last executing test programs:

8m18.198451453s ago: executing program 32 (id=643):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0xc0000, 0x0)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000280)=0x7) (async, rerun: 64)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00fe62d3c2ca4200001c000100000000000200000007000000df1d5bd6c0000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x585, 0x0, 0xff1}]}) (async)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) (async)
fsopen(&(0x7f0000000140)='cpuset\x00', 0x1)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
close(r6) (async, rerun: 32)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (rerun: 32)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3f)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000200ff070000000000003005000000000000"])
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1000001, 0x4) (async)
sendto$inet6(r2, &(0x7f0000000000)="cf", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r10, &(0x7f0000001180)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async)
pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x401, 0x10001, 0x8, 0x1bf, 0x6e4e, 0x6}, &(0x7f0000000040)={0x200, 0xf97f, 0x9, 0x7a09, 0x80, 0x2, 0x6}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0)

7m40.858830758s ago: executing program 33 (id=1521):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000002c0)=""/21)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xd9, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0xf4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0xc, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x6b, 0x2, 0xff, 0x5}, 0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="050f260003141004fde3561da3c991f544deea695ebf70f795031000001003000200021009002389c8f0fa22b232a9d7685da34e9a515c8a4a701b7936e894"], 0x6, [{0x97, &(0x7f00000002c0)=@string={0x97, 0x3, "d191203f35392e4462e5d5bf1f757f3805e6a76e9a7a39f9bc151290ab3443ba057350c8e1ce1457b3d024dafb96332228d802aedf3d17584e1f6bcdf6271eaad1cbc87b8e42072f9464473d38ea955c738ee8c8736f070ab2513d520737670c4af87bb0895ef630f081de3aaf15a439fef9d1ae7204335174ec869c02e92cb171d6d7c1b86f446e93112250e89e7b73618765e76f"}}, {0x100, &(0x7f0000000380)=@string={0x100, 0x3, "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"}}, {0x4c, &(0x7f0000000480)=@string={0x4c, 0x3, "52119c2cef8546b4c61d8d82d6ceee392f5f4205d92299262cfa4d4c62ea7c882b935feafc5ea4cc35cd78464623b1ca66d614b80c08f2d74347e75a4fe15aa7166769943b42288b975a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c01}}, {0x65, &(0x7f0000000580)=@string={0x65, 0x3, "7f2cbd48277f09cb23b38858fe31a41a4716774d4c662790ca4a319efbf2810619720fc31c64feba291024872673d513ff53e04f319d4af233ba0bc76e27e87a6d61f65bdb2c962d1ce7babe9dca2f1a30af06908e9040c01802ab3c0115194908640c"}}, {0x70, &(0x7f0000000600)=@string={0x70, 0x3, "1fe24ecd2925d6d71aa4016190ba1e9570e42e47057c99c35646810236989ea8e0db3721616867fad3b91a82c15ae803446029479db5e6a04a87780c5e064551917dc21252a91cb6a7126ba81eee5c1fffcbbed2ae852a15b7f8b6bcd1cfdfc028d625a03ba93a808aabf81d5cea"}}]})

6m42.537200915s ago: executing program 34 (id=2477):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x6) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, &(0x7f0000000100)="559be31c9915b68b6404e3abe411e3e54e327a2bad0a0c4fe31ca1d0001e423b8d43dda1b8ccd058f7046d1dc2a7be33a66e61df07f0d99e8b7caf1e6cedb9eef3e9a9dad66d35cc035d23fe2db9febb775ca9b0864cbb92e30090867a1f", 0x5e) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) (async)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

5m52.951875102s ago: executing program 35 (id=3264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x321}) (async)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0})

