutex_lock_killable+0x92/0x1c0 [ 303.819606][T14879] ? __cfi_mutex_lock_killable+0x10/0x10 [ 303.819631][T14879] mem_cgroup_out_of_memory+0x279/0x350 [ 303.819652][T14879] ? drain_obj_stock+0xed0/0xed0 [ 303.819673][T14879] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 303.819693][T14879] try_charge_memcg+0x8f7/0xde0 [ 303.819722][T14879] ? __cfi_try_charge_memcg+0x10/0x10 [ 303.819748][T14879] ? __alloc_pages_noprof+0x31f/0x7b0 [ 303.819776][T14879] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 303.819801][T14879] ? __folio_batch_add_and_move+0x2ab/0x370 [ 303.819828][T14879] __mem_cgroup_charge+0xf6/0x410 [ 303.819858][T14879] ? _raw_spin_lock+0x8c/0x120 [ 303.819885][T14879] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 303.819915][T14879] shmem_alloc_and_add_folio+0x86d/0x1050 [ 303.819942][T14879] ? put_swap_device+0x130/0x130 [ 303.819965][T14879] ? shmem_huge_global_enabled+0x2da/0x360 [ 303.819987][T14879] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 303.820009][T14879] ? __kasan_check_write+0x18/0x20 [ 303.820038][T14879] ? _raw_spin_lock+0x8c/0x120 [ 303.820065][T14879] shmem_get_folio_gfp+0x5f0/0x1380 [ 303.820097][T14879] ? shmem_get_folio+0xc0/0xc0 [ 303.820117][T14879] ? follow_page_pte+0xa5c/0xb90 [ 303.820143][T14879] ? inode_to_bdi+0x6d/0x100 [ 303.820171][T14879] shmem_write_begin+0xf4/0x270 [ 303.820194][T14879] generic_perform_write+0x330/0x960 [ 303.820225][T14879] ? __cfi_generic_perform_write+0x10/0x10 [ 303.820252][T14879] ? down_write+0xe9/0x2a0 [ 303.820276][T14879] ? file_update_time+0xa3/0x220 [ 303.820304][T14879] shmem_file_write_iter+0x105/0x130 [ 303.820330][T14879] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 303.820356][T14879] __kernel_write_iter+0x395/0x830 [ 303.820376][T14879] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 303.820402][T14879] ? __cfi___kernel_write_iter+0x10/0x10 [ 303.820422][T14879] ? get_dump_page+0x160/0x220 [ 303.820447][T14879] ? __asan_memset+0x39/0x50 [ 303.820474][T14879] ? iov_iter_bvec+0xc0/0x180 [ 303.820498][T14879] dump_user_range+0xb06/0xdf0 [ 303.820520][T14879] ? __cfi_dump_emit+0x10/0x10 [ 303.820550][T14879] ? __cfi_dump_user_range+0x10/0x10 [ 303.820571][T14879] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 303.820601][T14879] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 303.820632][T14879] elf_core_dump+0x2cd9/0x3810 [ 303.820659][T14879] ? __cfi_elf_core_dump+0x10/0x10 [ 303.820689][T14879] ? dump_interrupted+0xf0/0xf0 [ 303.820717][T14879] ? filp_open+0x182/0x1d0 [ 303.820742][T14879] ? 0xffffffffff600000 [ 303.820761][T14879] do_coredump+0x1bfa/0x2bd0 [ 303.820793][T14879] ? __cfi_do_coredump+0x10/0x10 [ 303.820823][T14879] ? asm_exc_page_fault+0x2b/0x30 [ 303.820853][T14879] ? __kasan_slab_free+0x6a/0x80 [ 303.820875][T14879] ? kmem_cache_free+0x1c1/0x510 [ 303.820905][T14879] ? get_signal+0xa75/0x14f0 [ 303.820931][T14879] get_signal+0x11fd/0x14f0 [ 303.820959][T14879] arch_do_signal_or_restart+0x96/0x720 [ 303.820990][T14879] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 303.821023][T14879] irqentry_exit_to_user_mode+0x4e/0xb0 [ 303.821049][T14879] irqentry_exit+0x16/0x60 [ 303.821072][T14879] exc_page_fault+0x66/0xc0 [ 303.821102][T14879] asm_exc_page_fault+0x2b/0x30 [ 303.821123][T14879] RIP: 0033:0x7fc19aa4f927 [ 303.821141][T14879] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 303.821159][T14879] RSP: 002b:00007fc19b92c120 EFLAGS: 00010202 [ 303.821180][T14879] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc19ab8ebe9 [ 303.821196][T14879] RDX: 00007fc19b92c140 RSI: 00007fc19b92c270 RDI: 000000000000000b [ 303.821213][T14879] RBP: 00007fc19ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.821227][T14879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.821242][T14879] R13: 00007fc19adc6128 R14: 00007fc19adc6090 R15: 00007ffd52fd2768 [ 303.821261][T14879] [ 303.821373][T14879] memory: usage 307064kB, limit 307200kB, failcnt 80051 [ 304.287057][T14879] memory+swap: usage 387684kB, limit 9007199254740988kB, failcnt 0 [ 304.295093][T14879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 304.302143][T14879] Memory cgroup stats for /syz5: [ 304.302277][T14879] cache 282849280 [ 304.310978][T14879] rss 225280 [ 304.314189][T14879] rss_huge 0 [ 304.317387][T14879] shmem 282849280 [ 304.321070][T14879] mapped_file 0 [ 304.324599][T14879] dirty 0 [ 304.327652][T14879] writeback 0 [ 304.329147][ T959] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 304.330974][T14879] workingset_refault_anon 206 [ 304.343191][T14879] workingset_refault_file 0 [ 304.347701][T14879] swap 113844224 [ 304.351265][T14879] swapcached 143360 [ 304.355094][T14879] pgpgin 587324 [ 304.358554][T14879] pgpgout 519219 [ 304.362124][T14879] pgfault 148616 [ 304.365694][T14879] pgmajfault 122 [ 304.369267][T14879] inactive_anon 190640128 [ 304.373610][T14879] active_anon 92504064 [ 304.377680][T14879] inactive_file 0 [ 304.381357][T14879] active_file 0 [ 304.384828][T14879] unevictable 0 [ 304.388286][T14879] hierarchical_memory_limit 314572800 [ 304.393680][T14879] hierarchical_memsw_limit 9223372036854771712 [ 304.399980][T14879] total_cache 282849280 [ 304.404143][T14879] total_rss 225280 [ 304.407862][T14879] total_rss_huge 0 [ 304.411609][T14879] total_shmem 282849280 [ 304.415775][T14879] total_mapped_file 0 [ 304.419875][T14879] total_dirty 0 [ 304.423438][T14879] total_writeback 0 [ 304.427254][T14879] total_workingset_refault_anon 206 [ 304.432474][T14879] total_workingset_refault_file 0 [ 304.437526][T14879] total_swap 113844224 [ 304.441616][T14879] total_swapcached 143360 [ 304.445956][T14879] total_pgpgin 587324 [ 304.450050][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 304.450348][T14879] total_pgpgout 519219 [ 304.464099][T14879] total_pgfault 148616 [ 304.468223][T14879] total_pgmajfault 122 [ 304.472350][T14879] total_inactive_anon 190640128 [ 304.477225][T14879] total_active_anon 92504064 [ 304.481873][T14879] total_inactive_file 0 [ 304.486070][T14879] total_active_file 0 [ 304.490115][T14879] total_unevictable 0 [ 304.494167][T14879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4992,pid=14895,uid=0 [ 304.509189][T14879] Memory cgroup out of memory: Killed process 14895 (syz.5.4992) total-vm:90168kB, anon-rss:1016kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 304.639184][ T959] usb 7-1: unable to get BOS descriptor or descriptor too short [ 304.669382][ T959] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 304.697339][ T959] usb 7-1: can't read configurations, error -71 [ 305.112407][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 305.190582][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 305.241115][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 305.309140][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 305.368969][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 305.419292][ T9] usb 3-1: USB disconnect, device number 32 [ 305.499853][T15177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.613204][ T36] audit: type=1400 audit(1756861937.460:48889): avc: denied { getopt } for pid=15181 comm="syz.6.