last executing test programs: 3m5.841007466s ago: executing program 2 (id=3): r0 = socket(0x15, 0x80000, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f0000000140)={0x0}}, 0x20008000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="1c00080000000000000000017aa60864e31ad67477f51a4a77622d1ba00a11e51884a3abd36e09cd373b83ec0cd918e898f81a7ec826", 0x36}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000780)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fedbdf2510000000080001007063690011000200303030303a30303a31302e300000000008000b00010000000600110002000000080013000200000005001400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00b40300000600110000000000080013000800000005001400000000000e0001006e657464657673696dfff3000f0002006e657464657673696d30000008000b0001000000060011000200000008001300040000000500140001000000e704a7722176341d2d4c70cfec4ae9d894bfdfe6e3323aa33eedcd1b47c0598a7514f1a2aad263a439a767d3d453248b9dc76d88a9d5d00e7d0471287bdb4ecb6500c25095805e715fca05149cd47810410288b17d3a6bf46bcffaf9d4bb58e111c7656eab88702e0959dce047f6142219849ecd0fd035335043fc66cb4297b46d6cb9b183fb03310dac79a9ec85993b15f20b731cc600a30c01d5ff457cf19b3a652568856c9805baf7"], 0xd0}, 0x1, 0x0, 0x0, 0x4840}, 0x25) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2240, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$bt_hci(r6, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0x1, 0xfffffff9}, 0x14) 3m5.140137427s ago: executing program 2 (id=8): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x30, r2, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004084) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1}, 0x10, 0x0}, 0x4) 3m5.069610501s ago: executing program 2 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r1, 0x20b, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x6c, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0xc, 0x112, 0x0, 0x1, [@nested={0x8, 0x28, 0x0, 0x1, [@nested={0x4, 0x85}]}]}, @generic="7981f2d259aee4265a92a7f97f613c08384ccaa855d725959b7da912450ed3e9e5df3ed15038ed094170b17308aef260d885de2db97828b95928854a7b83b977cc374ec859d41a2bb1e71d572e"]}, 0x6c}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3c) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f01c40f79bf4f7b660f3880487865660f0050e37d0bc866b8010000000f01c10fc72f66b8e62366790f23c00f21f86635010007000f23f83e0fc75c1a0fc7989000", 0x42}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m4.955700938s ago: executing program 2 (id=10): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) unshare(0x6020400) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='q', 0x1, 0x40000, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r4, 0xa, 0x5, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 3m4.161150324s ago: executing program 2 (id=15): r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x5, &(0x7f0000000480)=0x7f) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) (async) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) (async) openat(r2, &(0x7f0000000000)='./file0\x00', 0x200, 0x8) 3m4.124346477s ago: executing program 2 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x82, 0x11, 0x0, @loopback, @multicast1}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "562d9ba90683726398023d5cc4caf4390083568d7c99bfb9", "eb835fb65c8b9ae493d4fb662704b8db08835fefb6a4d7ea9378cfc98b077903"}}}}}}}, 0x6e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) fchdir(r5) rmdir(&(0x7f0000000040)='./bus\x00') 3m4.076085749s ago: executing program 32 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x82, 0x11, 0x0, @loopback, @multicast1}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "562d9ba90683726398023d5cc4caf4390083568d7c99bfb9", "eb835fb65c8b9ae493d4fb662704b8db08835fefb6a4d7ea9378cfc98b077903"}}}}}}}, 0x6e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000000)) fchdir(r5) rmdir(&(0x7f0000000040)='./bus\x00') 2m20.156615422s ago: executing program 0 (id=325): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x5, &(0x7f0000000000)) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00') ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x6, 0x804, 0x7, 0xf, 0xd, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x103, 0x3, 0x1000000000001], 0x8000000, 0x34f201}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x50, 0x6, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async) close(r1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x4, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"291ea92d3f2a15fe8f780f3fdcd99b1e9aacd2a51fdb247c4d37dc0ec602a055ae64e45ae4be159458e959529eeef665d0d6478956ba5fab2f864355e4979de8646a4dd5eb7acd32ad8b0f0f39845cb8bc2059c4696e88bfc1df77deeb5f08519f44f1870218014e0d0c3cda9dc0a93b472704b39fb3c7893c75a099b54e6581c8a700522273a7a6ee79f6f3ad081738ef6e2db3999c6882089a8748b3133a647413c1a0d0f583f8442831759f254a6d1058086134f2ee3e80354ccdfd47041979e5ddf0db074b334f49324b822cb90e3116fa98fe1a2611241802ef8dd599f21b156f9c7010126a0f3d982dc5e4c96675a97c5ea6695baa8420277a8e5aa91dfda880a4593f23ae8008ff6974c7907574a2e8baa48ecf67f7b35b971d25e517eeabd5aab979ed721fc4b7c2979493942d7c2b9a1074c2536c1d36e91cde8ba894ba2123a31c1bb91589951b88d6fefcce8b8ac77dd6c17b30dd89ca820e9b4c5ded065069b1e4f945217ca5641b9caa9ad30ee0bb8780ddee10770fec72c93fbd6d211b7f89e3d1e125cd0a0357ba6d1c0687ac62e52f3131829fe3d454ac0b668acd59f69604ef19fc86a33dd0c0f339f3790603bfdae4ce8f57f19412c9804e72c3f238a1004a1729ea64fdf36f74ac9dd8e8ee04421fc1cb213c90d3f1d781073059c8ea74690e534ff9a17d341741b3d46986bfa5232f733b01bc1fc4dd6a35951997c324debfd7bd0f6ffe7f53b1c473ac34b1873a559bb7e6ce916ff73b7d04105923bb2c0bc472b59e17593ca2577aefb586e779ce2ca711d084de10eda2d6fbefbb311953dc5fcf065d9c13891291aaa51d3e63a97ec08873e166271a77b9c9f292d550f33f1d66a41d2c36f93092252b8e2e3130212f42a805704b0f7e2df39fd11bd9c7476316fee3d8991605f678d5df351357247ab2a1a03f1ed76adc73263018dcbd4192d868310d692bc04e37c87f55c6cf91db720346215f372a7a7c1e040de8f10b69f4b23e4e10a8522563a6ff2a3cbfb8c29fb36274371cadf0fa5b95ab3199b7bfce45a70be145afbac9f5316d7c03959c020cdce1a82a0253a55e09b7ea4b61e8da27078dd4357297c90b8501a5130ca5bb567418f9398eb44fb480e5d78488e63a1287a0a10e3516022b8034df450db4ff8a370a755211f4eb00c8f0f6b666596df69aeb54ba6a017d654a65b53a7b57ee29b07b99bb09b6ebe9c9cbbf6ca8e735500456dbca03325d58c1facd044ed73a8b89351be1ceda4c9e19004df6e7e4c7d73b999dc83a193e67622487f6fd317ff48a8b6d5437289995f0994b9ced400388a09d0eaa6232594ae7ab48ba470b14e7047d6a563210b8e9ac789be74c36408da0f1bc32460b36039fe2fcf8691b56677b7d0c7ec96ea5ed8ad10c618cc2c6f76dcf913ea35953e08ac7ddb4389b9323f2b372"}) (async) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0xffffffff, 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x14) 2m20.092130496s ago: executing program 0 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x2}, 0xb) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x2}, 0xb) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 2m19.990342501s ago: executing program 0 (id=329): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0xfffffffffffffffe) 2m16.92864717s ago: executing program 0 (id=338): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x3080, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}}) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="8edded", @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf25020000000c0001800800030007000000"], 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000894) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005f3000/0x2000)=nil) mremap(&(0x7f00000d5000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000712000/0x1000)=nil) 2m16.817408076s ago: executing program 0 (id=339): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff16}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2m16.76961815s ago: executing program 0 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket(0x1e, 0x1, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'pim6reg1\x00', @broadcast}) (async) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 2m16.711144473s ago: executing program 33 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket(0x1e, 0x1, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'pim6reg1\x00', @broadcast}) (async) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 2m1.561723697s ago: executing program 4 (id=442): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (rerun: 32) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x3000426) utime(&(0x7f0000000000)='./file0\x00', 0x0) pread64(r1, &(0x7f00000000c0)=""/71, 0x47, 0x1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syncfs(r0) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (rerun: 64) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}) (async) pread64(r0, 0x0, 0x0, 0xc2a) 2m1.545199648s ago: executing program 4 (id=443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) clock_settime(0xfffffffc, &(0x7f0000000300)={0x77359400}) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000080)=0x1, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x61, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x28) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000240)=[{r4, 0x10}], 0x1, 0x5) 2m0.806745621s ago: executing program 4 (id=457): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006306"], 0x13c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006306"], 0x13c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000000010004000000000015000000aa14000400fe8000000000000000000000000000260c000280050001002100"/80], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000090024206d041cc140000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 2m0.266741973s ago: executing program 4 (id=460): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @private=0xa010102}, {0x306}, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}, 'veth1\x00'}) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'workdir', 0x3a, '', 0x3a, './file1/file0'}, 0x34) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'bond_slave_1\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x34}}) 2m0.226951925s ago: executing program 4 (id=461): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x3d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xa0000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x15, 0x400, 0x70bd29, 0x25dfdbfc, {0xa, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "506ac1"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 2m0.049562775s ago: executing program 4 (id=462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38b7c4cc49e8324113e0c15b81d7daf9"]}]}, 0x38}], 0x1}, 0xcc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) geteuid() sendmsg$netlink(r3, 0x0, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) geteuid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'pimreg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@local, @mcast1, @remote, 0x80000000, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x100010, r10}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r11, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000400)="2e0fc774f40fc7a81725b800088ee0f0f61a2e65650f01c80f01ca66b98208000066b8790a000066ba000000000f30660f3839ff640f0f900900a6d9fd", 0x3d}], 0x1, 0x2, &(0x7f0000000480), 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8], 0x15) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) 1m45.05287204s ago: executing program 34 (id=462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38b7c4cc49e8324113e0c15b81d7daf9"]}]}, 0x38}], 0x1}, 0xcc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) geteuid() sendmsg$netlink(r3, 0x0, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) geteuid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'pimreg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@local, @mcast1, @remote, 0x80000000, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x100010, r10}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r11, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000400)="2e0fc774f40fc7a81725b800088ee0f0f61a2e65650f01c80f01ca66b98208000066b8790a000066ba000000000f30660f3839ff640f0f900900a6d9fd", 0x3d}], 0x1, 0x2, &(0x7f0000000480), 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8], 0x15) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) 51.944927709s ago: executing program 6 (id=846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000000, 0xec000000}, {0x19d, 0x0, 0xff}]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sigaltstack(&(0x7f0000000040)={&(0x7f0000000240)=""/215, 0x3, 0xd7}, &(0x7f00000000c0)={&(0x7f0000000340)=""/168, 0x0, 0xa8}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e23, @empty}, {0x6, @random="5124215944ea"}, 0x48, {0x2, 0x4e23, @rand_addr=0x64010100}, 'batadv0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.790422108s ago: executing program 6 (id=847): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x12000, &(0x7f00000008c0)=ANY=[@ANYBLOB="5d8736", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030b6ee96e605f1768ce3574630303030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB="2c63726f75705f69643d38582fae7c932f7c6048fb41c66bd5ccd2b1b09a591a5821659f8b3c16f7f9b25f346ff4e246872ff1896bd1cb829250a93b50adc837f457214f675a6edaff5af875ca881ca2e478e7f7c9bb2ee6599cdecb0249818ddcad443559042c96", @ANYRESDEC=0x0]) (async) rename(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='./file0\x00') (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x1940a040, 0x82, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) (async) alarm(0x60) (async) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x18, 0x1, 0x1) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) getsockopt$inet_int(r3, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) (async) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r5, 0xf1ad, 0x2, 0x0) (async) process_vm_readv(0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/172, 0xac}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r7 = dup3(r1, r6, 0x6700000000000000) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r5, 0x6, &(0x7f0000000140)={0x1, 0x3, 0x2, 0x6, r8}) (async, rerun: 64) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80) (rerun: 64) alarm(0x80000000) (async) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f0000000040)=""/228) r10 = socket(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @local, 0x3}, 0x1c) (async) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in=@dev}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000080)=0x6, 0x4) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='cramfs\x00', 0x200000, 0x0) 51.732160761s ago: executing program 6 (id=848): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="af0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000380006800c000380060002004e22000014949a75c3600b28000400fe80000000000000000000000000001314000500fe8000000000000000"], 0xcc}}, 0x0) 51.642473957s ago: executing program 6 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x519c, 0xd, 0xfffffffd}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)='/][@@@\x00', 0x7, 0x1) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x37a, 0x0, 0x8}, {0x3be, 0x0, 0x8}]}) 51.514509184s ago: executing program 6 (id=850): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) close(r1) fcntl$getflags(r0, 0x401) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0x0, 0xfffffffe}, {0xfffffffffffffff7, 0x645d}, 0x3, 0x6}) open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) (async) fcntl$setlease(r0, 0x400, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) (async) close(r1) (async) fcntl$getflags(r0, 0x401) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0x0, 0xfffffffe}, {0xfffffffffffffff7, 0x645d}, 0x3, 0x6}) (async) 51.446327288s ago: executing program 6 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x7, {{0x2, 0x4e21, @local}}}, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000001400)=0xe) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000007060500020000000000000005000002"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x21d, 0x1, 0x3, 0x7, 0x7e, 0x3}, 0xc) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00001fc000/0x2000)=nil, 0x2000}, 0x2}) 51.363262333s ago: executing program 35 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = dup(r0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x7, {{0x2, 0x4e21, @local}}}, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000001400)=0xe) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000007060500020000000000000005000002"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x21d, 0x1, 0x3, 0x7, 0x7e, 0x3}, 0xc) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00001fc000/0x2000)=nil, 0x2000}, 0x2}) 15.502439455s ago: executing program 3 (id=1227): timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x185040, 0x1a8) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x185040, 0x1a8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5c5782, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5c5782, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="e02d6f4e420b9fcc77b4b2038b55ce621d0d01e84256c78d914235", 0x1b}, {&(0x7f0000000300)="6b874712d9bab78f6a47e02b46eb18d930df67195008b5b084b667772b24c3a08878e98364247522c30079bf0e2f7f2d77719a7ad26fdd524530d3314c3e8c8917e9e4a388f33435cbc39f70a84aeb40fab702ddb1b05a14603991eb90ab16d970a089fe5c17b8be4527f2b4058936833597647604a205abb9a7d715183e856c816109eb01a6b57eb8ecec7f2a18e99344c6ae4db13d027b3910b04c7a1c5ec48c3fbd3cc348ded6d5deace80b9f2c10d17a", 0xc16f35477dd8dfa3}], 0x2, 0x0, 0x3) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) (async) keyctl$assume_authority(0x10, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80e00, 0x0) unshare(0x64000600) syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), 0xffffffffffffffff) unshare(0x4000000) (async) unshare(0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008e7043000ff0000000001090224000100006003090400000203000000092103000801220700090581031000060a03"], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'veth1_to_team\x00', 0x10}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=r5], 0xfdef) (async) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=r5], 0xfdef) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r8, 0xff, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) 12.468205483s ago: executing program 3 (id=1247): socket$nl_generic(0x10, 0x3, 0x10) r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000540)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.294856053s ago: executing program 3 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732800000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24044015) 12.241664916s ago: executing program 3 (id=1249): r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3f7, &(0x7f00000000c0)=[{0xb3, 0x6, 0x6}, {0xb, 0x4, 0x7fffffff}, {0x9, 0x3, 0x4}, {0xffffffff, 0x5, 0x9}, {0x5fa, 0x6}, {0x9, 0x81, 0x8000000000000001}, {0xc4a6, 0xd, 0x101}, {0xf, 0x0, 0x3}], 0x8, 0xffffffffffff1e45, 0x0, 0x3, 0x20, 0x22}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1510d0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x41) umount2(&(0x7f0000000080)='./file0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) 12.241497946s ago: executing program 3 (id=1250): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 12.107970274s ago: executing program 3 (id=1252): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x2, 0x100000003}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x62040200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xcb) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r1, 0xeca6b000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000040)={0x1}) inotify_init() mount$bind(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200), 0x4000, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000240)="900000001d001f4d154a817393278bff0a800500000000000000840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed4959a6215be0000766436d0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090284000f010980090904000005010100000a2401d000f402010206240506"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 12.070702876s ago: executing program 36 (id=1252): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x2, 0x100000003}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x62040200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xcb) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r1, 0xeca6b000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000040)={0x1}) inotify_init() mount$bind(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200), 0x4000, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000240)="900000001d001f4d154a817393278bff0a800500000000000000840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed4959a6215be0000766436d0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090284000f010980090904000005010100000a2401d000f402010206240506"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 9.961771309s ago: executing program 5 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x208000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@local, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x20, 0x100, 0x8, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x5c, 0x1, 0xa, [{@empty, 0x9}]}, @ssrr={0x89, 0x7, 0x4c, [@private=0xa010102]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf250700000008000400a62200000500050006008008000700bc1ee2cabcc091334f9ce1cb4a1cde4eb925f5f17106495333b91c78ac460c3927b2d2bcf257acfbe5b4345b2b1cfd3f436a47df", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0c000180060001000a0000000c000180060005004e230000040001800800020005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x100}, 0x80) 9.94294473s ago: executing program 5 (id=1281): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x206e) wait4(r2, &(0x7f0000000080), 0x4, &(0x7f0000000200)) 9.845601856s ago: executing program 5 (id=1282): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000500)="ac36930d12a3fe9b", 0x8}], 0x1}}], 0x1, 0x20004841) syz_usb_connect(0x1, 0x7e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xaa, 