5m39.360609884s ago: executing program 36 (id=3697):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003900)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2564, @remote, 0x3}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000040)="010c82d87c4243ccacd8fe4d0ba73a7a73affeb48b742249cd230cd2523871877037e9c92eca40bf31bc92b0f863e885e135d628ae133084db99d466624c91c53fb317d8466cc194662727c1604296452db682570c4912365678b52c126c140a349a8099cc808d7bb121041bbad4d128183e0479fd948745d0b35bc2b87d75ed015a453fd001c2c2330242503d96bf735b9a1783bd051428f6e3efe97fb60bc06b21f9ec1da4e7035ccc82bf639cb62ed17133009cf5860fd59987681ac6809ced6435972ad1e4b0add8a0cd42c13ab2325449b9cdeea1e195c3dda06f2bc86751", 0xe1}, {&(0x7f0000000140)="abc713d198c494aa936eddd242838db186d4f0cc5d34626a506c2cb37999b97e46c3980444f27d54fa9162d782e99e96a2699d0aed2753c77cb5", 0x3a}, {&(0x7f0000000180)="2dc8703028b158b5f433e3fe8b803bb3fcb7091844bed57a3683484d5a2ed1ce9f99e746ecfb9d02624fa2c3db51fdc9f13d46fa3a9f73e9361ba59c23fc3fa2559fecffb8af17f90b9fe6463af6adc0326294c2df934cf725b2f5a5a858c146f5eaad3d715105ee9e8cf6275aad6f7dd0e142ba7aebf4c4789ba4827c1c0bf97d045dc05f7042ab1680fb43d7e83317ec3f979a1c33014bccb5", 0x9a}, {&(0x7f0000000240)="ca2fc0b71bb628ac296e02b7ff89209676994b141171816ac746b47578db6412c139707b41d06ef79587ae0c6cbd6629d01c442b590e35c3a313b13446af2c7cb804e9de4961a2f756f66f47a6b9f8d0660c49ecc3f762c723cc77dcae3cb4c9693764b5134bf21dee82e032b799c330f7187e6289246e0ae9da710e879955c78ead7890dff2ac540b615d6d9b9aa07f79191f99313f792e586c672dd3841e1bbc53094bc9ba893d074c4ce883264cd79d6feea0092a6021027c3b06ddf11eb8c266e5aafc915f039ec50989d6aa598e2e3af61c1d98c06ef52c9ec305ee43b820ed2295a928ae7c0f521cec39fce718c14ac17cd410a7d296c7ba6042936757e21dcd98860c182897e5224fe86fa4e4b3e36ec530184ab0f2fa215e7ab707958377f39153e173432cfa48f6c6b57224851dd387fffed6831f8b6b9ef6ec7472e93c3e3d1776b21dc600df34f4a94ce3aa89761cdfe55628062b90f7afc180786d53707e84edc94678d0a517aaf1fdef7b9b8bae6ee13993fe8446bdd326c58b9848b1869c35eb81dc829f06b91a08339ad030054265c69d206996c0d7ec07cc33f3b3d918770312339c5fe482cd1580f33e3ca8e16c232647f4739fb0ffdced87389db7113a52127ab7716ee9dc7c9ef476639cb315d61ed819fb8cd22305875ffcd990046384bc0bf78fee66c8ca95b6eadf60dca3634ef0f8883791d61fe357649f6168d4c957ea90d2594689cd5e05a350302c48ebab758f0ad5458e18fda5f9d858736e8a9bb5e199ad54a112b5050148d5d40e5c5e38f173e49b48328f2f7f9bd7e5c05e46c5caa1eb9939c35da501287dd4b292e61e12cd9404073416126b4192d20892809608e29081cf57f612b86882f00557908c2c451df30f03be28eb16cc7eddd8cf1bad91b37b3a4f95a7dc740a94d2f98f948eb6e5b5e596c13783af7967e45c1c9390b03c79d0bc6dd97cdf76d17a3f26deab780d2037977eb758f350f3d48911a928272a387330d405059b26db7f443cececc5f8083fa40b4c6d06428e6069e1803686972772a37fa17f960bd07d92dc287325627284e486e8c035a91a65e06a9a3ce10b5ddeadbd534605a98bc9f6cbd32696b04b654290c5ea4d4cc28c4b8a717e18e0809e1c46379c16f6f133dc7fc854a49e9c975a32a32896f1fe838b6bb155ddade08360f3d9f1fc70e88d92f50d802be47f0190a67a7399af89ecda2acb4161b504a9ebe7f9813071aa1db8847bb8665c478865db6e0649bc636349848bd5230cd3653389dcfc7316cb5460f75b864b879ff0ac39d2e6198c8146f0bf8f73c2aa8f02c8404baea08e5fbe0d6347238760fef94929c14afa63649ac1b8f683c223ff1e26121a420662312d688796efe6fb50fdfec8", 0x3e0}], 0x4, 0x0, 0x900}}], 0x1, 0x24000800)