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.086197][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5088'. [ 306.140174][T15200] /dev/loop0: Can't lookup blockdev [ 306.170150][ T36] audit: type=1400 audit(1756861938.020:48890): avc: denied { listen } for pid=15203 comm="syz.5.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.188449][T15200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5088'. [ 306.283057][ T36] audit: type=1400 audit(1756861938.130:48891): avc: denied { lock } for pid=15215 comm="syz.5.5092" path="socket:[56749]" dev="sockfs" ino=56749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 306.399185][T15224] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 306.772469][T15241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42794 sclass=netlink_route_socket pid=15241 comm=syz.6.5100 [ 306.786149][T15241] netlink: 'syz.6.5100': attribute type 27 has an invalid length. [ 306.878113][T15245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 307.003650][T15262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.023813][T15270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.024326][T15270] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 307.043653][T15272] x_tables: duplicate entry at hook 1 [ 307.057963][T15272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.101435][T15279] SELinux: security_context_str_to_sid () failed with errno=-22 [ 307.119285][T15280] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 307.194926][T15284] tipc: Started in network mode [ 307.207846][T15284] tipc: Node identity ac14140f, cluster identity 4711 [ 307.214968][T15284] tipc: New replicast peer: 255.255.255.255 [ 307.221247][T15284] tipc: Enabled bearer , priority 10 [ 307.228988][T15284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 307.229018][T15284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 307.238602][T15284] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 307.247873][T15284] rust_binder: Read failure Err(EFAULT) in pid:207 [ 307.559181][ T330] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 307.613318][T15292] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5117'. [ 307.720570][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.729021][ T330] usb 3-1: config 204 has an invalid interface number: 223 but max is 0 [ 307.737442][ T330] usb 3-1: config 204 has no interface number 0 [ 307.743763][ T330] usb 3-1: config 204 interface 223 altsetting 4 bulk endpoint 0xD has invalid maxpacket 64 [ 307.753868][ T330] usb 3-1: config 204 interface 223 has no altsetting 0 [ 307.762672][ T330] usb 3-1: New USB device found, idVendor=0b57, idProduct=5942, bcdDevice=38.7a [ 307.771761][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.779910][ T330] usb 3-1: Product: syz [ 307.784128][ T330] usb 3-1: Manufacturer: syz [ 307.788730][ T330] usb 3-1: SerialNumber: syz [ 307.794318][T15288] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 308.003356][ T330] usbhid 3-1:204.223: couldn't find an input interrupt endpoint [ 308.012047][ T330] usb 3-1: USB disconnect, device number 33 [ 308.179155][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 308.309182][ T10] usb 7-1: device descriptor read/64, error -71 [ 308.349162][ T330] tipc: Node number set to 2886997007 [ 308.549354][ T10] usb 7-1: device descriptor read/64, error -71 [ 308.585592][T15348] tipc: Enabled bearer , priority 0 [ 308.593778][T15348] tipc: Disabling bearer [ 308.809159][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 308.861222][ T36] audit: type=1326 audit(1756861940.710:48892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.5138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66b918ebe9 code=0x0 [ 308.907804][T15362] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 308.939210][ T10] usb 7-1: device descriptor read/64, error -71 [ 309.179250][ T10] usb 7-1: device descriptor read/64, error -71 [ 309.289278][ T10] usb usb7-port1: attempt power cycle [ 309.620336][T15388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 309.639165][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 309.667627][ T8394] rust_binder: 15385: removing orphan mapping 0:24 [ 309.686459][ T10] usb 7-1: device descriptor read/8, error -71 [ 309.820317][ T10] usb 7-1: device descriptor read/8, error -71 [ 309.939171][ T8394] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 310.059267][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 310.080115][ T10] usb 7-1: device descriptor read/8, error -71 [ 310.090306][ T8394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 310.101245][ T8394] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 310.110315][ T8394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.118906][ T8394] usb 3-1: config 0 descriptor?? [ 310.124206][T15404] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 310.210118][ T10] usb 7-1: device descriptor read/8, error -71 [ 310.319257][ T10] usb usb7-port1: unable to enumerate USB device [ 310.854908][T15435] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5166'. [ 310.966997][T15446] 9pnet_fd: Insufficient options for proto=fd [ 311.036256][T15453] rust_binder: 288: no such ref 3 [ 311.055453][T15453] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 311.079146][T15453] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 311.089261][T15458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.089287][T15453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 311.158355][T15458] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 311.176556][T15465] /dev/loop0: Can't lookup blockdev [ 311.261473][ T8394] usbhid 