0x4, 0x5f, 0x40, 0x525, 0x2888, 0x85b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0xff}}]}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000500)="ac36930d12a3fe9b", 0x8}], 0x1}}], 0x1, 0x20004841) (async) syz_usb_connect(0x1, 0x7e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xaa, 0x4, 0x5f, 0x40, 0x525, 0x2888, 0x85b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0xff}}]}}, 0x0) (async) 6.86037199s ago: executing program 5 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f00000043c0)=""/4088, 0xff8}], 0x4}, 0x5f}], 0x1, 0x2, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0xff80) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x8a101, 0x112) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) r5 = syz_usb_connect(0x2, 0x59, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000780)=0xe) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0x23, {0x23, 0x4, "c066cc54acc13751280610ecd015b596baa372cbb023ac353405290637a953a099"}}, &(0x7f0000000080)={0x0, 0x3, 0x82, @string={0x82, 0x3, "29ad66aa62221bf11b0c156db0c1985f08ddca72c4ab85ae12079e862e544d3ec92f01d123a6e495e3ecb6b6f81e3a0f272b6c18b64915175e28ec37073ab98ad215c265be3ae9297efda7eca77092136990477b0d87fad040541cef721765d280b7cc04f6e59dc97bbe6493e44b78cc9f6f9f2ff769a8255e1c3efed2808394"}}, &(0x7f0000000140)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "9bf412a72e0f180a47325886d3d6650c"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x2, 0x4d, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x46, "307347aeadad5e0592ebbe7c229ee7a7"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xdc, 0x7f, 0xe838}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x8, 0x7, "65e50408", "947f564a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x18, 0x2, 0x6b, 0x7, 0x42, 0xae0}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0xd, 0xb, "2a75e251829ec01fd58bd5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x4, 0x1, [0xf00]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xde}, &(0x7f0000000480)={0x40, 0xb, 0x2, "f567"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x734d}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "c151"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x2}}) 6.017570519s ago: executing program 7 (id=1314): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x60d3, 0x10000000005}) r1 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000e41000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x13732000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f00007ae000/0x2000)=nil, r3, 0x0, 0x10, r4, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write(r2, &(0x7f0000000080)="fe864d3e", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000500)="87", 0x1}], 0x1) madvise(&(0x7f0000ee9000/0x2000)=nil, 0x2000, 0x19) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r8 = dup(r7) write$UHID_CREATE2(r8, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xee9, 0x4, 0x4, 0x1ff, 0x40, 0x3d4d, "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"}}, 0x1001) mmap$usbfs(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r8, 0x6) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xa0}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00008c4000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') 6.016748599s ago: executing program 7 (id=1315): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, r0, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @broadcast}, 0x2, {0x2, 0x4e20, @private=0xa010100}, 'veth1_virt_wifi\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00003ad000/0x2000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f000068a000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f00000e4000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0x78, 0xc041, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000240)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09398c0900000f32b80100000001c12e644c0fc72f", 0x32}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x3, 0xf, 0x2d6c00000000000, 0x9539, 0x8000000000000000, 0xb3, 0x10001, 0xb1d, 0x4000000000000008, 0xffff, 0x81, 0x3d9, 0x51, 0x80e5, 0x9], 0x1000, 0x383fc2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) 5.1436313s ago: executing program 7 (id=1320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fremovexattr(r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) sendmmsg(r4, &(0x7f0000000080), 0x40000000000016b, 0x24008800) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="eb9ec69c", @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r6) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20041884}, 0x4000) 5.130492361s ago: executing program 7 (id=1321): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) 5.057725945s ago: executing program 7 (id=1322): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='1-', @ANYRESOCT], 0x31) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x3, 0x356}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) 3.802042558s ago: executing program 5 (id=1333): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 'id1\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={0x0, 0xceb0, 0x1, [0xffffffffffffffe0, 0x3, 0x10001, 0x7, 0x24d], [0x94, 0x0, 0x3, 0x80000000, 0x2, 0xffffffffffffff00, 0x5, 0x1, 0x9, 0xfffffffffffffffe, 0x88, 0xb0, 0x6, 0x0, 0x688, 0x7f, 0x4, 0x7, 0x5, 0x9, 0x5, 0xc, 0xd5, 0x7bad, 0xffffffff, 0xfffffffffffffff6, 0x4, 0x0, 0x9, 0x8, 0x756, 0xff, 0xc63e, 0xff, 0x100000000, 0x3, 0x2, 0xffff, 0x1, 0x4, 0x8, 0x10000, 0x6, 0x7fff, 0x11f7, 0x8, 0x0, 0x5, 0x9, 0xffffffffffffff7f, 0x2, 0x7, 0xd, 0x9, 0xc, 0x8, 0x9, 0x1, 0x7, 0x1000, 0x8, 0x1ff, 0x1, 0x0, 0x8, 0x6, 0xaf29, 0x3, 0x8, 0x519, 0x2ecf, 0x1, 0xffffffffffff7fff, 0x78bd, 0x9, 0x4, 0x401, 0x7fffffff, 0x7, 0x5, 0x4, 0xfffffffffffffff9, 0x1, 0x80000000, 0x7, 0x8, 0x1, 0x46, 0x2, 0xfffffffffffffffc, 0x71, 0x4, 0x8000000, 0x2, 0x4, 0x40, 0x10001, 0x5, 0x1, 0xd, 0x9, 0x69a8, 0xfffffffffffffffc, 0x9, 0x5, 0x2, 0x4, 0x7, 0x5, 0x80000001, 0x29c6, 0x7, 0xfff, 0x6, 0x2f, 0x4, 0xb, 0x5, 0x8000000000000000, 0x6, 0x7]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a80)={{r0}, r1, 0x2, @unused=[0x240000, 0x7ff, 0x0, 0xa1], @devid=r2}) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c040090400000103000000092109f0ff0022a0000905810340"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000020bd2833090000000000010902240001000010000904009202030000000921ff0f00012205000905810300000007fe"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xea, 0x401, 0x3, 0x9, 0x4, 0x7ffffffffffffffe, 0x80000001, 0x0, 0x80200, 0x6, 0xfffffffffffffff8, 0x9, 0x10000000003a, 0x9, 0x37f], 0x0, 0x3080}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e21, 0x20, @mcast2, 0xe}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000206000000061382abd7011545102e18576eb7badb6ba59b68f6ee8f0afa113dd2df14794c31cb7a8409d55d314c0cd7544646afecc431077419b17a8d0276c980dcfac2c37d14d9e9f7ee4cbc9f4aa22c5c155a9742a2c0866ef4a092360e5a3870fa351f994d6778becd5d797c3038baeca5f60dac0e6340e755da100ec6b178d2c4c1fd03c4a14cd5f0070d82eb4e5c0b4cc0d5f859f4575bf7046427cae85f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.60192609s ago: executing program 5 (id=1336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000201050000000000000000000500000a08000c40000000041c0017000000000700000009000030000000006dffff100005800900010073797a310000000008001a40000000000800084000000d35"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0xa4, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x61, 0x6, "f390c41bd078aeb2c521d42e9c5c2ff288e7236505fe66238bf78d8536249c6997c945cc61f905989374fec84b418e2f88576d4594b2fdbbb34e188ebef586ec8f068a4e7caddba9ef174b4b2d0406a96df260b7f15c42f6b400ea439d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff00d}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80000) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f00000006c0)=0x7, 0x4) sendmmsg(r3, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r2], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r7, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) fstat(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000001100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000f80)=@delpolicy={0x14c, 0x14, 0x2, 0x70bd27, 0x25dfdbff, {{@in6=@private0, @in6=@mcast1, 0x4e22, 0x0, 0x4e23, 0xff9f, 0xa, 0x0, 0x80, 0x32, r9, r10}, 0x6e6bbf, 0x2}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd28, 0x70bd27, 0x70bd27, 0x70bd27, 0x6, [0x2]}}, @etimer_thresh={0x8, 0xc, 0x2}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x2d}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd25, 0x70bd2a, 0x70bd27, 0x200, [0x7f, 0x1, 0x3]}}, @algo_aead={0x81, 0x12, {{'authenc(crct10dif-arm64-neon,cbc(aes-aesni))\x00'}, 0x1a8, 0xc0, "8eced7e671ef1f97af282b397408520d87f3e8d384500d8d42000bbd80d23db4c6a607e230924f2b23540246054210750fe30f60c4"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x801}, 0x30000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) write$uinput_user_dev(r7, &(0x7f0000000b00)={'syz0\x00', {0x8, 0x1, 0x1, 0x2}, 0x29, [0x80000000, 0x3ff, 0x5, 0x3, 0x7, 0x10, 0xc, 0xfffff318, 0x800, 0x100, 0x7, 0x0, 0x688ee3ce, 0x8, 0x5, 0x1, 0x3, 0x4, 0x200, 0x8, 0x5, 0xffffaab4, 0x8000, 0x5, 0x1, 0x6288, 0x9, 0x3, 0xe, 0x0, 0x6, 0x9, 0x647f, 0x1, 0x0, 0xfffffff8, 0x4, 0x1, 0x7d43c224, 0x6, 0x5, 0xfffffff7, 0x800, 0x1, 0xa62, 0x7, 0x6, 0x3, 0xe9, 0x9, 0x9, 0x5, 0x10000000, 0x6d45, 0xffff8000, 0x6d, 0x3, 0x2cb, 0xff, 0x4, 0x6, 0x6, 0x7f], [0x200, 0x5, 0x6, 0xb0, 0xb, 0xfff, 0x71, 0xfffffffe, 0x0, 0x0, 0x9, 0x9, 0x0, 0x7f, 0x40c00000, 0xdc, 0x9, 0x9, 0x6, 0x1, 0x80000001, 0x6, 0x6, 0x1, 0x101, 0x8000, 0x5, 0xa4c1, 0x750d, 0x16, 0xde3d, 0xe2e, 0xea, 0x7fff, 0xec, 0x5, 0x1, 0xfffff2d3, 0x9, 0x5, 0x3, 0xd, 0x76a365dd, 0x0, 0x99, 0xf, 0x2, 0x5, 0x308, 0x6, 0x8, 0x0, 0x0, 0x1000000, 0x6, 0x80, 0x9, 0x4f7ef9c3, 0x554c, 0x1, 0x1, 0x7, 0xffff, 0xd], [0x8e, 0x48f, 0xffffffb7, 0x7, 0x7, 0xffff1870, 0x0, 0x4, 0x6, 0xffff, 0x6, 0x8, 0x7, 0x1, 0x9, 0x12000, 0x8, 0x3, 0x4, 0x3, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7, 0x3, 0xf6b2, 0x1, 0x8, 0x8, 0x7, 0x8, 0x400, 0x3c5, 0x2e7341fa, 0x2, 0x80000001, 0x10, 0x4, 0x9, 0x0, 0x5, 0x2, 0x323, 0x2, 0x2, 0x2, 0x9456, 0x6, 0x3, 0x7ff, 0x5c, 0x101, 0x45514dcf, 0x3, 0x80000001, 0x4, 0x80000000, 0x5, 0x14c, 0xfb, 0x3, 0x7], [0x101, 0x9, 0x3ff, 0x20000, 0x4, 0x9, 0xd47, 0x9, 0x5, 0xe33a, 0x9, 0x926, 0x0, 0x3, 0xe4, 0xa, 0x8, 0xfffffff7, 0x1e, 0xb5, 0x4, 0xe571, 0x5, 0x6, 0x0, 0x1, 0x4, 0x0, 0x9, 0x8001, 0x5, 0x5, 0x3, 0x3, 0x0, 0x8, 0xa3e, 0x5, 0x8001, 0x4, 0x10, 0x2, 0x3, 0x8, 0x8000, 0xfffffffc, 0x7, 0xfffffffc, 0x5, 0x2, 0x81c8, 0xb, 0x8, 0x0, 0xfffffff3, 0xe, 0x2, 0x9, 0x0, 0x7, 0x100, 0x6, 0x4, 0xfffffff9]}, 0x45c) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, r11, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc0}, 0x4810) 3.534887774s ago: executing program 37 (id=1336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000201050000000000000000000500000a08000c40000000041c0017000000000700000009000030000000006dffff100005800900010073797a310000000008001a40000000000800084000000d35"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0xa4, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x61, 0x6, "f390c41bd078aeb2c521d42e9c5c2ff288e7236505fe66238bf78d8536249c6997c945cc61f905989374fec84b418e2f88576d4594b2fdbbb34e188ebef586ec8f068a4e7caddba9ef174b4b2d0406a96df260b7f15c42f6b400ea439d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff00d}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80000) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f00000006c0)=0x7, 0x4) sendmmsg(r3, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r2], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r7, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) fstat(r5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000001100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000f80)=@delpolicy={0x14c, 0x14, 0x2, 0x70bd27, 0x25dfdbff, {{@in6=@private0, @in6=@mcast1, 0x4e22, 0x0, 0x4e23, 0xff9f, 0xa, 0x0, 0x80, 0x32, r9, r10}, 0x6e6bbf, 0x2}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd28, 0x70bd27, 0x70bd27, 0x70bd27, 0x6, [0x2]}}, @etimer_thresh={0x8, 0xc, 0x2}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x2d}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd25, 0x70bd2a, 0x70bd27, 0x200, [0x7f, 0x1, 0x3]}}, @algo_aead={0x81, 0x12, {{'authenc(crct10dif-arm64-neon,cbc(aes-aesni))\x00'}, 0x1a8, 0xc0, "8eced7e671ef1f97af282b397408520d87f3e8d384500d8d42000bbd80d23db4c6a607e230924f2b23540246054210750fe30f60c4"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x801}, 0x30000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) write$uinput_user_dev(r7, &(0x7f0000000b00)={'syz0\x00', {0x8, 0x1, 0x1, 0x2}, 0x29, [0x80000000, 0x3ff, 0x5, 0x3, 0x7, 0x10, 0xc, 0xfffff318, 0x800, 0x100, 0x7, 0x0, 0x688ee3ce, 0x8, 0x5, 0x1, 0x3, 0x4, 0x200, 0x8, 0x5, 0xffffaab4, 0x8000, 0x5, 0x1, 0x6288, 0x9, 0x3, 0xe, 0x0, 0x6, 0x9, 0x647f, 0x1, 0x0, 0xfffffff8, 0x4, 0x1, 0x7d43c224, 0x6, 0x5, 0xfffffff7, 0x800, 0x1, 0xa62, 0x7, 0x6, 0x3, 0xe9, 0x9, 0x9, 0x5, 0x10000000, 0x6d45, 0xffff8000, 0x6d, 0x3, 0x2cb, 0xff, 0x4, 0x6, 0x6, 0x7f], [0x200, 0x5, 0x6, 0xb0, 0xb, 0xfff, 0x71, 0xfffffffe, 0x0, 0x0, 0x9, 0x9, 0x0, 0x7f, 0x40c00000, 0xdc, 0x9, 0x9, 0x6, 0x1, 0x80000001, 0x6, 0x6, 0x1, 0x101, 0x8000, 0x5, 0xa4c1, 0x750d, 0x16, 0xde3d, 0xe2e, 0xea, 0x7fff, 0xec, 0x5, 0x1, 0xfffff2d3, 0x9, 0x5, 0x3, 0xd, 0x76a365dd, 0x0, 0x99, 0xf, 0x2, 0x5, 0x308, 0x6, 0x8, 0x0, 0x0, 0x1000000, 0x6, 0x80, 0x9, 0x4f7ef9c3, 0x554c, 0x1, 0x1, 0x7, 0xffff, 0xd], [0x8e, 0x48f, 0xffffffb7, 0x7, 0x7, 0xffff1870, 0x0, 0x4, 0x6, 0xffff, 0x6, 0x8, 0x7, 0x1, 0x9, 0x12000, 0x8, 0x3, 0x4, 0x3, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7, 0x3, 0xf6b2, 0x1, 0x8, 0x8, 0x7, 0x8, 0x400, 0x3c5, 0x2e7341fa, 0x2, 0x80000001, 0x10, 0x4, 0x9, 0x0, 0x5, 0x2, 0x323, 0x2, 0x2, 0x2, 0x9456, 0x6, 0x3, 0x7ff, 0x5c, 0x101, 0x45514dcf, 0x3, 0x80000001, 0x4, 0x80000000, 0x5, 0x14c, 0xfb, 0x3, 0x7], [0x101, 0x9, 0x3ff, 0x20000, 0x4, 0x9, 0xd47, 0x9, 0x5, 0xe33a, 0x9, 0x926, 0x0, 0x3, 0xe4, 0xa, 0x8, 0xfffffff7, 0x1e, 0xb5, 0x4, 0xe571, 0x5, 0x6, 0x0, 0x1, 0x4, 0x0, 0x9, 0x8001, 0x5, 0x5, 0x3, 0x3, 0x0, 0x8, 0xa3e, 0x5, 0x8001, 0x4, 0x10, 0x2, 0x3, 0x8, 0x8000, 0xfffffffc, 0x7, 0xfffffffc, 0x5, 0x2, 0x81c8, 0xb, 0x8, 0x0, 0xfffffff3, 0xe, 0x2, 0x9, 0x0, 0x7, 0x100, 0x6, 0x4, 0xfffffff9]}, 0x45c) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xc0, r11, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc0}, 0x4810) 2.076716769s ago: executing program 9 (id=1350): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f85}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x12}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b0, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "b4e5960352e50d668c4dd41b72d20cfac65a532b8bec492674a3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb718}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x347}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffc870}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8cd7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x84}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3415b930, @mcast2, 0x3}}}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c850) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x48080) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001840)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f0000000880)={0xf2c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x38, 0x7f, [@mic={0x8c, 0x18, {0x741, "7f94e4ce54f2", @long="a4e9742c9d1dab84c5ef82779e195f0f"}}, @mic={0x8c, 0x18, {0xd3d, "39c9dc582b16", @long="2cac412dec9cd52c54eb8550a990806a"}}]}, @NL80211_ATTR_PROBE_RESP={0x626, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x299, 0x7f, [@random_vendor={0xdd, 0xc0, "31dc89e078b0e9291e44eee7e03550bed72ff2278fabecec8420e32f7e02dc294ab0a7d6682422c2d38a98a626f2453c57fffcdce8e536e7aff49f07089d190d47080cb6e5c3634ba0e7dbbca26fd9263fadfb705c7c4f577e286edf1b81264505d29bb148cae58ff7be6dd5caa6585d6b9f6e296a7d0def4f35f49bf3dffa6b8805a0313b2674e632523bbb2b569cdd144a4346e70e92607a458c805208b25ac2a16a5ed5c0c170b3cd669464aa9fd13702ffbb8c1f2dee8c9534704c91ff70"}, @rann={0x7e, 0x15, {{0x0, 0x1e}, 0x2, 0x5d, @device_b, 0x80000001, 0x401, 0x5}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0x388, "0e75c4fda270", @short="70427f34d5ed1477"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x2f, @val="f5797aa940754e2b0842b8121450911f"}}, @tim={0x5, 0x60, {0x3, 0x76, 0x3, "da02238140942e5453af2e48b28119f01883f724cc90bb1cede2320151200266d3bd0a4fe8f98d5cd35ac0b344ebcbca36f22639d703952c447f591bbae158edc91757f64993cebb1e6e3eb055f3697ab4fb816b16f5254c5c4160ba05"}}, @channel_switch={0x25, 0x3, {0x0, 0x8, 0x6}}, @perr={0x84, 0x121, {0x7f, 0x11, [{{}, @device_a, 0x2, @void, 0x5}, {{}, @device_a, 0x0, @void, 0x2e}, {{}, @broadcast, 0x2, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x15}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x3c}, {{0x0, 0x1}, @device_b, 0x9d6, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x37}, {{0x0, 0x1}, @broadcast, 0xe, @value, 0x5}, {{0x0, 0x1}, @device_b, 0x3ff, @value=@device_b, 0x26}, {{0x0, 0x1}, @device_a, 0xb83, @value=@broadcast, 0x14}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_a, 0x1000, @value=@broadcast, 0x1d}, {{}, @broadcast, 0x2, @void, 0x35}, {{}, @device_a, 0x6, @void, 0x3c}, {{}, @device_a, 0x4, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x800, @value, 0x4}, {{0x0, 0x1}, @broadcast, 0xe1f, @value=@broadcast, 0x14}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x22, 0xf, [@supported_rates, @ext_channel_switch={0x3c, 0x4, {0x1, 0xfb, 0xac, 0x40}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0xe1, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0x7, 0xf4}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x1eb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0x5, 0x4}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x3, @default, 0x2484, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0xb}, {0x3}, {0x48}, {0x6, 0x1}, {0x5, 0x1}, {0x8}, {0x16}]}, @void, @val={0x4, 0x6, {0x54, 0x5, 0xbcea, 0x5f}}, @void, @void, @val={0x25, 0x3, {0x0, 0x2c, 0x38}}, @void, @val={0x3c, 0x4, {0x1, 0x8, 0x5, 0x8}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40}}, @val={0x76, 0x6, {0x6, 0x3, 0x1f, 0x3}}, [{0xdd, 0xcc, "ff1b89304f488863afd64ee1238b6eab37790af5e9eb67372657bd2da12f0de99e980ae6d4022519c99ad1c79923fbba4b8d310c8742945c571fefe132adb27467170ba8930cd76b24050d3193b1a3963f2be9068380cd7dbd1d1baed89fe81532a2e7756acde2151d982889d1385b1b110e986186ed0e2cfb1f5d7fb5ea620f7896aa7573c4405b6c27a52cacc25fde2b3050439b87b2077d78033c0df97eb24190ee711ebd5c63f3db4047f351b8d4f6b12738f181aef113175969cce97f2b184058a74ec359b808f79a1b"}, {0xdd, 0x60, "4b3e99005d840499b38a4948a4ea3ae27aa7652ccbdd3cc1d02e636e952ecb142205aba203561bf0121894933e6ded49db503b39963a616f0d15a4ae36000bc26b23410b5bbea30e3410bf3f6aa79af74a8701a0ffae44ba115f7e8ea0e4c0fb"}, {0xdd, 0x58, "d03f3bd1523c141e9e4c70cbabb91eddf003461f5b2cf5aca731b19dfc64c6c7a14953c294ce882a893ac13f86f02ba9acea5fa635474dad1a2771bf0174f40634ac96dad49711dd72f622ae6bcfce093c46ccc1dcefc93a"}]}}, @NL80211_ATTR_PROBE_RESP={0xab, 0x91, "c94fdf850a954454fd27067ad3639a81f47ffec94ca7f218cf3ffda494408a62f15e0f5fec5e0689af05385495419c541842a5bf9bf70b475cf11302d65af16e3a3cba2262f475686132b7c1dd593c1249e1aa2e3535df3a7080ca2efd4b3b21824c7ca237b1219c485925ee4380bf9cd04cc998ed2eb8adbec11f92c2cd7d30a18ccdb9c5fe6bde08b19dc5729b53584c2543d3d63e7e2c93b4452310a1ebf2982e0f1b681570"}, @NL80211_ATTR_BEACON_HEAD={0x345, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @initial, {0x4, 0xff6}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1, @default, 0x24c0, @void, @void, @val={0x3, 0x1, 0xb7}, @void, @val={0x6, 0x2, 0xfff9}, @void, @val={0x25, 0x3, {0x1, 0x6c, 0x9}}, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x8, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x9, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x40}}, @void, [{0xdd, 0x28, "dc3844d3022cf14c7abb9bcc0feedd68865633629e340a8626d5ffe4c24ec613d25ea0e7745735d6"}, {0xdd, 0xe3, "3e8bacb694a0113602e442b446bd7a72bf0a354eda90d83dda2dabbe7c521709c7dc3f27da01f808bccf2f15d7c5d787954d035de3e58e13dfb6eacd9269ba95613d60c4a6802bfde5d39cf0f93e0f954d725659aab4de17122a5aefd79e019e7961f5fda2b1d8135810a75b85dd7f7f5de633468a6fbd922ded647f0130eaf19cd7f734ba14a7125fc41408b2ddbb3d79ed6056c9d9d35482973c51210537117e2a1f5257970523540215e4e3b9426c8fb36ac8da4352269ec11a2a6464035b20fa436b3d8689e6689531e5c6d867d023ce03d7df7d4cc4384840669ccc41accb9c9a"}, {0xdd, 0x95, "fed48c2d281a34cc39586b19d987cb963f03f123bec7cc53a406a17190078c113e3da899111da8719d018364ce7f8cd21f3ecab72965c4e8a96c0aee1a51b6f0016cd49cae1158127383f44f2ad56bf5ce03fe5a680c0f876e5f3e21fe67ae6e2953331481710aa6663ae6592df2a1ccc4d0d5f2806320e4fc79ccec082c2188107e21ede6b26e7f3d0e9e656aa4b9974f09f6fc1c"}, {0xdd, 0xbe, "95dc8073aabca7a8a2cd4b49e2d0d6d0ca85070dbbe4912fcff2748e7ecc271c8082a973f1e0ed933fe487ffb0d9dfcb78645be5f2fc945912a3d48dda8794940ced58097cfd96a2367dcb796818904a378b74d0aac2cefae826f5f674aa06815dd532b04b34b81b30a503e5d605134b590ebcbf07d305dda2fab11c7b9fc04d43aa1c745824cdaad80e0a19b1c7daba39628feb4c221b0a17a1b6cc819048664b8a5a2c0e16ec169be8b30255aa6b5031f98b6ffa662eef34d56f008dfb"}, {0xdd, 0x1b, "3f93e32c925cc22831a23364ee33e58753228de811390c0e10c88b"}, {0xdd, 0x55, "b3dda4c6930fc192b203c6b417a7c6219b56bb83023be3bdf9c5eaabccac6204868905ebdd8d44a5b19f0cd92511f48750752a2983d18da235bb82843617743a91652bc367d26164bd2db5c5117f780a36b2cef4ff"}]}}]}, 0xf2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4c011) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001a40)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5352, 0x51}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24000801) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1649, 