last executing test programs: 3.472750408s ago: executing program 3 (id=4): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) r2 = syz_usb_connect(0x5, 0x7c, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x12, 0x12, 0x7c, 0x10, 0x103e, 0x3e8, 0xb451, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x5, 0x6, 0xb0, 0x8, "", [{{0x9, 0x4, 0x71, 0x2, 0x4, 0xaa, 0xa6, 0x7a, 0x8, [], [{{0x9, 0x5, 0xb0861096d470490f, 0x0, 0x3ff, 0x9, 0xa6, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x7e7, 0x6, 0x2, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0x1, 0x86}}, {{0x9, 0x5, 0x2, 0x0, 0x4a2fb15ad64503a1, 0x9, 0x8, 0xb, [@generic={0x8, 0xb, "5e9d6aed5ce4"}]}}]}}, {{0x9, 0x4, 0x20, 0x1, 0x0, 0xfb, 0xd6, 0x1a, 0x80}}, {{0x9, 0x4, 0xed, 0x2, 0x1, 0x2c, 0xfa, 0xad, 0x5d, [], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0xf7, 0x97, 0x4, [@generic={0x8, 0xb, "17c8081668d6"}]}}]}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x100, &(0x7f0000000000)=@string={0x100, 0x3, "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"}}, {0x25, &(0x7f0000000100)=@string={0x25, 0x3, "826218dc3044fa841e499b649eea064c5206124cbcd87a9d32ce2e75676a76676cb2ba"}}, {0xe5, &(0x7f0000000140)=@string={0x7, 0x3, "d83e604fa0c2711855912c8595687d1db1cafecf9aa9fa1094da5a7ada84b38b2ba81bc1f48b9b144fe95a055343270d1867b0c87ce72744fe3a6c2fb4eeb8a584c6bd79fc539e00ae786fabc93005a2ed68d7ebf6544aa51d6cd7e96aecf5f1f46d632544222bd29fee7ee3e5c3dda5a5596b9bd72cbe8f1691edc1417589e3ab7a52fe67901eba4fc47e51f2f7459fba6fe826c3e807745e648d7671da764b7b2bdd6de022ce29cb6053d5cc72209a01923d330b1a302c06125b8395c2314ff6fa50cbe12a943c2afee51fef95420f41329636d41e782ffdc6a304f29b65c0d1f58e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80c}}, {0xee, &(0x7f0000000900)=@string={0xee, 0x3, "95b127b4d4a35dbf05c4d553d71f1d248101a817659c1e816ad62204b0440f67e1fc133e0ce1cc9ba016870929f7b89b8ba43782e9a35fcca95c8c3c9ef50bdc4f9d67cf7d5be295fc7f9b03977d53995d02a3f8e5433ace99a600082cd3dfddcd08d1eff191735c47ef0978b60b8cecab42e98611e9364e5de4793f49c7050c0e8cbdc89401c25b582ba1d3e9ab6a07b2bebe82088a0f86b34155e495975740b066fe0b108958ab94b5b79b4d516d107ecd771ccc71aa1d965ccbd904ae4ba79a36bbe44ee1df27eab94d8d2cd704bd41d04878ea076db1a65c66e1ec5a2cbe6b222dee6ac6361fcba8f2a8"}}, {0xb1, &(0x7f0000000580)=@string={0xb1, 0x3, "b5392568486d09713f6ff5d65b5d914b6c04a1755a02d7d40997debbf81eff6a66a64f45e1208206e25b898026488c58bc716249d4a5ba34dec02ea62008352b0f1d814eb7da2ea724873877d3466f6267f3b9e4017f9011a3e1aa853959a9c655eabad590a79f6e771ccdd2c5f3ba03d3690faaa02621f02ab2d8468c22809f3e2026801d1709c5c40cbb42b5da2695a6527d606c6310d3106fa4e86588f998aaa00db2ef06169f7f38b93a9974e7"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000240)={0x20, 0xa, 0x26, {0x26, 0xc, "0a8c4ebf4667d390cac6085ad3cdc4c4eac85ef2e79772dce9ff5f5e09d7c8ae262f3f11"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x10, 0xe, 0x69, "978af5bedee3e88bea21b3c83db41995d001c930cf4af5a39871f82b29199a92ad61a065b54537325184d1f22ab6edf89c612ef3945077ee02603d57dd54a33e1a48f2bcccca0ce5582e0645b095881ffd0d6a1f7fb44c48a8951078ef5bed09be5e334fad6443caf4"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x2, 0x7, 0xe30, 0x8, 0x8, 0xfc01, 0x6, 0xa, 0x7, 0x2e, 0x1cf}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 3.365701079s ago: executing program 2 (id=5): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x2}]}) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa2103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xfffffffffffffff5]}, 0x8, 0x80000) (async) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) lsm_list_modules(&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=0x20, 0x0) (async) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) fcntl$setflags(r4, 0x2, 0x1) (async) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x4) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x25102100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_clone(0x102200, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0) (async, rerun: 64) userfaultfd(0x800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000300), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) (async, rerun: 32) close(0x3) (async, rerun: 32) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000480)={0x0, &(0x7f0000000400)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x3, 0x3, 0x8000000000000000, 0x9}}, @cpuid={0x64, 0x18, {0x1, 0x6}}], 0x50}) (async) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000380)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setpgid(r5, r5) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 3.347965021s ago: executing program 1 (id=2): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000480)={{r0}, 0x7, 0xffffffffffffffa1, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xf}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3) 3.280172267s ago: executing program 0 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x6, 0x10000, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2b, 0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000008, 0xffffffe4, 0x0, 0x29, 0xfffffff7, 0x1, 0x97e3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.186418417s ago: executing program 1 (id=7): socket$inet(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xa, 0x46}}}}}]}}]}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) close(0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x24, &(0x7f0000000400)=@string={0x24, 0x3, "ba91b7065e433022014d7f103981e7a9b1ccba0958ee180c254cdbde29238ca98c73"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000180)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.942482512s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = inotify_init() r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x1000003, 0x11, 0xffffffffffffffff, 0x0) r5 = signalfd4(r2, &(0x7f0000000340)={[0x400]}, 0x8, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000400)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000003c0)=""/47, 0x2f}) r6 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000180)="898af54270aac7e9556f7d7e207b0d92d026e22b33eb8275", 0x0, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x9b00, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0x1b) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000bfd000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@rdmsr={0x66, 0x18, {0x40000104}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f0000000540)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x11) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f00000001c0)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f890b000f192966b9800000c00f326635010000000f300f01c3f2a40f209266b9350a00000f3208e10f01c80f01c2", 0x2f}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.511458796s ago: executing program 0 (id=9): r0 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4020, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_STATUS(r1, 0xc138fd07, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x84800, 0x0, 0x0, @by_dev={r3}}) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffb, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendto$packet(r5, &(0x7f00000001c0)="18de359e25d17874418f3f5e3d108ab1f56625530acb65c2363adbcd4d4909504f00ff8116a0aa5e8415f2fc451a1a2ee95bcbb923dfc15b4a90acd669d5a05f4ad51af18594f54bdc947ebc858add547118658c42ee8013deeb5808062015deaa8753bfee77252fd494c9a4b5f30fd4fe623370f58c82052a7d27baf8fd806e8dd9af6a7500036b247d2353e06ffee54b786d19927eb2343951dd50da9869a52d5fc639204b1f6ad7ac9850a85e9b9dbcc38eecf38bd42330c13182cecf7e34b57c4e1442200cf90ba7d41bd22779a4f36b30ebcb847991bb42be7e4c209bdddec7098726ea31bff5157581e9c776de249811240b85", 0xf6, 0x40, &(0x7f0000000340)={0x11, 0x1b, r6, 0x1, 0x2, 0x6, @remote}, 0x14) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1fe}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0xd2, 0x4) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040da0b528111300102030109023800010900a0fa0904000003ffff4000070589020002000705020200020007058303"], 0x0) 2.432090733s ago: executing program 2 (id=10): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e24, 0x5, @private2, 0x5}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/kmsg\x00', 0x1, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) clock_nanosleep(0xfffffffffffffffe, 0xca9a3b, &(0x7f0000000240)={0x77359400}, 0x0) r6 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x77) fchdir(r7) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049cc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000008c0)={'#! ', '', [{0x20, '+-\xdf?\xe9\xfd\xc5\xd7\x93\x90/G\xdf\x00l\xc7(\xcd@`\x91b\x868\xf3\x11\x90\x95'}, {0x20, '\x00\x00\x00'}, {0x20, '#$\x81<8\x15\x0f\xf3d\xf7\xb0\x05H\x1c?^\xa6\xd5c\xa03 \xdf.\x8f\xc5j\xe6\x90\xd774B\x86\xd3\xd3bM'}, {0x20, '\x90c\xe5\x14}M\xacoN\xf5\x1e={E\x02\xe0e#\x971\xa7\xfd@\xc2C<%O\v\x03N\x88s\x00\xf7\"\xc8 3'}, {}]}, 0x75) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r8, 0x0, 0x4) setxattr$security_capability(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=ANY=[], 0x0, 0x1) sendmsg$key(r5, &(0x7f0000000780)={0x3, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000080c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/255, 0xff, 0x60002000, &(0x7f0000000680)={0xa, 0x4e1d, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x11}, 0x1c) 2.246009162s ago: executing program 2 (id=11): r0 = getpgid(0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x7f, &(0x7f0000000000)="3a3e07cd6929c097984b784481b228f47f783e84cc9b0d4040e81f7ad6ca7b53cb1054145aa7eb9b3ee9a544e151a1c46de49ffb766a345e37d2ee9147c21ddbd477c9c278e5bb6d693b2f92889bf7b7ffe5e136504494d1ea63fc6f9424b9e2db59362d8aefbb1f28cc66d6423adb8769c4c63ae9d75f42640bf780821908e075215bb778eee02b89f20353f92c8f66bde74b67c828ed582c5869f99827e0f4eee2fe87f5c49a0edef8") ptrace$cont(0x20, r0, 0x2, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffff8, 0x2002) recvfrom$binder_report(0xffffffffffffffff, &(0x7f00000000c0)={""/44, 0x0}, 0x80, 0x40001060, 0x0, 0x0) tkill(r1, 0x21) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x38, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x3}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x1}, @enter_looper, @dead_binder_done={0x40086310, 0x2}], 0x100, 0x0, &(0x7f00000001c0)=@reply}) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000300)="1ddf504dd36b92fd6d93d172a04c9160aafd1ef60d81b5e3b84f6990e3c05c150586c4be54c6f243aac7cc1c9571caa8293e768fb9c32697f50b189ac559885a1fe4c6f402b65c2401bf85055db78be4ce37da99ec62e574b119e0a0349e", 0x5e}, {&(0x7f0000000380)="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", 0xfb}], 0x2) ioctl$HOT_ADD_DISK(0xffffffffffffffff, 0x928, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x620100) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000500)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x800, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x10000, 0x0) close(r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/binder0\x00', 0x2, 0x0) r6 = signalfd4(r4, &(0x7f0000000640)={[0x4]}, 0x8, 0x80800) writev(r6, &(0x7f0000001900)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="2f054c074b79cd19e3c1796eee142e0ee514fd2b45d28554454eff7331e34986b84ac71511fc334e34acd363521718cb57c1ff932aac8c2e47facc274cce224ea010770ef2849f4c6e86dbf6c31d518e22c765d594dd89f6a58fb8710a38d1e2f1640b5710a77e5e5822f9ba20ad85a9232e2f09a3d4f821737df0b45e5c", 0x7e}, {&(0x7f0000001700)="1d061954e5df95b0104afc8ccec19b20b3922dbf397525a3cf5d446a2ad1b4912de961579bcbac86662fed7b5831e20d85ccae945a9982911ff62bfd28f672b0b8b3637e09933c6a7242f3c1e8f36eee58f8dd6533f6be2cd8828e945ce062a579e3f755f60d66aa5c0b67237cf4b29f765734f4d6c6827f849e94157659d0c3a7a488c808c6d6f701627deebd4ecfbe130acac898392773f3ef369483c0b8c481a8a5d3f7ad19e52cc20719daab714fc6e432e3adc7885d3f2412055f80b1e132129862244045846d13d1cefde683d7f9f31cf9e06c4696f8ded84fbd3e82d7cc6a80eeb440c6e107294de0ba259b147e9528b0", 0xf4}, {&(0x7f0000001800)="3b1f0bf0b1511deb4562ec10002a38f3c47f44bbd5748898be7cc388473fce0ea7b1281eba1f64a27cf4552712587601366dce7fea723df681de50516bbff995d26a13af6a3b0c06051e36d9f8644d09affad61ea06d8313fce1898fcd8c49a4f3ce621ad51f3309542a2e036e400544434b59bd70f62ed86cf0034ee91d9001918e2cbc363115aca1cfdf7fed6bf2b7e25d0381e63439fea441d4958ac989bd24bf77026ee397644d73728d13d6093a302cf8243f12c9439e871a515f5579177474ef0edf2a2b8f0192ed1362807037b4bb1a331b65f965bc10", 0xda}], 0x4) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000001940)=0x4) write(r5, &(0x7f0000001980)="2396d5f8af5273088614e07a5a312940dde5db93a625e3ba90860f825e07ca1d75ad45f616bc8c5880ee90a7908af8c228a8358ab60ce78b3c9583a8ec3b0bae876ae1caea049c4e1b91efded9b8bb542e5a8c3660f8ea1d51b7cc24335cf0e530353428daadf086c186a0ae347b301c783103fadd74ac22f9b53ecaefe897ba54bde657ee3ce466a814a18fc3e742abc00555515be9b5c91768c07ba715681322326e7e74da86ee84d7d98800a9dca7eab658a4539f1e06f33067b239eb615286bd4650d7c00a943513b3", 0xcb) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000001a80)={0xc34, 0x9}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f0000001ac0)) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000001b40)={0x800000000000000, 0x28, [0x6, 0x8, 0x5, 0x6], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000001b80)) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001bc0), 0x101002, 0x0) setsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000001c00)=0x3, 0x4) ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f0000001c40)) 2.17171102s ago: executing program 2 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="6726f3ffab2e000000ea08005400260f1d2d0f01dc2edec90f793a660f3829b5ed33d33e00786137", 0x28}], 0x1, 0x8, &(0x7f0000000200)=[@cstype0={0x4, 0xe}, @cstype0={0x4, 0x2}], 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @loopback}, &(0x7f0000000300)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000340)={@local, @multicast2, 0x0}, &(0x7f0000000380)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00'}) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000600)={0x6bc, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x1a4, 0x84, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x93c1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x40}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6f8ac80cb42c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf0a}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9ed296446056"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, @random="d56c834e4ab9d25f0ba3631025a6c8"}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3410e738964f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffa3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8567}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1c962112b816"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x9}}, @NL80211_ATTR_IE={0x2c, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @device_b}}, @challenge={0x10, 0x1, 0xe0}, @ibss={0x6, 0x2, 0xfff9}, @cf={0x4, 0x6, {0xd2, 0x1, 0x35c, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x6}}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4b0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, "482bb44e75f3cd5d1f12ef7e88170f400fee567d8381c0c3aed11eeac61054373db95801381477cb990e7fab682b5d23751fe9556dc1ac4b936917820fbb6c8db5c4c211e0e07f23da149fe94fff53bef04aea44"}, @NL80211_BAND_2GHZ={0x72, 0x0, "89ac9ea4bb25728e243ca8954872390c2b2f4f6d1822bc4f798c7777c77e4b7e1232df8ab293c711c21024779b68e77f9b295f9ae5b31522cbd7377a2ca0935f3a157f3995133d5b8b4e2ae0d1e136fc55d4760756750736008946a0d6fb2a3eb7b10c6bab887484d0ce6b36fdd5"}, @NL80211_BAND_6GHZ={0x8b, 