3-1:0.0: can't add hid device: -71 [ 311.276878][ T8394] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 311.329327][ T8394] usb 3-1: USB disconnect, device number 34 [ 311.373498][T15496] overlayfs: failed to clone upperpath [ 311.429035][T15506] veth0_to_team: entered promiscuous mode [ 311.442059][T15506] veth0_to_team: entered allmulticast mode [ 311.509267][T15525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.513704][T15527] overlayfs: failed to clone upperpath [ 311.544007][T15525] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1735060478 (27760967648 ns) > initial count (27267544304 ns). Using initial count to start timer. [ 311.636677][T15548] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 312.275265][ T36] audit: type=1326 audit(1756861944.120:48893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.5202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b918ebe9 code=0x0 [ 312.321703][T15557] IPv4: Oversized IP packet from 127.202.26.0 [ 312.375485][T15563] overlayfs: failed to clone upperpath [ 312.458874][T15576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5212'. [ 312.488683][T15578] netlink: 'syz.5.5213': attribute type 4 has an invalid length. [ 312.542197][T15585] overlayfs: failed to clone upperpath [ 313.301159][T15602] binder: Binderfs stats mode cannot be changed during a remount [ 313.324332][T15604] netlink: 'syz.6.5222': attribute type 4 has an invalid length. [ 313.490088][T15622] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 313.500426][T15624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.510311][T15625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.373873][T15632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.380902][T15632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.388075][ T36] audit: type=1400 audit(1756861946.230:48894): avc: denied { bind } for pid=15631 comm="syz.6.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 314.510785][T15637] __vm_enough_memory: pid: 15637, comm: syz.6.5233, bytes: 18014402804453376 not enough memory for the allocation [ 314.849562][ T64] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 315.019143][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 315.025668][ T64] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.034276][ T64] usb 7-1: config 179 has no interface number 0 [ 315.040929][ T64] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 315.052359][ T64] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 315.063954][ T64] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.075473][ T64] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 315.087234][ T64] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.102549][ T64] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 315.112001][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.126570][T15644] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.355806][T15644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.367599][T15644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.580628][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5236'. [ 315.712875][T15649] netlink: 'syz.5.5238': attribute type 2 has an invalid length. [ 315.995842][T15666] overlayfs: failed to clone upperpath [ 316.010223][T15668] netlink: 'syz.0.5245': attribute type 5 has an invalid length. [ 316.046311][T15668] netlink: 'syz.0.5245': attribute type 5 has an invalid length. [ 316.069187][T15668] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5245'. [ 316.229494][T15679] netlink: 'syz.2.5249': attribute type 4 has an invalid length. [ 316.659164][ T330] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 316.830640][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.841060][ T330] usb 3-1: not running at top speed; connect to a high speed hub [ 316.857310][ T330] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 316.871669][ T330] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 316.890188][ T330] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 316.911425][ T330] usb 3-1: config 129 has no interface number 0 [ 316.929259][ T330] usb 3-1: config 129 has no interface number 1 [ 316.941484][ T330] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 316.972418][ T330] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 316.999753][ T330] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 317.035275][ T330] usb 3-1: config 129 interface 135 has no altsetting 0 [ 317.061055][ T330] usb 3-1: config 129 interface 5 has no altsetting 0 [ 317.093447][ T330] usb 3-1: string descriptor 0 read error: -22 [ 317.103120][ T330] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 317.136535][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.179505][ T330] usb 3-1: MIDIStreaming interface descriptor not found [ 317.522958][ T330] usb 3-1: USB disconnect, device number 36 [ 317.563245][ T8394] usb 7-1: USB disconnect, device number 19 [ 317.563319][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 317.577883][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 323.821120][T15697] 9pnet_fd: Insufficient options for proto=fd [ 323.850204][T15703] syz.5.5257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 323.869120][ T36] audit: type=1326 audit(1756861955.710:48895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.5.5257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc19ab8ebe9 code=0x0 [ 324.079156][ T8394] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 324.099155][ T959] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 324.249185][ T959] usb 3-1: Using ep0 maxpacket: 16 [ 324.250311][ T8394] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.255511][ T959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.265873][ T8394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 324.277138][ T959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.287880][ T8394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 324.297852][ T959] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 324.307503][ T8394] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.316700][ T959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.329456][ T8394] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.344824][ T959] usb 3-1: config 0 descriptor?? [ 324.346499][ T8394] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.360096][ T8394] usb 7-1: config 0 descriptor?? [ 324.755677][ T959] magicmouse 0003:05AC:0324.0014: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 324.768567][ T8394] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 324.780668][ T8394] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 324.801833][ T8394] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 324.824351][ T36] audit: type=1400 audit(1756861956.670:48896): avc: denied { connect } for pid=15742 comm="syz.5.