4m40.175308555s ago: executing program 7 (id=4326):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x188)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r1, 0x2008002)
sendfile(r0, r1, 0x0, 0x80000001)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
write(0xffffffffffffffff, &(0x7f00000005c0)="08fb14f70744d30b90506832d8e4afd44b1322518318421d9b24e082cf4324a7d809301cfa2dd6e93fc722f8f3d62242c3a441a8ccde5408d67fc377845be54b1b0edcdd85a8fb260086935e007ef9238b5a0f39b7498cc34d851d07b54a04824379bca7a866118c50717b52228201f281deddf59c3fcf40c4305ca878152afedfd2e30e89c39d1efc14a7b5de2c2cace9b9bbd19ef593f60a7c4a288b2bb14137dedd25981514dd9cdc7bc445339b93ed5b07f7d3069d6d7d9f91bf45464231ede4c7703e74e471de82dec74323725df61639591c424ab5ceec032278e4465905045405923997288a41f1c6ab6d98cfeb157a0c9c4551f2", 0xf8)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x2040)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000080))

4m39.992853547s ago: executing program 7 (id=4334):
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x153183, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m39.8289987s ago: executing program 7 (id=4336):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0xffffffffffffff16)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0xffffffffffffff16) (async)

4m39.759280571s ago: executing program 7 (id=4337):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x25, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff})
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208080, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x6, 0x110, 0x6, {0x0, 0x2710}, {0x77359400}, {0x2}, 0x1, @can={{0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "729513622da8a3ea"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40005)

4m39.759085991s ago: executing program 7 (id=4338):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r1 = timerfd_create(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2400, 0x2e)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000040)={[{}]})
close(r1)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x202, &(0x7f0000000480)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r3, 0x0}])
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
wait4(r5, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r5, 0x2, &(0x7f00000001c0)={&(0x7f0000001080)="4368ef332f136978648d70d9e7e3ef337167043c4474222cafae7c0529782eff07d6ac645bc814ca99f051da6ab54ee28ab1cd6922bb798b1dfd4c2e01a5207fc8443f463e70f350882708b681d6f8bb93ee5593786bd4159611e42e3ac8cbb91b429cae536c60faf3c3e5f7f3d1c21035b176245734e19a0933e0b42bfed1d057c2a88e50e9df628921eb2156015ef64a838356f2b7b3f2395539348910e1b71ddbca9aeeab71c86a21a3196452bd97295abf2b5da08a532abda384acbf558f0a973e6257b60c426605e437c097e26ba30ce672f08ea90fb4f41b69493756fa095cb1885a4406e78241a32f484844eb9c744983bedff6204aeef6c4022ca7a0c7d0a58089cccbfb158fe7b6071cf1a0cdac34d08d61790ebec0edb56179d00ea12f59efa1a9419c55da5b54459a42e0bde48cfceb758b14db8d4e33c8a8d3ffef4795c669e30c16f01ddce9edf02dd0f65f5a47715592db04125ed0f41d94d76b8abc4039ef2cf5411fae265c1909247aa55ca02c41b583998df40a4101cfde15ce28d18b47599243794e8927abb949bd719b570764825a170f0648857313063c7559e4a0858d8e1b3b25dfb4dc09b6928ead2ba297bcd710868eb12cf75552a6f35dd48852ca1e2d03de10f60fa1d5ce3ecf5da0b10d92968694c02efb02d71174e953ae1603d92ccf837963f28bf10e6ea080471cdd10a89e7d240b3ee541", 0x200})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m38.247238733s ago: executing program 7 (id=4354):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r3)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x7405e000)

4m23.164895518s ago: executing program 37 (id=4354):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r3)
sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x7405e000)

4m8.286402579s ago: executing program 5 (id=4885):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r1 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) (async)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) (async)
fcntl$setsig(r2, 0xa, 0x12) (async)
ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
r4 = dup2(r2, r3) (async, rerun: 32)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x13) (async)
fadvise64(r3, 0x5, 0x3, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000001c0)={0x9, r4, 'id1\x00'})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x561, 0x0, 0x390}]})
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a17, 0x202812, r0, 0xd1c10000)