0x3, "0fd93e999177a353e1389fe0f9b0297604e2f7797378f7c37604036a620d4288af0738f05f6bb6857ff7f4a8a55369ca1c16392c2391f1c48dd0a785bced67c9d14797703d5a7b853f8b514d0ccd295162c85e79580688ea5a9f12109f6bc4406af20ad3feb8573c05f97b802770e73d97e072bfd8bbb57964105bb90fe06eeff7bbd2a7c0cfee"}, @NL80211_BAND_2GHZ={0xff, 0x0, "d87f9eb5a2ba1fa04f53b01873789937d8a355031cbb2b94fc52ad940c81d0c80e105f82cd2bbd37304f7893d8ba4c912ccc94fe99f4addde331fdfeb12cf8f1ba690af7288de4ea3bc878f8b9d150967b31155aa7cc5427c0c3a696929e1bc8e50903cd47f9f3643b56cd258c8d9d407e76ff55ef96b722124c995d76f942aa5a55f8dda1f0e5cec621e90d63663094c03a4e697efc4e6dc6244d3a6d37e8f43502a772d5ee580660b7919acc19aff794fa7644e3781afffaf4c398bb9b6f541ffb1c9fcb54f26a61dd4b64bf2ea1616812d896577a0669a2201d63fdf56b27207f373083348b80e883815fc7b26957ab2c326cad9612ce5d9897"}, @NL80211_BAND_6GHZ={0x6, 0x3, 'rx'}, @NL80211_BAND_6GHZ={0x3a, 0x3, "c3bc65775a476983f08fdec591119c23d11473c6449783fee9f88c40d5142ccc11c9782d1b007c30396e82f7ed1413a4f2fbc32741d2"}, @NL80211_BAND_2GHZ={0xb8, 0x0, "5eb6bfbec4b121d8c5cbe140b9bdc8e87278292b8f15ac99275afc3420ec3bcd36f191cf560b19cf9fca4b185321268997727fdcb31e4c700aa0d0200928931c0159c84789e80145f5946b0af43bacf2c4bcbd06414e89a1c3a14514f9cf62a7d9879d98a7f52e70698dbd6b3c581c790befe24d018d8cc40ad1600400a5feb86748e86b31f299345483eae5a60bf5dd65e5690eb4be83039f27528ade16bb8dd0ee7f60669622676857796aa82f3e697393f736"}, @NL80211_BAND_6GHZ={0x5b, 0x3, "bcc0754849a6d9baa3c02226689452b8783ccb44bfdbb023e271bb0348b7c4661593d552573d3fea18250d2bb386d7e403483f53eb9614d3cd840916c3f4ad4270636ed14ff4b7c5d0c81d570b1fe051b33d90dff3f45c"}, @NL80211_BAND_6GHZ={0xfc, 0x3, "79c3c0a461df6f60830713c87ddba78825325f32a0892309f7f9caeee37dea189ba068d85b77d6ef5247cea2ce5546f607bc9bcc9cb508c288cade3df94588992e3de74ed514ec633ad7aef7867f3a075bf1591d762a54772ffb0048603e3d88cd8c3272c66f09a0166c702a391b26191a614b4fd704559595708a5b35048f689276fedd3fdd83ade6c334ac8bf7c221ea3434e78dd94895b7dc3db5a4aea0035a505c8c7b111a042cc279f3aec807cf930267ecb637b92cc2c0d9b59783bae10303a6d774586a1014cd1a84bfbd20c2765925ce286b6baad244a88d38437129a9f1fe05827f70d61f2294bb500668de755d04ed9c96db7e"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000d40)={'vcan0\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x804) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}}, 0x880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000fc0)=@nl, 0x80, &(0x7f0000001380)=[{&(0x7f0000001040)=""/105, 0x69}, {&(0x7f00000010c0)=""/190, 0xbe}, {&(0x7f0000001180)=""/179, 0xb3}, {&(0x7f0000001240)=""/41, 0x29}, {&(0x7f0000001280)=""/188, 0xbc}, {&(0x7f0000001340)=""/26, 0x1a}], 0x6, &(0x7f0000001400)=""/224, 0xe0}}, {{&(0x7f0000001500)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001580)=""/240, 0xf0}, {&(0x7f0000001680)=""/118, 0x76}, {&(0x7f0000001700)=""/253, 0xfd}, {&(0x7f0000001800)=""/16, 0x10}, {&(0x7f0000001840)=""/228, 0xe4}, {&(0x7f0000001940)=""/214, 0xd6}, {&(0x7f0000001a40)=""/231, 0xe7}, {&(0x7f0000001b40)=""/116, 0x74}], 0x8, &(0x7f0000001c40)=""/69, 0x45}, 0x1}, {{&(0x7f0000001cc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/112, 0x70}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/7, 0x7}, {&(0x7f0000001f40)=""/239, 0xef}, {&(0x7f0000002040)=""/55, 0x37}], 0x6, &(0x7f0000002100)=""/214, 0xd6}, 0x4}, {{&(0x7f0000002200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002280)=""/29, 0x1d}, {&(0x7f00000022c0)=""/37, 0x25}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x3, &(0x7f0000003340)=""/96, 0x60}, 0x6}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000033c0)=""/143, 0x8f}, {&(0x7f0000003480)=""/23, 0x17}, {&(0x7f00000034c0)=""/93, 0x5d}, {&(0x7f0000003540)=""/15, 0xf}], 0x4}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000035c0)=""/215, 0xd7}, {&(0x7f00000036c0)=""/6, 0x6}, {&(0x7f0000003700)=""/162, 0xa2}], 0x3, &(0x7f0000003800)=""/84, 0x54}, 0xfffffffb}, {{&(0x7f0000003880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/69, 0x45}, {&(0x7f0000003a40)=""/29, 0x1d}, {&(0x7f0000003a80)=""/196, 0xc4}], 0x4}, 0x200}], 0x7, 0x10041, &(0x7f0000003d80)={0x0, 0x3938700}) r10 = creat(&(0x7f0000003dc0)='./file0\x00', 0x140) fcntl$getownex(r10, 0x10, &(0x7f0000003e00)={0x0, 0x0}) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000003e40)={r11, 0x1}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003ec0)={0x8, &(0x7f0000003e80)=[{0xe5, 0x10, 0x0, 0x1}, {0x2000, 0x5, 0xf2, 0x1}, {0x8, 0x7, 0x81, 0x2000000}, {0x5, 0x7, 0x8c, 0x2}, {0x1, 0x0, 0xc0, 0x8}, {0x9, 0x7, 0x9, 0x800}, {0x1000, 0xc, 0x6, 0x4}, {0x5, 0x5, 0x9, 0x1f8}]}) writev(r12, &(0x7f0000005180)=[{&(0x7f0000003f00)="fc119142cbe653d958828c794026476da6494175eb21bccd65adccecce233449b2792b5f910c3a09b489ba1bf14afc504b51d7473d36a9f3779ed78ce4949da25f84b7d1de6795c4e5431d508fd30195a540a836b655bca95cc707408a9b05e9fdfe772223a62e328fa6adeb763ccce6efa75292a7151897d2f084b413bb9bc35471c7e92c343d537d0cdd04275cb4728f80ef31ae65f53ce79057e9d7977d31c643b3638ec88ef765ba9fa1510b304a3b869d06f4ff1df65084a0a530a55d567508af77147c19bbc020c0a24965da56d7e3a2cfbb8b73abda3bfd41ecb2268f2f64309b4b", 0xe5}, {&(0x7f0000004000)="acf055875609ad5af3e011d5a9c8d26cc2362125fe77", 0x16}, {&(0x7f0000004040)="f437ccb274f53d5a6e9df2ccad4fc63703a17ad0e246c03773fc9cea8faecd6054d8b1a8aebd93b53eb3f8a6704882b80639b32db26dfc29f0ffe64d0ab8b4855d974dff5af487b7c5be71939ebc7f7eb3c25fc2519e6a30d1b3a42ba36d23", 0x5f}, {&(0x7f00000040c0)="030aed2831ee5d484d1d6db65b592b232b5c94e820fd72c512cac0b2bf9754dcb6c0101745ccde9a2a7834b73beead074d22b629123153c5546cdff08833b86e7b19292dab288353feb26bc9a14485fa6d348ae5a09aa7ecf4e31a0ba215dea3359e3d899880cd6f23c2b2d66d80b38536764100aad7003e2988561cc9459e285a123999b950a9476c6b9dbc1b75772e95446213c515a3fb1b28d8a4be38d6e3f0892a6986100aa2b536a208fb7701469aff2438a12250eebe07ddb0ecb646c18f7df7100a0b9fb50dac08d34e86ef1e0032a66c284604722cb82a2bda0901e635f0d1aa8bde89b712132a8986ccb38e04cb4a55873b2f13b7913684b99110f68e46152bf6edbd4af4ca7211146c81b8cc24c6bb8ddfbb49177152b668d5858bb538969d9ca9b78db65dc710fd106e9c19ec69048ee3a36a7fbe15d716bfa57ee5b5b87a0f554fa354276d7495c8dcef25d1d5d38a732fc3de99b754c6a0bca71d1462bc754647936230b001fa4967704b4ab6d55c88048283df5e752ade489cb26ab4947eb7b40465853dc8ac4a34d0d6bf0776804aa7931f04e9cf835f29dabc5ed35a787fb4444c265922df44d5dcd7efa620b90bb1afd35a93f87e0326785b1718dff9c1e2f23824e23388cf59167c1bf1a3ea4609e1a1c0d29702b3b78a693196bc19189c8bc83566841eba1bd790fdc33e6dc1ffafb68a5eabe97b03804178c087aff6d821e064e1fcbcbd338ac6718cd5626ae9593483793f71684533617be25a70cc92b3ef87b9d56f6f0e38b867a593c78da99edac1157c955ba7bc9b74e1f1bb54a214fe1e7b9556ca820541375322abe108f4cef89591b4d8a9dffa13f906c1e8bc7ce14c4f13aef2c4e704b2fd83bae80b5a5e22e370984f251e315c61fca23a232efab7969963d8e596bf6894c6c6d17d08704576c5fc65b8afe900edb39e039ea6468acd8b13095a970f474474f4206ba9286732fb38bee80a7b15793fa0877ad4718530017931885cef9c18c3b7fa000c7b8e40ab7826f8b328b6b4abf3948e754c3f7dee0d7ae14dcfcc445bd2bc14b7b3a1da24bcf59e0c60ba664a4e7764b5e558935a23eac29e7f65b161a9ffe59728be15cdb3037ec308be8197e1021ff6053d56c8c66087466607e70aa1743ebf6c19b293df715643298a1131715144bcb1054a9c4849eaac88e5c9692cea6859a634a2342667c1104b56634a0f682bfcbe4109a9fe35917603c1ce86e67c31d3ed3303b8e8337d79209b4f992d7276c2b82532e18007eb3f0a9b60f0e046a5a2ed108fad590956cb4b77e2a31b1675d130deb90b8ed854dd81bed37727cdc77d3ffedf942bcfb177ab7204b9bb3cb4cedad8692d459f2f335532ebd6c8a509fdb3d0fb5be0c2ce3ac6a331967a6cfe6692b857ecf5acf6cf73302d34f59b27ad79350e004d37559eaca326bddb870060de0dc3ba6992d276fc07db1f55ff26370f7951115e49631db59845ab238cf21ebb0bf19e9d0c19fbdefa626bddeae4c1b7d8d5597b7eebf177fcc400233d0007f5d29ed14efa48e641ecc87ef27100fb4610b134174bc92b25496d7960050c48be88305ff159f28882d82cc5b4f8c1608038807b124369f2f1e61b3e52782f215aa7097228f66b36e0c62e1727d6105184cda1c83c28c386b3ec8c1c44825aa3c068a5e578db0e98039e998e84240a43cac56f6ee438b74ff07ac59460e34aa8c98f118d86efb7b529a8f5bea2c69612f0bd48027c6bbe608fb62e8d11ebd404b54a695f33c6588ea25b69f868f8756fab087e5351ae5ce0cf60e4cc3894416e3846c02209a7ce64e6f0171bdd463028c81108fb79519d4d8b76467ca7d0d398bd407aca43e7a652b9cd5bfda524986eacfbb66ac496c041b192a555ff6c5f300134c6e3d35dccbbbebb5896bd37f5b4a9cff65bc6ec07a8a1a73717f65726e653d96bd41ed9e94991d6ab1679469c3506d355e4626f1cfb46036f0dc8d4efc79ed70047dc9989cffad9f1bcb391389b3a0d3ae8e37e3a95c0f2f79f686c92c256cf6ae91127d44c6b7d55b907acdb01d7639ccc4c39ec5aee66e8a8f6b021c985d46f6ea475afbb10bf00ab1091b638dccc48f9c00368d7507942233018894e37239ec90967aac8fbefa70ed3b68dc11544f7c2688a91a30585fe850eddc9a54d65130d2ba68cdd9ea2d80b9a0011816c17daecf2bb1f79d7eaaad25791140a01313e4d9ba884f280764c0e21b1cd8768b89b5a8c11216df5ea64d669a38a2a2703e8ac17bb653372dfc79bf1271ad9661034141a28fc785ee478331ebd98d4c16c8a5fed996203af7cc78c161c8e355fa5ebc91e81f69fe1d681cea36c645740f871f3f07b6afbf5a86f4df8ac96a69f74307cc5c78b00ccbfda14fab3992d6dd9de89e32c647b818971ea106967d9d207038235db52fa95d9f7b6bf13f59a8908c28e253ec16e321b2c9da1b811a101054f81b10d68a1a12bfd532440b211dfe53f70f02c3a499e7f9169f941690e1cd9ecdbf2cdee5eb5880bec912e594e2aba2a709e772295429f1483a91821946bbdd4f845e3f57d58633738eee4a8da117da461dbaa704922cda84c99eea305c74a33bab9590814a8af045df9f5b583d1d117cf21e59fc4c85fe2cccede133633a5573a5b749b359356ab002f3395521f27323ebbe88de2687500567a4ee660e5ca6803b18ae7ee7af5f86e5ceab44c76d9702eb0c5d4b06d3dd426f33cda1053f763368ab1bd1c8e9bfe6fb957dd97da665704da928249bc2456974cef6842fd6434a575ead40623b8a06741364fbbb23ddc215b1f25e4d040ef71fc5c48fc6edfec24fd42390872a129f4719080b078024d2c1a3adc637a93e8b0e55cdbed1e1ace22ee2bc1fa3b951efad68c03c0dd86c2fd02c7195adc0b4112986d3031b1c68676a98bd111fb2b480a34cbe1a669da2b786ef49f053c590f48c9a51d85a7597765644482c1c364f0d965233ddb2966143d226322040450bed71487b7cac7c994805ab289a54ac7e4f0a99884609b47b383e1e8523ad86c61450041b40169fa1324f9db6264cc134858e88f59e891231804ab357c6765c6041a1f2a711c041234fd40d232c99ad1143dca7d6702143ca47bf2efe52ffc5537f096d33044a70f7a712cd60ae12e34587455e4c429af87c3223ed8ee8483ea45b784d06caf609e07faa352bf07ba520f92dd60b389f5e0d3dda0683e2fb1e1ef21a108371f24a97e13f3a53ba82255a7e2647e8949c6fda3b14e53a74384ad7f2f633d65d6c7e008f8d955c1ae33d3c100268e07b93a7454acb56bfa032c27c9e9c3466ce3acb95bdd85d79641313aac33887cb7fd6be6ca67919e8d204054ceea1bcf3159b41542060a10c2d78c0f3c4f066dd5e185f13932f77c47cb445e4b8d09cb2df01e703ff866d665aa9e0fa4502aa91bc57f0e5befcf6a2484317560e1468b942132c5ded15eb44a25166924fd0fd5ad42ee1ce155e2e096fb287d9de31bddb39aa86c76ffef8e247885a75666232c26506bd94e365abab873562e8bd2c23b44a9f3188b74ac25c6687a7b59a2a1381ce389d0cdb7bf77022c448f7902cfb871078058165d8f5d84cccab050a8787e9f12867cad58a576eef7cd78edf3d2cdc087adfba2199b235acafc2414c166b3f91814a4026418fe3991ee2244bd5d6f8b7599279852efef746ca5551c3b7a43f7e5e5f9e57617623a10d41aea918f646ad6173909b9935399c9b55f4ea4761f8f0ee0771344cd236a9ee2ce22d5bc369f87a80c68e3bdc98e43f78c698058eb7196ca4ae8aded05dca203ad586ef6472ec21ff673c033512ce8e8224fc5048367be874602013481b84e75d4413885c7a0750c829d3b086b86e1c30d6e477ba03e4fe15bef57e741c8fce4e7ed56a7d72e904a7ffe4811bc1f85879e8673621c23d6cd0b1c37aa298d2c2f7e9678cc125521f5bdcd0e89f2419cfe59cc437f36ba854325d3094c748c802101a0e77ca9c2462100edd92faf571d2c25ec42d896f6700f711de1f18aa8ddb442dc9891d36259b71b9ea5b7d705f4e4fdb5221d11f980556c0439ba2d1e254d9477bd43b1631b8e640cd91c520b5c667bfc4f1019ae30d3bbeb580c3a971d76358fb2e2dcf557eee970ec998ed29d72a3cf4963c4f0d9fbfdb81d4fb7ccbb6bc0762dc7c5ce1e5026276d8583470edcb0e0e1eaae459aa9e95e055ec1716d3cb70c6a9436dd1bd3c94d0c11f658455eb12448a65ba8256745b595b85037ca400f9a7713a9905dbf2054562e4deb670c893818ffc39dad9ea56fcdb2364050fae780cdfff73d569cacdc7bebf54fa396547ca64e7a55433dd713afee20ee6a199b3ce82133d062f1ba24c39771ed12287868c313a3fa2e2070364794e823ae4bb7f8af7e1d40ea889ae6ca06b8f323590ee47dd1adb6eb2a84d25e1db9034a835dff84da8f1879d96cca94963ff9e9d59e3df03be2c4e9983bbdb14f0b49d8d5536fcf1cd0a05c2c75d4877c670493428af6f666dbf509fbf04e88ead320c1c0b6612cb9ee3a8a01944fa80dc324721187fcf070beaab417359d3fd0bf941b28c742704555845cd4b2a2f158f88a26cd8b5c82892444be93e70e1a307c953b138186e07f45e25132cf29735e46942e57a98ff36384405ba8a8ce415b0af0ef1464f72f602e86bca41266a21edf1e29724aac855066b5c49d9ead11fca443c478d78c026deeef61c6db121c1b7402b17788e3b8885f83b1bde1120c04606ed1fa16ce109a413344ad1fb84803b36daa4dd22a5bcba1f40df6a4d190f393e522a2ef86b18f27cfaca9f7925c515f5601a34fa17fba95145c9ead75160823c01bea7585b999fe29e5ea8515ec61a72875fec19648661340afcd4956c6112444b9d61e2387cac835ac259a96055ff0c705bf76d97f3db26f90f606cd0ad62be8720688453fa2d4da3918240eba92db1cfb9725175289f3855718bf0aaf2bef16005b5d3e3e5f7f7b33a803d3a8a9031907dfe2cbeaa56f1fdd4eebed782a2b02ffefcdd656b932a29081cf1654c5a219cc9ff445e2dda5c930a50317c464904c5be07eb441bb2e82898eeaabbe0855eaa2769c20325d161456a77b70cb6c523f42c112fff66118bd43d21237405af0c77a5b332eced337efd1ea1ced6b7e44046891cd9f2a5208f890bad31fbd8542377b761e95d52be56b0d83bca7817d3fc9709ddf38c2b28bf70616c3700d88f536e9935338995d942c495520cda9d48455732df7701465a6fec94ab3145d7f04479dc7ba9cf53581b35f30f8f8b3be633a4a62bffbb30e552b48fcc19a6349cf14bd104378812166bd7274d6d65ec5dcb4f14e06f433232a50b2cded4687163083598b5253a41a54887724f68bbe7bcac4d9be410f84d9dff920729d93fa3b4f9d1387ebbd471563e6bac61f0fe6135abe4194e1658b3762029de248f570bdeeb71ae73c013e6500ec15709c05dc3a9d90fd23fd7d9f783f674726d0eece12018096ec5006627ba17465eba153934b4bdfdbdf52628ffd5af494e350bf0c4a9d6d76b23e53f09107cd952f67e51c62c907af53032002c41b4631e896d9c2f57ff141f88197c022363db5e829d0746df6c730ff6263d3db90d8da690e69d15c422fa24558523cb659b4f46d1c4407f16427e98d4e6c2b1c042d5d57c35449121565dd9a033eb64823b2caf572d7a2860aebff3396fd127f4b4ba8f88ac23705ee52b2b3e44e5a4764da1dfc24b358ab5aea5978aed91e6c4f00ae11bafbebae42cf84", 0x1000}, {&(0x7f00000050c0)="4c36486ff0263fa8692624c1a49bcc2a601bef9dffded5d9a1c130555566ab33ef7fbdb91a5cedf82060d3ee1377257b60bde13494184344afe054a470e0eee8220e981db532134919fa14007064c2a7bf941e31f63501f5193664187fd024344034c68a9997fa15239c97f84df5677f0f1e13905c80db26ed714c6b7d4b73367e18d972edad5861451435c2b253f878f9d9df790fc71f692b65357122642e31370acb61c3f65679e81560aac070e582a444aee96ec78dd9ca4a28e09e082223", 0xc0}], 0x5) r13 = accept(r9, &(0x7f0000005200)=@in={0x2, 0x0, @multicast1}, &(0x7f0000005280)=0x80) sendto$inet_nvme_pdu(r13, &(0x7f00000052c0)=@icreq={{0x0, 0x12, 0x80, 0x8}, 0x0, 0x0, 0x1, 0x31}, 0x80, 0x0, 0x0, 0x0) r14 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000005340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r14, &(0x7f0000005400)={0x14, &(0x7f0000005380)={0x40, 0x3, 0x39, {0x39, 0x3, "8707a3740e51e32c7965cbca96b54658598ba401c07aa52e62b1ef72c10108b98f53c50e85689827875b220abc237bd8f71544e70974f4"}}, &(0x7f00000053c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, &(0x7f00000055c0)={0x34, &(0x7f0000005440)={0x8637da6d58171c06, 0xc, 0x6, "8af7a6e50f0b"}, &(0x7f0000005480)={0x0, 0xa, 0x1}, &(0x7f00000054c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000005500)={0xc0, 0xa1, 0x4, 0x832}, &(0x7f0000005540)={0x40, 0xa0, 0x4, 0x80000000}, &(0x7f0000005580)={0xc0, 0xa2, 0x2f, "4464b11bb2b47644105074c7bd2f92fe5f4514b662c48583d75dfec3d513ac124419d6aca93c9452d833a12925e8b3"}}) 1.703928877s ago: executing program 1 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x181, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16f, 0x2, 0x1, 0x9, 0x1b0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0xef58, 0x3, 0x101, 0x70}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x7f, 0x8f, 0x6, 0xf1c7, 0xaf}, @mdlm={0x15, 0x24, 0x12, 0xfc44}, @mdlm_detail={0xf2, 0x24, 0x13, 