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.897387][T15751] overlay: Bad value for 'uuid' [ 324.903527][T15751] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5274'. [ 324.968861][ T8394] usb 3-1: USB disconnect, device number 37 [ 325.010382][T15775] netlink: 'syz.0.5283': attribute type 11 has an invalid length. [ 325.110159][ T6418] Bluetooth: hci0: Frame reassembly failed (-84) [ 325.658006][T15816] netlink: 'syz.0.5299': attribute type 4 has an invalid length. [ 325.668796][T15816] netlink: 'syz.0.5299': attribute type 4 has an invalid length. [ 325.989619][T15840] overlay: ./file0 is not a directory [ 326.512722][T15847] rust_binder: 297: no such ref 0 [ 326.631330][T15866] overlayfs: failed to clone upperpath [ 326.637492][T15867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.637572][T15867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 326.647325][T15867] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 326.660393][T15867] rust_binder: Read failure Err(EFAULT) in pid:305 [ 326.724241][T15882] new mount options do not match the existing superblock, will be ignored [ 326.751502][T15884] tipc: Started in network mode [ 326.756464][T15884] tipc: Node identity , cluster identity 4711 [ 326.762789][T15884] tipc: Failed to obtain node identity [ 326.768341][T15884] tipc: Enabling of bearer rejected, failed to enable media [ 326.869423][ T330] usb 7-1: USB disconnect, device number 20 [ 327.179154][ T6832] Bluetooth: hci0: command 0x1003 tx timeout [ 327.185242][ T492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 327.306214][T15904] __vm_enough_memory: pid: 15904, comm: syz.6.5331, bytes: 18014402804453376 not enough memory for the allocation [ 327.338424][T15908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.389854][T15909] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 327.709137][ T330] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 327.849141][ T330] usb 3-1: device descriptor read/64, error -71 [ 328.089145][ T330] usb 3-1: device descriptor read/64, error -71 [ 328.181378][T15913] binder: Bad value for 'defcontext' [ 328.201262][T15916] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 328.209937][T15916] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 328.209955][T15916] rust_binder: Read failure Err(EFAULT) in pid:387 [ 328.218297][T15916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:387 [ 328.302957][T15924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.329139][ T330] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 328.469169][ T330] usb 3-1: device descriptor read/64, error -71 [ 328.709209][ T330] usb 3-1: device descriptor read/64, error -71 [ 328.819210][ T330] usb usb3-port1: attempt power cycle [ 329.146163][T15932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.158448][T15932] rust_binder: 399: no such ref 2 [ 329.171248][ T330] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 329.172343][T15932] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 329.186500][T15932] rust_binder: 399: no such ref 0 [ 329.191656][T15932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:399 [ 329.193182][T15932] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 329.203874][ T330] usb 3-1: device descriptor read/8, error -71 [ 329.307619][T15939] binder: Unknown parameter 'smackfsdef' [ 329.314358][T15939] binder: Unknown parameter 'smackfsdef' [ 329.350180][ T330] usb 3-1: device descriptor read/8, error -71 [ 329.368994][T15953] rust_binder: Write failure EFAULT in pid:420 [ 329.445267][T15959] rust_binder: Write failure EFAULT in pid:426 [ 329.589195][ T330] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 329.630237][ T330] usb 3-1: device descriptor read/8, error -71 [ 329.656882][T15961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 329.656913][T15961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 329.760229][ T330] usb 3-1: device descriptor read/8, error -71 [ 329.879247][ T330] usb usb3-port1: unable to enumerate USB device [ 330.605523][T16001] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 330.776300][T16150] netlink: 'syz.0.5371': attribute type 4 has an invalid length. [ 330.793714][T16150] netlink: 'syz.0.5371': attribute type 4 has an invalid length. [ 330.928688][T16159] netlink: 'syz.6.5375': attribute type 1 has an invalid length. [ 330.936577][T16159] netlink: 'syz.6.5375': attribute type 2 has an invalid length. [ 330.974303][T16174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5380'. [ 331.502198][T16182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 331.593539][T16218] overlayfs: failed to resolve './file0': -2 [ 331.631910][T16326] overlayfs: workdir and upperdir must reside under the same mount [ 331.643910][T16328] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5391'. [ 331.645179][T16326] rust_binder: Error while translating object. [ 331.653342][T16326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 331.659596][T16326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:332 [ 331.792387][T16337] rust_binder: 339: no such ref 0 [ 331.824732][T16345] overlayfs: failed to clone upperpath [ 331.874016][T16367] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5406'. [ 331.974586][T16375] sock: sock_set_timeout: `syz.5.5409' (pid 16375) tries to set negative timeout [ 332.069188][ T959] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 332.178810][T16377] overlayfs: failed to clone upperpath [ 332.229155][ T959] usb 3-1: Using ep0 maxpacket: 32 [ 332.235517][ T959] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 332.244035][ T959] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 332.252970][ T959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 332.262966][ T959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.272752][ T959] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.282475][ T959] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 332.295495][ T959] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 332.304588][ T959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.313339][ T959] usb 3-1: config 0 descriptor?? [ 332.409331][T16398] overlayfs: failed to clone upperpath [ 332.501546][T16415] netlink: 'syz.6.5426': attribute type 4 has an invalid length. [ 332.511858][T16415] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5426'. [ 332.521026][T16415] tipc: Invalid UDP bearer configuration [ 332.521051][T16415] tipc: Enabling of bearer rejected, failed to enable media [ 332.524430][ T959] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 332.536169][T16415] overlayfs: failed to clone lowerpath [ 332.547835][ T959] usb 3-1: USB disconnect, device number 42 [ 332.559292][ T959] usblp0: removed [ 332.574252][T16417] netlink: 'syz.6.5427': attribute type 64 has an invalid length. [ 332.582204][T16417] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5427'. [ 332.609058][T16421] overlayfs: failed to clone upperpath [ 332.624321][T16423] fuse: Bad value for 'fd' [ 332.814482][T16444] overlayfs: failed to clone upperpath [ 332.969150][ T959] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 333.119139][ T959] usb 3-1: Using ep0 maxpacket: 32 [ 333.125416][ T959] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 333.133922][ T959] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 333.142583][ T959] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 333.151626][ T959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.161307][ T959] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 333.170975][ T959] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 333.184175][ T959] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 333.193280][ T959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.201914][ T959] usb 3-1: config 0 descriptor?? [ 333.408292][ T959] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 333.489275][T16467] overlayfs: failed to clone upperpath [ 333.506381][T16469] overlayfs: failed to clone lowerpath [ 333.612411][ T10] usb 3-1: USB disconnect, device number 43 [ 333.623252][ T10] usblp0: removed [ 333.641905][T16483] fuse: Bad value for 'fd' [ 333.644061][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5455'. [ 333.771402][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5456'. [ 333.971936][T16490] overlayfs: failed to clone upperpath [ 333.987762][ T36] audit: type=1326 audit(1756870669.832:48897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16491 comm="syz.5.5458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc19ab8ebe9 code=0x0 [ 334.202554][ T36] audit: type=1326 audit(1756870670.052:48898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.2.5459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b918ebe9 code=0x0 [ 334.779131][ T959] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 334.939169][ T959] usb 3-1: Using ep0 maxpacket: 16 [ 334.945608][ T959] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 334.955828][ T959] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.966933][ T959] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.976799][ T959] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 334.989608][ T959] usb 3-1: config 7 interface 0 has no altsetting 0 [ 334.996223][ T959] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 335.005277][ T959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.416947][ T959] hid (null): global environment stack underflow [ 335.423422][ T959] hid (null): report_id 1954328033 is invalid [ 335.429591][ T959] hid (null): invalid report_count 63865 [ 335.439217][ T959] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0016/input/input68 [ 335.452882][ T959] kye 0003:0458:5010.0016: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 335.643084][ T10] usb 3-1: USB disconnect, device number 44 [ 335.859478][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5473'. [ 335.898798][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5475'. [ 336.978708][T16576] can: request_module (can-proto-0) failed. [ 336.978913][T16577] can: request_module (can-proto-0) failed. [ 337.027887][T16586] overlayfs: failed to clone lowerpath [ 337.095153][T16589] fuse: Bad value for 'fd' [ 337.229156][ T8394] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 337.335500][ T36] audit: type=1326 audit(1756870673.186:48899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16618 comm="syz.6.5501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3698ebe9 code=0x0 [ 337.369179][ T8394] usb 3-1: device descriptor read/64, error -71 [ 337.609128][ T8394] usb 3-1: device descriptor read/64, error -71 [ 337.849151][ T8394] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 337.864203][ T36] audit: type=1400 audit(1756870673.716:48900): avc: denied { setattr } for pid=16629 comm="syz.5.5506" name="NETLINK" dev="sockfs" ino=62337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.894066][T16632] overlayfs: failed to clone upperpath [ 337.945834][T16640] 9pnet_fd: Insufficient options for proto=fd [ 337.979147][ T8394] usb 3-1: device descriptor read/64, error -71 [ 338.047684][T16656] cgroup: Invalid name [ 338.198436][ T36] audit: type=1400 audit(1756870674.046:48901): avc: denied { accept } for pid=16677 comm="syz.6.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.219508][ T8394] usb 3-1: device descriptor read/64, error -71 [ 338.329254][ T8394] usb usb3-port1: attempt power cycle [ 338.669151][ T8394] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 338.684012][T16720] cgroup: Bad value for 'name' [ 338.690227][ T8394] usb 3-1: device descriptor read/8, error -71 [ 338.820274][ T8394] usb 3-1: device descriptor read/8, error -71 [ 339.079177][ T8394] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 339.100288][ T8394] usb 3-1: device descriptor read/8, error -71 [ 339.107837][T16756] 9pnet_fd: Insufficient options for proto=fd [ 339.115448][ T36] audit: type=1326 audit(1756870674.966:48902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.0.5554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbd8ebe9 code=0x0 [ 339.230331][ T8394] usb 3-1: device descriptor read/8, error -71 [ 339.339519][ T8394] usb usb3-port1: unable to enumerate USB device [ 339.412208][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'. [ 339.915500][T16778] overlayfs: failed to resolve './file0': -2 [ 