0x77}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e00), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x221}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x44005) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x214500}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x34, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x26}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), r5) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000002180)={0x1, 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f00000021c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8001, 0x2a}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002340)={@local, @multicast1, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000002380)={@local, @rand_addr=0x64010100, 0x1, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @loopback, @broadcast, @empty, @remote]}, 0x28) syz_clone3(&(0x7f0000002680)={0x300100480, &(0x7f00000023c0), &(0x7f0000002400), &(0x7f0000002440), {0x17}, &(0x7f0000002480)=""/29, 0x1d, &(0x7f00000024c0)=""/18, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) 2.073508269s ago: executing program 7 (id=1351): r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xe7]}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.072001559s ago: executing program 9 (id=1352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="56f9b86a03098f51213c1a49258aa3fefb42a0371b0a629d7a396efa351ed91488b257b16c8cff7e6ae9e1b8b536a292d066f684ae34457429c04281dd6fc6dfe3d1fb0a4a4f64c4b11e60fce4f4d307307698d8eb8434be2e08f88c1a57650f17a104b9aedc106d9011", 0x6a}, {&(0x7f00000001c0)="fb6c4efa8ac3cca99883980adebe5f82d7a6b9ba24e24405a1ee381e90a9d92e286e5e92fc66554c63f1fd120d6f95145efb875a9fcf1be86497da08f074d369fd7487b4a37ed2152188eeb8ec6d5a4098e9ff0c6363fcb8f6bd373ba34c2ca755139255984c6dd213b1c80210d2a55072d9df426e90855b1801298a0f88a38ba0615d253036390679b23d9a70fb196c498cd2a1c6e16a5b3bcdd3a9ae34a4396d171ab5de33151b0625a842a0", 0xad}], 0x2, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @rand_addr=0x64010101}}}], 0x20}, 0x80) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.05939556s ago: executing program 9 (id=1353): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x16, 0x1, 0xfffffffc, 0x4, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x0) 2.005701203s ago: executing program 9 (id=1354): prctl$PR_SET_PDEATHSIG(0x1, 0x23) prctl$PR_SET_PDEATHSIG(0x1, 0x27) prctl$PR_SET_PDEATHSIG(0x1, 0x23) prctl$PR_SET_PDEATHSIG(0x1, 0xd) prctl$PR_SET_PDEATHSIG(0x1, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0x30) prctl$PR_SET_PDEATHSIG(0x1, 0x31) prctl$PR_SET_PDEATHSIG(0x1, 0xf) prctl$PR_SET_PDEATHSIG(0x1, 0x3) prctl$PR_SET_PDEATHSIG(0x1, 0x12) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) prctl$PR_SET_PDEATHSIG(0x1, 0x2f) prctl$PR_SET_PDEATHSIG(0x1, 0x23) prctl$PR_SET_PDEATHSIG(0x1, 0x22) prctl$PR_SET_PDEATHSIG(0x1, 0xa) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0x2f) prctl$PR_SET_PDEATHSIG(0x1, 0x12) prctl$PR_SET_PDEATHSIG(0x1, 0xb) prctl$PR_SET_PDEATHSIG(0x1, 0x3b) prctl$PR_SET_PDEATHSIG(0x1, 0x5) prctl$PR_SET_PDEATHSIG(0x1, 0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x2e) prctl$PR_SET_PDEATHSIG(0x1, 0x18) prctl$PR_SET_PDEATHSIG(0x1, 0x6) prctl$PR_SET_PDEATHSIG(0x1, 0x19) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) prctl$PR_SET_PDEATHSIG(0x1, 0x1c) prctl$PR_SET_PDEATHSIG(0x1, 0x26) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) 2.004845293s ago: executing program 9 (id=1355): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x5a7203) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = getpgid(0x0) ptrace(0x4207, r2) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40485404, &(0x7f0000000180)={{0x3}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2.004281233s ago: executing program 9 (id=1356): socket$nl_generic(0x10, 0x3, 0x10) r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000540)) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12e4877b450bdec3fe042700000000000001090224000100003000096751e7d7ecb385110103000d0d000000000000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="001514"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$tcp_congestion(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f0000000300)={0x3, 0x0, [{0x4000000c, 0x1, 0x0, 0x100, 0x80, 0x3, 0x13bc}, {0xb, 0x8, 0x0, 0x9, 0x8001, 0xfffffff7, 0xfffffffd}, {0x0, 0x0, 0x4, 0x7, 0x2, 0xb, 0xe4}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x1, 0x3000, 0x1000, &(0x7f0000019000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x11c6, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x0, 'virt_wifi0\x00', {}, 0x400}) 1.814320964s ago: executing program 1 (id=1357): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0xe6, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010300e2793f10d10501200002000014010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) 1.462521455s ago: executing program 8 (id=1358): syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) pread64(r0, &(0x7f0000001100)=""/4080, 0xff0, 0x7f) 1.409613698s ago: executing program 8 (id=1359): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000040)=[{0x5, 0x6, 0x4, 0x4a}, {0x40, 0xd5, 0x6, 0x400}, {0xb, 0x4, 0xc, 0xb}, {0x2, 0xf8, 0x0, 0x401}, {0xdbe, 0x0, 0xfe}, {0x5, 0x79, 0x3, 0x6}, {0x8, 0x7, 0x43, 0x1}, {0x5, 0x2, 0x8, 0x1da}, {0x0, 0x2, 0x4, 0x1}]}) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f0000657000/0x1000)=nil, &(0x7f0000236000/0x3000)=nil, 0x80000000, &(0x7f0000000000)=[{0x4, 0x9, 0x5}, {0x7, 0x2d, 0x2}, {0x200, 0xa81, 0x2}, {0x8, 0x6dbeee46, 0x8}, {0x8, 0xffffffffffff7fff, 0x89c2}, {0x8000000000000001, 0xfffffffffffffff9, 0x8}, {0x100000001, 0x7, 0x1}, {0x4, 0x0, 0x9}], 0x8, 0x10001, 0x8, 0x28, 0x32, 0x55}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.409287248s ago: executing program 8 (id=1360): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000207e05092000000000000109022d0001000040b10904000409030000000921fd0000012205000905810320000a0000090502034000050a02"], 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000080)={0x3, 0x2, 0x7, 0x8, 0x2, 0x1d22}) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x9, {0x9, 0xf, "04000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.303573614s ago: executing program 1 (id=1361): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) gettid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x20, 0x23, 0x2e, {0x2e, 0xf, "08f1ebf8754e01933e46f5398a8ec42c7aaa9fa40ed64e4384623a6c6120a36ffbc88d84c099f8121ec8b601"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7da9db936929522c}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x13, 0x1f, "03437acdba5fe8f9e76dedb51115cfd65e43f6a20cb6092f16136c36b0f0c5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0x5, 0x6, "4ae74021db17"}, &(0x7f0000000380)={0x40, 0x5, 0x4, "6250f40c"}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0xc0055, r2}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000140)=0xff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0318b11516f03f4f82f82ee6430485a4e4040d70a3c346097f2111e035a791b176bf2609e5a5a4213fb2a2feafcc8f664d5b561b74922e4f17fd45081eb61e9a2d3da4cd28af4e714f38ed72a0d0f94a24d8dfe6566b5d92d64a8c8f0bab9027a6bfea479687c8ca4dd5a2e12bb55661576de40ee1047c12dd1d05d5fa9f1adf38"], 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 778.249585ms ago: executing program 1 (id=1362): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x53, [0x7, 0xa35, 0x1, 0xfffffffffffffffd, 0x9, 0x6], 0x53, &(0x7f0000000000)=[{}, {}], &(0x7f0000000180)=""/83}, &(0x7f0000000140)=0xfffffffffffffd5e) r1 = syz_open_dev$loop(&(0x7f0000000600), 0x4, 0x751303) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000700)={0x3, 0x0, 0x98, &(0x7f0000000640)={0x10000000, 0x200, 0x3}}) 717.139838ms ago: executing program 1 (id=1363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000100180c200000000000000000086dd66bb4e38006121"], 0x9b) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r10 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x8700) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) 716.849128ms ago: executing program 1 (id=1364): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x2ed}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x3, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x8, 0x7, 0x5, 0xff, 0x2}, 0xae, &(0x7f0000000180)={0x5, 0xf, 0xae, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xfe, 0x4}, @generic={0x63, 0x10, 0xb, "22158d62f0f4d626e7c1a41f9b8c623f4dffbd621d133f340f1dd06a52cf40c48c7f9e77669ef6cf0d50dc9568b2c65594de1565f3cafbe3d9f3b30eec9934b62f7218361126c899485f4731ef330c60f76848850d025fb5988b557d041cd9e2"}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x6422, 0x880f, 0x6, [0xffff, 0x0, 0xf, 0x3f00, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x0, 0x6, 0x5, 0x9}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "181e52ce6de8bb490dd9290a57fbbd97cd9e2f78679217a1be01f2ce90572cbacfa2995f315c78884aaeb34941fcd3af594cc56b5a48e0947efc9ef86c6697b1f5473fbb45fd789d0f75f95d965199bd1ded727b8c2fb04bb607586390665c5ecd9ff534ae8737322d716fee28c0975aa3d59e22eb8b4b2a10540d50844c4255009cad185416a1b06eaca13ffb5b5e5df36bc70601ed83f4028d72e911b67e66441c4e59b679f0972eed70d1168348d0474d4ba55f5fb1d72bc6eab7162d16b09c906258c887af699510800d05138d6cf8871b"}}]}) syz_usb_connect(0x3, 0xf5, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e34a43d05100000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 237.024196ms ago: executing program 1 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) fchmod(r1, 0x154) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x4, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f00000000c0)={@host}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r7, 0x1, &(0x7f0000000380)="35738b86") (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x110200, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x44, 0x2400004}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) connect$vsock_stream(r8, &(0x7f0000000200), 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x82, 0x10, 0x6, 0x0, 0x0, 0xc, 0x0, 0x4b, 0x2, 0x4, 0x2, 0x0, 0x0, 0x1, 0x9, 0x0, 0xf, 0x8, 0x0, '\x00', 0x7, 0xb4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10}}}}}]}}]}}, 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='fusectl\x00', 0x10, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x5, 0x6}}) (async) syz_usb_control_io(r9, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0xb, 0x29, {0x29, 0x0, "ed558c45f2ff6ad17f59e76080bb817a93238250c27d0a4495ee46da1ad0189b48fbb6acb33a2f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 86.583425ms ago: executing program 8 (id=1366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000200)={0xafbcb7ab, {{0x2, 0x4e22, @empty}}}, 0x88) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r4) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) setuid(0xee00) ioctl$TIOCCONS(r6, 0x541d) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x6}, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x3, 0x30a, [0x0, 0x2000000001c0, 0x2000000001f0, 0x2000000002d6], 0x0, &(0x7f0000000040), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x7b, 0x3, 'bond0\x00', 'veth0_to_team\x00', 'team_slave_0\x00', 'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"5ee9abbad0a60a16bca85a9d4db9964db4cff2f1c2ec6402db193409c2c3"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffd}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x14, 0x26, 0x60, 'veth0_to_bond\x00', 'macvtap0\x00', 'netdevsim0\x00', 'vcan0\x00', @random="d8eaa65e8aea", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}, {0x5, 0x1, 0x10, 'caif0\x00', 'bridge0\x00', 'sit0\x00', 'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0x70d0aec5dc1ed527], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz1\x00', {0x5}}}}}]}]}, 0x382) (async) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080)={0xa, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000003c0)=ANY=[], 0x2b08}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000002900), r9) 1.47999ms ago: executing program 8 (id=1367): syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x100010, r0, 0x8000000) 0s ago: executing program 8 (id=1368): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00001ab000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, r2, 0x108000) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x2d, 0xfffffffb, 0x40000e40, 0x4, 0xff, 0x7fffffff, 0x72aac39a, 0x0, 0x0, 0x100, 0x400}}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}]}) lsm_set_self_attr(0x30, 0x0, 0x8, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000000c0)=0x8b, 0x1) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x28, 0x3, 0x8000, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb}}, 0x50) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x92, 0x0, 0x2, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004680)="8e503ba12553ae35664093746798ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fcb6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a845080000000000000031d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe63bd1de8f261fb995790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d48b17d209d6bb04f1ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f043503377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbed7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf888abe4f2f2aa681deea8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc170f0e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1b80c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa52ebb52cc0a5b035d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421c36f93ecb95eacceba5fdc1a76810e999af3e14004223da85d40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a300bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed26882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfaf8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a500c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543a5394aa8c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eeac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9dd94d8e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0xffff, {0xffffdfffffffffff, 0x0, 0x16, 0x0, 0x5, 0x806, {0x80000000000001, 0x0, 0x3, 0x800000000006, 0x4, 0x8, 0x8, 0x801, 0x901, 0x2000, 0x7fffbfff, r5, r6, 0x81, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): SB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.903414][ T3209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.014843][ T3224] overlay: filesystem on ./file1 not supported as upperdir [ 163.132243][ T9] usb 4-1: USB disconnect, device number 83 [ 163.138256][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.138299][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.145049][ T2960] syz.1.798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 163.392949][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 163.392991][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.393006][ T2960] Call Trace: [ 163.393015][ T2960] [ 163.393026][ T2960] __dump_stack+0x21/0x30 [ 163.393062][ T2960] dump_stack_lvl+0x140/0x1c0 [ 163.393091][ T2960] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.393121][ T2960] ? ___ratelimit+0x40e/0x5b0 [ 163.393169][ T2960] dump_stack+0x19/0x20 [ 163.393196][ T2960] dump_header+0xd6/0x490 [ 163.393221][ T2960] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 163.393245][ T2960] oom_kill_process+0x35d/0x640 [ 163.393279][ T2960] out_of_memory+0x624/0xa30 [ 163.393311][ T2960] ? __cfi_out_of_memory+0x10/0x10 [ 163.393354][ T2960] ? mutex_lock_killable+0x97/0x1d0 [ 163.393375][ T2960] ? __cfi_mutex_lock_killable+0x10/0x10 [ 163.393408][ T2960] mem_cgroup_out_of_memory+0x2c8/0x390 [ 163.393435][ T2960] ? css_next_descendant_pre+0x202/0x230 [ 163.393456][ T2960] ? drain_obj_stock+0xed0/0xed0 [ 163.393483][ T2960] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 163.393508][ T2960] try_charge_memcg+0x91c/0xe10 [ 163.393530][ T2960] ? __cfi_try_charge_memcg+0x10/0x10 [ 163.393551][ T2960] ? __alloc_pages_noprof+0x35f/0x7e0 [ 163.393573][ T2960] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 163.393596][ T2960] __mem_cgroup_charge+0xfc/0x420 [ 163.393626][ T2960] ? folio_add_lru+0x116/0x400 [ 163.393656][ T2960] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 163.393682][ T2960] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 163.393714][ T2960] ? put_swap_device+0x130/0x130 [ 163.393743][ T2960] ? shmem_huge_global_enabled+0x2da/0x360 [ 163.393789][ T2960] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 163.393819][ T2960] ? __kasan_check_write+0x18/0x20 [ 163.393846][ T2960] ? _raw_spin_lock+0x92/0x120 [ 163.393872][ T2960] shmem_get_folio_gfp+0x607/0x1390 [ 163.393905][ T2960] ? shmem_get_folio+0xc0/0xc0 [ 163.393934][ T2960] ? __kasan_check_write+0x18/0x20 [ 163.393959][ T2960] ? inode_to_bdi+0x6d/0x100 [ 163.393982][ T2960] shmem_write_begin+0xf4/0x270 [ 163.394015][ T2960] generic_perform_write+0x32b/0x970 [ 163.394037][ T2960] ? inode_update_timestamps+0x4f0/0x700 [ 163.394061][ T2960] ? __cfi_generic_perform_write+0x10/0x10 [ 163.394082][ T2960] ? down_write+0xee/0x2b0 [ 163.394103][ T2960] ? mnt_get_write_access_file+0x1af/0x3b0 [ 163.394125][ T2960] ? mnt_put_write_access_file+0xc2/0x100 [ 163.394147][ T2960] ? file_update_time+0x1de/0x210 [ 163.394169][ T2960] shmem_file_write_iter+0x105/0x130 [ 163.394193][ T2960] __kernel_write_iter+0x42f/0x8a0 [ 163.394221][ T2960] ? __cfi___kernel_write_iter+0x10/0x10 [ 163.394247][ T2960] ? get_dump_page+0x165/0x220 [ 163.394268][ T2960] ? __asan_memset+0x39/0x50 [ 163.394293][ T2960] ? iov_iter_bvec+0xc0/0x180 [ 163.394319][ T2960] dump_user_range+0xb8b/0xe60 [ 163.394347][ T2960] ? __cfi_dump_user_range+0x10/0x10 [ 163.394373][ T2960] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 163.394404][ T2960] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 163.394432][ T2960] ? elf_core_dump+0x24c0/0x3960 [ 163.394465][ T2960] elf_core_dump+0x2e7e/0x3960 [ 163.394499][ T2960] ? __cfi_elf_core_dump+0x10/0x10 [ 163.394538][ T2960] ? dump_interrupted+0xf0/0xf0 [ 163.394564][ T2960] ? 0xffffffffff600000 [ 163.394583][ T2960] do_coredump+0x208a/0x2fe0 [ 163.394612][ T2960] ? __cfi_do_coredump+0x10/0x10 [ 163.394642][ T2960] ? asm_exc_page_fault+0x2b/0x30 [ 163.394675][ T2960] ? __kasan_slab_free+0x6a/0x80 [ 163.394705][ T2960] ? kmem_cache_free+0x1bd/0x4f0 [ 163.394731][ T2960] ? get_signal+0xa74/0x14e0 [ 163.394757][ T2960] get_signal+0x11f8/0x14e0 [ 163.394785][ T2960] arch_do_signal_or_restart+0xbc/0x760 [ 163.394817][ T2960] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 163.394851][ T2960] irqentry_exit_to_user_mode+0x4d/0xb0 [ 163.394876][ T2960] irqentry_exit+0x16/0x60 [ 163.394897][ T2960] exc_page_fault+0x65/0xc0 [ 163.394928][ T2960] asm_exc_page_fault+0x2b/0x30 [ 163.394951][ T2960] RIP: 0033:0x0 [ 163.394965][ T2960] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 163.394977][ T2960] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 163.394996][ T2960] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 163.395011][ T2960] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 163.395026][ T2960] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 163.395042][ T2960] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 163.395056][ T2960] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 163.395074][ T2960] [ 163.835635][ T2960] memory: usage 307200kB, limit 307200kB, failcnt 37244 [ 163.842656][ T2960] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 163.850692][ T2960] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 163.857586][ T2960] Memory cgroup stats for /syz1: [ 163.858555][ T2960] cache 314200064 [ 163.867247][ T2960] rss 372736 [ 163.870458][ T2960] rss_huge 0 [ 163.873683][ T2960] shmem 295038976 [ 163.877354][ T2960] mapped_file 0 [ 163.880821][ T2960] dirty 0 [ 163.883808][ T2960] writeback 0 [ 163.887172][ T2960] workingset_refault_anon 1051 [ 163.891984][ T2960] workingset_refault_file 2188 [ 163.896827][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 163.904669][ T2960] swap 127995904 [ 163.908466][ T2960] swapcached 0 [ 163.912180][ T2960] pgpgin 257598 [ 163.915759][ T2960] pgpgout 181820 [ 163.919321][ T2960] pgfault 53751 [ 163.922792][ T2960] pgmajfault 169 [ 163.926501][ T2960] inactive_anon 60452864 [ 163.930776][ T2960] active_anon 234434560 [ 163.935016][ T2960] inactive_file 0 [ 163.938697][ T2960] active_file 4096 [ 163.942425][ T2960] unevictable 19156992 [ 163.946583][ T2960] hierarchical_memory_limit 314572800 [ 163.952018][ T2960] hierarchical_memsw_limit 9223372036854771712 [ 163.958315][ T2960] total_cache 314200064 [ 163.962518][ T2960] total_rss 372736 [ 163.966291][ T2960] total_rss_huge 0 [ 163.970022][ T2960] total_shmem 295038976 [ 163.974399][ T2960] total_mapped_file 0 [ 163.978400][ T2960] total_dirty 0 [ 163.981877][ T2960] total_writeback 0 [ 163.985756][ T2960] total_workingset_refault_anon 1051 [ 163.991053][ T2960] total_workingset_refault_file 2188 [ 163.996397][ T2960] total_swap 127995904 [ 164.000471][ T2960] total_swapcached 0 [ 164.004399][ T2960] total_pgpgin 257598 [ 164.008430][ T2960] total_pgpgout 181820 [ 164.012509][ T2960] total_pgfault 53751 [ 164.016530][ T2960] total_pgmajfault 169 [ 164.020646][ T2960] total_inactive_anon 60452864 [ 164.026132][ T2960] total_active_anon 234434560 [ 164.030869][ T2960] total_inactive_file 0 [ 164.035162][ T2960] total_active_file 4096 [ 164.039492][ T2960] total_unevictable 19156992 [ 164.044157][ T2960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2949,uid=0 [ 164.059052][ T2960] Memory cgroup out of memory: Killed process 2949 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:53616kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 164.076715][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.087656][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 164.098964][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.108075][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.116091][ T9] usb 4-1: Product: syz [ 164.120263][ T9] usb 4-1: Manufacturer: syz [ 164.124917][ T9] usb 4-1: SerialNumber: syz [ 164.331942][ T3232] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.347692][ T9] cdc_ncm 4-1:1.0: bind() failure [ 164.355916][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 164.362827][ T9] cdc_ncm 4-1:1.1: bind() failure [ 164.390616][ T9] usb 4-1: USB disconnect, device number 84 [ 164.560608][ T3205] syz.1.875 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 164.642879][ T3205] CPU: 0 UID: 0 PID: 3205 Comm: syz.1.875 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 164.642916][ T3205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.642930][ T3205] Call Trace: [ 164.642937][ T3205] [ 164.642946][ T3205] __dump_stack+0x21/0x30 [ 164.642977][ T3205] dump_stack_lvl+0x140/0x1c0 [ 164.643001][ T3205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.643027][ T3205] ? ___ratelimit+0x40e/0x5b0 [ 164.643056][ T3205] dump_stack+0x19/0x20 [ 164.643081][ T3205] dump_header+0xd6/0x490 [ 164.643103][ T3205] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 164.643124][ T3205] oom_kill_process+0x35d/0x640 [ 164.643154][ T3205] out_of_memory+0x624/0xa30 [ 164.643185][ T3205] ? __cfi_out_of_memory+0x10/0x10 [ 164.643213][ T3205] ? mutex_lock_killable+0x97/0x1d0 [ 164.643233][ T3205] ? __cfi_mutex_lock_killable+0x10/0x10 [ 164.643254][ T3205] mem_cgroup_out_of_memory+0x2c8/0x390 [ 164.643280][ T3205] ? css_next_descendant_pre+0x202/0x230 [ 164.643301][ T3205] ? drain_obj_stock+0xed0/0xed0 [ 164.643328][ T3205] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 164.643354][ T3205] try_charge_memcg+0x91c/0xe10 [ 164.643375][ T3205] ? __cfi_try_charge_memcg+0x10/0x10 [ 164.643396][ T3205] ? __alloc_pages_noprof+0x35f/0x7e0 [ 164.643419][ T3205] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 164.643440][ T3205] __mem_cgroup_charge+0xfc/0x420 [ 164.643464][ T3205] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 164.643493][ T3205] ? folio_add_lru+0x116/0x400 [ 164.643541][ T3205] ? __cfi_folio_add_lru+0x10/0x10 [ 164.643575][ T3205] folio_prealloc+0x67/0x220 [ 164.643608][ T3205] do_wp_page+0x1895/0x2e90 [ 164.643640][ T3205] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 164.643672][ T3205] ? folio_put+0x90/0x90 [ 164.643701][ T3205] ? __cfi__raw_spin_lock+0x10/0x10 [ 164.643726][ T3205] ? __pte_offset_map+0x1b0/0x230 [ 164.643752][ T3205] ? pte_offset_map_rw_nolock+0xba/0x110 [ 164.643778][ T3205] handle_mm_fault+0x103e/0x1bf0 [ 164.643810][ T3205] ? __cfi_handle_mm_fault+0x10/0x10 [ 164.643839][ T3205] ? lock_vma_under_rcu+0x4d1/0x590 [ 164.643880][ T3205] ? __se_sys_futex+0x13c/0x320 [ 164.643907][ T3205] do_user_addr_fault+0x963/0x11e0 [ 164.643940][ T3205] exc_page_fault+0x58/0xc0 [ 164.643960][ T3205] asm_exc_page_fault+0x2b/0x30 [ 164.643986][ T3205] RIP: 0033:0x7fcc19067ce0 [ 164.644005][ T3205] Code: 85 18 0e 00 00 4c 89 44 24 28 31 c0 b9 40 42 0f 00 4c 89 f6 ba 81 00 00 00 bf ca 00 00 00 41 c7 06 01 00 00 00 e8 c0 2f 13 00 <83> 05 c5 00 3b 00 01 4c 8b 44 24 28 80 bc 24 f8 00 00 00 00 0f b6 [ 164.644024][ T3205] RSP: 002b:00007ffd23e59dc0 EFLAGS: 00010217 [ 164.644045][ T3205] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcc1919acb9 [ 164.644061][ T3205] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc19415fa8 [ 164.644077][ T3205] RBP: 0000000000001283 R08: 00007ffd23e59c57 R09: 0000000000000000 [ 164.644091][ T3205] R10: 00007fcc19415fa0 R11: 0000000000000246 R12: 0000000000000000 [ 164.644106][ T3205] R13: 00007fcc19415fac R14: 00007fcc19415fa8 R15: 00007fcc19415fa0 [ 164.644127][ T3205] [ 164.644171][ T3205] memory: usage 302800kB, limit 307200kB, failcnt 38759 [ 164.944881][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 164.968541][ T3205] memory+swap: usage 412224kB, limit 9007199254740988kB, failcnt 0 [ 165.027063][ T3205] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 165.095143][ T3205] Memory cgroup stats for /syz1: [ 165.095303][ T3205] cache 275091456 [ 165.104333][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.115492][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.132936][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 165.150853][ T3256] netlink: 'syz.5.891': attribute type 16 has an invalid length. [ 165.159522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.168811][ T3205] rss 372736 [ 165.178508][ T9] usb 4-1: config 0 descriptor?? [ 165.212714][ T3205] rss_huge 0 [ 165.221122][ T3258] input: syz0 as /devices/virtual/input/input22 [ 165.252872][ T3205] shmem 255930368 [ 165.273195][ T3205] mapped_file 0 [ 165.276714][ T3205] dirty 0 [ 165.320010][ T3205] writeback 8192 [ 165.350357][ T3205] workingset_refault_anon 1051 [ 165.379116][ T3205] workingset_refault_file 2188 [ 165.412919][ T3205] swap 127987712 [ 165.436099][ T3205] swapcached 8192 [ 165.462759][ T3205] pgpgin 257598 [ 165.477601][ T3205] pgpgout 191366 [ 165.502867][ T3205] pgfault 53751 [ 165.509049][ T3205] pgmajfault 169 [ 165.512641][ T3205] inactive_anon 120061952 [ 165.549159][ T3205] active_anon 134610944 [ 165.558697][ T3261] netlink: 'syz.5.893': attribute type 1 has an invalid length. [ 165.573875][ T3205] inactive_file 0 [ 165.577536][ T3205] active_file 4096 [ 165.581269][ T3205] unevictable 19156992 [ 165.589105][ T3205] hierarchical_memory_limit 314572800 [ 165.594624][ T3205] hierarchical_memsw_limit 9223372036854771712 [ 165.600795][ T3205] total_cache 275091456 [ 165.613965][ T3205] total_rss 372736 [ 165.617751][ T3205] total_rss_huge 0 [ 165.621591][ T3205] total_shmem 255930368 [ 165.626012][ T3205] total_mapped_file 0 [ 165.630169][ T3205] total_dirty 0 [ 165.633754][ T3205] total_writeback 8192 [ 165.638284][ T3205] total_workingset_refault_anon 1051 [ 165.643712][ T3205] total_workingset_refault_file 2188 [ 165.650291][ T3205] total_swap 127987712 [ 165.654644][ T3205] total_swapcached 8192 [ 165.659022][ T3205] total_pgpgin 257598 [ 165.663484][ T3205] total_pgpgout 191366 [ 165.667650][ T3205] total_pgfault 53751 [ 165.671681][ T3205] total_pgmajfault 169 [ 165.675981][ T3205] total_inactive_anon 120061952 [ 165.681112][ T3205] total_active_anon 134610944 [ 165.686133][ T3205] total_inactive_file 0 [ 165.690551][ T3205] total_active_file 4096 [ 165.695425][ T3205] total_unevictable 19156992 [ 165.700896][ T3205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2944,uid=0 [ 165.717092][ T3205] Memory cgroup out of memory: Killed process 2944 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 165.888861][ T2952] syz.1.798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 165.908552][ T2952] CPU: 1 UID: 0 PID: 2952 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 165.908585][ T2952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.908599][ T2952] Call Trace: [ 165.908605][ T2952] [ 165.908614][ T2952] __dump_stack+0x21/0x30 [ 165.908649][ T2952] dump_stack_lvl+0x140/0x1c0 [ 165.908675][ T2952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.908700][ T2952] ? ___ratelimit+0x40e/0x5b0 [ 165.908729][ T2952] dump_stack+0x19/0x20 [ 165.908752][ T2952] dump_header+0xd6/0x490 [ 165.908774][ T2952] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 165.908795][ T2952] oom_kill_process+0x35d/0x640 [ 165.908824][ T2952] out_of_memory+0x624/0xa30 [ 165.908852][ T2952] ? __cfi_out_of_memory+0x10/0x10 [ 165.908880][ T2952] ? mutex_lock_killable+0x97/0x1d0 [ 165.908899][ T2952] ? __cfi_mutex_lock_killable+0x10/0x10 [ 165.908920][ T2952] mem_cgroup_out_of_memory+0x2c8/0x390 [ 165.908945][ T2952] ? css_next_descendant_pre+0x202/0x230 [ 165.908968][ T2952] ? drain_obj_stock+0xed0/0xed0 [ 165.908993][ T2952] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 165.909019][ T2952] try_charge_memcg+0x91c/0xe10 [ 165.909040][ T2952] ? __cfi_try_charge_memcg+0x10/0x10 [ 165.909060][ T2952] ? __alloc_pages_noprof+0x35f/0x7e0 [ 165.909082][ T2952] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 165.909105][ T2952] __mem_cgroup_charge+0xfc/0x420 [ 165.909126][ T2952] ? folio_add_lru+0x116/0x400 [ 165.909155][ T2952] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 165.909179][ T2952] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 165.909209][ T2952] ? finish_task_switch+0x1d9/0x760 [ 165.909232][ T2952] ? put_swap_device+0x130/0x130 [ 165.909261][ T2952] ? shmem_huge_global_enabled+0x2da/0x360 [ 165.909288][ T2952] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 165.909315][ T2952] ? __kasan_check_write+0x18/0x20 [ 165.909338][ T2952] ? _raw_spin_lock+0x92/0x120 [ 165.909363][ T2952] shmem_get_folio_gfp+0x607/0x1390 [ 165.909392][ T2952] ? shmem_get_folio+0xc0/0xc0 [ 165.909417][ T2952] ? follow_page_pte+0x90f/0xbc0 [ 165.909438][ T2952] ? inode_to_bdi+0x6d/0x100 [ 165.909460][ T2952] shmem_write_begin+0xf4/0x270 [ 165.909490][ T2952] generic_perform_write+0x32b/0x970 [ 165.909513][ T2952] ? __cfi_generic_perform_write+0x10/0x10 [ 165.909534][ T2952] ? down_write+0xee/0x2b0 [ 165.909554][ T2952] ? file_update_time+0xa3/0x210 [ 165.909575][ T2952] shmem_file_write_iter+0x105/0x130 [ 165.909596][ T2952] __kernel_write_iter+0x42f/0x8a0 [ 165.909628][ T2952] ? __cfi___kernel_write_iter+0x10/0x10 [ 165.909652][ T2952] ? get_dump_page+0x165/0x220 [ 165.909671][ T2952] ? __asan_memset+0x39/0x50 [ 165.909694][ T2952] ? iov_iter_bvec+0xc0/0x180 [ 165.909719][ T2952] dump_user_range+0xb8b/0xe60 [ 165.909745][ T2952] ? __cfi_dump_user_range+0x10/0x10 [ 165.909769][ T2952] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 165.909794][ T2952] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 165.909820][ T2952] ? elf_core_dump+0x24c0/0x3960 [ 165.909849][ T2952] elf_core_dump+0x2e7e/0x3960 [ 165.909882][ T2952] ? __cfi_elf_core_dump+0x10/0x10 [ 165.909919][ T2952] ? dump_interrupted+0xf0/0xf0 [ 165.909942][ T2952] ? 0xffffffffff600000 [ 165.909960][ T2952] do_coredump+0x208a/0x2fe0 [ 165.909985][ T2952] ? __cfi_do_coredump+0x10/0x10 [ 165.910008][ T2952] ? asm_exc_page_fault+0x2b/0x30 [ 165.910041][ T2952] ? __kasan_slab_free+0x6a/0x80 [ 165.910069][ T2952] ? kmem_cache_free+0x1bd/0x4f0 [ 165.910094][ T2952] ? get_signal+0xa74/0x14e0 [ 165.910119][ T2952] get_signal+0x11f8/0x14e0 [ 165.910145][ T2952] arch_do_signal_or_restart+0xbc/0x760 [ 165.910175][ T2952] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 165.910206][ T2952] ? fpregs_restore_userregs+0x11c/0x260 [ 165.910229][ T2952] irqentry_exit_to_user_mode+0x4d/0xb0 [ 165.910250][ T2952] irqentry_exit+0x16/0x60 [ 165.910271][ T2952] exc_page_fault+0x65/0xc0 [ 165.910290][ T2952] asm_exc_page_fault+0x2b/0x30 [ 165.910313][ T2952] RIP: 0033:0x0 [ 165.910328][ T2952] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 165.910340][ T2952] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 165.910358][ T2952] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 165.910374][ T2952] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 165.910390][ T2952] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 165.910406][ T2952] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 165.910420][ T2952] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 165.910439][ T2952] [ 165.910448][ T2952] memory: usage 307192kB, limit 307200kB, failcnt 41717 [ 166.352469][ T2952] memory+swap: usage 394940kB, limit 9007199254740988kB, failcnt 0 [ 166.368714][ T2952] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 166.378286][ T2952] Memory cgroup stats for /syz1: [ 166.378497][ T2952] cache 292651008 [ 166.387524][ T2952] rss 327680 [ 166.390768][ T2952] rss_huge 0 [ 166.394062][ T2952] shmem 273494016 [ 166.397718][ T2952] mapped_file 0 [ 166.401396][ T2952] dirty 0 [ 166.404488][ T2952] writeback 0 [ 166.407840][ T2952] workingset_refault_anon 1060 [ 166.412676][ T2952] workingset_refault_file 4007 [ 166.434206][ T2952] swap 111419392 [ 166.437811][ T2952] swapcached 36864 [ 166.441542][ T2952] pgpgin 268981 [ 166.445406][ T36] audit: type=1400 audit(1769321670.864:666): avc: denied { write } for pid=3282 comm="syz.7.901" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.467113][ T2952] pgpgout 198470 [ 166.470700][ T2952] pgfault 54410 [ 166.475472][ T3283] IPv6: A: Disabled Multicast RS [ 166.481552][ T2952] pgmajfault 186 [ 166.485150][ T2952] inactive_anon 84766720 [ 166.513474][ T36] audit: type=1400 audit(1769321670.864:667): avc: denied { remove_name } for pid=3282 comm="syz.7.901" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.538279][ T2952] active_anon 189075456 [ 166.542560][ T2952] inactive_file 0 [ 166.546314][ T2952] active_file 0 [ 166.549835][ T2952] unevictable 19156992 [ 166.556363][ T2952] hierarchical_memory_limit 314572800 [ 166.562051][ T2952] hierarchical_memsw_limit 9223372036854771712 [ 166.568342][ T2952] total_cache 292651008 [ 166.572567][ T2952] total_rss 327680 [ 166.576403][ T2952] total_rss_huge 0 [ 166.580222][ T2952] total_shmem 273494016 [ 166.584480][ T2952] total_mapped_file 0 [ 166.589640][ T36] audit: type=1400 audit(1769321670.864:668): avc: denied { unlink } for pid=3282 comm="syz.7.901" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.603000][ T2952] total_dirty 0 [ 166.625147][ T2952] total_writeback 0 [ 166.629003][ T2952] total_workingset_refault_anon 1060 [ 166.634537][ T2952] total_workingset_refault_file 4007 [ 166.639845][ T2952] total_swap 111419392 [ 166.652996][ T2952] total_swapcached 36864 [ 166.657341][ T2952] total_pgpgin 268981 [ 166.661677][ T2952] total_pgpgout 198470 [ 166.665838][ T2952] total_pgfault 54410 [ 166.669871][ T2952] total_pgmajfault 186 [ 166.674027][ T2952] total_inactive_anon 84766720 [ 166.678848][ T2952] total_active_anon 189075456 [ 166.685642][ T2952] total_inactive_file 0 [ 166.689923][ T2952] total_active_file 0 [ 166.694156][ T2952] total_unevictable 19156992 [ 166.698769][ T2952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2948,uid=0 [ 166.717155][ T2952] Memory cgroup out of memory: Killed process 2948 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:53808kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 166.965593][ T3311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3311 comm=syz.1.896 [ 167.022881][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 167.183986][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.196071][ T10] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 167.208536][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.219838][ T10] usb 6-1: config 0 descriptor?? [ 167.381003][ T2956] syz.1.798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 167.404035][ T2956] CPU: 1 UID: 0 PID: 2956 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 167.404074][ T2956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.404100][ T2956] Call Trace: [ 167.404107][ T2956] [ 167.404115][ T2956] __dump_stack+0x21/0x30 [ 167.404147][ T2956] dump_stack_lvl+0x140/0x1c0 [ 167.404173][ T2956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.404198][ T2956] ? ___ratelimit+0x40e/0x5b0 [ 167.404235][ T2956] dump_stack+0x19/0x20 [ 167.404259][ T2956] dump_header+0xd6/0x490 [ 167.404283][ T2956] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 167.404305][ T2956] oom_kill_process+0x35d/0x640 [ 167.404335][ T2956] out_of_memory+0x624/0xa30 [ 167.404383][ T2956] ? __cfi_out_of_memory+0x10/0x10 [ 167.404414][ T2956] ? mutex_lock_killable+0x97/0x1d0 [ 167.404436][ T2956] ? __cfi_mutex_lock_killable+0x10/0x10 [ 167.404460][ T2956] mem_cgroup_out_of_memory+0x2c8/0x390 [ 167.404490][ T2956] ? css_next_descendant_pre+0x202/0x230 [ 167.404514][ T2956] ? drain_obj_stock+0xed0/0xed0 [ 167.404544][ T2956] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 167.404573][ T2956] try_charge_memcg+0x91c/0xe10 [ 167.404597][ T2956] ? __cfi_try_charge_memcg+0x10/0x10 [ 167.404620][ T2956] ? __alloc_pages_noprof+0x35f/0x7e0 [ 167.404645][ T2956] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 167.404670][ T2956] __mem_cgroup_charge+0xfc/0x420 [ 167.404696][ T2956] ? folio_add_lru+0x116/0x400 [ 167.404731][ T2956] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 167.404759][ T2956] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 167.404796][ T2956] ? put_swap_device+0x130/0x130 [ 167.404829][ T2956] ? shmem_huge_global_enabled+0x2da/0x360 [ 167.404862][ T2956] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 167.404893][ T2956] ? __kasan_check_write+0x18/0x20 [ 167.404920][ T2956] ? _raw_spin_lock+0x92/0x120 [ 167.404957][ T2956] shmem_get_folio_gfp+0x607/0x1390 [ 167.404989][ T2956] ? shmem_get_folio+0xc0/0xc0 [ 167.405015][ T2956] ? follow_page_pte+0x90f/0xbc0 [ 167.405037][ T2956] ? inode_to_bdi+0x6d/0x100 [ 167.405059][ T2956] shmem_write_begin+0xf4/0x270 [ 167.405091][ T2956] generic_perform_write+0x32b/0x970 [ 167.405115][ T2956] ? __cfi_generic_perform_write+0x10/0x10 [ 167.405136][ T2956] ? down_write+0xee/0x2b0 [ 167.405157][ T2956] ? file_update_time+0xa3/0x210 [ 167.405180][ T2956] shmem_file_write_iter+0x105/0x130 [ 167.405203][ T2956] __kernel_write_iter+0x42f/0x8a0 [ 167.405235][ T2956] ? __cfi___kernel_write_iter+0x10/0x10 [ 167.405260][ T2956] ? get_dump_page+0x165/0x220 [ 167.405281][ T2956] ? __asan_memset+0x39/0x50 [ 167.405305][ T2956] ? iov_iter_bvec+0xc0/0x180 [ 167.405331][ T2956] dump_user_range+0xb8b/0xe60 [ 167.405360][ T2956] ? __cfi_dump_user_range+0x10/0x10 [ 167.405386][ T2956] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 167.405416][ T2956] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 167.405446][ T2956] ? elf_core_dump+0x24c0/0x3960 [ 167.405478][ T2956] elf_core_dump+0x2e7e/0x3960 [ 167.405513][ T2956] ? __cfi_elf_core_dump+0x10/0x10 [ 167.405551][ T2956] ? dump_interrupted+0xf0/0xf0 [ 167.405574][ T2956] ? 0xffffffffff600000 [ 167.405591][ T2956] do_coredump+0x208a/0x2fe0 [ 167.405629][ T2956] ? __cfi_do_coredump+0x10/0x10 [ 167.405651][ T2956] ? asm_exc_page_fault+0x2b/0x30 [ 167.405679][ T2956] ? __kasan_slab_free+0x6a/0x80 [ 167.405706][ T2956] ? kmem_cache_free+0x1bd/0x4f0 [ 167.405730][ T2956] ? get_signal+0xa74/0x14e0 [ 167.405753][ T2956] get_signal+0x11f8/0x14e0 [ 167.405778][ T2956] arch_do_signal_or_restart+0xbc/0x760 [ 167.405807][ T2956] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 167.405835][ T2956] irqentry_exit_to_user_mode+0x4d/0xb0 [ 167.405856][ T2956] irqentry_exit+0x16/0x60 [ 167.405874][ T2956] exc_page_fault+0x65/0xc0 [ 167.405893][ T2956] asm_exc_page_fault+0x2b/0x30 [ 167.405914][ T2956] RIP: 0033:0x0 [ 167.405928][ T2956] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 167.405939][ T2956] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 167.405958][ T2956] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 167.405972][ T2956] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 167.405986][ T2956] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 167.406001][ T2956] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 167.406014][ T2956] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 167.406033][ T2956] [ 167.406042][ T2956] memory: usage 307200kB, limit 307200kB, failcnt 46329 [ 167.414996][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 167.436033][ T2956] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 167.458413][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 167.480009][ T2956] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 167.500462][ T9] usb 4-1: USB disconnect, device number 85 [ 167.505534][ T36] audit: type=1400 audit(1769321671.894:669): avc: denied { mounton } for pid=3321 comm="syz.3.913" path="/203/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 167.546006][ T2956] Memory cgroup stats for [ 167.869772][ T3309] netlink: 72 bytes leftover after parsing attributes in process `syz.5.910'. [ 167.875407][ T10] aureal 0003:0755:2626.001A: item fetching failed at offset 0/3 [ 167.907115][ T2956] /syz1 [ 167.917623][ T10] aureal 0003:0755:2626.001A: probe with driver aureal failed with error -22 [ 167.919480][ T2956] : [ 167.932464][ T2956] cache 313970688 [ 167.935175][ T36] audit: type=1400 audit(1769321672.344:670): avc: denied { setattr } for pid=3323 comm="syz.1.914" name="NETLINK" dev="sockfs" ino=26296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.938771][ T2956] rss 438272 [ 167.965001][ T3309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.967218][ T2956] rss_huge 0 [ 167.976816][ T2956] shmem 289058816 [ 167.978439][ T3309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.981116][ T2956] mapped_file 0 [ 167.991883][ T2956] dirty 0 [ 167.996206][ T2956] writeback 0 [ 167.999574][ T2956] workingset_refault_anon 1061 [ 168.003726][ T354] usb 6-1: USB disconnect, device number 54 [ 168.004811][ T2956] workingset_refault_file 5047 [ 168.023126][ T2956] swap 127987712 [ 168.026718][ T2956] swapcached 8192 [ 168.028727][ T3329] SELinux: Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped). [ 168.030354][ T2956] pgpgin 288725 [ 168.030364][ T2956] pgpgout 212985 [ 168.041092][ T36] audit: type=1400 audit(1769321672.464:671): avc: denied { relabelto } for pid=3328 comm="syz.5.915" name="bus" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:lvm_control_t:s0" [ 168.050493][ T2956] pgfault 56038 [ 168.074420][ T3329] No source specified [ 168.100890][ T2956] pgmajfault 212 [ 168.102418][ T36] audit: type=1400 audit(1769321672.494:672): avc: denied { associate } for pid=3328 comm="syz.5.915" name="bus" dev="tmpfs" ino=1029 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:lvm_control_t:s0" [ 168.105051][ T2956] inactive_anon 10022912 [ 168.139902][ T2956] active_anon 279388160 [ 168.144323][ T2956] inactive_file 12288 [ 168.148572][ T2956] active_file 0 [ 168.152129][ T2956] unevictable 24899584 [ 168.156540][ T2956] hierarchical_memory_limit 314572800 [ 168.171585][ T36] audit: type=1400 audit(1769321672.504:673): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.192335][ T2956] hierarchical_memsw_limit 9223372036854771712 [ 168.199131][ T2956] total_cache 313970688 [ 168.204679][ T2956] total_rss 438272 [ 168.208449][ T2956] total_rss_huge 0 [ 168.212572][ T2956] total_shmem 289058816 [ 168.217234][ T2956] total_mapped_file 0 [ 168.221366][ T2956] total_dirty 0 [ 168.225123][ T2956] total_writeback 0 [ 168.229134][ T2956] total_workingset_refault_anon 1061 [ 168.234917][ T2956] total_workingset_refault_file 5047 [ 168.240330][ T2956] total_swap 127987712 [ 168.244609][ T2956] total_swapcached 8192 [ 168.248816][ T2956] total_pgpgin 288725 [ 168.254007][ T2956] total_pgpgout 212985 [ 168.258140][ T2956] total_pgfault 56038 [ 168.262215][ T2956] total_pgmajfault 212 [ 168.266358][ T2956] total_inactive_anon 10022912 [ 168.271179][ T2956] total_active_anon 279388160 [ 168.275912][ T2956] total_inactive_file 12288 [ 168.283369][ T2956] total_active_file 0 [ 168.287415][ T2956] total_unevictable 24899584 [ 168.292005][ T2956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2956,uid=0 [ 168.308668][ T2956] Memory cgroup out of memory: Killed process 2956 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:53644kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 168.318451][ T3354] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.352898][ T3354] overlayfs: missing 'lowerdir' [ 168.394994][ T36] audit: type=1326 audit(1769321672.814:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.5.