0x4, "35f783dd04c283c020f8506ca88edf488568d72669b8772a7643f15429d31db89ed3ee39efd7a06ef8844d2eae83fe9c1ab78a67b462980661f5c842f8484c5fc5c7b814232239f571afdfe8074d6a97e62e122d38e8d81241742edcc70b0f7fc0bbe1183ad229ecdaa322d8d0ff91e530b6a1f30c39be0b3cff81de48f433a0222806bd84a7d01c9128b234ff43c3cbb946122b41256d12d36c4548f51f3b344f8216eb9b61d59b65d7403cda3e6316ba01f7ea4373422a81b41a40d0ba887ae88b380959e37a068adacc08b1ad17a275bf76171c236b36cdf0d4e682ea52fd581d0bcc0488bef79723d41a376f"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0xb, 0x4}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x2, 0xc20, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xad, 0xa0, 0xe5, 0x40, 0x11ad, 0x1, 0x95bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0e, 0x4, 0xff, 0xf, 0x20, 0x5e, "", [{{0x9, 0x4, 0x9e, 0x2, 0x0, 0xf6, 0x20, 0x20}}, {{0x9, 0x4, 0xd1, 0x9, 0x5, 0x3, 0x8a, 0x2, 0x6, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x8, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x3, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}, @generic={0x90, 0xe, "e530be21b30451f866f58bb3d057e6634d9e78426eeb04b3afa69e84947ac4d8a74ba81c3e7510316372e61332ab0a439d83243bc3dcd77225d88bb547714c36ac5bdcf508cce38f3285fc7a3651308e6e47acf424ef1f358201a163404a2682299eb681e00e3e4a12b9e8dd51a54315575bb339d6059e3c4fed62cc4f858f7d1d18962c97c01339602b4491e5b0"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0xd, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0xa4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x420, 0x0, 0x3, 0x4}}]}}, {{0x9, 0x4, 0x86, 0x3, 0xd, 0x1a, 0x75, 0x9e, 0x3, [], [{{0x9, 0x5, 0x6, 0x8, 0x40, 0x6, 0x9, 0x2, [@generic={0x28, 0x3, "91a25a15a6e556f577c48aafae666130efaade6a2081d583a69bb9c2477757dd68486772c1d7"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xfa, 0x8, 0xf, [@generic={0xaf, 0x4, "3b6c2c24d3e5b7a282e89b29e59ab455b7ab5d35467c005360e9bbd4c7dea9bb6b33675ddba71a30ae454b95ab5614a2c059fb61ad4834b315c7d6d5f30af53acc5003a7967c19985185c42ab5deb9f706b911fa9ce6406242484b9ac7f23a4cc440c2a9c858d71286a2ac8853334b048a380f76bba5f1f4f036a327a335aaedbfa80799a8f312bcc018e36cf9c9438723d10967d3335c059e123d9695a7c675e2a30c5095f2c5ecfaec72b759"}, @generic={0x8, 0x10, "ef07f5832ee2"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xf, 0x2, 0x8, [@generic={0xa4, 0x23, "7ba8d6ce3ef225922e9ffdb48908a8a0db6b1bc9478921d6ede2a16c5ab67fe686748c773b0bf2f44695ace53bf90936ac34b46144b8da1b5703d92e44771eed6797e5e9305aaf7ccd31e1ce3067c8eccec8f1ed3409c11cf140b3d7e302168b6453edd313e33effed77c96c228a0fca0f93761b3d6674e601a9166e9d5a564c9ecd3167e4568c819717ca25353b9631ae8b084690aab24a43a657ad8c9c5614d6a0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xf6, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x69f1b0fb8bfa4ea, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xe4, 0x5, 0x5}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0xa, 0x3, 0x80}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x3, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8000}, @generic={0x68, 0xe, "643aaf9efe9f92f18bef75cbcfe04c5cf2316817341c703463563053e968dc8a767cdfe4b64fc13a8c127ae6781c12b2d57dc96735309d3a95596c0c4bffa340114c2b888392b19882f50ba155788f9c2ad38dd4f70085fafd193fed19be70a46b51cc7bf2eb"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x470, 0x1, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9d9}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x80, 0x1, 0x8, [@generic={0xef, 0xf, "8c30ec54e6d96669bfddb09ea5e7bc384eb810e0c1edfe13c4ee5729cffc03d100d6db28af16bc788f2236ac7589a9b658c0c85e94a9d1394c7f3061fdfb5c16a0047f60a5588c0a6a8a896b0ad6856b1da19d1e3e82855f0715e9a679dc03319b6fb3af65ab4d69c28523a977b97298ef73f0571da4cac35f131b6c9643cc06a1c0ad445c1a2da42f61b2d629b6705ca3863fa9e94ca7a0beb5c631ecc2e9e808de06f3796588420d2fc9cfa559c356bda3690db574f538fe29efa34a062efb5befc6ae841d8235348ef834cab510d6fbc609d850764fcf6f8438f5042a3db0bf8fb0d25cc8b7b7329048fa8a"}, @generic={0xbe, 0x24, "a24c0eb22eb72dbdffda0893597e1e974136002dd59a68d54318dabb731f1ea5fe3137e03cd6f5ad9e22623a3e25b5fb761312de05377f60da23dadb9fb0c023b76762ffc6282f9f3dda662530f676329d177679e4e2b3d63bff6931ec838594b212cba8ca98dc807caf5cd8f112f52a8d5979cabe2c8dc10600d104483dac7cd645ec718b283e0c5afc68b006597e380feeb581ba4ab156f6ae33a1815379a896cacca2cef4a361192c3b2b83d39b9c1ab4bfd5db26fa9443f33dd2"}]}}, {{0x9, 0x5, 0x3f8f36bb14aea76e, 0x0, 0x200, 0x9, 0xe, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x5757}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x57, 0x9, 0xd, [@generic={0x18, 0xb, "7daf6d0aecdd56eb4a9f056a01afd2a9cc7cef3b216e"}, @generic={0xaa, 0x5, "314f3d1d4eff5fc4b1adf8bca256ccc8b119e33d10c6ccf9b941dcd25fb02e16bb8b991e406a5ffb1bd1a859683ec43cb5fd14e9d1d4e228a11d6722e8fc89c4d800a8e071edc3384ed40ea7389dc8b61155297964ee270a483b34b21b48acb20c4f3821e2f9d235a034562c3aff79e7844adcc9a1111d217abbd4bf819fd698758eac8520203db85f08f21c0768bdce51c21dbf31d3c1adf69e71899a5e6e05a914fbf49fef22ed"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x45, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbe, 0x4}, @generic={0xc6, 0x22, "d638b3bfa4224279b2fb443d01013e83f90eb03de36d738688bd803bacc57083940a953e5f92387d4e4b03d92635ddf6457e32890a275174a8ffa2abd364dcafea5f56a6d14473615ba70703f9e617773b35f347f077ffb93ce6689133fc0e7e4e16dde69eef3b3a9ecd4af63b7f239fa148d6ad9fb3a058a095a52b9a4e9b37d7d7dba31c368620f0968c3e81c21f1665f283ac1b3e3bbba676abe40049ffef08ba7c28435d3cefbecc9f779a447a014c42a6d6697ad7ea329df782a4d1941b5a14c3ba"}]}}]}}, {{0x9, 0x4, 0xb2, 0x3, 0xc, 0x55, 0x31, 0x71, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0xa}}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x7, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x4}, @generic={0xfb, 0x11, "e1ba1ed3a2579dac0fdc26faec7dd58172cd8c48bac87e14b0ce71f00fe1c92d8be0845e733579b68728ff6a291038d28cf9980ccf53118277fbc5cfe11824e029fbcc586597cb5d7b081df98448ea891673d4b284ab5b71684265f46e266cc329c3be7d7d9b14e94fc6b08f6a6b2b75c03b4d43e9cb18a89b1307fcdcd1ee58005956d8930a3d8da3a08cbcff7497e6bc9045805e957fc794083f37b55c7c260672c7b6a8a3682dccf7312658460ec3a1f54195026763fdd6067ed7115a48d7f5d54656b379ccb822cad410617b2d6565742bea982a7303e7a3616c706c7748407d27210f43806188e608be3f10891e25dbd3623f581f9f5d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xe, 0x4, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7b19}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x5, 0x3, 0x2, [@generic={0xbb, 0x4, "3cfefae6cd5374d5f007a46a21a526d267f4af2944647084ed00301e7e8e2642c8e8ba777899618321e01197db241d2f4d5079eefaac2cbbb542f49ce44a71d03061cf3eedc08a2c97d5d0b4bbdbf9b6376e99628e98a5c3c426f27f0bb395216292e5db0e9730c1b9a108acd483a632776afbdd7d207094f1eb50a494c5e60a96816bc4f2a4f6ed0aae8f658693bfa0a72c13eef4257d7021fe4c3addb12966fa2fce55be9c7618dd40a461453438294fb090a0dd2138a09d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xe, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}, @generic={0x61, 0x10, "ba897e1e0c7242597ff867df72d24bcc937ee0373598bd127f6cb35a9c2e9e6f1c5438929536b330213b09c8c3e3ba67b7b7477df8505200ba467011a631d632628893a1f3ff487131a2eac604925380a070a40144f5191aeae6b2c2720ed8"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xf0, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x8, 0x3, [@generic={0x5, 0x7, "245482"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xb, 0x18, 0x9}}, {{0x9, 0x5, 0x81, 0x0, 0x200, 0x7, 0xb, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x1, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9b, 0x1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x3, 0x5, 0x5, [@generic={0xf7, 0xb2d83ecd6544a680, "02238ff78ed06cfd0be84605803f78dffcfa9d6925c8dd0bced37d54bca7638fae4694ca5d3eb6f2b3474e6c56e9de65bc2a523e31ff677c02e49686e1b2067fa04c060837cdc7303a1392e301077bc0ec1988ec12fe0ff783b47f7405a6e6b769d7690e8e48cc5e9630ce358caa326fc33ae3ee8ae046524bec533780b560e4d326ea06566d74db89a90f9b1244094d042139661c1a14835cf2f6f8fc1c2b9035ec385efedfee48dcfe7666236b7b43b1b6642019e5e239436fc83e24b3e450a96a876ac549675325f5336a9a0614eaf4326ca081f9967e43a5a632d3d61f2d87d92fa09ce702d5fa06a05884d1b3ec07000d4064"}, @generic={0x79, 0x24, "12d65636d333d196fc7453a7687ec7d73fea798c6adb473e0bc9bd4f0ca38d7591e6a9b62f5c26fcc7bcdc544004203e83acf5e22ee6046f5f83ab0bcd31351f185bed3db0718b3552cece59a51658ac2ec829de795c484ff210c8bdc81b37fa5ee2954dbe632cacee7f92fbe9767aabd9a0ea5798505e"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x9, 0x9, 0x6, [@generic={0x101, 0xd, "f688929c7fe6117781cd455fb4cfe0265f07f47a7c6f1f9417a9a0e6bb4451e09dab4d987ca3a52406973ab9b2a7cc88a1798cfc582197650dee74e344b53bd8e2946b4adbfdcf2ef57ff909527cdb06d8e59bc4a124c46ecb05c9591f40ff80ccaa9ad33ee09d6d6aea45c9bbd3cc5b0b63d86b964bab7028a93b2cabfeb964330559a1bf39854fe65e1e413e61b5fa360724bfeb26d0ddfc1ecd4d251c5f7f69feb35ef662593fe06fa4b398afc0a0039f1ecfe96e46b0bf03ba0edb695345062be5738d7f4200cb4c6e70eb19bcef1cb104cd9b76733ede8feb2789f589f94d65783d33220f684f31eb63ae9d09a17efa2b31efe0682a8cb1448be206c4"}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x210, 0x1, 0x5, 0x81, 0x10, 0x52}, 0x12, &(0x7f0000001080)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9d, 0xdb, 0x9}, @ptm_cap={0x3}]}, 0x2, [{0x8a, &(0x7f00000010c0)=@string={0x8a, 0x3, "e01f204f66e3a0b6069f7a2b178f4930fb1a9331a5f1f5650d892938c33bc64e6f4418cabec238f8343edcae5692c245fd64d64d6dea0d1e347a709f0be3c8154547e07ce4188190aa9f96129e84fb459ce692368ca4d7dea7ec6ea9ad4acc6abb8c3527b6aff6e3793f285592432c5c1cf40dec122350b1664e8e6a997cb7ce054b7e18efd20d20"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x2000}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.545724083s ago: executing program 2 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x8, 0x458b) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x16}, @val={0x0, 0x3, 0x8, 0x3, 0x8, 0x1}, @ipv4=@tcp={{0x12, 0x4, 0x3, 0x7, 0xdb, 0x67, 0x0, 0x80, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@rr={0x7, 0x7, 0xab, [@multicast1]}, @ssrr={0x89, 0x2b, 0x44, [@dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @local, @multicast2]}, @end, @noop]}}, {{0x4e24, 0x4e24, r1, r2, 0x0, 0x0, 0x1a, 0x30, 0xfc6, 0x0, 0x4, {[@window={0x3, 0x3, 0x3e}, @mss={0x2, 0x4, 0x7}, @timestamp={0x8, 0xa, 0x5, 0xff}, @window={0x3, 0x3}, @md5sig={0x13, 0x12, "f642f88e99f9c1fbcd18877a45093a2b"}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0xa, @broadcast, 0x1, "d8e528747e3e25a4"}, @exp_fastopen={0xfe, 0xe, 0xf989, "6c1534a077f62cb3b95e"}, @timestamp={0x8, 0xa, 0x81, 0x1000}, @nop]}}, {"19ea90026c60ff82053c596165f8b307a635e28d2f0f396bd220635fc413b91972e120ee68b6a81fb1f96c"}}}}, 0xe9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 1.264196942s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)={0xa0, 0x32, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x8d, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b"]}]}, 0xa0}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="1a816e725da15d021b3c01dd04841a801a811d7123e67800a44f5391535cf0e74fba2fa73ced207027cde855a4a9dc2cd57c578e088b4372f7fc3157ce6e8cf64c62fccc3bb7a8fad5bb21c5c7143bc5ea485f2493a5f424c53a49ffc92b997138809cc82e55d24f91834d4d82b576f380d689ec12dfcc", 0x77}, {&(0x7f0000000940)="4132efc42157c14e017dd43eea5724ee3b5ab28001aca51a4fa7300415f443450559adfb429f17b6b7a673385cfc99a67f7bd34a6f80441ce7bfcc7094629c91adedbed24827d11c9648c4601486f02581e2e63eec7cf51e5d", 0x59}, {&(0x7f00000009c0)="a01ab28b3f081beaa71745636881dc5cf74cd3d0875fcdb12782bcdcbc151513b0d86e386bb59615d932020486fe32488d5907564eedf269bd05863aa41fa7a516", 0x1f}], 0x3}}, {{&(0x7f0000002040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000002100)=[{&(0x7f0000002080)="cc3b87cabcda59efa4c865750cb3b48760c8d4e02347c0d40e58616a10cda289ec71e1858b06dbe30a4f94e212bc37e606cb5b8c2312a2da23d801af0666c33b6b872c281e9d8232b8f1a79af84e", 0x4e}], 0x1, &(0x7f0000002140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x87}}], 0x30}}, {{&(0x7f0000002180)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002300)=[{&(0x7f00000021c0)="0af8833e20afecce6828f0d68fd200dd43637439c961c78977c8cb7d469340aedf8771a70ad948cff7df", 0x2a}, {&(0x7f0000002200)="f965bdb1183cac2cd428b88ea9234d5ccb07b037a9965e7b6d2b79c24d46b86fd3052753d85a7fb8d51ae423e902140a5c6649697e236a", 0x37}, {&(0x7f0000002240)="c0150a1cdd7b89a756f43951cf54eff3b54ff676a43290f39f4dbf4e61eb40a5381bef386a881d1d6c6690820d7812cc16c8", 0x32}, {&(0x7f0000002280)="969b9526e5ada1afaf41da6a8244155ae3ec03414ccc1105fd2ed18503180739aa684355b25e10345cf238b361fb60daaec8abdaa0f2401ebe2121c5b1b166102f369a0055985b2feddef9e5b6fb653aead0ca7300e26d1aca4fc32791cc79cee1baecd99e70834841", 0x69}], 0x4, &(0x7f0000002340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x40, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010102, @loopback]}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x8001}, {@empty, 0x3}, {@local, 0x8}, {@local, 0x8}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x100}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x4, [{@multicast1, 0x9}]}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x6, [0xad2]}, @cipso={0x86, 0x2d, 0x0, [{0x1, 0xc, "c13cab356c81b73f93da"}, {0x0, 0x7, "51b08bfc71"}, {0x5, 0x8, "44adfeb17461"}, {0x5, 0xc, "149c7a75c170f8429237"}]}, @lsrr={0x83, 0x7, 0x45, [@broadcast]}, @timestamp_prespec={0x44, 0x54, 0x39, 0x3, 0x1, [{@empty, 0x3}, {@remote, 0x6}, {@remote, 0x7}, {@multicast1, 0x10001}, {@multicast2, 0x3}, {@multicast1, 0x3}, {@multicast1, 0x8}, {@remote, 0x5}, {@multicast2, 0x9}, {@remote, 0x3}]}, @rr={0x7, 0x7, 0x39, [@loopback]}, @timestamp={0x44, 0x10, 0xff, 0x0, 0xa, [0x81, 0x7, 0x7fffffff]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1b, 0x17, [@loopback, @private=0xa010101, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0x2f, [@private=0xa010100, @private=0xa010101, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x218}}], 0x3, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000a80)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000b00)=[{&(0x7f0000000b80)=""/100, 0x365}, {&(0x7f0000000c00)=""/85, 0x7c}, {&(0x7f0000000c80)=""/4096, 0x197}, {&(0x7f0000001c80)=""/106, 0x645}, {&(0x7f0000001d00)=""/73, 0x1b}, {&(0x7f0000001d80)=""/77, 0x14}, {&(0x7f0000001e00)=""/154, 0x21}, {&(0x7f0000001ec0)=""/17, 0x1d8}], 0x21, &(0x7f0000001f00)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000001fc0)={0x77359400}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', &(0x7f0000002000)={0x4000, 0xa, 0x4}, 0x18) mount(&(0x7f0000000380)=@sg0, &(0x7f0000002640)='./mnt\x00', &(0x7f0000002680)='anon_inodefs\x00', 0x10020c2, &(0x7f00000026c0)='/dev/nbd') mkdirat(r1, &(0x7f00000001c0)='./dev\x00', 0x1fd) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @local, 0xff000000, 0x0, 0x5, 0x3, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x5, 0x8, 0x9, 0xd, 0x6140, '\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x1a1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mount(&(0x7f0000002700)=@sr0, &(0x7f0000002740)='./bus\x00', &(0x7f0000002780)='binfmt_misc\x00', 0x860000, 0x0) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='openpromfs\x00', 0x298490, 0x0) chdir(&(0x7f0000000440)='./mnt\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 1.196016539s ago: executing program 0 (id=16): ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0xfcc9, 0x1c, [{0x3}, {0xc}, {0x3, 0x1}, {0x6}, {0xd}, {0xe}, {0x7}, {0xd}, {0xc, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7}, {0xd, 0x1}, {0xd, 0x1}, {0xe, 0x1}, {0x6, 0x1}, {0x9, 0x1}, {}, {0x9}, {0x5, 0x1}, {0x7}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0xa, 0x1}, {0x5, 0x1}]}) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xa845, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x3}) (async) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0xfff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x1b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x110}, 