4m8.274084769s ago: executing program 5 (id=4886):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{}, {0x100000000}, 0xd})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d10, &(0x7f0000000040))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000000009023b000101000004090400001002060000052406000001c8000109058202000200"/63], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setitimer(0x0, &(0x7f00000000c0), 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"])
setitimer(0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000300))
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0xe42}}, 0x30)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33)
write$vga_arbiter(r8, &(0x7f0000000000)=@unlock_all, 0xb)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="06c153b5584ce7c48d000000000000"])
setxattr$incfs_size(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180), 0x0, 0x0, 0x1)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010325bd7000000000000000000000007ffd00"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000000800030011000000474689b062ae2b7381be39189332b7f422e8380d693a29fa5a1a47b1cb17d6023251b676bbfaef541875e71b19876db880b488b2a278b9a917aa290ded0b271370497c5c4ebf350050b0a70765263f31358ecb110100a0c886ac5c4821d04155e41c00bb9595627c28d5d7afad13d5f5d6727f4a47bf2bd67ac63687b314489534d1efa7e361bd64f36bc238271b21f006b7aacbaeade788"], 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)

4m7.759941166s ago: executing program 5 (id=4893):
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x321a, 0x0, 0x3, 0x38}, 0x0, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1)

4m7.748135597s ago: executing program 5 (id=4894):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x200000001494)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000480)=""/238, 0xee}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0)
io_setup(0x4, &(0x7f0000000100))

4m7.695109698s ago: executing program 5 (id=4895):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x4400404c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socket$inet6(0xa, 0x1, 0x4002)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigpending(0x0, 0xfffffffffffffe03)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000000740)={0x2020}, 0x2020)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0x0, r7})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r7})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6b, r7})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3, &(0x7f0000000280)=0x8, 0x4)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
munmap(&(0x7f0000228000/0x5000)=nil, 0x5000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f00007fc000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0xfffffe6f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x0, 0x0})

4m7.694598878s ago: executing program 5 (id=4896):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x220081, 0x4b)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async)
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x1d0)
r5 = socket(0x2, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x9e, 0xa3, 0x64, 0x20, 0xb49, 0x64f, 0xacb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe0, 0xd3, 0x4a}}]}}]}}, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r5, 0x0, 0x19, 0x0, 0x0) (async)
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r6, &(0x7f0000000440)=[{&(0x7f0000000100)="6933f52d91", 0x5}], 0x1, 0xad, 0xffffffff, 0x0) (async)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
read(r7, &(0x7f0000000040)=""/9, 0x9)
write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000140)=@x86={0x62, 0x5, 0x6, 0x0, 0xa, 0xc3, 0xfa, 0xe, 0x2, 0x47, 0x8, 0x6b, 0x0, 0x6, 0x9, 0x7, 0x0, 0x7, 0xd1, '\x00', 0x7, 0x8007ffd}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@x86={0x1, 0x4, 0x0, 0x0, 0xfffffffb, 0x7, 0xb, 0xea, 0x8, 0x3, 0x3, 0xc, 0x0, 0x7af, 0x9, 0x0, 0xfa, 0x28, 0xf, '\x00', 0x8, 0x4})
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12)

3m51.781484304s ago: executing program 38 (id=4896):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x220081, 0x4b)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async)
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x1d0)
r5 = socket(0x2, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x9e, 0xa3, 0x64, 0x20, 0xb49, 0x64f, 0xacb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe0, 0xd3, 0x4a}}]}}]}}, 0x0) (async)
syz_usb_disconnect(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r5, 0x0, 0x19, 0x0, 0x0) (async)
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r6, &(0x7f0000000440)=[{&(0x7f0000000100)="6933f52d91", 0x5}], 0x1, 0xad, 0xffffffff, 0x0) (async)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
read(r7, &(0x7f0000000040)=""/9, 0x9)
write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000140)=@x86={0x62, 0x5, 0x6, 0x0, 0xa, 0xc3, 0xfa, 0xe, 0x2, 0x47, 0x8, 0x6b, 0x0, 0x6, 0x9, 0x7, 0x0, 0x7, 0xd1, '\x00', 0x7, 0x8007ffd}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000040)=@x86={0x1, 0x4, 0x0, 0x0, 0xfffffffb, 0x7, 0xb, 0xea, 0x8, 0x3, 0x3, 0xc, 0x0, 0x7af, 0x9, 0x0, 0xfa, 0x28, 0xf, '\x00', 0x8, 0x4})
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12)

2m33.740051904s ago: executing program 0 (id=6534):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
lseek(r1, 0x8, 0x6)
close(r0)