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5ec59acb9 code=0x0 [ 168.683561][ T2950] syz.1.798 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 168.726808][ T2950] CPU: 1 UID: 0 PID: 2950 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 168.726845][ T2950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.726859][ T2950] Call Trace: [ 168.726866][ T2950] [ 168.726874][ T2950] __dump_stack+0x21/0x30 [ 168.726903][ T2950] dump_stack_lvl+0x140/0x1c0 [ 168.726927][ T2950] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.726952][ T2950] ? ___ratelimit+0x40e/0x5b0 [ 168.726983][ T2950] dump_stack+0x19/0x20 [ 168.727006][ T2950] dump_header+0xd6/0x490 [ 168.727028][ T2950] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 168.727048][ T2950] oom_kill_process+0x35d/0x640 [ 168.727075][ T2950] out_of_memory+0x624/0xa30 [ 168.727102][ T2950] ? __cfi_out_of_memory+0x10/0x10 [ 168.727130][ T2950] ? mutex_lock_killable+0x97/0x1d0 [ 168.727149][ T2950] ? __cfi_mutex_lock_killable+0x10/0x10 [ 168.727170][ T2950] mem_cgroup_out_of_memory+0x2c8/0x390 [ 168.727195][ T2950] ? css_next_descendant_pre+0x202/0x230 [ 168.727217][ T2950] ? drain_obj_stock+0xed0/0xed0 [ 168.727243][ T2950] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 168.727285][ T2950] try_charge_memcg+0x91c/0xe10 [ 168.727306][ T2950] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 168.727346][ T2950] ? __cfi_try_charge_memcg+0x10/0x10 [ 168.727366][ T2950] ? page_cache_ra_order+0xb44/0xff0 [ 168.727397][ T2950] ? __alloc_pages_noprof+0x35f/0x7e0 [ 168.727421][ T2950] __mem_cgroup_charge+0xfc/0x420 [ 168.727445][ T2950] ? filemap_get_entry+0x41b/0x490 [ 168.727476][ T2950] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 168.727502][ T2950] filemap_add_folio+0x57/0x2d0 [ 168.727532][ T2950] __filemap_get_folio+0x5df/0xad0 [ 168.727564][ T2950] ? __cfi___filemap_get_folio+0x10/0x10 [ 168.727605][ T2950] ? filemap_map_pages+0x1666/0x1a10 [ 168.727624][ T2950] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 168.727644][ T2950] filemap_fault+0xb5f/0x1850 [ 168.727664][ T2950] ? __cfi_filemap_fault+0x10/0x10 [ 168.727683][ T2950] ? __cfi_filemap_map_pages+0x10/0x10 [ 168.727704][ T2950] do_pte_missing+0x9b0/0x44f0 [ 168.727736][ T2950] ? shmem_alloc_and_add_folio+0xd86/0x10b0 [ 168.727767][ T2950] ? pte_marker_clear+0x1b0/0x1b0 [ 168.727797][ T2950] ? put_swap_device+0x130/0x130 [ 168.727825][ T2950] ? __pte_offset_map+0x1b0/0x230 [ 168.727849][ T2950] ? pte_offset_map_rw_nolock+0xba/0x110 [ 168.727876][ T2950] handle_mm_fault+0x11b8/0x1bf0 [ 168.727904][ T2950] ? __kasan_check_write+0x18/0x20 [ 168.727931][ T2950] ? __cfi_handle_mm_fault+0x10/0x10 [ 168.727959][ T2950] ? follow_page_pte+0x2c8/0xbc0 [ 168.727981][ T2950] ? gup_must_unshare+0x1e0/0x1e0 [ 168.728001][ T2950] ? vma_is_secretmem+0x11/0x50 [ 168.728023][ T2950] __get_user_pages+0x1170/0x22b0 [ 168.728054][ T2950] ? __kasan_check_write+0x18/0x20 [ 168.728081][ T2950] ? populate_vma_page_range+0x220/0x220 [ 168.728112][ T2950] ? __kernel_write_iter+0x6a4/0x8a0 [ 168.728138][ T2950] get_dump_page+0x10c/0x220 [ 168.728157][ T2950] ? __cfi_get_dump_page+0x10/0x10 [ 168.728175][ T2950] ? __asan_memset+0x39/0x50 [ 168.728200][ T2950] dump_user_range+0x18b/0xe60 [ 168.728228][ T2950] ? __cfi_dump_user_range+0x10/0x10 [ 168.728253][ T2950] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 168.728283][ T2950] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 168.728316][ T2950] ? elf_core_dump+0x24c0/0x3960 [ 168.728347][ T2950] elf_core_dump+0x2e7e/0x3960 [ 168.728379][ T2950] ? __cfi_elf_core_dump+0x10/0x10 [ 168.728416][ T2950] ? dump_interrupted+0xf0/0xf0 [ 168.728440][ T2950] ? 0xffffffffff600000 [ 168.728457][ T2950] do_coredump+0x208a/0x2fe0 [ 168.728483][ T2950] ? __cfi_do_coredump+0x10/0x10 [ 168.728505][ T2950] ? asm_exc_page_fault+0x2b/0x30 [ 168.728536][ T2950] ? __kasan_slab_free+0x6a/0x80 [ 168.728563][ T2950] ? kmem_cache_free+0x1bd/0x4f0 [ 168.728588][ T2950] ? get_signal+0xa74/0x14e0 [ 168.728612][ T2950] get_signal+0x11f8/0x14e0 [ 168.728638][ T2950] arch_do_signal_or_restart+0xbc/0x760 [ 168.728667][ T2950] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 168.728699][ T2950] irqentry_exit_to_user_mode+0x4d/0xb0 [ 168.728722][ T2950] irqentry_exit+0x16/0x60 [ 168.728742][ T2950] exc_page_fault+0x65/0xc0 [ 168.728761][ T2950] asm_exc_page_fault+0x2b/0x30 [ 168.728784][ T2950] RIP: 0033:0x0 [ 168.728798][ T2950] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 168.728810][ T2950] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 168.728829][ T2950] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 168.728844][ T2950] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 168.728860][ T2950] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 168.728875][ T2950] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 168.728890][ T2950] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 168.728908][ T2950] [ 168.761689][ T36] audit: type=1326 audit(1769321673.174:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3323 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1919acb9 code=0x7fc00000 [ 168.765093][ T2950] memory: usage 304608kB, limit 307200kB, failcnt 48823 [ 168.793554][ T64] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 168.803017][ T2950] memory+swap: usage 428120kB, limit 9007199254740988kB, failcnt 0 [ 168.933005][ T64] usb 4-1: device descriptor read/64, error -71 [ 169.246055][ T2950] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 169.253162][ T2950] Memory cgroup stats for /syz1: [ 169.253325][ T2950] cache 309243904 [ 169.262087][ T2950] rss 364544 [ 169.265563][ T2950] rss_huge 0 [ 169.268785][ T2950] shmem 283897856 [ 169.272466][ T2950] mapped_file 4096 [ 169.276482][ T2950] dirty 0 [ 169.279681][ T2950] writeback 0 [ 169.283148][ T2950] workingset_refault_anon 1061 [ 169.287932][ T2950] workingset_refault_file 5208 [ 169.292711][ T2950] swap 126488576 [ 169.296585][ T2950] swapcached 8192 [ 169.300236][ T2950] pgpgin 292738 [ 169.303911][ T2950] pgpgout 218164 [ 169.307507][ T2950] pgfault 56437 [ 169.310988][ T2950] pgmajfault 220 [ 169.314797][ T2950] inactive_anon 185528320 [ 169.319187][ T2950] active_anon 98521088 [ 169.323471][ T2950] inactive_file 0 [ 169.327115][ T2950] active_file 45056 [ 169.330965][ T2950] unevictable 25300992 [ 169.341052][ T2950] hierarchical_memory_limit 314572800 [ 169.351153][ T2950] hierarchical_memsw_limit 9223372036854771712 [ 169.369965][ T2950] total_cache 309243904 [ 169.380998][ T2950] total_rss 364544 [ 169.387339][ T2950] total_rss_huge 0 [ 169.391079][ T2950] total_shmem 283897856 [ 169.408877][ T2950] total_mapped_file 4096 [ 169.415429][ T2950] total_dirty 0 [ 169.421357][ T2950] total_writeback 0 [ 169.432875][ T2950] total_workingset_refault_anon 1061 [ 169.433228][ T45] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 169.443469][ T2950] total_workingset_refault_file 5208 [ 169.472870][ T2950] total_swap 126488576 [ 169.482919][ T64] usb 4-1: device descriptor read/64, error -71 [ 169.491563][ T2950] total_swapcached 8192 [ 169.502916][ T2950] total_pgpgin 292738 [ 169.513094][ T2950] total_pgpgout 218164 [ 169.522893][ T2950] total_pgfault 56437 [ 169.526893][ T2950] total_pgmajfault 220 [ 169.542898][ T2950] total_inactive_anon 185528320 [ 169.547787][ T2950] total_active_anon 98521088 [ 169.562537][ T2950] total_inactive_file 0 [ 169.569541][ T2950] total_active_file 45056 [ 169.579677][ T2950] total_unevictable 25300992 [ 169.589834][ T2950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2950,uid=0 [ 169.605057][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 169.612646][ T45] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 169.621895][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.630031][ T45] usb 6-1: Product: syz [ 169.637299][ T45] usb 6-1: Manufacturer: syz [ 169.637303][ T2950] Memory cgroup out of memory: Killed process 2950 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 169.641914][ T45] usb 6-1: SerialNumber: syz [ 169.692728][ T45] usb 6-1: config 0 descriptor?? [ 169.703126][ T45] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 169.722883][ T64] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 169.852897][ T64] usb 4-1: device descriptor read/64, error -71 [ 169.973029][ T2952] syz.1.798 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 169.990377][ T2952] CPU: 0 UID: 0 PID: 2952 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 169.990410][ T2952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.990424][ T2952] Call Trace: [ 169.990432][ T2952] [ 169.990441][ T2952] __dump_stack+0x21/0x30 [ 169.990471][ T2952] dump_stack_lvl+0x140/0x1c0 [ 169.990496][ T2952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.990520][ T2952] ? ___ratelimit+0x40e/0x5b0 [ 169.990550][ T2952] dump_stack+0x19/0x20 [ 169.990574][ T2952] dump_header+0xd6/0x490 [ 169.990596][ T2952] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 169.990617][ T2952] oom_kill_process+0x35d/0x640 [ 169.990646][ T2952] out_of_memory+0x624/0xa30 [ 169.990674][ T2952] ? __cfi_out_of_memory+0x10/0x10 [ 169.990702][ T2952] ? mutex_lock_killable+0x97/0x1d0 [ 169.990722][ T2952] ? __cfi_mutex_lock_killable+0x10/0x10 [ 169.990743][ T2952] mem_cgroup_out_of_memory+0x2c8/0x390 [ 169.990769][ T2952] ? css_next_descendant_pre+0x202/0x230 [ 169.990791][ T2952] ? drain_obj_stock+0xed0/0xed0 [ 169.990817][ T2952] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 169.990842][ T2952] try_charge_memcg+0x91c/0xe10 [ 169.990863][ T2952] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 169.990889][ T2952] ? __cfi_try_charge_memcg+0x10/0x10 [ 169.990905][ T2952] ? page_cache_ra_order+0xb44/0xff0 [ 169.990930][ T2952] ? __alloc_pages_noprof+0x35f/0x7e0 [ 169.990955][ T2952] __mem_cgroup_charge+0xfc/0x420 [ 169.990975][ T2952] ? filemap_get_entry+0x41b/0x490 [ 169.990999][ T2952] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 169.991020][ T2952] filemap_add_folio+0x57/0x2d0 [ 169.991043][ T2952] __filemap_get_folio+0x5df/0xad0 [ 169.991068][ T2952] ? __cfi___filemap_get_folio+0x10/0x10 [ 169.991092][ T2952] ? filemap_map_pages+0x1666/0x1a10 [ 169.991109][ T2952] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 169.991126][ T2952] filemap_fault+0xb5f/0x1850 [ 169.991143][ T2952] ? __cfi_filemap_fault+0x10/0x10 [ 169.991159][ T2952] ? __cfi_filemap_map_pages+0x10/0x10 [ 169.991177][ T2952] do_pte_missing+0x9b0/0x44f0 [ 169.991204][ T2952] ? shmem_alloc_and_add_folio+0xd86/0x10b0 [ 169.991231][ T2952] ? pte_marker_clear+0x1b0/0x1b0 [ 169.991256][ T2952] ? put_swap_device+0x130/0x130 [ 169.991280][ T2952] ? __pte_offset_map+0x1b0/0x230 [ 169.991300][ T2952] ? pte_offset_map_rw_nolock+0xba/0x110 [ 169.991320][ T2952] handle_mm_fault+0x11b8/0x1bf0 [ 169.991344][ T2952] ? __kasan_check_write+0x18/0x20 [ 169.991367][ T2952] ? __cfi_handle_mm_fault+0x10/0x10 [ 169.991391][ T2952] ? follow_page_pte+0x2c8/0xbc0 [ 169.991409][ T2952] ? gup_must_unshare+0x1e0/0x1e0 [ 169.991425][ T2952] ? vma_is_secretmem+0x11/0x50 [ 169.991443][ T2952] __get_user_pages+0x1170/0x22b0 [ 169.991470][ T2952] ? __kasan_check_write+0x18/0x20 [ 169.991493][ T2952] ? populate_vma_page_range+0x220/0x220 [ 169.991519][ T2952] ? __kernel_write_iter+0x6a4/0x8a0 [ 169.991541][ T2952] get_dump_page+0x10c/0x220 [ 169.991557][ T2952] ? __cfi_get_dump_page+0x10/0x10 [ 169.991572][ T2952] ? __asan_memset+0x39/0x50 [ 169.991592][ T2952] dump_user_range+0x18b/0xe60 [ 169.991616][ T2952] ? __cfi_dump_user_range+0x10/0x10 [ 169.991637][ T2952] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 169.991661][ T2952] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 169.991684][ T2952] ? elf_core_dump+0x24c0/0x3960 [ 169.991710][ T2952] elf_core_dump+0x2e7e/0x3960 [ 169.991736][ T2952] ? __cfi_elf_core_dump+0x10/0x10 [ 169.991767][ T2952] ? dump_interrupted+0xf0/0xf0 [ 169.991787][ T2952] ? 0xffffffffff600000 [ 169.991801][ T2952] do_coredump+0x208a/0x2fe0 [ 169.991825][ T2952] ? __cfi_do_coredump+0x10/0x10 [ 169.991844][ T2952] ? asm_exc_page_fault+0x2b/0x30 [ 169.991870][ T2952] ? __kasan_slab_free+0x6a/0x80 [ 169.991893][ T2952] ? kmem_cache_free+0x1bd/0x4f0 [ 169.991914][ T2952] ? get_signal+0xa74/0x14e0 [ 169.991935][ T2952] get_signal+0x11f8/0x14e0 [ 169.991962][ T2952] arch_do_signal_or_restart+0xbc/0x760 [ 169.991987][ T2952] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 169.992012][ T2952] ? fpregs_restore_userregs+0x11c/0x260 [ 169.992031][ T2952] irqentry_exit_to_user_mode+0x4d/0xb0 [ 169.992049][ T2952] irqentry_exit+0x16/0x60 [ 169.992066][ T2952] exc_page_fault+0x65/0xc0 [ 169.992082][ T2952] asm_exc_page_fault+0x2b/0x30 [ 169.992101][ T2952] RIP: 0033:0x0 [ 169.992113][ T2952] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 169.992123][ T2952] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 169.992140][ T2952] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 169.992153][ T2952] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 169.992166][ T2952] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 169.992179][ T2952] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 169.992192][ T2952] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 169.992209][ T2952] [ 169.992216][ T2952] memory: usage 307200kB, limit 307200kB, failcnt 50814 [ 170.465775][ T2952] memory+swap: usage 398356kB, limit 9007199254740988kB, failcnt 0 [ 170.473714][ T2952] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.480636][ T2952] Memory cgroup stats for /syz1: [ 170.480788][ T2952] cache 278818816 [ 170.489486][ T2952] rss 212992 [ 170.492792][ T2952] rss_huge 0 [ 170.496054][ T2952] shmem 253399040 [ 170.499706][ T2952] mapped_file 6791168 [ 170.503773][ T2952] dirty 0 [ 170.506729][ T2952] writeback 0 [ 170.510023][ T2952] workingset_refault_anon 1061 [ 170.515419][ T2952] workingset_refault_file 5975 [ 170.520200][ T2952] swap 127840256 [ 170.523838][ T64] usb 4-1: device descriptor read/64, error -71 [ 170.530192][ T2952] swapcached 155648 [ 170.534058][ T2952] pgpgin 298032 [ 170.537527][ T2952] pgpgout 231404 [ 170.541114][ T2952] pgfault 58537 [ 170.544610][ T2952] pgmajfault 226 [ 170.548169][ T2952] inactive_anon 56414208 [ 170.552446][ T2952] active_anon 197091328 [ 170.556668][ T2952] inactive_file 0 [ 170.560468][ T2952] active_file 8192 [ 170.564263][ T2952] unevictable 25411584 [ 170.568340][ T2952] hierarchical_memory_limit 314572800 [ 170.573774][ T2952] hierarchical_memsw_limit 9223372036854771712 [ 170.579973][ T2952] total_cache 278818816 [ 170.584167][ T2952] total_rss 212992 [ 170.587932][ T2952] total_rss_huge 0 [ 170.591690][ T2952] total_shmem 253399040 [ 170.595900][ T2952] total_mapped_file 6791168 [ 170.600415][ T2952] total_dirty 0 [ 170.603978][ T2952] total_writeback 0 [ 170.607805][ T2952] total_workingset_refault_anon 1061 [ 170.613174][ T2952] total_workingset_refault_file 5975 [ 170.618506][ T2952] total_swap 127840256 [ 170.622589][ T2952] total_swapcached 155648 [ 170.626969][ T2952] total_pgpgin 298032 [ 170.631000][ T2952] total_pgpgout 231404 [ 170.635242][ T64] usb usb4-port1: attempt power cycle [ 170.640945][ T2952] total_pgfault 58537 [ 170.645192][ T2952] total_pgmajfault 226 [ 170.649283][ T2952] total_inactive_anon 56414208 [ 170.654258][ T2952] total_active_anon 197091328 [ 170.658993][ T2952] total_inactive_file 0 [ 170.663341][ T2952] total_active_file 8192 [ 170.667602][ T2952] total_unevictable 25411584 [ 170.672241][ T2952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2953,uid=0 [ 170.687363][ T2952] Memory cgroup out of memory: Killed process 2953 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 170.972892][ T64] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 170.993918][ T64] usb 4-1: device descriptor read/8, error -71 [ 171.102581][ T2960] syz.1.798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 171.117509][ T2960] CPU: 0 UID: 0 PID: 2960 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 171.117545][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.117559][ T2960] Call Trace: [ 171.117566][ T2960] [ 171.117574][ T2960] __dump_stack+0x21/0x30 [ 171.117605][ T2960] dump_stack_lvl+0x140/0x1c0 [ 171.117631][ T2960] ? __cfi_dump_stack_lvl+0x10/0x10 [ 171.117656][ T2960] ? ___ratelimit+0x40e/0x5b0 [ 171.117686][ T2960] dump_stack+0x19/0x20 [ 171.117710][ T2960] dump_header+0xd6/0x490 [ 171.117732][ T2960] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 171.117753][ T2960] oom_kill_process+0x35d/0x640 [ 171.117783][ T2960] out_of_memory+0x624/0xa30 [ 171.117812][ T2960] ? __cfi_out_of_memory+0x10/0x10 [ 171.117839][ T2960] ? mutex_lock_killable+0x97/0x1d0 [ 171.117876][ T2960] ? __cfi_mutex_lock_killable+0x10/0x10 [ 171.117899][ T2960] mem_cgroup_out_of_memory+0x2c8/0x390 [ 171.117927][ T2960] ? css_next_descendant_pre+0x202/0x230 [ 171.117950][ T2960] ? drain_obj_stock+0xed0/0xed0 [ 171.117979][ T2960] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 171.118007][ T2960] try_charge_memcg+0x91c/0xe10 [ 171.118030][ T2960] ? __cfi_try_charge_memcg+0x10/0x10 [ 171.118052][ T2960] ? __alloc_pages_noprof+0x35f/0x7e0 [ 171.118076][ T2960] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 171.118106][ T2960] __mem_cgroup_charge+0xfc/0x420 [ 171.118132][ T2960] ? folio_add_lru+0x116/0x400 [ 171.118164][ T2960] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 171.118202][ T2960] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 171.118235][ T2960] ? put_swap_device+0x130/0x130 [ 171.118265][ T2960] ? shmem_huge_global_enabled+0x2da/0x360 [ 171.118294][ T2960] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 171.118322][ T2960] ? __kasan_check_write+0x18/0x20 [ 171.118342][ T2960] ? _raw_spin_lock+0x92/0x120 [ 171.118364][ T2960] shmem_get_folio_gfp+0x607/0x1390 [ 171.118390][ T2960] ? shmem_get_folio+0xc0/0xc0 [ 171.118412][ T2960] ? follow_page_pte+0x90f/0xbc0 [ 171.118430][ T2960] ? inode_to_bdi+0x6d/0x100 [ 171.118449][ T2960] shmem_write_begin+0xf4/0x270 [ 171.118475][ T2960] generic_perform_write+0x32b/0x970 [ 171.118495][ T2960] ? __cfi_generic_perform_write+0x10/0x10 [ 171.118512][ T2960] ? down_write+0xee/0x2b0 [ 171.118530][ T2960] ? file_update_time+0xa3/0x210 [ 171.118548][ T2960] shmem_file_write_iter+0x105/0x130 [ 171.118566][ T2960] __kernel_write_iter+0x42f/0x8a0 [ 171.118587][ T2960] ? __cfi___kernel_write_iter+0x10/0x10 [ 171.118607][ T2960] ? get_dump_page+0x165/0x220 [ 171.118623][ T2960] ? __asan_memset+0x39/0x50 [ 171.118643][ T2960] ? iov_iter_bvec+0xc0/0x180 [ 171.118664][ T2960] dump_user_range+0xb8b/0xe60 [ 171.118687][ T2960] ? __cfi_dump_user_range+0x10/0x10 [ 171.118708][ T2960] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 171.118733][ T2960] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 171.118756][ T2960] ? elf_core_dump+0x24c0/0x3960 [ 171.118781][ T2960] elf_core_dump+0x2e7e/0x3960 [ 171.118808][ T2960] ? __cfi_elf_core_dump+0x10/0x10 [ 171.118839][ T2960] ? dump_interrupted+0xf0/0xf0 [ 171.118860][ T2960] ? 