0x4044805) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000240)={0x4, 0x10000}) (async) r3 = syz_io_uring_setup(0x7971, &(0x7f0000000280)={0x0, 0xe949, 0x80, 0x1, 0x17b}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(0x0, 0x470, 0x4, 0x4000933, r3, 0x0) (async, rerun: 32) ioctl$USBDEVFS_RESET(r0, 0x5514) (async, rerun: 32) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7800, 0x8706, 0x1, 0x281f, {{0x2a, 0x4, 0x2, 0x6, 0xa8, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xab, 0x3, 0x4, [{@remote, 0xffffef0a}, {@multicast2, 0x6799}]}, @cipso={0x86, 0x22, 0xaa6a0e54ecf6b2d3, [{0x5, 0xe, "8000c5307508d8e42f3aa2e4"}, {0x7, 0xe, "c301342569bf5f3f969ded7f"}]}, @rr={0x7, 0xf, 0x4a, [@multicast1, @local, @multicast1]}, @rr={0x7, 0x13, 0x5, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x0, [{@private=0xa010102, 0x9}, {@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x100}, {@remote, 0x101}, {@broadcast, 0xb19a}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xc8}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r5, 0x22a, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_TID={0xc}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x494}, 0x24000000) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000680)=0x4) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="2209d078a1f4adf552038b6159df019ecc0d422ff393c3cbb54a67827dd9fc8879a61e4b32bf12e3bd8827dfc98659fd5ee36bf4368a9df292ca69e8751827d3f272844180993b2a7f609aac4e6b8fb23704890250e253ece74c4545684f2deda3c35f0b1e20efddb56c0364f7", 0x6d}], 0x1}, 0x40004) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000800), &(0x7f0000000840), 0x2, 0x0) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000880)=0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@remote, @in=@multicast1, 0x7147, 0x9, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x2f, r6, r7}, {0x5, 0x800, 0x5, 0x6, 0x0, 0x550, 0xffffffffffffff31, 0xd}, {0xffff, 0x10000, 0x7, 0x6}, 0x3ff, 0x6e6bb6, 0x1, 0x0, 0x2, 0x2}, {{@in=@multicast1, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x3504, 0x2, 0x0, 0x3, 0x191, 0x2, 0x200}}, 0xe8) r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000009c0), 0x80800, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x7fffffff) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a00)=0x7f) (async) vmsplice(r8, &(0x7f0000000c40)=[{&(0x7f0000000a40)="fb2194d8fe133f46627eedf25ee38ce4baef6c9203b426fcdffde145b73e659507e5f2e90c76723019c8fe7dd5d842c0dc02b1ea8b57b3d43fb99b34fc3ef683232b0e9220a50cac0372e5c498c0ed9488", 0x51}, {&(0x7f0000000ac0)="bc7fca348481d9", 0x7}, {&(0x7f0000000b00)="5a12a75370c50f261d4efdb7df135890d8759b2c6f76b16f2be9925edd27db813c403c60b9f00f61559eef880150076aaadc758521219c4b4c9c16bd433dd362919ce63cfb38111f5dd0f4761272ac52e2c119f2b6a81a514e1d79ce2fb42409057d39927a6d7be74635df", 0x6b}, {&(0x7f0000000b80)="a53540634b2a656a67bc8759dab76bb27fc5db0f37af14727838729a036a7c93217ff14eb79c926e3fc67eb492010e626f2855aeeca12450ae0d3efbe093030f240df4c648495c98662c0453cd26f558ac6347e7031a5a955ef1702367b1f544376270801adf1506484eafb9cf2d0754f645a2f7ce74b82f16db438e81ab1a40fe84a0e015c5096f0b1062f9e8a0f199413e1cefdfadb296451d85216fdb1cca", 0xa0}], 0x4, 0xc) (async) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000c80)={0x2, 0xe3, "43e962fa72376f25c19882189fabcc2987d4b34d4f51372dc2c24df0e03e93a69bad997ba94c1b829a512248a38bcef902dca4ae3653d2735dec915b9759f53aa7c8292b357705738909288e2509be441a2cebd927748d6c7e2f6a6660b8d085a2245cf1a11849c936378323b0f1e15495ef14deea1104d66d35be529e852933939575ef7d39fe3cd5fbac1c5b0e4a0ae65f3911d25cff2b2782b5da0bf83dba52068a234c90d598c7a4c3eb9bda0a40a6bae474ef1530066c6cdbe20499a213111c032e75d69c02aa9e07834b57c478d692507dce22d7df4c40b54a6b1a651e5121d4"}) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000d80)={0xffffffffffffffff}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@broadcast, @in=@initdev}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000f00)=0xe8) (async) write$UHID_CREATE2(r9, &(0x7f0000000f40)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1f, 0x8, 0x80000001, 0x208f, 0x0, 0x5, "e848f1110391748d1d2cd62ab726eb7790332d4dfbf3b136487e3cf7d094d6"}}, 0x137) 1.195505039s ago: executing program 0 (id=17): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) r0 = socket$inet(0x2, 0x6, 0x10001) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ncm(0x6, 0x97, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x40, 0x20, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "53160215"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x0, 0x56, 0x6c}, {0x6, 0x24, 0x1a, 0x8001, 0x3}, [@acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x8, 0x24, 0x7, 0x0, 0x3, [0x10]}, @obex={0x5, 0x24, 0x15, 0x4}, @obex={0x5, 0x24, 0x15, 0x9}, @country_functional={0x8, 0x24, 0x7, 0xd4, 0x400, [0x5]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x7f, 0x0, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xc, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xff, 0xfe, 0x9, 0x8, 0x8}, 0x30, &(0x7f0000000180)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b60bdd85c39a1d15cd5f747e3196f072"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "72a9678f38030e568e9a0a38ac791403"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x2b, &(0x7f0000000200)=@string={0x2b, 0x3, "b786ac257c43adc78702ecdd748ec373827b126744c117b2132c1391635fa4c6d617d390e6c061fd03"}}]}) syz_usb_disconnect(r1) r2 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect$midi(0x6, 0x90, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0xf1, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x4, 0x2, [{0x10}, {0x8, 0xa7}], 0x5}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x2, 0x1, [{0x8, 0x8}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xf, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x80, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xfc, 0x6}], [{{0x9, 0x5, 0xc, 0x8, 0x10, 0x1, 0x2, 0xec, {0x8, 0x25, 0x1, 0x4, "1fa46504"}}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x5, 0x5, 0x9, {0x9, 0x25, 0x1, 0x5, "c04faec584"}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x10, 0x7, 0x5, 0x20, 0x6d}, 0x1d, &(0x7f00000003c0)={0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x64, 0x8, 0x7, 0xe2a, 0x40}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x81, 0x6, 0xc}]}, 0x4, [{0x18, &(0x7f0000000400)=@string={0x18, 0x3, "8de7368ac49488579627c4912cab3f6f528ecfc34f3b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0x21, 0x64, {0x64, 0x21, "db86337f76f216c044adade7d6b3d5791ffdba0c7fb12bc68dffedb8d082f16363f3750fc235207dec28add3a93294fbe28d4067615a62352d1154af56a1459f28abe17f492bda86119000ac906427a7418feea44d5fa1e1917ced609fe6fed32882"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x0, 0x12, 0x72, "2509945900339aaf638fe1bccdfe4be9371e77af6cb6f80bc53b2813b2b4ef888f14a0fe23d1e8c8bce51591ecc0e31c04d1a549e94ea07d4df086931788b2dc6a01a77b79f771f4db208727bb43ddc642d35b30b8938bb5c71de27faecfffcadebb77a21ca4ade46f59c6caf812db4a9d14"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x0, 0xba, {0xb8, "64cb91b99065a5b725da355822f94947f72971dfccd4a616200d2c509e8b848d5901bbbadd24c6128a8fb829fc0533f1826b3f660b1b298875f2fcd866d8c24bc407a13b181d7436d99a4b6fb3021485f0330c1bad984f4a91d38ed0c49da055c171d997cef409197b4b2253f77f06c5dc4027ba46b6fff47deb2ab530ed1c2a91bae7f1c6b39e38cd8c8f6e0b3169d47440b3a3474023cd2278aa5fdc72634f57751e919b9c1d1debc5833daaf560fcdcbf6d7de06ef401"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x8}}) r4 = syz_usb_connect$uac1(0x2, 0xd5, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0xa7, 0x90, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x34}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x6, 0x4, "b6fa9a9211"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0x3, "f2318a65"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0x2, "e6"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x23, "85f55b22938d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x9, 0x0, {0x7, 0x25, 0x1, 0x4, 0xf, 0x7d9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x81, 0x1, 0x5, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x5, 0xd9, 0x0, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x4, 0x9, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x80, 0x6, "8b", "e2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x58, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x8, 0x8, 0x94}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5e, 0x40, 0x1, {0x7, 0x25, 0x1, 0xc, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x250, 0x1, 0x2, 0x3, 0xff, 0x3}, 0x4c, &(0x7f0000000a40)={0x5, 0xf, 0x4c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x4, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x6, 0xd, 0xff7f}, @ss_container_id={0x14, 0x10, 0x4, 0x3c, "9b61a8cd67e6fe9232141fffc57797a0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x8, 0xf7, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "791759309e456085a92b77fa69b7c39a"}]}, 0x7, [{0x89, &(0x7f0000000ac0)=@string={0x89, 0x3, "5508c4c23820e5dcdb942388f263635ca62349b6c003ecc5cbbf47e5dd6d9e6a6867e3398f01868fd5dac37aa35c6514a31f39d2c474f5025e6186a2ebe8841251a50d3bfd6c13cb3079f3eb2fe20866ab4d79f5b83af0f6418d8dd753aee1389ac3d9b84066d8758152d886ef8a49e0c82d66b371dda65b956f6832f66f29bda19444fdc2ffb4"}}, {0x35, &(0x7f0000000b80)=@string={0x35, 0x3, "24fe3beb49ae08e6e1edd2fc26a94f2524f92a5946ba18d15a3ac8ae2a186847b697a906731dffb68ab90a6f58509e3888f503"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x409}}, {0xf4, &(0x7f0000000c40)=@string={0xf4, 0x3, "39625bb75a4b26f07cdce47c0ae23945fc79c2c7847317153b37020c17824b7f29857fe104ff42fa16e23a7792c4850bd7757c7ac4a10f0844654aef4468d8007c20a36a9faa64ef5be3053ff1c898d27e6e668183d67b037c0722534369f6482388c10efe621853cc873678d354e07e4c29d647c947e52feb0898054359c00b016f8f7f63bd1f153db498b86e5bd84c7cdcc7acadfd91b27de1e3bfc604c5bfcba9840fffc40101ef5e2c9e7a79dd4512569c35f216d5259c63f66e8e38c5e10af9985f456f6255043b379df215b8c1022b047b8bf2ed8d7845568a1f1a1bf89456207b7407443c4936c5d2c5a5f8bca0ae"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1009}}, {0x41, &(0x7f0000000d80)=@string={0x41, 0x3, "62fd27cb3eb92f44e8061f2170aa74c90646d8855925543a528fec0cd92326a5a383ccabef5a734484768b6adfd364b5e4ea327ebcb7930104c4ba91b74c6f"}}]}) syz_usb_disconnect(r4) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffa000/0x2000)=nil) syz_usb_ep_read(r1, 0x5, 0x64, &(0x7f0000000e80)=""/100) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x4211bd60d49b7b6a, 0x3, 0x1, 0x7f}}}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0xb0, 0x1, 0x80, 0x40, 0x44}, 0x10, &(0x7f0000000f80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0xc, 0x81, 0xfeff, 0x6}]}, 0x3, [{0x49, &(0x7f0000000fc0)=@string={0x49, 0x3, "5323ea26d5874e3f0deb3a6455f5ce91443b0145754e2cb5531c7327814da199c3d2b0da27de3989716e38f110c7406516e1199db70ccbda659cbfee455911020d13dd25c2bd34"}}, {0x75, &(0x7f0000001040)=@string={0x75, 0x3, "fd50e823d1289d59c168b3e3573cabd4f8a4d221d6a2a47188add1bf98b8d1abd40bb2cd5e954e8399c029dc71675fd312cf6be0089bd0c31d696b2d1088be23209ccb068e94b327d657b42291d3a2f1dd3fbc8a478c644dab5d34dfe07f68f204dd3235c02f3ddb2bb47380a98e26645292c3"}}, {0xd6, &(0x7f00000010c0)=@string={0xd6, 0x3, "28ada1d403cc69e83790109cd017280fd71181dca2b76cb406ed36aeaadba914478e0cd42073e945c8fe5eef647da75dc2cbdc752efe081bbf676e7241a2d32444915fe6d7da2d96d52b3e5efce09c2f7d5fa6685b057f9184d16ad5d58084370a4814d1ae10bc215f7b61aed08f7bdecb45039c87993a77ab400b296b36028a482cd5d1203d21181499946392f920b649e962d73bbc885ba571946c9a5d937d2d261d98ce89ba678c8ba6d7e591345bbef7b129aebe26c85d204d31a365a8c8b445866262fd51008ac9b68d41517911ecf32002"}}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/locks\x00', 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r5, 0xc008aeba, &(0x7f0000001280)={0x3, 0x0, &(0x7f0000001240)={&(0x7f0000ff8000/0x2000)=nil, 0xeeef0000, 0x2}}) syz_usb_connect$cdc_ecm(0x0, 0x50, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x4, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x1c, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x8, 0x24, 0x6, 0x0, 0x0, "e9b45f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0xbf90, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3f7, 0xa, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x7f, 0x6}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x310, 0x0, 0x6, 0x7, 0x40, 0xe1}, 0xf, &(0x7f0000001380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x8, 0x1}]}, 0x1, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x1009}}]}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000001440)=0xfffffff7) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000001480)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000014c0), 0x82, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001540)=[@text16={0x10, &(0x7f0000001500)="b89f008ee8260f300f2063260f8e00700f01dfba6100b000ee36f2ae0f01cf66b99e0200000f3266b80500000066b9040000000f01d9", 0x36}], 0x1, 0x10, &(0x7f0000001580), 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000016c0)={0x14, &(0x7f00000015c0)={0x20, 0x1, 0x99, {0x99, 0x24, "0083764207a5afbb49d85a2cd3ad50e02b8982716210b716dcf6f9257437a13d9408bdd35d5b779bc7f19915474b8cab514029203a0030eefe5ebdc1d5c12531f8e6cc6765d0312ddc8e869983363a940fe74469b642d0b169053b3a180859f98713c6c07320cc53c3a0f1fd56165d554bdebd92c2b9d91229ab9084575dfc57b75816a31c647777d8d7e28995ddd8e7a7571e2b63bdaf"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000001940)={0x34, &(0x7f0000001700)={0x40, 0x17, 0xc6, "790c8ed2da59d9ccb9ea4bb89de5ad788fed4874e79a4fa77932bffcea45ade42c875ebb3bab778bea29158ebd686e619671c815b592e42a93571491ba5f4a69a546b7b30658681600e0bf3f81be3df8bb2c94cf454637d105143c1c5967ade7cf9c1197f292830be9fea0d0132900d964f5a29d13db22d427bef8f048c1ce95c054fda13f4f5e2fb17d14fe0995f3c046dd0c3f64d69a4ecc38f10680d9d686dcdeb713594da2bb5dec45b7443306842929a150901606c429f6a56b70f61a149ca7965301da"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0xac}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001880)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000018c0)={0x40, 0xa0, 0x4, 0x80000000}, &(0x7f0000001900)={0xc0, 0xa2, 0x2f, "7ea76696614163b4d46ba0deddec9e0b55f2a255a6d46f6e4fcf5b9b8e85378ba90863243647115a4dd317f6b9db24"}}) mount(&(0x7f0000001980)=@loop={'/dev/loop', 0x0}, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='ocfs2_dlmfs\x00', 0x203000, &(0x7f0000001a40)='\x00') r7 = syz_usb_connect$midi(0x4, 0x4f, &(0x7f0000001a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x1, 0x0, 0x80, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x8, [@midi_out_jack={0x11, 0x24, 0x3, 0x6, 0x0, 0x5, [{0x24, 0x7}, {0x7, 0x1}, {0x5a, 0x68}, {0x1, 0x1}, {0x4, 0x9}], 0x8}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x4, 0x3, 0x7f, {0x11, 0x25, 0x1, 0xd, "6e9f864350eba540e9d7e7bd6a"}}}]}}}}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x250, 0x0, 0xfb, 0x1, 0x8, 0x8}, 0x5, &(0x7f0000001b40)={0x5, 0xf, 0x5}, 0x2, [{0xb3, &(0x7f0000001b80)=@string={0xb3, 0x3, "d596d6a68e9084311c29e4aa67ddad117409f40ff182b30634d6ad51a2d4b97db2b43d165df4d5e1fae5d298ba5157d0305a6dff2302ca98450781eda58aa45348083f4ea1120f4af485d6d82bd3fe13d173e4778a5c1b8c3c6f41224092542bfe302cbb5b6fa417808015cdce8122d44fcff078c683bc7aae5c0397934b543d90e592dc1a8d38577719307c9b7ddd27dad54bad9a78fa14d22c5d93b57f7c4c23b11b208eabdbce35fd78b60b7756be46"}}, {0x96, &(0x7f0000001c40)=@string={0x96, 