339.989809][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 339.997968][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.116716][T16791] netlink: 'syz.5.5566': attribute type 28 has an invalid length. [ 340.484750][T16798] fuseblk: Bad value for 'fd' [ 340.499902][T16803] veth1: entered allmulticast mode [ 340.505368][T16803] netlink: 1036 bytes leftover after parsing attributes in process `syz.6.5570'. [ 340.515292][T16802] veth1: left allmulticast mode [ 340.544602][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5573'. [ 340.594222][T16827] fuse: Bad value for 'fd' [ 340.665070][T16833] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5581'. [ 340.675032][T16833] rust_binder: Write failure EFAULT in pid:393 [ 340.707288][T16844] /dev/rnullb0: Can't open blockdev [ 340.804672][ T36] audit: type=1400 audit(1756870676.656:48903): avc: denied { mounton } for pid=16851 comm="syz.2.5587" path="/131/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 340.804721][T16852] 9pnet_virtio: no channels available for device syz [ 340.917502][T16858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.917528][T16858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 341.249373][T16878] netlink: 'syz.5.5597': attribute type 16 has an invalid length. [ 341.266800][T16878] netlink: 'syz.5.5597': attribute type 3 has an invalid length. [ 341.274886][T16878] netlink: 64058 bytes leftover after parsing attributes in process `syz.5.5597'. [ 341.651296][T16902] fuse: Bad value for 'fd' [ 341.657174][T16902] fuse: Bad value for 'fd' [ 341.745219][ T36] audit: type=1400 audit(1756870677.596:48904): avc: denied { mounton } for pid=16925 comm="syz.2.5614" path="/proc/413/ns/cgroup" dev="proc" ino=63234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 341.824113][T16940] overlayfs: missing 'lowerdir' [ 342.017851][T16972] fuseblk: Bad value for 'fd' [ 342.059186][ T330] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 342.204852][T16982] fuseblk: Unknown parameter 'r\otm~de' [ 342.210805][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 342.218729][ T330] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 342.227129][ T330] usb 3-1: config 0 has no interface number 0 [ 342.233357][ T330] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 342.243393][ T330] usb 3-1: config 0 interface 137 has no altsetting 0 [ 342.254714][ T330] usb 3-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 342.263922][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.272005][ T330] usb 3-1: Product: syz [ 342.276322][ T330] usb 3-1: Manufacturer: syz [ 342.281117][ T330] usb 3-1: SerialNumber: syz [ 342.293470][ T330] usb 3-1: config 0 descriptor?? [ 342.301145][ T330] ftdi_sio 3-1:0.137: FTDI USB Serial Device converter detected [ 342.310608][ T330] usb 3-1: Detected SIO [ 342.314853][ T330] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 342.326354][ T330] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 343.004656][ T330] usb 3-1: USB disconnect, device number 49 [ 343.014090][ T330] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 343.024768][ T330] ftdi_sio 3-1:0.137: device disconnected [ 343.083951][T17009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 343.083988][T17009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:423 [ 343.126380][T17013] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 343.126425][T17013] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 343.134369][T17013] rust_binder: Read failure Err(EFAULT) in pid:427 [ 343.232584][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 343.248066][T17022] bridge_slave_1: left allmulticast mode [ 343.253996][T17022] bridge_slave_1: left promiscuous mode [ 343.259711][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.267517][T17022] bridge_slave_0: left allmulticast mode [ 343.273916][T17022] bridge_slave_0: left promiscuous mode [ 343.279598][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.391595][T17039] loop2: detected capacity change from 0 to 7 [ 343.543117][T17044] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 343.566450][ T959] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 343.574352][ T959] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.809591][T17050] overlayfs: failed to clone upperpath [ 343.893581][T17061] incfs: Error accessing: ./file0. [ 343.898815][T17061] incfs: mount failed -20 [ 344.434383][T17093] /dev/rnullb0: Can't open blockdev [ 344.476720][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5679'. [ 344.699150][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 344.849124][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 344.855383][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 344.863753][ T10] usb 3-1: config 1 has an invalid interface number: 2 but max is 0 [ 344.871808][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.882046][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 344.891050][ T10] usb 3-1: config 1 has no interface number 0 [ 344.897130][ T10] usb 3-1: config 1 has no interface number 1 [ 344.903245][ T10] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.920373][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 344.927356][ T10] usb 3-1: config 1 interface 2 has no altsetting 0 [ 344.935584][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 344.944877][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.953151][ T10] usb 3-1: Product: syz [ 344.954309][T17112] fuseblk: Bad value for 'fd' [ 344.957372][ T10] usb 3-1: Manufacturer: syz [ 344.967724][ T10] usb 3-1: SerialNumber: syz [ 345.175059][ T10] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 345.400592][ T10] usb 3-1: USB disconnect, device number 50 [ 346.026561][T17162] /dev/rnullb0: Can't lookup blockdev [ 346.349136][ T330] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 346.479165][ T330] usb 3-1: device descriptor read/64, error -71 [ 346.729127][ T330] usb 3-1: device descriptor read/64, error -71 [ 346.969132][ T330] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 347.109131][ T330] usb 3-1: device descriptor read/64, error -71 [ 347.349217][ T330] usb 3-1: device descriptor read/64, error -71 [ 347.459215][ T330] usb usb3-port1: attempt power cycle [ 347.668611][T17227] can: request_module (can-proto-7) failed. [ 347.728178][T17228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5726'. [ 