2m33.707287725s ago: executing program 0 (id=6536):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, <r1=>0x0})
syz_open_procfs(r1, &(0x7f00000003c0)='net/ip_vs_stats_percpu\x00')
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r2, &(0x7f0000000040)=""/141, 0x8d)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000180)={0x0, 0x15, 0x21}, 0x18)
r4 = openat(r3, &(0x7f0000000200)='./cgroup/../file0\x00', 0x203, 0x52)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
flistxattr(r6, &(0x7f0000000280)=""/230, 0xe6)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0)
fchdir(r7)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x40, 0x1c, "0062ba7d820000a75e0000000000fcff00"})
r9 = syz_open_pts(r8, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0xa)
sendfile(r2, r2, 0x0, 0x7ffff000)

2m33.704597955s ago: executing program 0 (id=6539):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, 0x0, 0x0, 0x20000000009002)
recvfrom$packet(r4, &(0x7f0000000040)=""/97, 0x61, 0x2, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
lsm_set_self_attr(0x65, 0x0, 0x0, 0x20)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

2m33.526783507s ago: executing program 0 (id=6541):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) (async)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="c74fbc1659e7d83c9bef79f12aa3126097a132ae29297f73ca63c2033a7bc9bb7f1b86", 0x23}, {&(0x7f0000000200)="406f0c69677a281762f53a7994566dbed11cd841d215d229582b4696a51458e34ad6dd354b51dd13f7ee52010c70cdca43fec233a675e723b1a528a4b3fef6444a53e3d7ab2c4b86dd90c6529c0c6fe9fe14b217ba57eaeb4362ecceb4b2930f64954c2249a48695ced2f9eabf11410ffb316e20da0013014433a4a1229c67649c36ecda4ec1bc11e085db1cee6ac1100c00b4fbf8d20390d9228c4d95172299bcec9d121d97a9fa5deff0875fb81d0eed0938a9a2887357cdfff62edf80652f0ad7e6be3ae80a3ee85f0a9196b76b0602f60ea5ce2f47d17ac46fdb", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="5e73936b8f756b7bc3b391961934aeaca1", 0x11}, {&(0x7f0000000600)="1f08cbd3e407a326e973b580feb7896111804aed1a68ac3738ef6cbb200852aeef32205f67fbe1c0ad0929af63bd52fbabec369dd76b0ac22841dfc76872e06a34fb92a00e145a8ff7edc0b212dcee0a3b5e23f02ccbf75cef8414ce78314d8147a7cc1c282e1e297e5a82d751fa982b8346", 0x72}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002d00)={0xa, 0x4, 0x3, @local}, 0x1c, &(0x7f0000002f40)=[{0x0}], 0x1}}], 0x5, 0x40015) (async)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

2m33.510984038s ago: executing program 0 (id=6542):
r0 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="b84c6ca954", 0x5, 0xfffffffffffffffb)
keyctl$get_security(0x11, r0, &(0x7f0000000b40)=""/200, 0xc8) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
r3 = accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f0000001480)=0x60)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000400)={{r3}, "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"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000001400), 0x3, 0x20100)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001440)={{r4}, 0xcfb0, 0x2, 0x940f}) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x1)
setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000000)=0x100000001, 0x4) (async)
fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}) (async)
fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async)
r10 = userfaultfd(0x80001) (async)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0xffffffffffffffc1) (async)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)) (async)
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
r12 = getgid() (async, rerun: 32)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}, 0x800) (rerun: 32)
getgroups(0x6, &(0x7f0000000300)=[r7, r8, 0x0, r9, r12, r13])

2m33.325742711s ago: executing program 0 (id=6550):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000580)={{0x1, 0x0, 0x80, {0x8000000, 0x1}}, "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", "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"})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
listen(r1, 0x7) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x804008, &(0x7f0000000200)={[], [{@obj_user={'obj_user', 0x3d, 'dvmrp1\x00'}}]})

2m33.295014661s ago: executing program 39 (id=6550):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000580)={{0x1, 0x0, 0x80, {0x8000000, 0x1}}, "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", "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"})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
listen(r1, 0x7) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x804008, &(0x7f0000000200)={[], [{@obj_user={'obj_user', 0x3d, 'dvmrp1\x00'}}]})