0x3, "9f7c65ba179f35a51f73676f565399eacc5390c7472e7c4f1e50e2ac6937b21d87efc594580857db0493468a2df8e4a5c071368aa25c412932e2dae17244b32434fa32eb1f437f56c8e836235019b1b3efa72903dd63c887363ace723d6cfa8f6ba15116a0dbae262f64e7d2fe513c88fff450347fd66ef77a8f487dbcfe3ddb9b3c775c27364c8fbdf8af0d460b0b78f46dedec"}}]}) syz_usb_control_io$rtl8150(r7, &(0x7f0000001e40)={0x14, &(0x7f0000001d40)={0x20, 0xe, 0x4f, {0x4f, 0x22, "c9939a77e4bd30233a85127446fcd7efadc5da9ab7ba151a5bb772a5d03745dd8a51c121a79b3b0191d9f539c9fb892eef0e23d700c48dcd6f4de8b06aa9b4520133041d8b9798a22a5583e2b2"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "e2f928605882cd23911156e8bfa48b04d46e947b742efa0d37522bf8d10aac59c04e55d893dbd95dd9b36c980a56c66606f981d248938d7c09b9d5b078c04b5288b181846aef51ac7e05133050b238f2e4d449e720270be16e8f30608fe4c049d4224f08831ba48b254e7c456f71494dac73b5d3773f"}}}, &(0x7f0000002000)={0x2c, &(0x7f0000001e80)={0x0, 0x11, 0x50, "d51d86e595512a6f75243acb2e40b71e276e69e4acddce54ab48f3317caf2f96c47d1c065d7d379d53d534c5df8a1b20fe9a408b894be70a541cfc1083114c2b21d38d1810670c5a1994914105960af4"}, &(0x7f0000001f00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001f80)={0xc0, 0x5, 0x3, "092ae6"}, &(0x7f0000001fc0)={0x40, 0x5, 0x3, "24eabf"}}) setsockopt$inet_buf(r6, 0x0, 0x11, &(0x7f0000002040)="4db8", 0x2) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000002080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x8, 0x8, 0x2, 0x8}, {0x9, 0x5, 0x7, 0x2, 0x200, 0x3, 0x2, 0x40}, {0x9, 0x5, 0x4, 0x3, 0x10, 0x32, 0xfe}}}}}}]}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000020c0), 0x80801, 0x0) 804.923018ms ago: executing program 2 (id=18): symlinkat(&(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000240)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00') mount$cgroup(0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x881400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002742488200a1a02016a3701020301090212000108e420030904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x77) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000340)='./bus\x00', 0x900000) dup3(r3, r2, 0x80000) finit_module(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) socket$inet6(0xa, 0x2, 0x58) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c71cd03172f3f9c3d423c9117249f70ef56a87d5b"], 0x72) 430.603396ms ago: executing program 3 (id=19): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0]) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x4011, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000500)={0x0, 0x0}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0]) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_clone(0x4011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000500)={0x0, 0x0}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 0s ago: executing program 3 (id=20): r0 = openat$kvm(0x0, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000540)={0x0, &(0x7f0000000600)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x2, 0x40000002, 0x2}}], 0x7e}) (async) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000540)={0x0, &(0x7f0000000600)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x2, 0x40000002, 0x2}}], 0x7e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880)={0xaa, 0x79}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000008c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r5 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/transaction_log\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/106, 0x6a, 0x50000000000000) (async) pread64(r5, &(0x7f0000000080)=""/106, 0x6a, 0x50000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r4, &(0x7f0000000900)=""/145, 0x91) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x1003, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x1, 0x4, 0x46, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7800, 0x8, 0x1, 0x5}}) sendmsg$xdp(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, 0x0, r6, 0x2c}, 0x10, &(0x7f0000000480)=[{&(0x7f00000003c0)="aad553894921c6b0e64da3f8e9baa3c64971253461bc80f64ae05aa756713cc38c4f2abc8bdef8e9f711effd320bec40723f247d0d7eed84b15394563149f2e5cee30937bedd3858edbb14e1298f53508186a9a8d552446be5abe0bbf7c4b9140ae5edac58fba294e6ea18094c68360d47", 0x71}, {&(0x7f0000000440)="72cc045441afa38919d31d1ff47c9de4600798c3d6df1a87", 0x18}], 0x2, 0x0, 0x0, 0x840}, 0x4000804) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) memfd_secret(0x80000) (async) r7 = memfd_secret(0x80000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000000, 0x13, r7, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x100, 0x0, &(0x7f0000000180)=@tr_acquire}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x100, 0x0, &(0x7f0000000180)=@tr_acquire}) io_setup(0x9, &(0x7f0000000580)=0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) io_submit(r8, 0x2, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x200, r9, 0x0}, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x2, 0x807, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) io_submit(r8, 0x2, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x200, r9, 0x0}, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x2, 0x807, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f00000009c0)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 18.860803][ T36] audit: type=1400 audit(1794263842.480:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.883718][ T36] audit: type=1400 audit(1794263842.500:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.888738][ T287] cgroup: Unknown subsys name 'net' [ 18.911386][ T36] audit: type=1400 audit(1794263842.530:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.911492][ T287] cgroup: Unknown subsys name 'devices' [ 19.009546][ T287] cgroup: Unknown subsys name 'hugetlb' [ 19.015156][ T287] cgroup: Unknown subsys name 'rlimit' [ 19.127835][ T36] audit: type=1400 audit(1794263842.740:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.150961][ T36] audit: type=1400 audit(1794263842.750:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.163021][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.175796][ T36] audit: type=1400 audit(1794263842.750:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.191942][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.208108][ T36] audit: type=1400 audit(1794263842.800:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.241310][ T36] audit: type=1400 audit(1794263842.800:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.268024][ T36] audit: type=1400 audit(1794263842.810:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.293495][ T36] audit: type=1400 audit(1794263842.810:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.092943][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.100009][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.107045][ T294] bridge_slave_0: entered allmulticast mode [ 20.113354][ T294] bridge_slave_0: entered promiscuous mode [ 20.122265][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.129308][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.136377][ T294] bridge_slave_1: entered allmulticast mode [ 20.142533][ T294] bridge_slave_1: entered promiscuous mode [ 20.154739][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.161808][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.168915][ T295] bridge_slave_0: entered allmulticast mode [ 20.175013][ T295] bridge_slave_0: entered promiscuous mode [ 20.184000][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.191066][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.198143][ T295] bridge_slave_1: entered allmulticast mode [ 20.204258][ T295] bridge_slave_1: entered promiscuous mode [ 20.210326][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.217346][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.224481][ T296] bridge_slave_0: entered allmulticast mode [ 20.230716][ T296] bridge_slave_0: entered promiscuous mode [ 20.247306][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.254361][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.261437][ T297] bridge_slave_0: entered allmulticast mode [ 20.267597][ T297] bridge_slave_0: entered promiscuous mode [ 20.273902][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.280941][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.288022][ T296] bridge_slave_1: entered allmulticast mode [ 20.294165][ T296] bridge_slave_1: entered promiscuous mode [ 20.305726][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.312765][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.319842][ T297] bridge_slave_1: entered allmulticast mode [ 20.325984][ T297] bridge_slave_1: entered promiscuous mode [ 20.476876][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.483951][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.491225][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.498247][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.514987][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.522031][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.529322][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.536332][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.550448][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.557476][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.564749][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.571775][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.585070][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.592113][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.599378][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.606385][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.637162][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.644683][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.651947][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.659913][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.667024][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.674214][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.681419][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.688575][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.699597][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.706619][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.719396][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.726417][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.733954][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.740984][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.751419][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.758458][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.786923][ T295] veth0_vlan: entered promiscuous mode [ 20.802488][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.809528][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.817002][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.824039][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.835671][ T295] veth1_macvtap: entered promiscuous mode [ 20.843773][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.850811][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.864895][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.871936][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.904664][ T297] veth0_vlan: entered promiscuous mode [ 20.916204][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 20.941891][ T297] veth1_macvtap: entered promiscuous mode [ 20.958540][ T294] veth0_vlan: entered promiscuous mode [ 20.985578][ T296] veth0_vlan: entered promiscuous mode [ 20.994628][ T294] veth1_macvtap: entered promiscuous mode [ 21.014351][ T296] veth1_macvtap: entered promiscuous mode [ 21.024447][ T317] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 21.066513][ T323] TCP: TCP_TX_DELAY enabled [ 21.105391][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.179120][ T331] kvm: kvm [329]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 21.243725][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 21.260522][ T327] cgroup: fork rejected by pids controller in /syz2 [ 21.408024][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 21.415085][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 21.423703][ T66] usb 4-1: config 5 has an invalid interface number: 113 but max is 2 [ 21.432126][ T66] usb 4-1: config 5 has an invalid interface number: 32 but max is 2 [ 21.447813][ T66] usb 4-1: config 5 has an invalid interface number: 237 but max is 2 [ 21.456156][ T66] usb 4-1: config 5 has no interface number 0 [ 21.465889][ T66] usb 4-1: config 5 has no interface number 1 [ 21.482204][ T66] usb 4-1: config 5 has no interface number 2 [ 21.492380][ T66] usb 4-1: config 5 interface 113 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 21.506229][ T66] usb 4-1: config 5 interface 113 altsetting 2 endpoint 0xE has invalid maxpacket 2023, setting to 64 [ 21.517938][ T318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 21.526548][ T66] usb 4-1: config 5 interface 113 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 21.537454][ T66] usb 4-1: config 5 interface 113 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 21.548748][ T66] usb 4-1: config 5 interface 237 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 21.559648][ T66] usb 4-1: config 5 interface 113 has no altsetting 0 [ 21.567070][ T66] usb 4-1: config 5 interface 32 has no altsetting 0 [ 21.580066][ T66] usb 4-1: config 5 interface 237 has no altsetting 0 [ 21.589863][ T66] usb 4-1: string descriptor 0 read error: -22 [ 21.603531][ T66] usb 4-1: New USB device found, idVendor=103e, idProduct=03e8, bcdDevice=b4.51 [ 21.612865][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 21.632003][ T66] usb 4-1: Interface #113 referenced by multiple IADs [ 21.643890][ T66] ftdi_sio 4-1:5.113: FTDI USB Serial Device converter detected [ 21.653346][ T66] ftdi_sio ttyUSB0: unknown device type: 0xb451 [ 21.663650][ T66] ftdi_sio 4-1:5.32: FTDI USB Serial Device converter detected [ 21.671584][ T66] ftdi_sio ttyUSB1: unknown device type: 0xb451 [ 21.678671][ T66] ftdi_sio 4-1:5.237: FTDI USB Serial Device converter detected [ 21.681143][ T318] usb 2-1: config 0 interface 0 has no altsetting 0 [ 21.686628][ T66] ftdi_sio ttyUSB2: unknown device type: 0xb451 [ 21.705193][ T318] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 21.727950][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.748506][ T318] usb 2-1: config 0 descriptor?? [ 22.115031][ T389] [ 22.158738][ T318] usbhid 2-1:0.0: can't add hid device: -71 [ 22.167849][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.177275][ T318] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 22.188689][ T318] usb 2-1: USB disconnect, device number 2 [ 22.339141][ T66] usb 1-1: config index 0 descriptor too short (expected 56, got 39) [ 22.361920][ T66] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 22.373212][ T66] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 22.389737][ T66] usb 1-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 22.398931][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.406914][ T66] usb 1-1: Product: syz [ 22.417946][ T66] usb 1-1: Manufacturer: syz [ 22.422544][ T66] usb 1-1: SerialNumber: syz [ 22.432351][ T66] r8152-cfgselector 1-1: Unknown version 0x0000 [ 22.439926][ T66] r8152 1-1:9.0: Invalid Rx endpoint address [ 22.641338][ T66] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 22.907911][ T318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 23.058848][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.072235][ T318] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 