0xffffffffff600000 [ 171.118875][ T2960] do_coredump+0x208a/0x2fe0 [ 171.118898][ T2960] ? __cfi_do_coredump+0x10/0x10 [ 171.118917][ T2960] ? asm_exc_page_fault+0x2b/0x30 [ 171.118944][ T2960] ? __kasan_slab_free+0x6a/0x80 [ 171.118968][ T2960] ? kmem_cache_free+0x1bd/0x4f0 [ 171.118989][ T2960] ? get_signal+0xa74/0x14e0 [ 171.119010][ T2960] get_signal+0x11f8/0x14e0 [ 171.119032][ T2960] arch_do_signal_or_restart+0xbc/0x760 [ 171.119057][ T2960] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 171.119084][ T2960] irqentry_exit_to_user_mode+0x4d/0xb0 [ 171.119108][ T2960] irqentry_exit+0x16/0x60 [ 171.119124][ T2960] exc_page_fault+0x65/0xc0 [ 171.119140][ T2960] asm_exc_page_fault+0x2b/0x30 [ 171.119159][ T2960] RIP: 0033:0x0 [ 171.119171][ T2960] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 171.119181][ T2960] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 171.119197][ T2960] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 171.119211][ T2960] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 171.119223][ T2960] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 171.119237][ T2960] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 171.119249][ T2960] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 171.119266][ T2960] [ 171.119275][ T2960] memory: usage 307200kB, limit 307200kB, failcnt 53279 [ 171.549074][ T2960] memory+swap: usage 432068kB, limit 9007199254740988kB, failcnt 0 [ 171.550563][ T64] usb 4-1: device descriptor read/8, error -71 [ 171.558420][ T2960] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 171.572009][ T2960] Memory cgroup stats for /syz1: [ 171.572160][ T2960] cache 314224640 [ 171.580814][ T2960] rss 241664 [ 171.584179][ T2960] rss_huge 0 [ 171.587429][ T2960] shmem 283992064 [ 171.591078][ T2960] mapped_file 10768384 [ 171.595263][ T2960] dirty 0 [ 171.598213][ T2960] writeback 0 [ 171.601559][ T2960] workingset_refault_anon 1068 [ 171.606421][ T2960] workingset_refault_file 7180 [ 171.611250][ T2960] swap 127864832 [ 171.614857][ T2960] swapcached 131072 [ 171.618753][ T2960] pgpgin 316783 [ 171.622720][ T2960] pgpgout 241516 [ 171.626852][ T2960] pgfault 60208 [ 171.630412][ T2960] pgmajfault 246 [ 171.634031][ T2960] inactive_anon 172347392 [ 171.638374][ T2960] active_anon 111992832 [ 171.642587][ T2960] inactive_file 0 [ 171.646322][ T2960] active_file 0 [ 171.649786][ T2960] unevictable 30232576 [ 171.653893][ T2960] hierarchical_memory_limit 314572800 [ 171.659280][ T2960] hierarchical_memsw_limit 9223372036854771712 [ 171.665510][ T2960] total_cache 314224640 [ 171.669945][ T2960] total_rss 241664 [ 171.673774][ T2960] total_rss_huge 0 [ 171.677535][ T2960] total_shmem 283992064 [ 171.681698][ T2960] total_mapped_file 10768384 [ 171.686346][ T2960] total_dirty 0 [ 171.689810][ T2960] total_writeback 0 [ 171.693670][ T2960] total_workingset_refault_anon 1068 [ 171.698973][ T2960] total_workingset_refault_file 7180 [ 171.704310][ T2960] total_swap 127864832 [ 171.708392][ T2960] total_swapcached 131072 [ 171.712739][ T2960] total_pgpgin 316783 [ 171.716788][ T2960] total_pgpgout 241516 [ 171.720869][ T2960] total_pgfault 60208 [ 171.724924][ T2960] total_pgmajfault 246 [ 171.729048][ T2960] total_inactive_anon 172347392 [ 171.733956][ T2960] total_active_anon 111992832 [ 171.738654][ T2960] total_inactive_file 0 [ 171.742807][ T2960] total_active_file 0 [ 171.746851][ T2960] total_unevictable 30232576 [ 171.751456][ T2960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2952,uid=0 [ 171.767334][ T2960] Memory cgroup out of memory: Killed process 2952 (syz.1.798) total-vm:90472kB, anon-rss:1340kB, file-rss:53764kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 171.863974][ T3378] syz.1.932 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 171.892005][ T3378] CPU: 0 UID: 0 PID: 3378 Comm: syz.1.932 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 171.892053][ T3378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.892069][ T3378] Call Trace: [ 171.892077][ T3378] [ 171.892088][ T3378] __dump_stack+0x21/0x30 [ 171.892121][ T3378] dump_stack_lvl+0x140/0x1c0 [ 171.892150][ T3378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 171.892177][ T3378] ? ___ratelimit+0x40e/0x5b0 [ 171.892210][ T3378] dump_stack+0x19/0x20 [ 171.892237][ T3378] dump_header+0xd6/0x490 [ 171.892261][ T3378] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 171.892285][ T3378] oom_kill_process+0x35d/0x640 [ 171.892318][ T3378] out_of_memory+0x624/0xa30 [ 171.892348][ T3378] ? __cfi_out_of_memory+0x10/0x10 [ 171.892379][ T3378] ? mutex_lock_killable+0x97/0x1d0 [ 171.892419][ T3378] ? __cfi_mutex_lock_killable+0x10/0x10 [ 171.892444][ T3378] mem_cgroup_out_of_memory+0x2c8/0x390 [ 171.892476][ T3378] ? css_next_descendant_pre+0x202/0x230 [ 171.892502][ T3378] ? drain_obj_stock+0xed0/0xed0 [ 171.892532][ T3378] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 171.892563][ T3378] try_charge_memcg+0x91c/0xe10 [ 171.892589][ T3378] ? __cfi_try_charge_memcg+0x10/0x10 [ 171.892614][ T3378] ? __alloc_pages_noprof+0x35f/0x7e0 [ 171.892642][ T3378] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 171.892668][ T3378] __mem_cgroup_charge+0xfc/0x420 [ 171.892696][ T3378] ? folio_add_lru+0x116/0x400 [ 171.892731][ T3378] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 171.892760][ T3378] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 171.892800][ T3378] ? put_swap_device+0x130/0x130 [ 171.892834][ T3378] ? shmem_huge_global_enabled+0x2da/0x360 [ 171.892869][ T3378] ? shmem_allowable_huge_orders+0x405/0x430 [ 171.892904][ T3378] shmem_get_folio_gfp+0x607/0x1390 [ 171.892934][ T3378] ? set_pte_range+0x441/0x660 [ 171.892972][ T3378] ? shmem_get_folio+0xc0/0xc0 [ 171.893004][ T3378] ? __cfi_filemap_map_pages+0x10/0x10 [ 171.893035][ T3378] ? folio_unlock+0x137/0x1b0 [ 171.893069][ T3378] shmem_fault+0x17d/0x350 [ 171.893104][ T3378] do_pte_missing+0x9b0/0x44f0 [ 171.893141][ T3378] ? preempt_schedule_irq+0xab/0x110 [ 171.893174][ T3378] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 171.893210][ T3378] ? cgroup_rstat_updated+0x141/0x810 [ 171.893265][ T3378] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 171.893291][ T3378] ? pte_marker_clear+0x1b0/0x1b0 [ 171.893328][ T3378] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 171.893366][ T3378] ? sysvec_call_function_single+0x1/0x90 [ 171.893392][ T3378] ? __pte_offset_map+0x1b0/0x230 [ 171.893421][ T3378] ? pte_offset_map_rw_nolock+0xba/0x110 [ 171.893451][ T3378] handle_mm_fault+0x11b8/0x1bf0 [ 171.893485][ T3378] ? __kasan_check_write+0x18/0x20 [ 171.893519][ T3378] ? __cfi_handle_mm_fault+0x10/0x10 [ 171.893554][ T3378] ? follow_page_pte+0x4b9/0xbc0 [ 171.893581][ T3378] ? gup_must_unshare+0x1e0/0x1e0 [ 171.893604][ T3378] ? vma_is_secretmem+0x11/0x50 [ 171.893631][ T3378] __get_user_pages+0x1170/0x22b0 [ 171.893675][ T3378] ? populate_vma_page_range+0x220/0x220 [ 171.893713][ T3378] ? down_read+0x7f/0xe0 [ 171.893736][ T3378] ? __cfi_down_read+0x10/0x10 [ 171.893762][ T3378] __mm_populate+0x2f8/0x430 [ 171.893799][ T3378] vm_mmap_pgoff+0x426/0x4b0 [ 171.893831][ T3378] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 171.893862][ T3378] ? xfd_validate_state+0x68/0x140 [ 171.893894][ T3378] ksys_mmap_pgoff+0xfa/0x1e0 [ 171.893924][ T3378] ? __kasan_check_write+0x18/0x20 [ 171.893954][ T3378] __x64_sys_mmap+0x121/0x140 [ 171.893990][ T3378] x64_sys_call+0x13bf/0x2ee0 [ 171.894031][ T3378] do_syscall_64+0x57/0xf0 [ 171.894061][ T3378] ? clear_bhb_loop+0x50/0xa0 [ 171.894093][ T3378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.894123][ T3378] RIP: 0033:0x7fcc1919acb9 [ 171.894144][ T3378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.894167][ T3378] RSP: 002b:00007fcc1a03b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.894195][ T3378] RAX: ffffffffffffffda RBX: 00007fcc19415fa0 RCX: 00007fcc1919acb9 [ 171.894215][ T3378] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 171.894234][ T3378] RBP: 00007fcc19208bf7 R08: ffffffffffffffff R09: 0000000000000000 [ 171.894254][ T3378] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 171.894270][ T3378] R13: 00007fcc19416038 R14: 00007fcc19415fa0 R15: 00007ffd23e59c58 [ 171.894293][ T3378] [ 172.330096][ T354] usb 6-1: USB disconnect, device number 55 [ 172.382906][ T64] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 172.403227][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 172.409418][ T64] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 172.417577][ T64] usb 4-1: config 2 has no interface number 0 [ 172.424120][ T64] usb 4-1: config 2 interface 88 has no altsetting 0 [ 172.431116][ T3378] memory: usage 297000kB, limit 307200kB, failcnt 54341 [ 172.438261][ T3378] memory+swap: usage 422144kB, limit 9007199254740988kB, failcnt 0 [ 172.446339][ T3378] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 172.453367][ T3378] Memory cgroup stats for /syz1: [ 172.453583][ T3378] cache 304160768 [ 172.462337][ T3378] rss 241664 [ 172.465622][ T3378] rss_huge 0 [ 172.468897][ T64] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 172.478372][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.485771][ T3378] shmem 269799424 [ 172.486542][ T64] usb 4-1: Product: syz [ 172.494203][ T64] usb 4-1: Manufacturer: syz [ 172.498815][ T64] usb 4-1: SerialNumber: syz [ 172.504776][ T3378] mapped_file 14893056 [ 172.509016][ T3378] dirty 0 [ 172.512506][ T3378] writeback 0 [ 172.515938][ T3378] workingset_refault_anon 1068 [ 172.520756][ T3378] workingset_refault_file 8188 [ 172.525557][ T3378] swap 127885312 [ 172.529179][ T3378] swapcached 110592 [ 172.533052][ T3378] pgpgin 324684 [ 172.538249][ T3378] pgpgout 251879 [ 172.541883][ T3378] pgfault 60367 [ 172.545407][ T3378] pgmajfault 248 [ 172.548985][ T3378] inactive_anon 206950400 [ 172.553542][ T3378] active_anon 62799872 [ 172.557800][ T3378] inactive_file 0 [ 172.561476][ T3378] active_file 4128768 [ 172.565572][ T3378] unevictable 30232576 [ 172.569679][ T3378] hierarchical_memory_limit 314572800 [ 172.575118][ T3378] hierarchical_memsw_limit 9223372036854771712 [ 172.581548][ T3378] total_cache 304160768 [ 172.586071][ T3378] total_rss 241664 [ 172.590067][ T3378] total_rss_huge 0 [ 172.593895][ T3378] total_shmem 269799424 [ 172.598086][ T3378] total_mapped_file 14893056 [ 172.602704][ T3378] total_dirty 0 [ 172.606230][ T3378] total_writeback 0 [ 172.610057][ T3378] total_workingset_refault_anon 1068 [ 172.615392][ T3378] total_workingset_refault_file 8188 [ 172.620734][ T3378] total_swap 127885312 [ 172.624842][ T3378] total_swapcached 110592 [ 172.629217][ T3378] total_pgpgin 324684 [ 172.633281][ T3378] total_pgpgout 251879 [ 172.637417][ T3378] total_pgfault 60367 [ 172.641421][ T3378] total_pgmajfault 248 [ 172.645565][ T3378] total_inactive_anon 206950400 [ 172.650444][ T3378] total_active_anon 62799872 [ 172.656171][ T3378] total_inactive_file 0 [ 172.660606][ T3378] total_active_file 4128768 [ 172.665169][ T3378] total_unevictable 30232576 [ 172.669836][ T3378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2960,uid=0 [ 172.686253][ T3378] Memory cgroup out of memory: Killed process 2960 (syz.1.798) total-vm:90472kB, anon-rss:1340kB, file-rss:53700kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 172.932909][ T354] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 173.082911][ T354] usb 6-1: Using ep0 maxpacket: 16 [ 173.093075][ T354] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 173.101385][ T354] usb 6-1: config 0 has no interface number 0 [ 173.112941][ T354] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.133089][ T354] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 173.145464][ T354] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 173.155317][ T354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.164582][ T354] usb 6-1: Product: syz [ 173.168929][ T354] usb 6-1: Manufacturer: syz [ 173.179057][ T354] usb 6-1: SerialNumber: syz [ 173.184704][ T354] usb 6-1: config 0 descriptor?? [ 173.192003][ T3398] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.199301][ T3398] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.410349][ T3398] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.417747][ T3398] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.432558][ T2947] syz.1.798 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 173.472426][ T2947] CPU: 1 UID: 0 PID: 2947 Comm: syz.1.798 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 173.472466][ T2947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.472481][ T2947] Call Trace: [ 173.472488][ T2947] [ 173.472498][ T2947] __dump_stack+0x21/0x30 [ 173.472530][ T2947] dump_stack_lvl+0x140/0x1c0 [ 173.472560][ T2947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.472596][ T2947] ? ___ratelimit+0x40e/0x5b0 [ 173.472629][ T2947] dump_stack+0x19/0x20 [ 173.472655][ T2947] dump_header+0xd6/0x490 [ 173.472679][ T2947] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 173.472701][ T2947] oom_kill_process+0x35d/0x640 [ 173.472733][ T2947] out_of_memory+0x624/0xa30 [ 173.472764][ T2947] ? __cfi_out_of_memory+0x10/0x10 [ 173.472794][ T2947] ? mutex_lock_killable+0x97/0x1d0 [ 173.472815][ T2947] ? __cfi_mutex_lock_killable+0x10/0x10 [ 173.472836][ T2947] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 173.472864][ T2947] mem_cgroup_out_of_memory+0x2c8/0x390 [ 173.472893][ T2947] ? drain_obj_stock+0xed0/0xed0 [ 173.472923][ T2947] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 173.472950][ T2947] try_charge_memcg+0x91c/0xe10 [ 173.472974][ T2947] ? __cfi_try_charge_memcg+0x10/0x10 [ 173.472996][ T2947] ? __alloc_pages_noprof+0x35f/0x7e0 [ 173.473020][ T2947] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 173.473045][ T2947] __mem_cgroup_charge+0xfc/0x420 [ 173.473070][ T2947] ? folio_add_lru+0x116/0x400 [ 173.473103][ T2947] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 173.473144][ T2947] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 173.473174][ T2947] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 173.473197][ T2947] ? put_swap_device+0x130/0x130 [ 173.473227][ T2947] ? shmem_huge_global_enabled+0x2da/0x360 [ 173.473257][ T2947] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 173.473285][ T2947] ? __kasan_check_write+0x18/0x20 [ 173.473309][ T2947] ? _raw_spin_lock+0x92/0x120 [ 173.473335][ T2947] shmem_get_folio_gfp+0x607/0x1390 [ 173.473366][ T2947] ? shmem_get_folio+0xc0/0xc0 [ 173.473393][ T2947] ? __kasan_check_write+0x18/0x20 [ 173.473416][ T2947] ? inode_to_bdi+0x6d/0x100 [ 173.473438][ T2947] shmem_write_begin+0xf4/0x270 [ 173.473469][ T2947] generic_perform_write+0x32b/0x970 [ 173.473490][ T2947] ? inode_update_timestamps+0x4f0/0x700 [ 173.473513][ T2947] ? __cfi_generic_perform_write+0x10/0x10 [ 173.473533][ T2947] ? down_write+0xee/0x2b0 [ 173.473553][ T2947] ? mnt_get_write_access_file+0x1af/0x3b0 [ 173.473581][ T2947] ? mnt_put_write_access_file+0xc2/0x100 [ 173.473601][ T2947] ? file_update_time+0x1de/0x210 [ 173.473622][ T2947] shmem_file_write_iter+0x105/0x130 [ 173.473644][ T2947] __kernel_write_iter+0x42f/0x8a0 [ 173.473670][ T2947] ? __cfi___kernel_write_iter+0x10/0x10 [ 173.473694][ T2947] ? get_dump_page+0x165/0x220 [ 173.473718][ T2947] ? __asan_memset+0x39/0x50 [ 173.473742][ T2947] ? iov_iter_bvec+0xc0/0x180 [ 173.473785][ T2947] dump_user_range+0xb8b/0xe60 [ 173.473815][ T2947] ? __cfi_dump_user_range+0x10/0x10 [ 173.473842][ T2947] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 173.473873][ T2947] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 173.473903][ T2947] ? elf_core_dump+0x24c0/0x3960 [ 173.473935][ T2947] elf_core_dump+0x2e7e/0x3960 [ 173.473970][ T2947] ? __cfi_elf_core_dump+0x10/0x10 [ 173.474010][ T2947] ? dump_interrupted+0xf0/0xf0 [ 173.474036][ T2947] ? 0xffffffffff600000 [ 173.474055][ T2947] do_coredump+0x208a/0x2fe0 [ 173.474084][ T2947] ? __cfi_do_coredump+0x10/0x10 [ 173.474108][ T2947] ? asm_exc_page_fault+0x2b/0x30 [ 173.474141][ T2947] ? __kasan_slab_free+0x6a/0x80 [ 173.474171][ T2947] ? kmem_cache_free+0x1bd/0x4f0 [ 173.474198][ T2947] ? get_signal+0xa74/0x14e0 [ 173.474224][ T2947] get_signal+0x11f8/0x14e0 [ 173.474253][ T2947] arch_do_signal_or_restart+0xbc/0x760 [ 173.474284][ T2947] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 173.474317][ T2947] ? fpregs_restore_userregs+0x11c/0x260 [ 173.474342][ T2947] irqentry_exit_to_user_mode+0x4d/0xb0 [ 173.474365][ T2947] irqentry_exit+0x16/0x60 [ 173.474387][ T2947] exc_page_fault+0x65/0xc0 [ 173.474408][ T2947] asm_exc_page_fault+0x2b/0x30 [ 173.474432][ T2947] RIP: 0033:0x0 [ 173.474448][ T2947] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 173.474460][ T2947] RSP: 002b:0000200000000028 EFLAGS: 00010217 [ 173.474480][ T2947] RAX: 0000000000000000 RBX: 00007fcc19416090 RCX: 00007fcc1919acb9 [ 173.474497][ T2947] RDX: 0000200000000040 RSI: 0000200000000020 RDI: 0000000082000400 [ 173.474514][ T2947] RBP: 00007fcc19208bf7 R08: 00002000000000c0 R09: 00002000000000c0 [ 173.474531][ T2947] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 173.474547][ T2947] R13: 00007fcc19416128 R14: 00007fcc19416090 R15: 00007ffd23e59c58 [ 173.474573][ T2947] [ 173.973259][ T2947] memory: usage 303088kB, limit 307200kB, failcnt 56565 [ 173.980932][ T2947] memory+swap: usage 425028kB, limit 9007199254740988kB, failcnt 0 [ 173.992276][ T2947] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 173.999344][ T2947] Memory cgroup stats for /syz1: [ 173.999479][ T2947] cache 308224000 [ 174.008397][ T2947] rss 143360 [ 174.011715][ T2947] rss_huge 0 [ 174.015209][ T2947] shmem 276869120 [ 174.018871][ T2947] mapped_file 0 [ 174.022458][ T2947] dirty 0 [ 174.025795][ T2947] writeback 0 [ 174.029130][ T2947] workingset_refault_anon 1110 [ 174.034143][ T2947] workingset_refault_file 8188 [ 174.038996][ T2947] swap 124264448 [ 174.042617][ T2947] swapcached 311296 [ 174.047917][ T2947] pgpgin 356588 [ 174.051423][ T2947] pgpgout 282269 [ 174.055188][ T2947] pgfault 60908 [ 174.058694][ T2947] pgmajfault 281 [ 174.062252][ T2947] inactive_anon 196640768 [ 174.066866][ T2947] active_anon 80564224 [ 174.072487][ T2947] inactive_file 0 [ 174.076434][ T2947] active_file 0 [ 174.079931][ T2947] unevictable 31354880 [ 174.084301][ T2947] hierarchical_memory_limit 314572800 [ 174.089701][ T2947] hierarchical_memsw_limit 9223372036854771712 [ 174.096129][ T2947] total_cache 308224000 [ 174.100315][ T2947] total_rss 143360 [ 174.104266][ T2947] total_rss_huge 0 [ 174.108051][ T2947] total_shmem 276869120 [ 174.112222][ T2947] total_mapped_file 0 [ 174.116487][ T2947] total_dirty 0 [ 174.120029][ T2947] total_writeback 0 [ 174.124053][ T2947] total_workingset_refault_anon 1110 [ 174.131174][ T354] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 174.141332][ T354] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 174.153321][ T354] asix 6-1:0.251: probe with driver asix failed with error -71 [ 174.158033][ T2947] total_workingset_refault_file 8188 [ 174.163313][ T354] usb 6-1: USB disconnect, device number 56 [ 174.211825][ T2947] total_swap 124264448 [ 174.223004][ T2947] total_swapcached 311296 [ 174.236512][ T2947] total_pgpgin 356588 [ 174.250656][ T2947] total_pgpgout 282269 [ 174.257510][ T3424] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.947'. [ 174.269544][ T36] audit: type=1400 audit(1769321678.684:676): avc: denied { wake_alarm } for pid=3420 comm="syz.3.947" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.294542][ T2947] total_pgfault 60908 [ 174.298669][ T2947] total_pgmajfault 281 [ 174.306303][ T3426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=3426 comm=syz.1.949 [ 174.319272][ T2947] total_inactive_anon 196640768 [ 174.326524][ T2947] total_active_anon 80564224 [ 174.337050][ T3426] syz.1.949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.349283][ T2947] total_inactive_file 0 [ 174.353691][ T2947] total_active_file 0 [ 174.364861][ T2947] total_unevictable 31354880 [ 174.372242][ T3426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3426 comm=syz.1.949 [ 174.387154][ T2947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.798,pid=2947,uid=0 [ 174.409675][ T2947] Memory cgroup out of memory: Killed process 2947 (syz.1.798) total-vm:90472kB, anon-rss:1212kB, file-rss:54920kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 174.676078][ T3432] syzkaller1: entered promiscuous mode [ 174.681746][ T3432] syzkaller1: entered allmulticast mode [ 174.708980][ T3430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3430 comm=syz.1.950 [ 174.756201][ T3436] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 174.795779][ T3436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'. [ 174.831533][ T3436] veth1: entered promiscuous mode [ 174.849618][ T3430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 174.992897][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 175.099288][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.142196][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.155195][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.165146][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.178028][ T9] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 175.187104][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.199347][ T9] usb 6-1: config 0 descriptor?? [ 175.413424][ T9] belkin 0003:1020:0006.001B: item fetching failed at offset 2/3 [ 175.421317][ T9] belkin 0003:1020:0006.001B: parse failed [ 175.427242][ T9] belkin 0003:1020:0006.001B: probe with driver belkin failed with error -22 [ 175.613611][ T9] usb 6-1: USB disconnect, device number 57 [ 175.796479][ T3452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.805068][ T3452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.143430][ T3460] new mount options do not match the existing superblock, will be ignored [ 176.153110][ T3462] new mount options do not match the existing superblock, will be ignored [ 176.167204][ T36] audit: type=1400 audit(1769321680.584:677): avc: denied { unmount } for pid=1462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 176.244776][ T3472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.254164][ T3472] picdev_read: 1 callbacks suppressed [ 176.254177][ T3472] kvm: pic: non byte read [ 176.264399][ T3472] pic_ioport_write: 1 callbacks suppressed [ 176.264437][ T3472] kvm: pic: level sensitive irq not supported [ 176.270493][ T3472] kvm: pic: non byte read [ 176.281317][ T3472] kvm: pic: level sensitive irq not supported [ 176.281373][ T3472] kvm: pic: non byte read [ 176.332205][ T36] audit: type=1400 audit(1769321680.744:678): avc: denied { nlmsg_read } for pid=3475 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 176.439572][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.448318][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.662908][ T354] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 176.812909][ T354] usb 6-1: Using ep0 maxpacket: 8 [ 176.819932][ T354] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.829108][ T354] usb 6-1: config 1 has no interface number 1 [ 176.835284][ T354] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 176.849509][ T354] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 176.863659][ T354] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.872934][ T354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.880936][ T354] usb 6-1: Product: syz [ 176.885206][ T354] usb 6-1: Manufacturer: syz [ 176.890094][ T354] usb 6-1: SerialNumber: syz [ 177.103971][ T354] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 177.115494][ T354] usb 6-1: USB disconnect, device number 58 [ 177.131269][ T823] udevd[823]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 177.427044][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 177.436466][ T3535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.445186][ T3535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.872903][ T354] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 177.993057][ T64] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 178.003392][ T64] asix 4-1:2.88: probe with driver asix failed with error -110 [ 178.019815][ T3560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.991'. [ 178.033980][ T354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.044357][ T354] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 178.053383][ T354] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.069407][ T354] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 178.079924][ T354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.088075][ T354] usb 6-1: Product: syz [ 178.092306][ T354] usb 6-1: Manufacturer: syz [ 178.094834][ T3563] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.097269][ T354] usb 6-1: SerialNumber: syz [ 178.113024][ T354] usb 6-1: config 0 descriptor?? [ 178.119467][ T3563] kvm: pic: level sensitive irq not supported [ 178.119544][ T3563] kvm: pic: non byte read [ 178.130571][ T3563] kvm: pic: level sensitive irq not supported [ 178.130659][ T3563] kvm: pic: non byte read [ 178.141689][ T3563] kvm: pic: level sensitive irq not supported [ 178.141743][ T3563] kvm: pic: non byte read [ 178.152775][ T3563] kvm: pic: level sensitive irq not supported [ 178.152971][ T3563] kvm: pic: non byte read [ 178.178682][ T3573] netlink: 'syz.1.995': attribute type 12 has an invalid length. [ 178.311938][ T3580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.320885][ T3580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.327113][ T354] usb 6-1: USB disconnect, device number 59 [ 178.716432][ T3587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1000'. [ 178.854642][ T3594] tmpfs: Cannot disable swap on remount [ 179.162933][ T45] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 179.247396][ T36] audit: type=1400 audit(1769321683.664:679): avc: denied { create } for pid=3599 comm="syz.1.