347.738125][T17228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5726'. [ 347.799139][ T330] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 347.820194][ T330] usb 3-1: device descriptor read/8, error -71 [ 347.950211][ T330] usb 3-1: device descriptor read/8, error -71 [ 348.189135][ T330] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 348.210168][ T330] usb 3-1: device descriptor read/8, error -71 [ 348.340231][ T330] usb 3-1: device descriptor read/8, error -71 [ 348.449271][ T330] usb usb3-port1: unable to enumerate USB device [ 349.082954][T17230] fuse: Bad value for 'group_id' [ 349.087977][T17230] fuse: Bad value for 'group_id' [ 349.150340][ T36] audit: type=1400 audit(1756870685.006:48905): avc: denied { watch } for pid=17237 comm="syz.2.5729" path="pipe:[64852]" dev="pipefs" ino=64852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 349.190496][T17246] /dev/rnullb0: Can't open blockdev [ 349.423705][T17261] overlayfs: failed to resolve './file1': -2 [ 349.690128][T17271] rust_binder: Error while translating object. [ 349.690164][T17271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 349.696390][T17271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 349.818192][ T36] audit: type=1400 audit(1756870685.666:48906): avc: denied { accept } for pid=17272 comm="syz.2.5743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.967254][T17285] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 349.976009][T17285] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 350.102076][T17303] overlayfs: failed to clone upperpath [ 350.628961][T17307] 2N: renamed from vcan0 (while UP) [ 350.645705][T17309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 350.654506][T17309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 350.673145][ T36] audit: type=1326 audit(1756870686.526:48907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.0.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbd8ebe9 code=0x7fc00000 [ 350.702153][ T36] audit: type=1326 audit(1756870686.536:48908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbd8ebe9 code=0x7fc00000 [ 350.857362][ T36] audit: type=1400 audit(1756870686.706:48909): avc: denied { write } for pid=17331 comm="syz.2.5765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.877870][ T36] audit: type=1400 audit(1756870686.716:48910): avc: denied { accept } for pid=17331 comm="syz.2.5765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 351.145750][T17361] netlink: 'syz.2.5774': attribute type 4 has an invalid length. [ 351.178511][ T36] audit: type=1400 audit(1756870687.026:48911): avc: denied { append } for pid=17366 comm="syz.2.5776" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.402703][T17367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49847 sclass=netlink_route_socket pid=17367 comm=syz.2.5776 [ 351.418067][T17367] tipc: Enabling of bearer rejected, failed to enable media [ 351.961188][T17409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 351.961223][T17409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 351.970948][T17409] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 351.980270][T17409] rust_binder: Read failure Err(EFAULT) in pid:541 [ 352.075660][T17426] netlink: 'syz.0.5799': attribute type 28 has an invalid length. [ 352.091090][T17426] netlink: 'syz.0.5799': attribute type 28 has an invalid length. [ 352.112320][T17430] netlink: 'syz.0.5800': attribute type 4 has an invalid length. [ 352.349255][T17469] tipc: Enabling of bearer rejected, failed to enable media [ 352.809660][T17487] /dev/rnullb0: Can't lookup blockdev [ 352.879504][T17491] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 352.928470][ T36] audit: type=1326 audit(1756870688.776:48912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17492 comm="syz.5.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ab8ebe9 code=0x7ffc0000 [ 353.009114][ T36] audit: type=1326 audit(1756870688.776:48913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17492 comm="syz.5.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc19ab8ebe9 code=0x7ffc0000 [ 353.034900][ T36] audit: type=1326 audit(1756870688.776:48914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17492 comm="syz.5.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19ab8ebe9 code=0x7ffc0000 [ 353.069130][ T9] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 353.083036][T17499] overlayfs: failed to clone upperpath [ 353.088780][T17500] overlayfs: failed to clone upperpath [ 353.230194][ T9] usb 3-1: config index 0 descriptor too short (expected 64657, got 319) [ 353.238720][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.251800][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 353.258802][ T9] usb 3-1: string descriptor 0 read error: -22 [ 353.265042][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.274114][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.285552][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 353.595666][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5834'. [ 355.729329][T17584] overlayfs: failed to clone upperpath [ 355.820790][ T330] usb 3-1: USB disconnect, device number 55 [ 355.871213][ T6420] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.305979][T17607] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.5868'. [ 357.899160][ T492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 357.905315][ T6832] Bluetooth: hci0: command 0x1003 tx timeout [ 357.960599][T17640] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5880'. [ 357.982974][T17640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17640 comm=syz.2.5880 [ 358.108686][T17645] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.130036][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.149159][T17645] bridge_slave_0: entered allmulticast mode [ 358.163166][T17676] fuseblk: Bad value for 'user_id' [ 358.165696][T17645] bridge_slave_0: entered promiscuous mode [ 358.168331][T17676] fuseblk: Bad value for 'user_id' [ 358.191316][T17645] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.198400][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.208980][T17645] bridge_slave_1: entered allmulticast mode [ 358.215624][T17645] bridge_slave_1: entered promiscuous mode [ 358.312772][T17685] overlayfs: failed to clone upperpath [ 