23.087859][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.099767][ T318] usb 2-1: config 0 descriptor?? [ 23.166103][ T401] x_tables: duplicate underflow at hook 1 [ 23.311988][ T318] usbhid 2-1:0.0: can't add hid device: -71 [ 23.322335][ T318] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 23.336640][ T318] usb 2-1: USB disconnect, device number 3 [ 23.677860][ T66] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 23.757999][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 23.839154][ T66] usb 1-1: not running at top speed; connect to a high speed hub [ 23.855368][ T66] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 94, changing to 4 [ 23.867990][ T66] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 23.889300][ T66] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 23.898513][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.906539][ T66] usb 1-1: Product: ъ [ 23.910672][ T66] usb 1-1: Manufacturer: ︤깉ﳒꤦ╏襤太멆턘㩚껈ᠪ䝨鞶کᵳ뛿릊漊偘㢞 [ 23.917847][ T318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.921528][ T66] usb 1-1: SerialNumber: Љ [ 23.938341][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.951687][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 23.961870][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.972396][ T9] usb 2-1: config 0 descriptor?? [ 24.005899][ T31] usb 4-1: USB disconnect, device number 2 [ 24.011954][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 24.011967][ T36] audit: type=1400 audit(1794263847.620:140): avc: denied { read write } for pid=412 comm="syz.3.19" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.047404][ T31] ftdi_sio 4-1:5.113: device disconnected [ 24.058018][ T31] ftdi_sio 4-1:5.32: device disconnected [ 24.064288][ T31] ftdi_sio 4-1:5.237: device disconnected [ 24.073518][ T36] audit: type=1400 audit(1794263847.620:141): avc: denied { open } for pid=412 comm="syz.3.19" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 24.097218][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 24.104080][ T318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.114736][ T318] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 24.128559][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.145593][ T318] usb 3-1: Product: syz [ 24.150899][ T318] usb 3-1: Manufacturer: syz [ 24.155438][ T66] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 24.155537][ T318] usb 3-1: SerialNumber: syz [ 24.178435][ T66] usb 1-1: USB disconnect, device number 3 [ 24.210169][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.540585][ T36] audit: type=1400 audit(1794263848.160:142): avc: denied { read } for pid=426 comm="syz.3.20" name="transaction_log" dev="binder" ino=1048591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.541379][ T343] syz.2.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 24.576430][ T36] audit: type=1400 audit(1794263848.160:143): avc: denied { open } for pid=426 comm="syz.3.20" path="/dev/binderfs/binder_logs/transaction_log" dev="binder" ino=1048591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.585476][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.610938][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.624702][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.629061][ T36] audit: type=1400 audit(1794263848.230:144): avc: denied { ioctl } for pid=426 comm="syz.3.20" path="/dev/binderfs/binder_logs/transaction_log" dev="binder" ino=1048591 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.710106][ T343] CPU: 0 UID: 0 PID: 343 Comm: syz.2.5 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 24.710136][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 24.710156][ T343] Call Trace: [ 24.710163][ T343] [ 24.710170][ T343] __dump_stack+0x21/0x30 [ 24.710192][ T343] dump_stack_lvl+0x140/0x1c0 [ 24.710209][ T343] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.710226][ T343] ? ___ratelimit+0x41c/0x5c0 [ 24.710247][ T343] ? __kasan_check_write+0x18/0x20 [ 24.710272][ T343] dump_stack+0x19/0x20 [ 24.710288][ T343] dump_header+0xd9/0x460 [ 24.710312][ T343] oom_kill_process+0x35d/0x640 [ 24.710331][ T343] out_of_memory+0x5d1/0xa20 [ 24.710349][ T343] ? __cfi_out_of_memory+0x10/0x10 [ 24.710366][ T343] ? mutex_lock_killable+0x97/0x1d0 [ 24.710388][ T343] ? __cfi_mutex_lock_killable+0x10/0x10 [ 24.710412][ T343] mem_cgroup_out_of_memory+0x2c5/0x390 [ 24.710436][ T343] ? css_next_descendant_pre+0x1ec/0x210 [ 24.710455][ T343] ? __kasan_check_write+0x18/0x20 [ 24.710478][ T343] ? drain_obj_stock+0xec0/0xec0 [ 24.710503][ T343] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 24.710527][ T343] try_charge_memcg+0x925/0xe10 [ 24.710558][ T343] ? static_key_count+0x45/0x70 [ 24.710577][ T343] ? lruvec_init+0x271/0x280 [ 24.710594][ T343] ? __cfi_try_charge_memcg+0x10/0x10 [ 24.710615][ T343] ? __alloc_pages_noprof+0x35a/0x7e0 [ 24.710638][ T343] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.710661][ T343] __mem_cgroup_charge+0xfc/0x420 [ 24.710683][ T343] ? do_pte_missing+0x3894/0x4440 [ 24.710703][ T343] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 24.710727][ T343] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 24.710747][ T343] ? shmem_replace_folio+0x9b0/0x9b0 [ 24.710767][ T343] ? shmem_huge_global_enabled+0x2da/0x360 [ 24.710785][ T343] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 24.710802][ T343] ? __kasan_check_write+0x18/0x20 [ 24.710825][ T343] ? _raw_spin_lock+0x92/0x120 [ 24.710844][ T343] shmem_get_folio_gfp+0x5cd/0x12e0 [ 24.710863][ T343] ? shmem_get_folio+0xc0/0xc0 [ 24.710879][ T343] ? __kasan_check_write+0x18/0x20 [ 24.710902][ T343] ? inode_to_bdi+0x6d/0x100 [ 24.710923][ T343] shmem_write_begin+0xf4/0x260 [ 24.710942][ T343] generic_perform_write+0x329/0x970 [ 24.710962][ T343] ? inode_update_timestamps+0x4d1/0x6e0 [ 24.710986][ T343] ? __cfi_generic_perform_write+0x10/0x10 [ 24.711006][ T343] ? generic_write_checks_count+0x426/0x540 [ 24.711027][ T343] ? mnt_get_write_access_file+0x1af/0x3b0 [ 24.711048][ T343] ? mnt_put_write_access_file+0xc2/0x100 [ 24.711069][ T343] ? file_update_time+0x1de/0x210 [ 24.711091][ T343] shmem_file_write_iter+0x105/0x130 [ 24.711111][ T343] __kernel_write_iter+0x462/0x900 [ 24.711136][ T343] ? __cfi___kernel_write_iter+0x10/0x10 [ 24.711159][ T343] ? get_dump_page+0x165/0x220 [ 24.711179][ T343] ? __asan_memset+0x39/0x50 [ 24.711202][ T343] ? iov_iter_bvec+0xc0/0x180 [ 24.711222][ T343] dump_user_range+0xb8b/0xe60 [ 24.711249][ T343] ? __cfi_dump_user_range+0x10/0x10 [ 24.711272][ T343] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 24.711291][ T343] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 24.711311][ T343] ? elf_core_dump+0x23cf/0x3840 [ 24.711331][ T343] elf_core_dump+0x2d61/0x3840 [ 24.711352][ T343] ? __cfi_elf_core_dump+0x10/0x10 [ 24.711371][ T343] ? mas_next_slot+0xf01/0xfd0 [ 24.711399][ T343] ? dump_interrupted+0xf0/0xf0 [ 24.711422][ T343] ? filp_open+0x199/0x1f0 [ 24.711442][ T343] ? 0xffffffffff600000 [ 24.711461][ T343] do_coredump+0x20d5/0x3050 [ 24.711488][ T343] ? __cfi_do_coredump+0x10/0x10 [ 24.711510][ T343] ? asm_exc_page_fault+0x2b/0x30 [ 24.711558][ T343] ? __kasan_slab_free+0x6a/0x80 [ 24.711577][ T343] ? get_signal+0xa2a/0x1490 [ 24.711594][ T343] get_signal+0x11bf/0x1490 [ 24.711612][ T343] arch_do_signal_or_restart+0xbc/0x700 [ 24.711632][ T343] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 24.711652][ T343] ? __bad_area_nosemaphore+0x2fb/0x680 [ 24.711672][ T343] irqentry_exit_to_user_mode+0x4d/0xb0 [ 24.711697][ T343] irqentry_exit+0x16/0x60 [ 24.711719][ T343] exc_page_fault+0x65/0xc0 [ 24.711741][ T343] asm_exc_page_fault+0x2b/0x30 [ 24.711762][ T343] RIP: 0033:0x7fd6bc39fb21 [ 24.711777][ T343] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 24.711791][ T343] RSP: 002b:ffffffffffffff80 EFLAGS: 00010217 [ 24.711808][ T343] RAX: 0000000000000000 RBX: 00007fd6bc626360 RCX: 00007fd6bc39fb19 [ 24.711821][ T343] RDX: 0000000000000000 RSI: ffffffffffffff80 RDI: 0000000000102200 [ 24.711834][ T343] RBP: 00007fd6bc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 24.711846][ T343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 24.711857][ T343] R13: 00007fd6bc6263f8 R14: 00007fd6bc626360 R15: 00007ffcfacfed98 [ 24.711872][ T343] [ 24.711879][ T343] memory: usage 307200kB, limit 307200kB, failcnt 23766 [ 25.196800][ T343] memory+swap: usage 432012kB, limit 9007199254740988kB, failcnt 0 [ 25.198080][ T9] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 25.205163][ T343] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 25.213586][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 25.227858][ T66] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 94, changing to 7 [ 25.240466][ T66] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 25.248600][ T343] Memory cgroup stats for /syz2 [ 25.249655][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.254045][ T343] : [ 25.254591][ T66] usb 1-1: Product: 괨풡찃逷鰐័༨ᇗ랢둬긶ᒩ蹇퐌猠䗩ﻈ絤嶧쯂痜︮ᬈ枿牮ꉁⓓ酄阭⯕帾⾜彽梦՛酿톄핪胕㞄䠊턔Ⴎ↼筟깡运䗋鰃馇眺䂫⤋㙫訂ⱈ퇕㴠ᠡ餔掔漣똠흢밻守熥沔嶚經☭頝觎枺讌힦釥嬴⦱뺮젦⁝ㅍ斣좨䖴抆ﵢQ즊趶允ᅹȠ [ 25.274772][ T343] cache 314322944 [ 25.296681][ T66] usb 1-1: Manufacturer: 僽⏨⣑妝棁㱗풫ꓸ⇒ꋖ熤궈뿑뢘ꯑ௔춲镞荎삙東퍟켒鬈쏐椝⵫蠐⎾鰠ۋ钎➳埖⊴펑㿝誼豇䵤嶫翠㔲⿀됫聳躩搦鉒 [ 25.304030][ T343] rss 204800 [ 25.316927][ T66] usb 1-1: SerialNumber: syz [ 25.320204][ T343] rss_huge 0 [ 25.327976][ T343] shmem 314302464 [ 25.331634][ T343] mapped_file 0 [ 25.331818][ C0] ------------[ cut here ]------------ [ 25.335092][ T343] dirty 0 [ 25.340513][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 25.340534][ C0] index 33980 is out of range for type 'const int[34]' [ 25.340547][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 25.340572][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.340585][ C0] Call Trace: [ 25.340592][ C0] [ 25.340599][ C0] __dump_stack+0x21/0x30 [ 25.340623][ C0] dump_stack_lvl+0x140/0x1c0 [ 25.340643][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.340661][ C0] ? start_kernel+0x46a/0x4bb [ 25.340680][ C0] dump_stack+0x19/0x20 [ 25.340696][ C0] ubsan_epilogue+0xe/0x40 [ 25.340716][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 25.340741][ C0] aiptek_irq+0x208d/0x2a00 [ 25.340763][ C0] ? _raw_spin_unlock+0x45/0x60 [ 25.340783][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 25.340809][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 25.340834][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 25.340863][ C0] dummy_timer+0xa3f/0x4900 [ 25.340895][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 25.340921][ C0] ? timerqueue_del+0xd7/0x130 [ 25.340939][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 25.340962][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 25.340987][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 25.341012][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 25.341033][ C0] ? read_tsc+0xd/0x20 [ 25.341049][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 25.341077][ C0] hrtimer_run_softirq+0x159/0x560 [ 25.341099][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 25.341118][ C0] handle_softirqs+0x1b0/0x5b0 [ 25.341141][ C0] __irq_exit_rcu+0x47/0xb0 [ 25.341161][ C0] irq_exit_rcu+0xd/0x30 [ 25.341179][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 25.341204][ C0] [ 25.341211][ C0] [ 25.341218][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 25.341243][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 25.341270][ C0] Code: cc cc cc cc cc cc cc b8 ef df 52 e2 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 89 3c 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 25.341284][ C0] RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 [ 25.341301][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85aad53d [ 25.341316][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000000ea74 [ 25.341328][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 25.341343][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 25.341356][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886dd8a8 [ 25.341372][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 25.341397][ C0] default_idle+0x17/0x30 [ 25.341413][ C0] arch_cpu_idle+0xd/0x20 [ 25.341429][ C0] default_idle_call+0x3e/0x80 [ 25.341445][ C0] do_idle+0x2fc/0x570 [ 25.341467][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 25.341491][ C0] cpu_startup_entry+0x47/0x60 [ 25.341513][ C0] rest_init+0x10b/0x130 [ 25.341530][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 25.341552][ C0] start_kernel+0x46a/0x4bb [ 25.341568][ C0] x86_64_start_reservations+0x2e/0x30 [ 25.341587][ C0] x86_64_start_kernel+0x6a/0x7b [ 25.341606][ C0] common_startup_64+0x13b/0x157 [ 25.341625][ C0] [ 25.341632][ C0] ---[ end trace ]--- [ 25.343469][ T343] writeback 0 [ 25.352015][ C0] ------------[ cut here ]------------ [ 25.352024][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 25.352041][ C0] index 33981 is out of range for type 'const int[34]' [ 25.352054][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 25.352079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.352090][ C0] Call Trace: [ 25.352097][ C0] [ 25.352104][ C0] __dump_stack+0x21/0x30 [ 25.352127][ C0] dump_stack_lvl+0x140/0x1c0 [ 25.352145][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.352164][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.352186][ C0] dump_stack+0x19/0x20 [ 25.352203][ C0] ubsan_epilogue+0xe/0x40 [ 25.352222][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 25.352244][ C0] aiptek_irq+0x1f3c/0x2a00 [ 25.352266][ C0] ? _raw_spin_unlock+0x45/0x60 [ 25.352284][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 25.352311][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 25.352335][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 25.352358][ C0] dummy_timer+0xa3f/0x4900 [ 25.352390][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 25.352417][ C0] ? timerqueue_del+0xd7/0x130 [ 25.352434][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 25.352456][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 25.352482][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 25.352507][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 25.352528][ C0] ? read_tsc+0xd/0x20 [ 25.352544][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 25.352574][ C0] hrtimer_run_softirq+0x159/0x560 [ 25.352598][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 25.352617][ C0] handle_softirqs+0x1b0/0x5b0 [ 25.352639][ C0] __irq_exit_rcu+0x47/0xb0 [ 25.352660][ C0] irq_exit_rcu+0xd/0x30 [ 25.352680][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 25.352706][ C0] [ 25.352713][ C0] [ 25.352719][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 25.352744][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 25.352772][ C0] Code: cc cc cc cc cc cc cc b8 ef df 52 e2 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 89 3c 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 25.352787][ C0] RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 [ 25.352805][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85aad53d [ 25.352821][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000000ea74 [ 25.352832][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 25.352846][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 25.352867][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886dd8a8 [ 25.352883][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 25.352912][ C0] default_idle+0x17/0x30 [ 25.352928][ C0] arch_cpu_idle+0xd/0x20 [ 25.352944][ C0] default_idle_call+0x3e/0x80 [ 25.352961][ C0] do_idle+0x2fc/0x570 [ 25.352984][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 25.353010][ C0] cpu_startup_entry+0x47/0x60 [ 25.353033][ C0] rest_init+0x10b/0x130 [ 25.353051][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 25.353074][ C0] start_kernel+0x46a/0x4bb [ 25.353091][ C0] x86_64_start_reservations+0x2e/0x30 [ 25.353112][ C0] x86_64_start_kernel+0x6a/0x7b [ 25.353131][ C0] common_startup_64+0x13b/0x157 [ 25.353150][ C0] [ 25.353157][ C0] ---[ end trace ]--- [ 25.364948][ T343] workingset_refault_anon 79 [ 25.528553][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.537887][ T343] workingset_refault_file 3007 [ 25.556653][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.590000][ T343] swap 127807488 [ 25.601930][ T36] audit: type=1400 audit(1794263849.210:145): avc: denied { write } for pid=407 comm="syz.0.17" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 25.608808][ T343] swapcached 131072 [ 25.610898][ T66] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 25.615140][ T343] pgpgin 120385 [ 25.615149][ T343] pgpgout 43585 [ 25.615155][ T343] pgfault 8106 [ 25.615161][ T343] pgmajfault 130 [ 25.615167][ T343] inactive_anon 158056448 [ 25.626302][ T36] audit: type=1400 audit(1794263849.210:146): avc: denied { open } for pid=407 comm="syz.0.17" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 25.635155][ T343] active_anon 156495872 [ 25.638685][ T66] usb 1-1: USB disconnect, device number 4 [ 25.648919][ T31] usb 2-1: USB disconnect, device number 4 [ 25.653928][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 25.660703][ T343] inactive_file 4096 [ 26.139635][ T343] active_file 16384 [ 26.143682][ T343] unevictable 0 [ 26.147476][ T343] hierarchical_memory_limit 314572800 [ 26.159386][ T343] hierarchical_memsw_limit 9223372036854771712 [ 26.165543][ T343] total_cache 314322944 [ 26.169708][ T343] total_rss 204800 [ 26.173414][ T343] total_rss_huge 0 [ 26.177112][ T343] total_shmem 314302464 [ 26.181261][ T343] total_mapped_file 0 [ 26.185225][ T343] total_dirty 0 [ 26.189576][ T343] total_writeback 0 [ 26.193421][ T343] total_workingset_refault_anon 79 [ 26.198541][ T343] total_workingset_refault_file 3007 [ 26.203841][ T343] total_swap 127807488 [ 26.207917][ T343] total_swapcached 131072 [ 26.212239][ T343] total_pgpgin 120385 [ 26.216215][ T343] total_pgpgout 43585 [ 26.220207][ T343] total_pgfault 8106 [ 26.224089][ T343] total_pgmajfault 130 [ 26.228150][ T343] total_inactive_anon 158056448 [ 26.232990][ T343] total_active_anon 156495872 [ 26.237651][ T343] total_inactive_file 4096 [ 26.242061][ T343] total_active_file 16384 [ 26.246374][ T343] total_unevictable 0 [ 26.250384][ T343] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18,pid=409,uid=0 [ 26.264966][ T343] Memory cgroup out of memory: Killed process 409 (syz.2.18) total-vm:94136kB, anon-rss:1380kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 26.834092][ T368] syz.2.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 26.847306][ T318] usb_ehset_test 3-1:8.0: probe with driver usb_ehset_test failed with error -32 [ 26.860736][ T318] usb 3-1: USB disconnect, device number 2 [ 26.890692][ T368] CPU: 1 UID: 0 PID: 368 Comm: syz.2.5 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 26.890718][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.890728][ T368] Call Trace: [ 26.890734][ T368] [ 26.890741][ T368] __dump_stack+0x21/0x30 [ 26.890763][ T368] dump_stack_lvl+0x140/0x1c0 [ 26.890780][ T368] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.890797][ T368] ? ___ratelimit+0x41c/0x5c0 [ 26.890818][ T368] ? __kasan_check_write+0x18/0x20 [ 26.890842][ T368] dump_stack+0x19/0x20 [ 26.890858][ T368] dump_header+0xd9/0x460 [ 26.890882][ T368] oom_kill_process+0x35d/0x640 [ 26.890900][ T368] out_of_memory+0x5d1/0xa20 [ 26.890917][ T368] ? __cfi_out_of_memory+0x10/0x10 [ 26.890934][ T368] ? mutex_lock_killable+0x97/0x1d0 [ 26.890956][ T368] ? __cfi_mutex_lock_killable+0x10/0x10 [ 26.890980][ T368] mem_cgroup_out_of_memory+0x2c5/0x390 [ 26.891005][ T368] ? css_next_descendant_pre+0x1ec/0x210 [ 26.891023][ T368] ? __kasan_check_write+0x18/0x20 [ 26.891046][ T368] ? drain_obj_stock+0xec0/0xec0 [ 26.891071][ T368] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 26.891095][ T368] try_charge_memcg+0x925/0xe10 [ 26.891117][ T368] ? __cfi_try_charge_memcg+0x10/0x10 [ 26.891137][ T368] ? do_try_to_free_pages+0x1ae0/0x1cb0 [ 26.891159][ T368] ? __alloc_pages_noprof+0x35a/0x7e0 [ 26.891184][ T368] __mem_cgroup_charge+0xfc/0x420 [ 26.891214][ T368] ? filemap_get_entry+0x41b/0x490 [ 26.891232][ T368] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 26.891257][ T368] filemap_add_folio+0x57/0x3e0 [ 26.891274][ T368] __filemap_get_folio+0x829/0xe80 [ 26.891292][ T368] ? downgrade_write+0x470/0x470 [ 26.891315][ T368] ? __cfi___filemap_get_folio+0x10/0x10 [ 26.891338][ T368] ? down_read+0x7f/0xe0 [ 26.891360][ T368] ? __cfi_down_read+0x10/0x10 [ 26.891381][ T368] ? filemap_map_pages+0x17c0/0x1b80 [ 26.891401][ T368] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 26.891425][ T368] filemap_fault+0xc0d/0x1b50 [ 26.891444][ T368] ? __kasan_check_write+0x18/0x20 [ 26.891468][ T368] ? __cfi_filemap_fault+0x10/0x10 [ 26.891487][ T368] ? __cfi_filemap_map_pages+0x10/0x10 [ 26.891507][ T368] ? vma_data_pages+0x105/0x140 [ 26.891534][ T368] do_pte_missing+0x364c/0x4440 [ 26.891555][ T368] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 26.891580][ T368] ? pte_marker_clear+0x1b0/0x1b0 [ 26.891600][ T368] ? shmem_replace_folio+0x9b0/0x9b0 [ 26.891618][ T368] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 26.891641][ T368] handle_mm_fault+0x1189/0x1ba0 [ 26.891658][ T368] ? __kasan_check_write+0x18/0x20 [ 26.891683][ T368] ? __cfi_handle_mm_fault+0x10/0x10 [ 26.891701][ T368] ? follow_page_pte+0x2c0/0xba0 [ 26.891725][ T368] ? gup_must_unshare+0x1e0/0x1e0 [ 26.891745][ T368] ? vma_is_secretmem+0x11/0x50 [ 26.891766][ T368] ? check_vma_flags+0x337/0x3a0 [ 26.891787][ T368] __get_user_pages+0x114b/0x22d0 [ 26.891807][ T368] ? __kasan_check_write+0x18/0x20 [ 26.891833][ T368] ? populate_vma_page_range+0x220/0x220 [ 26.891852][ T368] ? __kernel_write_iter+0x6ff/0x900 [ 26.891876][ T368] get_dump_page+0x10c/0x220 [ 26.891896][ T368] ? __cfi_get_dump_page+0x10/0x10 [ 26.891914][ T368] ? __asan_memset+0x39/0x50 [ 26.891938][ T368] dump_user_range+0x18b/0xe60 [ 26.891964][ T368] ? __cfi_dump_user_range+0x10/0x10 [ 26.891989][ T368] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 26.892008][ T368] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 26.892027][ T368] ? elf_core_dump+0x23cf/0x3840 [ 26.892048][ T368] elf_core_dump+0x2d61/0x3840 [ 26.892069][ T368] ? __cfi_elf_core_dump+0x10/0x10 [ 26.892087][ T368] ? mas_next_slot+0xf01/0xfd0 [ 26.892115][ T368] ? dump_interrupted+0xf0/0xf0 [ 26.892138][ T368] ? filp_open+0x199/0x1f0 [ 26.892157][ T368] ? 0xffffffffff600000 [ 26.892172][ T368] do_coredump+0x20d5/0x3050 [ 26.892199][ T368] ? __cfi_do_coredump+0x10/0x10 [ 26.892227][ T368] ? asm_exc_page_fault+0x2b/0x30 [ 26.892255][ T368] ? __kasan_slab_free+0x6a/0x80 [ 26.892274][ T368] ? get_signal+0xa2a/0x1490 [ 26.892291][ T368] get_signal+0x11bf/0x1490 [ 26.892310][ T368] arch_do_signal_or_restart+0xbc/0x700 [ 26.892330][ T368] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 26.892351][ T368] ? __bad_area_nosemaphore+0x2fb/0x680 [ 26.892372][ T368] irqentry_exit_to_user_mode+0x4d/0xb0 [ 26.892396][ T368] irqentry_exit+0x16/0x60 [ 26.892418][ T368] exc_page_fault+0x65/0xc0 [ 26.892439][ T368] asm_exc_page_fault+0x2b/0x30 [ 26.892460][ T368] RIP: 0033:0x7fd6bc39fb21 [ 26.892475][ T368] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 26.892488][ T368] RSP: 002b:ffffffffffffff80 EFLAGS: 00010217 [ 26.892505][ T368] RAX: 0000000000000000 RBX: 00007fd6bc626360 RCX: 00007fd6bc39fb19 [ 26.892518][ T368] RDX: 0000000000000000 RSI: ffffffffffffff80 RDI: 0000000000102200 [ 26.892530][ T368] RBP: 00007fd6bc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 26.892541][ T368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 26.892551][ T368] R13: 00007fd6bc6263f8 R14: 00007fd6bc626360 R15: 00007ffcfacfed98 [ 26.892567][ T368] [ 26.894768][ T368] memory: usage 307200kB, limit 307200kB, failcnt 27482 [ 27.406541][ T368] memory+swap: usage 431952kB, limit 9007199254740988kB, failcnt 0 [ 27.414695][ T368] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 27.421562][ T368] Memory cgroup stats for /syz2: [ 27.421703][ T368] cache 314417152 [ 27.430242][ T368] rss 114688 [ 27.433414][ T368] rss_huge 0 [ 27.436592][ T368] shmem 314400768 [ 27.440214][ T368] mapped_file 0 [ 27.443661][ T368] dirty 0 [ 27.446570][ T368] writeback 0 [ 27.449862][ T368] workingset_refault_anon 79 [ 27.454433][ T368] workingset_refault_file 3090 [ 27.459208][ T368] swap 127746048 [ 27.462741][ T368] swapcached 126976 [ 27.466520][ T368] pgpgin 120492 [ 27.469969][ T368] pgpgout 43692 [ 27.473410][ T368] pgfault 8121 [ 27.476753][ T368] pgmajfault 143 [ 27.480293][ T368] inactive_anon 158035968 [ 27.484604][ T368] active_anon 156520448 [ 27.488756][ T368] inactive_file 0 [ 27.492374][ T368] active_file 16384 [ 27.496154][ T368] unevictable 0 [ 27.499603][ T368] hierarchical_memory_limit 314572800 [ 27.504955][ T368] hierarchical_memsw_limit 9223372036854771712 [ 27.511097][ T368] total_cache 314417152 [ 27.515238][ T368] total_rss 114688 [ 27.518962][ T368] total_rss_huge 0 [ 27.522663][ T368] total_shmem 314400768 [ 27.526788][ T368] total_mapped_file 0 [ 27.530773][ T368] total_dirty 0 [ 27.534230][ T368] total_writeback 0 [ 27.538038][ T368] total_workingset_refault_anon 79 [ 27.543132][ T368] total_workingset_refault_file 3090 [ 27.548429][ T368] total_swap 127746048 [ 27.552480][ T368] total_swapcached 126976 [ 27.556779][ T368] total_pgpgin 120492 [ 27.560752][ T368] total_pgpgout 43692 [ 27.564715][ T368] total_pgfault 8121 [ 27.568600][ T368] total_pgmajfault 143 [ 27.572652][ T368] total_inactive_anon 158035968 [ 27.577473][ T368] total_active_anon 156520448 [ 27.582139][ T368] total_inactive_file 0 [ 27.586282][ T368] total_active_file 16384 [ 27.590600][ T368] total_unevictable 0 [ 27.594579][ T368] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5,pid=344,uid=0 [ 27.609031][ T368] Memory cgroup out of memory: Killed process 344 (syz.2.5) total-vm:91220kB, anon-rss:1204kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 27.988402][ T349] syz.2.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 28.031613][ T349] CPU: 0 UID: 0 PID: 349 Comm: syz.2.5 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 28.031642][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.031653][ T349] Call Trace: [ 28.031659][ T349] [ 28.031666][ T349] __dump_stack+0x21/0x30 [ 28.031688][ T349] dump_stack_lvl+0x140/0x1c0 [ 28.031705][ T349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.031721][ T349] ? ___ratelimit+0x41c/0x5c0 [ 28.031743][ T349] ? __kasan_check_write+0x18/0x20 [ 28.031768][ T349] dump_stack+0x19/0x20 [ 28.031783][ T349] dump_header+0xd9/0x460 [ 28.031808][ T349] oom_kill_process+0x35d/0x640 [ 28.031826][ T349] out_of_memory+0x5d1/0xa20 [ 28.031843][ T349] ? __cfi_out_of_memory+0x10/0x10 [ 28.031859][ T349] ? mutex_lock_killable+0x97/0x1d0 [ 28.031882][ T349] ? __cfi_mutex_lock_killable+0x10/0x10 [ 28.031905][ T349] mem_cgroup_out_of_memory+0x2c5/0x390 [ 28.031930][ T349] ? css_next_descendant_pre+0x1ec/0x210 [ 28.031948][ T349] ? __kasan_check_write+0x18/0x20 [ 28.031970][ T349] ? drain_obj_stock+0xec0/0xec0 [ 28.031995][ T349] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 28.032019][ T349] try_charge_memcg+0x925/0xe10 [ 28.032039][ T349] ? static_key_count+0x45/0x70 [ 28.032058][ T349] ? lruvec_init+0x271/0x280 [ 28.032073][ T349] ? __cfi_try_charge_memcg+0x10/0x10 [ 28.032093][ T349] ? __alloc_pages_noprof+0x35a/0x7e0 [ 28.032127][ T349] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 28.032149][ T349] __mem_cgroup_charge+0xfc/0x420 [ 28.032171][ T349] ? folio_add_lru+0x116/0x400 [ 28.032190][ T349] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 28.032214][ T349] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 28.032232][ T349] ? irqentry_exit+0x4a/0x60 [ 28.032257][ T349] ? shmem_replace_folio+0x9b0/0x9b0 [ 28.032276][ T349] ? shmem_huge_global_enabled+0x2da/0x360 [ 28.032294][ T349] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 28.032311][ T349] ? __kasan_check_write+0x18/0x20 [ 28.032333][ T349] ? _raw_spin_lock+0x92/0x120 [ 28.032351][ T349] shmem_get_folio_gfp+0x5cd/0x12e0 [ 28.032370][ T349] ? shmem_get_folio+0xc0/0xc0 [ 28.032386][ T349] ? follow_page_pte+0x8fb/0xba0 [ 28.032407][ T349] ? inode_to_bdi+0x6d/0x100 [ 28.032428][ T349] shmem_write_begin+0xf4/0x260 [ 28.032447][ T349] generic_perform_write+0x329/0x970 [ 28.032469][ T349] ? __cfi_generic_perform_write+0x10/0x10 [ 28.032489][ T349] ? generic_write_checks_count+0x426/0x540 [ 28.032510][ T349] ? file_update_time+0xa3/0x210 [ 28.032532][ T349] shmem_file_write_iter+0x105/0x130 [ 28.032553][ T349] __kernel_write_iter+0x462/0x900 [ 28.032579][ T349] ? __cfi___kernel_write_iter+0x10/0x10 [ 28.032601][ T349] ? get_dump_page+0x165/0x220 [ 28.032621][ T349] ? __asan_memset+0x39/0x50 [ 28.032643][ T349] ? iov_iter_bvec+0xc0/0x180 [ 28.032663][ T349] dump_user_range+0xb8b/0xe60 [ 28.032688][ T349] ? __cfi_dump_user_range+0x10/0x10 [ 28.032713][ T349] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 28.032732][ T349] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 28.032751][ T349] ? elf_core_dump+0x23cf/0x3840 [ 28.032771][ T349] elf_core_dump+0x2d61/0x3840 [ 28.032793][ T349] ? __cfi_elf_core_dump+0x10/0x10 [ 28.032812][ T349] ? mas_next_slot+0xf01/0xfd0 [ 28.032839][ T349] ? dump_interrupted+0xf0/0xf0 [ 28.032862][ T349] ? filp_open+0x199/0x1f0 [ 28.032883][ T349] ? 0xffffffffff600000 [ 28.032898][ T349] do_coredump+0x20d5/0x3050 [ 28.032925][ T349] ? __cfi_do_coredump+0x10/0x10 [ 28.032947][ T349] ? asm_exc_page_fault+0x2b/0x30 [ 28.032975][ T349] ? __kasan_slab_free+0x6a/0x80 [ 28.033000][ T349] ? get_signal+0xa2a/0x1490 [ 28.033016][ T349] get_signal+0x11bf/0x1490 [ 28.033034][ T349] arch_do_signal_or_restart+0xbc/0x700 [ 28.033055][ T349] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 28.033075][ T349] ? __bad_area_nosemaphore+0x2fb/0x680 [ 28.033095][ T349] irqentry_exit_to_user_mode+0x4d/0xb0 [ 28.033126][ T349] irqentry_exit+0x16/0x60 [ 28.033148][ T349] exc_page_fault+0x65/0xc0 [ 28.033168][ T349] asm_exc_page_fault+0x2b/0x30 [ 28.033189][ T349] RIP: 0033:0x7fd6bc39fb21 [ 28.033204][ T349] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 28.033218][ T349] RSP: 002b:ffffffffffffff80 EFLAGS: 00010217 [ 28.033234][ T349] RAX: 0000000000000000 RBX: 00007fd6bc626360 RCX: 00007fd6bc39fb19 [ 28.033247][ T349] RDX: 0000000000000000 RSI: ffffffffffffff80 RDI: 0000000000102200 [ 28.033260][ T349] RBP: 00007fd6bc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 28.033271][ T349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 28.033283][ T349] R13: 00007fd6bc6263f8 R14: 00007fd6bc626360 R15: 00007ffcfacfed98 [ 28.033299][ T349] [ 28.033305][ T349] memory: usage 307200kB, limit 307200kB, failcnt 28671 [ 28.504174][ T349] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 28.512136][ T349] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 28.519011][ T349] Memory cgroup stats for /syz2: [ 28.519102][ T349] cache 314417152 [ 28.527609][ T349] rss 90112 [ 28.530711][ T349] rss_huge 0 [ 28.533894][ T349] shmem 314404864 [ 28.537500][ T349] mapped_file 0 [ 28.540955][ T349] dirty 0 [ 28.543877][ T349] writeback 0 [ 28.547134][ T349] workingset_refault_anon 99 [ 28.551716][ T349] workingset_refault_file 4546 [ 28.556464][ T349] swap 127930368 [ 28.560006][ T349] swapcached 65536 [ 28.563711][ T349] pgpgin 130721 [ 28.567156][ T349] pgpgout 53921 [ 28.570606][ T349] pgfault 8586 [ 28.573963][ T349] pgmajfault 203 [ 28.577480][ T349] inactive_anon 26726400 [ 28.581709][ T349] active_anon 287834112 [ 28.585863][ T349] inactive_file 12288 [ 28.589833][ T349] active_file 0 [ 28.593277][ T349] unevictable 0 [ 28.596706][ T349] hierarchical_memory_limit 314572800 [ 28.602076][ T349] hierarchical_memsw_limit 9223372036854771712 [ 28.608231][ T349] total_cache 314417152 [ 28.612364][ T349] total_rss 90112 [ 28.615968][ T349] total_rss_huge 0 [ 28.619679][ T349] total_shmem 314404864 [ 28.623834][ T349] total_mapped_file 0 [ 28.627829][ T349] total_dirty 0 [ 28.631272][ T349] total_writeback 0 [ 28.635056][ T349] total_workingset_refault_anon 99 [ 28.640166][ T349] total_workingset_refault_file 4546 [ 28.645434][ T349] total_swap 127930368 [ 28.649493][ T349] total_swapcached 65536 [ 28.653719][ T349] total_pgpgin 130721 [ 28.657685][ T349] total_pgpgout 53921 [ 28.661665][ T349] total_pgfault 8586 [ 28.665544][ T349] total_pgmajfault 203 [ 28.669619][ T349] total_inactive_anon 26726400 [ 28.674365][ T349] total_active_anon 287834112 [ 28.679033][ T349] total_inactive_file 12288 [ 28.683524][ T349] total_active_file 0 [ 28.687484][ T349] total_unevictable 0 [ 28.691463][ T349] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5,pid=368,uid=0 [ 28.705941][ T349] Memory cgroup out of memory: Killed process 368 (syz.2.5) total-vm:91220kB, anon-rss:1332kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 28.747301][ T354] syz.2.