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 179.287631][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 179.307560][ T36] audit: type=1326 audit(1769321683.724:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.1.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc1919acb9 code=0x0 [ 179.330505][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 179.336914][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 179.345364][ T45] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 179.355500][ T45] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.364491][ T45] usb 6-1: config 1 has no interface number 1 [ 179.370583][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 179.383390][ T45] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.397722][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.406809][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.414886][ T45] usb 6-1: Product: syz [ 179.419081][ T45] usb 6-1: Manufacturer: syz [ 179.423720][ T45] usb 6-1: SerialNumber: syz [ 179.647294][ T45] usb 6-1: USB disconnect, device number 60 [ 179.658415][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.677524][ T3613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 179.752572][ T3620] pim6reg1: entered promiscuous mode [ 179.758088][ T3620] pim6reg1: entered allmulticast mode [ 180.055096][ T36] audit: type=1400 audit(1769321684.474:681): avc: denied { write } for pid=3626 comm="syz.7.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.695938][ T36] audit: type=1400 audit(1769321685.114:682): avc: denied { attach_queue } for pid=3641 comm="syz.5.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 180.717075][ T3642] kvm: pic: non byte read [ 180.721551][ T3642] kvm: pic: non byte read [ 180.726040][ T3642] kvm: pic: non byte read [ 180.845993][ T3655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3655 comm=syz.5.1024 [ 180.855259][ T3656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3656 comm=syz.5.1024 [ 180.872171][ T3655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3655 comm=syz.5.1024 [ 181.132892][ T45] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 181.262888][ T45] usb 6-1: device descriptor read/64, error -71 [ 181.386365][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 181.405861][ T36] audit: type=1400 audit(2000000000.000:683): avc: denied { getopt } for pid=3663 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.460545][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.469135][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.512884][ T45] usb 6-1: device descriptor read/64, error -71 [ 181.603594][ T3680] overlayfs: missing 'lowerdir' [ 181.622897][ T3685] 9pnet_fd: Insufficient options for proto=fd [ 181.661638][ T3694] overlayfs: failed to clone lowerpath [ 181.752895][ T45] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 181.761760][ T3702] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1041'. [ 181.794952][ T3710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3710 comm=syz.1.1043 [ 181.807467][ T3710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3710 comm=syz.1.1043 [ 181.882896][ T45] usb 6-1: device descriptor read/64, error -71 [ 182.122915][ T45] usb 6-1: device descriptor read/64, error -71 [ 182.157277][ T3714] picdev_read: 84 callbacks suppressed [ 182.157294][ T3714] kvm: pic: non byte read [ 182.168026][ T3714] kvm: pic: non byte read [ 182.172591][ T3714] kvm: pic: non byte read [ 182.177193][ T3714] kvm: pic: single mode not supported [ 182.177203][ T3714] kvm: pic: level sensitive irq not supported [ 182.182647][ T3714] kvm: pic: non byte read [ 182.193400][ T3714] kvm: pic: single mode not supported [ 182.193410][ T3714] kvm: pic: level sensitive irq not supported [ 182.198814][ T3714] kvm: pic: non byte read [ 182.209546][ T3714] kvm: pic: single mode not supported [ 182.209603][ T3714] kvm: pic: non byte read [ 182.219641][ T3714] kvm: pic: non byte read [ 182.224298][ T3714] kvm: pic: non byte read [ 182.228989][ T3714] kvm: pic: level sensitive irq not supported [ 182.229034][ T3714] kvm: pic: non byte read [ 182.244323][ T45] usb usb6-port1: attempt power cycle [ 182.367850][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.376500][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.384893][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.393625][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.582920][ T45] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 182.604073][ T45] usb 6-1: device descriptor read/8, error -71 [ 182.734206][ T45] usb 6-1: device descriptor read/8, error -71 [ 182.882445][ T3730] overlayfs: conflicting options: userxattr,metacopy=on [ 182.929480][ T3743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.938166][ T3743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.946497][ T3743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.955047][ T3743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.982893][ T45] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 183.004027][ T45] usb 6-1: device descriptor read/8, error -71 [ 183.121939][ T36] audit: type=1400 audit(2000000001.700:684): avc: denied { remount } for pid=3746 comm="syz.7.1058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 183.142818][ T45] usb 6-1: device descriptor read/8, error -71 [ 183.252988][ T45] usb usb6-port1: unable to enumerate USB device [ 183.474820][ T3765] overlayfs: missing 'lowerdir' [ 183.497381][ T3769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.506030][ T3769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.010919][ T36] audit: type=1400 audit(2000000002.590:685): avc: denied { getopt } for pid=3777 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.323040][ T10] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 184.365652][ T3806] syzkaller0: entered promiscuous mode [ 184.371243][ T3806] syzkaller0: entered allmulticast mode [ 184.484129][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.496261][ T10] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 184.505399][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.513475][ T10] usb 6-1: Product: syz [ 184.517664][ T10] usb 6-1: Manufacturer: syz [ 184.522251][ T10] usb 6-1: SerialNumber: syz [ 184.527876][ T10] usb 6-1: config 0 descriptor?? [ 184.533757][ T10] plusb 6-1:0.0: probe with driver plusb failed with error -22 [ 184.585068][ T3816] netlink: 'syz.1.1079': attribute type 11 has an invalid length. [ 184.623688][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 184.795594][ T3831] devpts: called with bogus options [ 184.802962][ T36] audit: type=1400 audit(2000000003.380:686): avc: denied { append } for pid=3830 comm="syz.3.1085" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 184.893709][ T3835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.893739][ T3835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:765 [ 184.987193][ T3837] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 185.332926][ T3856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.341470][ T3856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.725705][ T36] audit: type=1400 audit(2000000004.310:687): avc: denied { create } for pid=3857 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 185.881371][ T3869] overlayfs: conflicting lowerdir path [ 186.227165][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.233781][ T3887] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 186.408240][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 186.917359][ T9] usb 6-1: USB disconnect, device number 65 [ 186.970394][ T3912] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 186.980121][ T36] audit: type=1400 audit(2000000005.570:688): avc: denied { relabelto } for pid=3911 comm="syz.5.1111" name="212" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 186.981291][ T3912] netlink: 'syz.5.1111': attribute type 64 has an invalid length. [ 187.007188][ T36] audit: type=1400 audit(2000000005.570:689): avc: denied { associate } for pid=3911 comm="syz.5.1111" name="212" dev="tmpfs" ino=1190 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 187.014253][ T3912] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1111'. [ 187.014279][ T3912] gretap0: entered allmulticast mode [ 187.055628][ T3912] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.079183][ T36] audit: type=1400 audit(2000000005.660:690): avc: denied { write } for pid=1462 comm="syz-executor" name="212" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 187.106649][ T36] audit: type=1400 audit(2000000005.660:691): avc: denied { remove_name } for pid=1462 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 187.134186][ T36] audit: type=1400 audit(2000000005.660:692): avc: denied { rmdir } for pid=1462 comm="syz-executor" name="212" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 187.499688][ T3936] fuse: Bad value for 'group_id' [ 187.504723][ T3936] fuse: Bad value for 'group_id' [ 187.556749][ T3949] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.582873][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 187.715289][ T3958] netlink: 'syz.3.1127': attribute type 10 has an invalid length. [ 187.734636][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.745698][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.776644][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.791445][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.811957][ T3967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.820677][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.842792][ T9] usb 6-1: config 0 descriptor?? [ 188.094834][ T36] audit: type=1400 audit(2000000006.680:693): avc: denied { create } for pid=3978 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 188.142613][ T3987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1137'. [ 188.171660][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.180363][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.195600][ T3997] cgroup: Name too long [ 188.232905][ T2737] Bluetooth: hci0: command 0x1003 tx timeout [ 188.232940][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.263887][ T36] audit: type=1326 audit(2000000006.850:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1919acb9 code=0x7ffc0000 [ 188.287372][ T36] audit: type=1326 audit(2000000006.850:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.1.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1919acb9 code=0x7ffc0000 [ 188.337420][ T4003] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 188.347777][ T4003] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1144'. [ 188.356906][ T4003] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1144'. [ 188.451380][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 188.457516][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 188.466287][ T9] usb 6-1: USB disconnect, device number 66 [ 188.859865][ T4021] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1150'. [ 188.880025][ T4023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.888887][ T4023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.065007][ T4051] syz.5.1162 uses obsolete (PF_INET,SOCK_PACKET) [ 189.154745][ T4063] cgroup: release_agent respecified [ 189.194236][ T4067] netlink: 'syz.7.1170': attribute type 46 has an invalid length. [ 189.439482][ T4089] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1177'. [ 189.592936][ T10] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 189.754013][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 189.762150][ T10] usb 6-1: config 0 has no interface number 0 [ 189.768296][ T10] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 189.779916][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.790920][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.801776][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 189.810859][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 189.819008][ T10] usb 6-1: Product: syz [ 189.823193][ T10] usb 6-1: SerialNumber: syz [ 189.828329][ T10] usb 6-1: config 0 descriptor?? [ 190.034635][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.043569][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.249118][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.257800][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.562977][ T10] usb 6-1: USB disconnect, device number 67 [ 190.902909][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 190.985658][ T4128] No source specified [ 190.998908][ T4130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.007612][ T4131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.016179][ T4130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.024093][ T4131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.032245][ T4130] tipc: Started in network mode [ 191.037171][ T4130] tipc: Node identity 4, cluster identity 4711 [ 191.043400][ T10] usb 6-1: device descriptor read/64, error -71 [ 191.049873][ T4130] tipc: Node number set to 4 [ 191.154540][ T4133] ªªªªªª: renamed from vlan0 (while UP) [ 191.292940][ T10] usb 6-1: device descriptor read/64, error -71 [ 191.532905][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 191.657364][ T4144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=4144 comm=syz.3.1198 [ 191.670013][ T10] usb 6-1: device descriptor read/64, error -71 [ 191.685070][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.693597][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.702335][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 191.702350][ T36] audit: type=1400 audit(2000004362.280:756): avc: denied { read } for pid=4145 comm="syz.3.1199" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.704367][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.720787][ T36] audit: type=1400 audit(2000004362.280:757): avc: denied { open } for pid=4145 comm="syz.3.1199" path="/301/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.732479][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.758305][ T36] audit: type=1400 audit(2000004362.280:758): avc: denied { ioctl } for pid=4145 comm="syz.3.1199" path="/301/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.769182][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.808151][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.817529][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.826361][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.853658][ T4159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.862124][ T4159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.942881][ T10] usb 6-1: device descriptor read/64, error -71 [ 192.052984][ T10] usb usb6-port1: attempt power cycle [ 192.312340][ T4163] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.319917][ T4164] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.328198][ T4164] tmpfs: Unknown parameter 'fsmagic' [ 192.333681][ T4163] tmpfs: Unknown parameter 'fsmagic' [ 192.342774][ T4164] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 192.346600][ T4166] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 192.353327][ T36] audit: type=1400 audit(2000004362.930:759): avc: denied { relabelto } for pid=4162 comm="syz.7.1205" name="cgroup" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:lost_found_t:s0" [ 192.397920][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 192.403237][ T4173] Invalid argument reading file caps for ./file0 [ 192.425431][ T36] audit: type=1400 audit(2000004362.970:760): avc: denied { associate } for pid=4162 comm="syz.7.1205" name="cgroup" dev="tmpfs" ino=265 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:lost_found_t:s0" [ 192.434985][ T10] usb 6-1: device descriptor read/8, error -71 [ 192.460243][ T4178] overlayfs: failed to clone upperpath [ 192.493306][ T36] audit: type=1400 audit(2000004362.980:761): avc: denied { unlink } for pid=3136 comm="syz-executor" name="cgroup" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:lost_found_t:s0" [ 192.604155][ T10] usb 6-1: device descriptor read/8, error -71 [ 192.612369][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1213'. [ 192.646590][ T4191] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1212'. [ 192.657598][ T4191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 192.842912][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 192.863976][ T10] usb 6-1: device descriptor read/8, error -71 [ 192.870878][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.879558][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.888627][ T4205] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.993923][ T10] usb 6-1: device descriptor read/8, error -71 [ 193.113044][ T10] usb usb6-port1: unable to enumerate USB device [ 193.612083][ T4219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 193.612119][ T4219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:686 [ 193.713752][ T4237] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 193.787690][ T4244] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1230'. [ 193.796762][ T4244] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1230'. [ 193.805865][ T4244] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1230'. [ 193.856781][ T36] audit: type=1326 audit(2000004364.440:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb379acb9 code=0x7fc00000 [ 194.117693][ T36] audit: type=1400 audit(2000004364.700:763): avc: denied { accept } for pid=4260 comm="syz.1.