358.366182][T17645] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.373386][T17645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.380747][T17645] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.387792][T17645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.396796][ T8394] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 358.429690][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.437093][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.450137][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.457203][ T6420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.466847][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.473983][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.511594][T17645] veth0_vlan: entered promiscuous mode [ 358.527326][T17645] veth1_macvtap: entered promiscuous mode [ 358.560176][ T8394] usb 3-1: config 0 has no interfaces? [ 358.567194][ T8394] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 358.577466][ T8394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.591238][ T8394] usb 3-1: Product: syz [ 358.595691][ T8394] usb 3-1: Manufacturer: syz [ 358.600974][ T8394] usb 3-1: SerialNumber: syz [ 358.606823][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 358.606842][ T36] audit: type=1400 audit(1756870694.456:48983): avc: denied { setattr } for pid=17699 comm="syz.7.5878" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 358.641501][ T8394] usb 3-1: config 0 descriptor?? [ 358.852712][ T959] usb 3-1: USB disconnect, device number 56 [ 359.111136][T17730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 359.123815][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5909'. [ 359.194383][T17745] overlayfs: failed to clone upperpath [ 359.447764][T17759] binder: Bad value for 'max' [ 359.503052][T17761] 9pnet: Could not find request transport: fd [ 359.515503][T17761] ------------[ cut here ]------------ [ 359.521045][T17761] WARNING: CPU: 1 PID: 17761 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 359.530580][T17761] Modules linked in: [ 359.534496][T17761] CPU: 1 UID: 0 PID: 17761 Comm: syz.2.5918 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02 [ 359.546159][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.556430][T17761] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 359.562390][T17761] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 69 41 ee 05 00 0f 85 be 00 00 00 c6 05 5c 41 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 359.582075][T17761] RSP: 0018:ffffc900033a7560 EFLAGS: 00010246 [ 359.588171][T17761] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 359.596197][T17761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900033a7618 [ 359.604283][T17761] RBP: ffffc900033a76a0 R08: ffffc900033a7617 R09: 0000000000000000 [ 359.612324][T17761] R10: ffffc900033a7600 R11: fffff52000674ec3 R12: ffffc900033a75a0 [ 359.620364][T17761] R13: dffffc0000000000 R14: 1ffff92000674eb0 R15: 0000000000000000 [ 359.628351][T17761] FS: 00007f66b9fe76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 359.637321][T17761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.643949][T17761] CR2: 000000110c2bf640 CR3: 00000001639c6000 CR4: 00000000003526b0 [ 359.651981][T17761] Call Trace: [ 359.655272][T17761] [ 359.658213][T17761] ? vfs_write+0x3c3/0xe80 [ 359.662739][T17761] ? ksys_write+0x141/0x250 [ 359.667259][T17761] ? x64_sys_call+0x271c/0x2ee0 [ 359.672149][T17761] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 359.677895][T17761] ? hashtab_init+0xdb/0x1f0 [ 359.682531][T17761] ___kmalloc_large_node+0xb5/0x250 [ 359.687779][T17761] ? hashtab_init+0xdb/0x1f0 [ 359.692432][T17761] __kmalloc_large_node_noprof+0x1e/0xe0 [ 359.698098][T17761] ? hashtab_init+0xdb/0x1f0 [ 359.702724][T17761] __kmalloc_noprof+0x26d/0x450 [ 359.707606][T17761] hashtab_init+0xdb/0x1f0 [ 359.712078][T17761] ? class_read+0x162/0x8a0 [ 359.716605][T17761] symtab_init+0x44/0x70 [ 359.720889][T17761] class_read+0x1df/0x8a0 [ 359.725243][T17761] ? __cfi_class_read+0x10/0x10 [ 359.730143][T17761] ? hashtab_init+0x105/0x1f0 [ 359.734836][T17761] policydb_read+0xaa8/0x28c0 [ 359.739571][T17761] ? kasan_save_alloc_info+0x40/0x50 [ 359.744889][T17761] ? __cfi_policydb_read+0x10/0x10 [ 359.750046][T17761] ? security_load_policy+0x128/0x12f0 [ 359.755525][T17761] security_load_policy+0x162/0x12f0 [ 359.760858][T17761] ? avc_has_perm_noaudit+0x286/0x360 [ 359.766257][T17761] ? _raw_spin_unlock+0x45/0x60 [ 359.771163][T17761] ? __check_object_size+0x50a/0x810 [ 359.776464][T17761] ? __cfi_security_load_policy+0x10/0x10 [ 359.782225][T17761] ? __kasan_check_write+0x18/0x20 [ 359.787378][T17761] sel_write_load+0x298/0x5e0 [ 359.792093][T17761] ? futex_wait+0x29a/0x7a0 [ 359.796616][T17761] ? __cfi_sel_write_load+0x10/0x10 [ 359.801844][T17761] ? __cfi_futex_wait+0x10/0x10 [ 359.806746][T17761] ? bpf_lsm_file_permission+0xd/0x20 [ 359.812167][T17761] ? __cfi_sel_write_load+0x10/0x10 [ 359.817393][T17761] vfs_write+0x3c3/0xe80 [ 359.821703][T17761] ? __cfi_vfs_write+0x10/0x10 [ 359.826480][T17761] ? __kasan_check_write+0x18/0x20 [ 359.831652][T17761] ? mutex_lock+0x92/0x1c0 [ 359.836097][T17761] ? __cfi_mutex_lock+0x10/0x10 [ 359.840990][T17761] ? __fget_files+0x2c5/0x340 [ 359.845774][T17761] ksys_write+0x141/0x250 [ 359.850147][T17761] ? __cfi_ksys_write+0x10/0x10 [ 359.855010][T17761] ? __kasan_check_write+0x18/0x20 [ 359.860167][T17761] ? fpregs_restore_userregs+0x11d/0x260 [ 359.865820][T17761] __x64_sys_write+0x7f/0x90 [ 359.870428][T17761] x64_sys_call+0x271c/0x2ee0 [ 359.875141][T17761] do_syscall_64+0x58/0xf0 [ 359.879637][T17761] ? clear_bhb_loop+0x50/0xa0 [ 359.884365][T17761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 359.890397][T17761] RIP: 0033:0x7f66b918ebe9 [ 359.895111][T17761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.915240][T17761] RSP: 002b:00007f66b9fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.923714][T17761] RAX: ffffffffffffffda RBX: 00007f66b93c5fa0 RCX: 00007f66b918ebe9 [ 359.931746][T17761] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 000000000000000a [ 359.939794][T17761] RBP: 00007f66b9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 359.947773][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.955785][T17761] R13: 00007f66b93c6038 R14: 00007f66b93c5fa0 R15: 00007ffce5fec908 [ 359.963825][T17761] [ 359.966847][T17761] ---[ end trace 0000000000000000 ]--- [ 359.972894][T17761] SELinux: failed to load policy