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 28.794493][ T354] CPU: 0 UID: 0 PID: 354 Comm: syz.2.5 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 28.794525][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.794537][ T354] Call Trace: [ 28.794544][ T354] [ 28.794551][ T354] __dump_stack+0x21/0x30 [ 28.794573][ T354] dump_stack_lvl+0x140/0x1c0 [ 28.794589][ T354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.794606][ T354] ? ___ratelimit+0x41c/0x5c0 [ 28.794627][ T354] ? __kasan_check_write+0x18/0x20 [ 28.794661][ T354] dump_stack+0x19/0x20 [ 28.794678][ T354] dump_header+0xd9/0x460 [ 28.794703][ T354] oom_kill_process+0x35d/0x640 [ 28.794722][ T354] out_of_memory+0x5d1/0xa20 [ 28.794739][ T354] ? __cfi_out_of_memory+0x10/0x10 [ 28.794756][ T354] ? mutex_lock_killable+0x97/0x1d0 [ 28.794778][ T354] ? __cfi_mutex_lock_killable+0x10/0x10 [ 28.794802][ T354] mem_cgroup_out_of_memory+0x2c5/0x390 [ 28.794827][ T354] ? css_next_descendant_pre+0x1ec/0x210 [ 28.794844][ T354] ? __kasan_check_write+0x18/0x20 [ 28.794867][ T354] ? drain_obj_stock+0xec0/0xec0 [ 28.794892][ T354] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 28.794916][ T354] try_charge_memcg+0x925/0xe10 [ 28.794935][ T354] ? static_key_count+0x45/0x70 [ 28.794955][ T354] ? lruvec_init+0x271/0x280 [ 28.794972][ T354] ? __cfi_try_charge_memcg+0x10/0x10 [ 28.794993][ T354] ? __alloc_pages_noprof+0x35a/0x7e0 [ 28.795022][ T354] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 28.795044][ T354] __mem_cgroup_charge+0xfc/0x420 [ 28.795067][ T354] ? folio_add_lru+0x116/0x400 [ 28.795085][ T354] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 28.795108][ T354] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 28.795128][ T354] ? shmem_replace_folio+0x9b0/0x9b0 [ 28.795145][ T354] ? shmem_huge_global_enabled+0x2da/0x360 [ 28.795163][ T354] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 28.795181][ T354] ? __kasan_check_write+0x18/0x20 [ 28.795203][ T354] ? _raw_spin_lock+0x92/0x120 [ 28.795221][ T354] shmem_get_folio_gfp+0x5cd/0x12e0 [ 28.795239][ T354] ? shmem_get_folio+0xc0/0xc0 [ 28.795254][ T354] ? follow_page_pte+0x8fb/0xba0 [ 28.795275][ T354] ? inode_to_bdi+0x6d/0x100 [ 28.795297][ T354] shmem_write_begin+0xf4/0x260 [ 28.795315][ T354] generic_perform_write+0x329/0x970 [ 28.795336][ T354] ? __cfi_generic_perform_write+0x10/0x10 [ 28.795356][ T354] ? generic_write_checks_count+0x426/0x540 [ 28.795378][ T354] ? file_update_time+0xa3/0x210 [ 28.795401][ T354] shmem_file_write_iter+0x105/0x130 [ 28.795422][ T354] __kernel_write_iter+0x462/0x900 [ 28.795447][ T354] ? __cfi___kernel_write_iter+0x10/0x10 [ 28.795471][ T354] ? get_dump_page+0x165/0x220 [ 28.795491][ T354] ? __asan_memset+0x39/0x50 [ 28.795513][ T354] ? iov_iter_bvec+0xc0/0x180 [ 28.795534][ T354] dump_user_range+0xb8b/0xe60 [ 28.795562][ T354] ? __cfi_dump_user_range+0x10/0x10 [ 28.795587][ T354] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 28.795607][ T354] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 28.795627][ T354] ? elf_core_dump+0x23cf/0x3840 [ 28.795647][ T354] elf_core_dump+0x2d61/0x3840 [ 28.795668][ T354] ? __cfi_elf_core_dump+0x10/0x10 [ 28.795687][ T354] ? mas_next_slot+0xf01/0xfd0 [ 28.795714][ T354] ? dump_interrupted+0xf0/0xf0 [ 28.795736][ T354] ? filp_open+0x199/0x1f0 [ 28.795757][ T354] ? 0xffffffffff600000 [ 28.795772][ T354] do_coredump+0x20d5/0x3050 [ 28.795797][ T354] ? __cfi_do_coredump+0x10/0x10 [ 28.795820][ T354] ? asm_exc_page_fault+0x2b/0x30 [ 28.795848][ T354] ? __kasan_slab_free+0x6a/0x80 [ 28.795866][ T354] ? get_signal+0xa2a/0x1490 [ 28.795883][ T354] get_signal+0x11bf/0x1490 [ 28.795901][ T354] arch_do_signal_or_restart+0xbc/0x700 [ 28.795922][ T354] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 28.795943][ T354] ? __bad_area_nosemaphore+0x2fb/0x680 [ 28.795964][ T354] irqentry_exit_to_user_mode+0x4d/0xb0 [ 28.795988][ T354] irqentry_exit+0x16/0x60 [ 28.796016][ T354] exc_page_fault+0x65/0xc0 [ 28.796038][ T354] asm_exc_page_fault+0x2b/0x30 [ 28.796059][ T354] RIP: 0033:0x7fd6bc39fb21 [ 28.796074][ T354] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 28.796088][ T354] RSP: 002b:ffffffffffffff80 EFLAGS: 00010217 [ 28.796105][ T354] RAX: 0000000000000000 RBX: 00007fd6bc626360 RCX: 00007fd6bc39fb19 [ 28.796118][ T354] RDX: 0000000000000000 RSI: ffffffffffffff80 RDI: 0000000000102200 [ 28.796130][ T354] RBP: 00007fd6bc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 28.796142][ T354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 28.796153][ T354] R13: 00007fd6bc6263f8 R14: 00007fd6bc626360 R15: 00007ffcfacfed98 [ 28.796168][ T354] [ 28.796174][ T354] memory: usage 306932kB, limit 307200kB, failcnt 29604 [ 29.263963][ T354] memory+swap: usage 431800kB, limit 9007199254740988kB, failcnt 0 [ 29.271924][ T354] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 29.278796][ T354] Memory cgroup stats for /syz2: [ 29.278939][ T354] cache 314048512 [ 29.287481][ T354] rss 212992 [ 29.290683][ T354] rss_huge 0 [ 29.293867][ T354] shmem 314036224 [ 29.297476][ T354] mapped_file 0 [ 29.300933][ T354] dirty 0 [ 29.303856][ T354] writeback 0 [ 29.307114][ T354] workingset_refault_anon 149 [ 29.311782][ T354] workingset_refault_file 5163 [ 29.316527][ T354] swap 127590400 [ 29.320067][ T354] swapcached 405504 [ 29.323860][ T354] pgpgin 141180 [ 29.327300][ T354] pgpgout 64380 [ 29.330750][ T354] pgfault 8736 [ 29.334104][ T354] pgmajfault 246 [ 29.337621][ T354] inactive_anon 219844608 [ 29.341938][ T354] active_anon 94715904 [ 29.345987][ T354] inactive_file 12288 [ 29.349957][ T354] active_file 0 [ 29.353407][ T354] unevictable 0 [ 29.356837][ T354] hierarchical_memory_limit 314572800 [ 29.362205][ T354] hierarchical_memsw_limit 9223372036854771712 [ 29.368357][ T354] total_cache 314048512 [ 29.372492][ T354] total_rss 212992 [ 29.376185][ T354] total_rss_huge 0 [ 29.379893][ T354] total_shmem 314036224 [ 29.384030][ T354] total_mapped_file 0 [ 29.388003][ T354] total_dirty 0 [ 29.391471][ T354] total_writeback 0 [ 29.395248][ T354] total_workingset_refault_anon 149 [ 29.400442][ T354] total_workingset_refault_file 5163 [ 29.405716][ T354] total_swap 127590400 [ 29.409774][ T354] total_swapcached 405504 [ 29.414083][ T354] total_pgpgin 141180 [ 29.418063][ T354] total_pgpgout 64380 [ 29.422027][ T354] total_pgfault 8736 [ 29.425892][ T354] total_pgmajfault 246 [ 29.429948][ T354] total_inactive_anon 219844608 [ 29.434784][ T354] total_active_anon 94715904 [ 29.439376][ T354] total_inactive_file 12288 [ 29.443868][ T354] total_active_file 0 [ 29.447844][ T354] total_unevictable 0 [ 29.451809][ T354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5,pid=355,uid=0 [ 29.466253][ T354] Memory cgroup out of memory: Killed process 355 (syz.2.5) total-vm:91220kB, anon-rss:1332kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 29.507284][ T345] syz.2.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 29.520271][ T345] CPU: 0 UID: 0 PID: 345 Comm: syz.2.5 Not tainted syzkaller #0 0c030cdb70aa168b576854936edd9d842bbb5d94 [ 29.520296][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.520308][ T345] Call Trace: [ 29.520314][ T345] [ 29.520321][ T345] __dump_stack+0x21/0x30 [ 29.520342][ T345] dump_stack_lvl+0x140/0x1c0 [ 29.520358][ T345] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.520375][ T345] ? ___ratelimit+0x41c/0x5c0 [ 29.520396][ T345] ? __kasan_check_write+0x18/0x20 [ 29.520421][ T345] dump_stack+0x19/0x20 [ 29.520437][ T345] dump_header+0xd9/0x460 [ 29.520469][ T345] oom_kill_process+0x35d/0x640 [ 29.520487][ T345] out_of_memory+0x5d1/0xa20 [ 29.520504][ T345] ? __cfi_out_of_memory+0x10/0x10 [ 29.520521][ T345] ? mutex_lock_killable+0x97/0x1d0 [ 29.520544][ T345] ? __cfi_mutex_lock_killable+0x10/0x10 [ 29.520567][ T345] mem_cgroup_out_of_memory+0x2c5/0x390 [ 29.520591][ T345] ? css_next_descendant_pre+0x1ec/0x210 [ 29.520610][ T345] ? __kasan_check_write+0x18/0x20 [ 29.520633][ T345] ? drain_obj_stock+0xec0/0xec0 [ 29.520658][ T345] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 29.520682][ T345] try_charge_memcg+0x925/0xe10 [ 29.520701][ T345] ? static_key_count+0x45/0x70 [ 29.520721][ T345] ? lruvec_init+0x271/0x280 [ 29.520737][ T345] ? __cfi_try_charge_memcg+0x10/0x10 [ 29.520758][ T345] ? __alloc_pages_noprof+0x35a/0x7e0 [ 29.520780][ T345] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.520802][ T345] __mem_cgroup_charge+0xfc/0x420 [ 29.520825][ T345] ? do_pte_missing+0x3894/0x4440 [ 29.520845][ T345] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 29.520869][ T345] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 29.520890][ T345] ? shmem_replace_folio+0x9b0/0x9b0 [ 29.520909][ T345] ? shmem_huge_global_enabled+0x2da/0x360 [ 29.520927][ T345] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 29.520944][ T345] ? __kasan_check_write+0x18/0x20 [ 29.520966][ T345] ? _raw_spin_lock+0x92/0x120 [ 29.520983][ T345] shmem_get_folio_gfp+0x5cd/0x12e0 [ 29.521003][ T345] ? shmem_get_folio+0xc0/0xc0 [ 29.521019][ T345] ? __kasan_check_write+0x18/0x20 [ 29.521042][ T345] ? inode_to_bdi+0x6d/0x100 [ 29.521062][ T345] shmem_write_begin+0xf4/0x260 [ 29.521079][ T345] generic_perform_write+0x329/0x970 [ 29.521099][ T345] ? inode_update_timestamps+0x4d1/0x6e0 [ 29.521123][ T345] ? __cfi_generic_perform_write+0x10/0x10 [ 29.521142][ T345] ? generic_write_checks_count+0x426/0x540 [ 29.521162][ T345] ? mnt_get_write_access_file+0x1af/0x3b0 [ 29.521183][ T345] ? mnt_put_write_access_file+0xc2/0x100 [ 29.521205][ T345] ? file_update_time+0x1de/0x210 [ 29.521226][ T345] shmem_file_write_iter+0x105/0x130 [ 29.521246][ T345] __kernel_write_iter+0x462/0x900 [ 29.521271][ T345] ? __cfi___kernel_write_iter+0x10/0x10 [ 29.521294][ T345] ? get_dump_page+0x165/0x220 [ 29.521314][ T345] ? __asan_memset+0x39/0x50 [ 29.521337][ T345] ? iov_iter_bvec+0xc0/0x180 [ 29.521358][ T345] dump_user_range+0xb8b/0xe60 [ 29.521384][ T345] ? __cfi_dump_user_range+0x10/0x10 [ 29.521410][ T345] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 29.521429][ T345] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 29.521501][ T345] ? elf_core_dump+0x23cf/0x3840 [ 29.521529][ T345] elf_core_dump+0x2d61/0x3840 [ 29.521552][ T345] ? __cfi_elf_core_dump+0x10/0x10 [ 29.521571][ T345] ? mas_next_slot+0xf01/0xfd0 [ 29.521609][ T345] ? dump_interrupted+0xf0/0xf0 [ 29.521633][ T345] ? filp_open+0x199/0x1f0 [ 29.521653][ T345] ? 0xffffffffff600000 [ 29.521669][ T345] do_coredump+0x20d5/0x3050 [ 29.521695][ T345] ? __cfi_do_coredump+0x10/0x10 [ 29.521717][ T345] ? asm_exc_page_fault+0x2b/0x30 [ 29.521746][ T345] ? __kasan_slab_free+0x6a/0x80 [ 29.521764][ T345] ? get_signal+0xa2a/0x1490 [ 29.521781][ T345] get_signal+0x11bf/0x1490 [ 29.521799][ T345] arch_do_signal_or_restart+0xbc/0x700 [ 29.521820][ T345] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 29.521840][ T345] ? __bad_area_nosemaphore+0x2fb/0x680 [ 29.521858][ T345] irqentry_exit_to_user_mode+0x4d/0xb0 [ 29.521881][ T345] irqentry_exit+0x16/0x60 [ 29.521901][ T345] exc_page_fault+0x65/0xc0 [ 29.521923][ T345] asm_exc_page_fault+0x2b/0x30 [ 29.521944][ T345] RIP: 0033:0x7fd6bc39fb21 [ 29.521960][ T345] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 29.521975][ T345] RSP: 002b:ffffffffffffff80 EFLAGS: 00010217 [ 29.521991][ T345] RAX: 0000000000000000 RBX: 00007fd6bc626360 RCX: 00007fd6bc39fb19 [ 29.522004][ T345] RDX: 0000000000000000 RSI: ffffffffffffff80 RDI: 0000000000102200 [ 29.522016][ T345] RBP: 00007fd6bc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 29.522027][ T345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 29.522038][ T345] R13: 00007fd6bc6263f8 R14: 00007fd6bc626360 R15: 00007ffcfacfed98 [ 29.522054][ T345] [ 29.522061][ T345] memory: usage 307192kB, limit 307200kB, failcnt 30613 [ 30.007290][ T345] memory+swap: usage 370628kB, limit 9007199254740988kB, failcnt 0 [ 30.015259][ T345] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 30.022149][ T345] Memory cgroup stats for /syz2: [ 30.022278][ T345] cache 250118144 [ 30.030898][ T345] rss 196608 [ 30.034133][ T345] rss_huge 0 [ 30.037365][ T345] shmem 247320576 [ 30.041050][ T345] mapped_file 2621440 [ 30.045059][ T345] dirty 0 [ 30.048056][ T345] writeback 57344 [ 30.051715][ T345] workingset_refault_anon 180 [ 30.056419][ T345] workingset_refault_file 5878 [ 30.061239][ T345] swap 119975936 [ 30.064816][ T345] swapcached 454656 [ 30.068768][ T345] pgpgin 149905 [ 30.072259][ T345] pgpgout 88650 [ 30.075748][ T345] pgfault 8924 [ 30.079313][ T345] pgmajfault 271 [ 30.082895][ T345] inactive_anon 143011840 [ 30.087248][ T345] active_anon 104648704 [ 30.091669][ T345] inactive_file 0 [ 30.095342][ T345] active_file 2801664 [ 30.099499][ T345] unevictable 0 [ 30.103100][ T345] hierarchical_memory_limit 314572800 [ 30.108796][ T345] hierarchical_memsw_limit 9223372036854771712 [ 30.114987][ T345] total_cache 250118144 [ 30.119347][ T345] total_rss 196608 [ 30.123100][ T345] total_rss_huge 0 [ 30.126844][ T345] total_shmem 247320576 [ 30.131230][ T345] total_mapped_file 2621440 [ 30.135772][ T345] total_dirty 0 [ 30.140551][ T345] total_writeback 57344 [ 30.150122][ T345] total_workingset_refault_anon 180 [ 30.160748][ T345] total_workingset_refault_file 5878 [ 30.171541][ T345] total_swap 119975936 [ 30.179992][ T345] total_swapcached 454656 [ 30.187905][ T345] total_pgpgin 149905 [ 30.196265][ T345] total_pgpgout 88650 [ 30.204757][ T345] total_pgfault 8924 [ 30.213032][ T345] total_pgmajfault 271 [ 30.221467][ T345] total_inactive_anon 143011840 [ 30.231788][ T345] total_active_anon 104648704 [ 30.240852][ T345] total_inactive_file 0 [ 30.249372][ T345] total_active_file 2801664 [ 30.259331][ T345] total_unevictable 0 [ 30.266598][ T345] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5,pid=349,uid=0 [ 30.297628][ T345] Memory cgroup out of memory: OOM victim 349 (syz.2.5) is already exiting. Skip killing the task