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.767377][ T4266] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 194.984615][ T4276] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 195.065641][ T4280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=4280 comm=syz.5.1239 [ 195.121504][ T4285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4285 comm=syz.5.1241 [ 195.185549][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1241'. [ 195.195090][ T4286] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1241'. [ 195.204101][ T4286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1241'. [ 195.213120][ T4286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1241'. [ 195.961553][ T4291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.970157][ T4291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.392892][ T10] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 196.544335][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 196.552453][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 196.560936][ T10] usb 6-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 196.571285][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.581668][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.590766][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.598833][ T10] usb 6-1: Product: syz [ 196.603043][ T10] usb 6-1: Manufacturer: syz [ 196.607633][ T10] usb 6-1: SerialNumber: syz [ 196.672964][ T36] audit: type=1326 audit(2000004367.250:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb373c0d9 code=0x7fc00000 [ 196.728155][ T4305] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 196.818728][ T10] usb 6-1: 0:2 : does not exist [ 196.825260][ T10] usb 6-1: USB disconnect, device number 72 [ 196.834585][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.901160][ T9] usb 4-1: USB disconnect, device number 89 [ 197.082505][ T4314] netlink: 'syz.1.1251': attribute type 6 has an invalid length. [ 197.093717][ T4314] overlay: ./bus is not a directory [ 197.135170][ T53] bridge_slave_1: left allmulticast mode [ 197.140912][ T53] bridge_slave_1: left promiscuous mode [ 197.146816][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.154985][ T53] bridge_slave_0: left allmulticast mode [ 197.160656][ T53] bridge_slave_0: left promiscuous mode [ 197.166343][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.285336][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.292409][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.299504][ T4316] bridge_slave_0: entered allmulticast mode [ 197.305783][ T4316] bridge_slave_0: entered promiscuous mode [ 197.312182][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.319467][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.326550][ T4316] bridge_slave_1: entered allmulticast mode [ 197.332954][ T4316] bridge_slave_1: entered promiscuous mode [ 197.344461][ T53] tipc: Left network mode [ 197.353631][ T53] veth1_macvtap: left promiscuous mode [ 197.359207][ T53] veth0_vlan: left promiscuous mode [ 197.444710][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.451770][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.459057][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.466154][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.488420][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.496260][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.505818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.512896][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.521938][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.529007][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.555084][ T4316] veth0_vlan: entered promiscuous mode [ 197.567434][ T4316] veth1_macvtap: entered promiscuous mode [ 197.873532][ T4334] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1255'. [ 197.883743][ T4334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26427 sclass=netlink_route_socket pid=4334 comm=syz.1.1255 [ 198.343017][ T4357] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1263'. [ 198.374764][ T36] audit: type=1400 audit(2000004368.960:765): avc: denied { accept } for pid=4358 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.452899][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 198.481030][ T4371] netlink: 'syz.1.1268': attribute type 27 has an invalid length. [ 198.501403][ T4371] +$<¶: port 2(bridge_slave_1) entered disabled state [ 198.508563][ T4371] +$<¶: port 1(bridge_slave_0) entered disabled state [ 198.519732][ T4371] veth1: left promiscuous mode [ 198.550718][ T4373] netlink: 'syz.5.1269': attribute type 4 has an invalid length. [ 198.566770][ T4373] netlink: 'syz.5.1269': attribute type 4 has an invalid length. [ 198.582870][ T31] usb 9-1: device descriptor read/64, error -71 [ 198.741886][ T36] audit: type=1400 audit(2000004369.320:766): avc: denied { listen } for pid=4381 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.822912][ T31] usb 9-1: device descriptor read/64, error -71 [ 198.950334][ T4388] fuse: Bad value for 'user_id' [ 198.955408][ T4388] fuse: Bad value for 'user_id' [ 198.994404][ T4390] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.006170][ T4390] kvm: pic: level sensitive irq not supported [ 199.006272][ T4390] kvm: pic: non byte read [ 199.021680][ T4390] kvm: pic: level sensitive irq not supported [ 199.021738][ T4390] kvm: pic: non byte read [ 199.032473][ T4390] kvm: pic: level sensitive irq not supported [ 199.032530][ T4390] kvm: pic: non byte read [ 199.062919][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 199.168813][ T36] audit: type=1326 audit(2000004369.750:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.7.1278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d43f9acb9 code=0x0 [ 199.283181][ T31] usb 9-1: device descriptor read/64, error -71 [ 199.532886][ T31] usb 9-1: device descriptor read/64, error -71 [ 199.552920][ T9] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 199.643027][ T31] usb usb9-port1: attempt power cycle [ 199.663393][ T4409] netlink: 'syz.1.1283': attribute type 10 has an invalid length. [ 199.672267][ T4409] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1283'. [ 199.682053][ T4409] bridge_slave_1: left promiscuous mode [ 199.687791][ T4409] +$<¶: port 2(bridge_slave_1) entered disabled state [ 199.695758][ T4410] netlink: 'syz.1.1283': attribute type 10 has an invalid length. [ 199.712865][ T9] usb 6-1: Invalid ep0 maxpacket: 64 [ 199.842920][ T9] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 199.982923][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 200.002911][ T9] usb 6-1: Invalid ep0 maxpacket: 64 [ 200.008457][ T9] usb usb6-port1: attempt power cycle [ 200.014410][ T31] usb 9-1: device descriptor read/8, error -71 [ 200.144056][ T31] usb 9-1: device descriptor read/8, error -71 [ 200.243759][ T4429] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 200.273939][ T4433] netlink: 'syz.1.1292': attribute type 27 has an invalid length. [ 200.352932][ T9] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 200.373251][ T9] usb 6-1: Invalid ep0 maxpacket: 64 [ 200.382886][ T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 200.404035][ T31] usb 9-1: device descriptor read/8, error -71 [ 200.502892][ T9] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 200.523259][ T9] usb 6-1: Invalid ep0 maxpacket: 64 [ 200.528686][ T9] usb usb6-port1: unable to enumerate USB device [ 200.534358][ T31] usb 9-1: device descriptor read/8, error -71 [ 200.642964][ T31] usb usb9-port1: unable to enumerate USB device [ 201.344003][ T4446] netlink: 'syz.1.1298': attribute type 3 has an invalid length. [ 201.351862][ T4446] netlink: 944 bytes leftover after parsing attributes in process `syz.1.1298'. [ 201.364068][ T4446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'. [ 201.622908][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 201.774159][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.785118][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.794906][ T31] usb 9-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 201.803981][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.812593][ T31] usb 9-1: config 0 descriptor?? [ 201.922700][ T36] audit: type=1400 audit(2000004372.500:768): avc: denied { mounton } for pid=4454 comm="syz.1.1302" path="/337/file0" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 201.945965][ T36] audit: type=1400 audit(2000004372.510:769): avc: denied { map } for pid=4454 comm="syz.1.1302" path="/337/file0" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 202.310992][ T4460] incfs: iterate_incfs_dir / -22 [ 202.316287][ T36] audit: type=1400 audit(2000004372.900:770): avc: denied { add_name } for pid=4459 comm="syz.5.1304" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.337056][ T36] audit: type=1400 audit(2000004372.900:771): avc: denied { create } for pid=4459 comm="syz.5.1304" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 202.357253][ T36] audit: type=1400 audit(2000004372.900:772): avc: denied { associate } for pid=4459 comm="syz.5.1304" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 202.378969][ T36] audit: type=1400 audit(2000004372.900:773): avc: denied { write } for pid=4459 comm="syz.5.1304" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.420674][ T31] usbhid 9-1:0.0: can't add hid device: -71 [ 202.426830][ T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 202.435623][ T31] usb 9-1: USB disconnect, device number 6 [ 202.509250][ T36] audit: type=1400 audit(2000004373.090:774): avc: denied { relabelfrom } for pid=4465 comm="syz.1.1307" name="NETLINK" dev="sockfs" ino=33457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 202.509262][ T4466] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 202.702910][ T354] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 202.832895][ T354] usb 6-1: device descriptor read/64, error -71 [ 202.935324][ T4472] netlink: 'syz.8.1310': attribute type 13 has an invalid length. [ 202.943944][ T4472] erspan0: refused to change device tx_queue_len [ 203.072923][ T354] usb 6-1: device descriptor read/64, error -71 [ 203.079313][ T4478] overlay: ./file0 is not a directory [ 203.232998][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 203.312886][ T354] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 203.382903][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 203.389446][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 203.397804][ T9] usb 9-1: config 4 has an invalid interface number: 254 but max is 1 [ 203.406024][ T9] usb 9-1: config 4 has an invalid interface number: 93 but max is 1 [ 203.414138][ T9] usb 9-1: config 4 has no interface number 0 [ 203.420236][ T9] usb 9-1: config 4 has no interface number 1 [ 203.426366][ T9] usb 9-1: config 4 interface 93 altsetting 3 endpoint 0x1 has invalid maxpacket 1552, setting to 1024 [ 203.437473][ T9] usb 9-1: config 4 interface 254 has no altsetting 0 [ 203.444477][ T9] usb 9-1: config 4 interface 93 has no altsetting 0 [ 203.452604][ T9] usb 9-1: New USB device found, idVendor=12d1, idProduct=9851, bcdDevice=79.24 [ 203.453026][ T354] usb 6-1: device descriptor read/64, error -71 [ 203.461704][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.475999][ T9] usb 9-1: Product: syz [ 203.480154][ T9] usb 9-1: Manufacturer: syz [ 203.484794][ T9] usb 9-1: SerialNumber: syz [ 203.633625][ T4500] netlink: 'syz.1.1319': attribute type 2 has an invalid length. [ 203.702896][ T354] usb 6-1: device descriptor read/64, error -71 [ 203.705738][ T4475] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 203.721178][ T9] cdc_mbim 9-1:4.254: CDC Union missing and no IAD found [ 203.728347][ T9] cdc_mbim 9-1:4.254: bind() failure [ 203.736061][ T9] usb 9-1: USB disconnect, device number 7 [ 203.812978][ T354] usb usb6-port1: attempt power cycle [ 204.037918][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 204.037936][ T36] audit: type=1400 audit(2000004374.620:777): avc: denied { setopt } for pid=4505 comm="syz.7.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.152925][ T354] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 204.173845][ T354] usb 6-1: device descriptor read/8, error -71 [ 204.303898][ T354] usb 6-1: device descriptor read/8, error -71 [ 204.350268][ T4510] netlink: 'syz.8.1323': attribute type 28 has an invalid length. [ 204.358719][ T4510] netlink: 'syz.8.1323': attribute type 28 has an invalid length. [ 204.456183][ T4526] netlink: 'syz.8.1328': attribute type 27 has an invalid length. [ 204.465215][ T36] audit: type=1400 audit(2000004375.050:778): avc: denied { getopt } for pid=4525 comm="syz.8.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.553064][ T354] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 204.574019][ T354] usb 6-1: device descriptor read/8, error -71 [ 204.703968][ T354] usb 6-1: device descriptor read/8, error -71 [ 204.813059][ T354] usb usb6-port1: unable to enumerate USB device [ 205.302554][ T4537] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1332'. [ 205.311632][ T4537] netlink: 'syz.8.1332': attribute type 6 has an invalid length. [ 205.319432][ T4537] netlink: 'syz.8.1332': attribute type 5 has an invalid length. [ 205.327223][ T4537] netlink: 'syz.8.1332': attribute type 4 has an invalid length. [ 205.331427][ T36] audit: type=1400 audit(2000004375.920:779): avc: denied { unlink } for pid=1462 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.389947][ T4537] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 205.398677][ T36] audit: type=1400 audit(2000004375.990:780): avc: denied { rmdir } for pid=1575 comm="syz.5.367" name=".index" dev="incremental-fs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.422663][ T1575] bridge0: port 3(syz_tun) entered disabled state [ 205.432717][ T1575] syz_tun (unregistering): left allmulticast mode [ 205.439376][ T1575] syz_tun (unregistering): left promiscuous mode [ 205.455981][ T1575] bridge0: port 3(syz_tun) entered disabled state [ 205.526430][ T36] audit: type=1400 audit(2000004376.110:781): avc: denied { read } for pid=4543 comm="syz.8.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.554468][ T53] bridge_slave_1: left allmulticast mode [ 205.560330][ T53] bridge_slave_1: left promiscuous mode [ 205.566195][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.574374][ T53] bridge_slave_0: left allmulticast mode [ 205.580769][ T53] bridge_slave_0: left promiscuous mode [ 205.586810][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.716904][ T53] veth1_macvtap: left promiscuous mode [ 205.722546][ T53] veth0_vlan: left promiscuous mode [ 205.772340][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.779431][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.786524][ T4549] bridge_slave_0: entered allmulticast mode [ 205.792721][ T4549] bridge_slave_0: entered promiscuous mode [ 205.799142][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.806245][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.813341][ T4549] bridge_slave_1: entered allmulticast mode [ 205.819571][ T4549] bridge_slave_1: entered promiscuous mode [ 205.862727][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.869849][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.877164][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.884217][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.906346][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.913832][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.923351][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.930430][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.939122][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.946220][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.969926][ T4549] veth0_vlan: entered promiscuous mode [ 205.981565][ T4549] veth1_macvtap: entered promiscuous mode [ 206.252908][ T64] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 206.403875][ T64] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.415510][ T64] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.426497][ T64] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 206.436394][ T64] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.449987][ T64] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.459261][ T64] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.470131][ T64] usb 10-1: config 0 descriptor?? [ 206.484073][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.492615][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.706030][ T4580] netlink: 'syz.1.1344': attribute type 46 has an invalid length. [ 206.713996][ T354] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 206.743022][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 206.862903][ T354] usb 9-1: Using ep0 maxpacket: 8 [ 206.869098][ T354] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.877493][ T354] usb 9-1: config 179 has no interface number 0 [ 206.880594][ T64] usbhid 10-1:0.0: can't add hid device: -32 [ 206.884832][ T354] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 206.890271][ T64] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 206.901106][ T354] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 206.920090][ T354] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.931333][ T354] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 206.942786][ T354] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.956614][ T354] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 206.965683][ T354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.974695][ T4574] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 207.036022][ T354] usb 10-1: USB disconnect, device number 2 [ 207.183216][ T45] usb 9-1: USB disconnect, device number 8 [ 207.189075][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.189099][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 207.462910][ T354] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 207.592905][ T354] usb 10-1: device descriptor read/64, error -71 [ 207.832887][ T354] usb 10-1: device descriptor read/64, error -71 [ 207.973034][ T64] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 208.073171][ T354] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 208.124065][ T64] usb 9-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 208.137045][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 208.143705][ T64] usb 9-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 208.152773][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.161468][ T64] usb 9-1: config 0 descriptor?? [ 208.202891][ T354] usb 10-1: device descriptor read/64, error -71 [ 208.369946][ T64] usbhid 9-1:0.0: can't add hid device: -71 [ 208.376191][ T64] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 208.386715][ T64] usb 9-1: USB disconnect, device number 9 [ 208.442897][ T354] usb 10-1: device descriptor read/64, error -71 [ 208.553007][ T354] usb usb10-port1: attempt power cycle [ 208.892893][ T354] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 208.913970][ T354] usb 10-1: device descriptor read/8, error -71 [ 209.043952][ T354] usb 10-1: device descriptor read/8, error -71 [ 209.124168][ T36] audit: type=1400 audit(2000004379.710:782): avc: denied { map } for pid=4643 comm="syz.8.1367" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 209.147258][ T36] audit: type=1400 audit(2000004379.710:783): avc: denied { execute } for pid=4643 comm="syz.8.1367" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 209.174228][ T36] audit: type=1400 audit(2000004379.760:784): avc: denied { map } for pid=4645 comm="syz.8.1368" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 209.230514][ T4646] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 209.243227][ T4646] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 209.251654][ T4646] CPU: 0 UID: 0 PID: 4646 Comm: syz.8.1368 Not tainted syzkaller #0 1299f57362d1784c0f26c9767fc5423e1fa623f7 [ 209.263188][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.273236][ T4646] RIP: 0010:filename_create+0x2b3/0x480 [ 209.278798][ T4646] Code: 89 de e8 20 e2 99 ff 85 db 0f 84 8d 00 00 00 e8 d3 dd 99 ff 48 8b 5c 24 20 4c 8b 74 24 18 e9 a4 00 00 00 48 89 c1 48 c1 e9 03 <42> 0f b6 0c 21 84 c9 0f 85 93 01 00 00 44 8b 20 44 89 e6 81 e6 00 [ 209.292964][ T354] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 209.298408][ T4646] RSP: 0018:ffffc900129a7d20 EFLAGS: 00010246 [ 209.312036][ T4646] RAX: 0000000000000002 RBX: 1ffff92002534fcd RCX: 0000000000000000 [ 209.315067][ T36] audit: type=1400 audit(2000004379.900:785): avc: denied { read } for pid=94 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 209.320022][ T4646] RDX: ffffc90007e14000 RSI: 000000000000022d RDI: 000000000000022e [ 209.344308][ T36] audit: type=1400 audit(2000004379.930:786): avc: denied { search } for pid=94 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.349744][ T4646] RBP: ffffc900129a7df0 R08: ffff8881f6e50bc7 R09: 1ffff1103edca178 [ 209.349767][ T4646] R10: dffffc0000000000 R11: ffffed103edca179 R12: dffffc0000000000 [ 209.372481][ T36] audit: type=1400 audit(2000004379.930:787): avc: denied { write } for pid=94 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.378999][ T4646] R13: ffffc900129a7e68 R14: 0000000000000600 R15: 0000000000000002 [ 209.379019][ T4646] FS: 00007fe4711e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 209.379042][ T4646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.387439][ T354] usb 10-1: device descriptor read/8, error -71 [ 209.408184][ T4646] CR2: 0000200000009000 CR3: 000000011368e000 CR4: 00000000003526b0 [ 209.408212][ T4646] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 209.408231][ T4646] DR3: 000000000000009e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 209.408247][ T4646] Call Trace: [ 209.408257][ T4646] [ 209.417621][ T36] audit: type=1400 audit(2000004379.930:788): avc: denied { add_name } for pid=94 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.425156][ T4646] ? kern_path_create+0x70/0x70 [ 209.432234][ T36] audit: type=1400 audit(2000004379.930:789): avc: denied { create } for pid=94 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.438006][ T4646] ? __check_object_size+0x527/0x830 [ 209.438040][ T4646] do_mknodat+0x18d/0x4f0 [ 209.446549][ T36] audit: type=1400 audit(2000004379.930:790): avc: denied { append open } for pid=94 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.453977][ T4646] ? do_o_path+0x220/0x220 [ 209.454009][ T4646] ? getname_flags+0x208/0x700 [ 209.462569][ T36] audit: type=1400 audit(2000004379.930:791): avc: denied { getattr } for pid=94 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.465256][ T4646] ? fpregs_restore_userregs+0x11c/0x260 [ 209.465283][ T4646] __x64_sys_mknod+0x90/0xa0 [ 209.465303][ T4646] x64_sys_call+0x2a40/0x2ee0 [ 209.554218][ T354] usb 10-1: device descriptor read/8, error -71 [ 209.555467][ T4646] do_syscall_64+0x57/0xf0 [ 209.603478][ T4646] ? clear_bhb_loop+0x50/0xa0 [ 209.608158][ T4646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.614053][ T4646] RIP: 0033:0x7fe47279acb9 [ 209.618466][ T4646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.638080][ T4646] RSP: 002b:00007fe4711e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 209.646495][ T4646] RAX: ffffffffffffffda RBX: 00007fe472a15fa0 RCX: 00007fe47279acb9 [ 209.654461][ T4646] RDX: 0000000000000710 RSI: 00000000ffff2000 RDI: 00002000000002c0 [ 209.662437][ T4646] RBP: 00007fe472808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 209.670412][ T4646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.678379][ T4646] R13: 00007fe472a16038 R14: 00007fe472a15fa0 R15: 00007ffd67df5b18 [ 209.683246][ T354] usb usb10-port1: unable to enumerate USB device [ 209.686350][ T4646] [ 209.686362][ T4646] Modules linked in: [ 209.699979][ T4646] ---[ end trace 0000000000000000 ]--- [ 209.705924][ T4646] RIP: 0010:filename_create+0x2b3/0x480 [ 209.711671][ T4646] Code: 89 de e8 20 e2 99 ff 85 db 0f 84 8d 00 00 00 e8 d3 dd 99 ff 48 8b 5c 24 20 4c 8b 74 24 18 e9 a4 00 00 00 48 89 c1 48 c1 e9 03 <42> 0f b6 0c 21 84 c9 0f 85 93 01 00 00 44 8b 20 44 89 e6 81 e6 00 [ 209.731531][ T4646] RSP: 0018:ffffc900129a7d20 EFLAGS: 00010246 [ 209.737718][ T4646] RAX: 0000000000000002 RBX: 1ffff92002534fcd RCX: 0000000000000000 [ 209.745820][ T4646] RDX: ffffc90007e14000 RSI: 000000000000022d RDI: 000000000000022e [ 209.754166][ T4646] RBP: ffffc900129a7df0 R08: ffff8881f6e50bc7 R09: 1ffff1103edca178 [ 209.762244][ T4646] R10: dffffc0000000000 R11: ffffed103edca179 R12: dffffc0000000000 [ 209.770306][ T4646] R13: ffffc900129a7e68 R14: 0000000000000600 R15: 0000000000000002 [ 209.778333][ T4646] FS: 00007fe4711e36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 209.787496][ T4646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.794137][ T4646] CR2: 00007fcc191e8400 CR3: 000000011368e000 CR4: 00000000003526b0 [ 209.802158][ T4646] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 209.810194][ T4646] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 209.818224][ T4646] Kernel panic - not syncing: Fatal exception [ 209.824869][ T4646] Kernel Offset: disabled [ 209.829194][ T4646] Rebooting in 86400 seconds..