1m56.567455917s ago: executing program 4 (id=6986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4080)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x2, {0xa, 0x4e24, 0x7, @empty, 0x7bf}}}, 0x32)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

1m56.511107558s ago: executing program 4 (id=6987):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
unshare(0x44040200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0xb, 0x0, 0x5, 0x0, 0x3})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast1, 0x4c20, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0xa, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x8, 0x0, 0x9, 0x5}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x300, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYRES32=r1])
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200)
unshare(0x50010000)
close_range(r0, 0xffffffffffffffff, 0x0)

1m56.498070418s ago: executing program 4 (id=6988):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/address_bits', 0x88102, 0x0)
mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]})

1m56.41274289s ago: executing program 4 (id=6989):
statfs(0x0, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x110)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0xd, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0x8]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'macvlan1\x00', &(0x7f0000000140)=@ethtool_stats})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000020104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
symlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00')
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000400)=@ethtool_modinfo={0x42, 0x0, 0x2}})
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x200a, 0x0)
quotactl_fd$Q_GETFMT(r6, 0xffffffff80000401, 0xee01, 0x0)
ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000180)='fdinfo/3\x00')
capset(0x0, 0x0)
creat(&(0x7f0000000100)='./file0/file0\x00', 0x140)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00')

1m56.314720561s ago: executing program 4 (id=6990):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r2, 0xff06, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x18, 0x0, "0b3b85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect(0x0, 0xb7f, &(0x7f0000001e80)={{0x12, 0x1, 0x0, 0xc, 0x11, 0xcb, 0x98, 0x166a, 0x304, 0xa01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6d, 0x2, 0x1, 0x7, 0x40, 0x7c, [{{0x9, 0x4, 0xbd, 0x2, 0xe, 0xc6, 0x42, 0x89, 0x81, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "19"}, {0x5, 0x24, 0x0, 0x8c09}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0xfff8, 0x2}, {0x6, 0x24, 0x1a, 0xb, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, @hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x8c3}}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x0, 0x1, [@generic={0xf8, 0x21, "33b5d5a71de1b73391d91332f5f1f9663bd2752e06f5fdf1dd31f11af7f818c240fe3585e35d8d055b0123fd97ac821cc0c02692b39a3fc03e018bc46953bc2a2ca584582b626524cc883fcca3c5ca8f47e0613f1116bbf725f2d54b0044a976c7a8bcdf9b888f7e50245a72177dcfaefb57ac7dd200ac757c9c5d78a1f347d412ec9f8dd129ef05c82fa9c68c26dda59c0ac26622e85702470f6f770d3f568071c1dc56a20005e2ff9e21fb3150cbaff8d641e4749506a1f3b7c8b76074f4adfb394583ef839a03ffffde2f2ce33db2bdf4bb47b621649274132219b2e3f9ba43aa5ae750f2b0b973d0c0ddffd3a877b3ade12a6c16"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x7, 0x1, 0x0, [@generic={0xc6, 0x23, "f72df365add3df3ef8d914359a7909ea3f90c12e641583fdecdb5ee020594b22da66b8858d278f1294123ce2dee8cec489a2a6976c4208e2d73519ef446a5ed0c1a86c0a41e32be3b06678bdb8483a1be0ebc30f1cd52f68e518ebe46c8b9a1e231906fd5f61909ac769ed5f0d2e6fffd2e1ba7ee365acc08792bc0f09d4c360a33808cae34723bdd27002d52228975240be99ad0ddcb349eb1d9e639dd87c61f4752f8767be674bc7757566a7252b3ee0e3270152e663d2b8dcc9c1746d8246bb7c0c59"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x24, 0x8, 0x1a, [@generic={0xdc, 0x30, "d60f470de2b1e9f8f67c9f27c04b14ff09b1074e949b974e33a162f1f8a7be125e7567530c2e025dd7c2bd8023125f1f69eda52c515f029cb9c81322c99ae748443406210eda1496ac26ba1deaa747d1e44ceae1e37be17e1d2c52364320168d0bc10c252291619abc9e0032dd911f83dba6c3ad462cf912ddde0715edf2a9e34d70c8c918a07a243d04950ce3ac5a888f7f13a86d303dd36d7fe83621d6ec2d17153b6c3ae82c2c78d46ea812b304b2d142e738e48f773394e4ad51862a1094d97dfe2567fab118d0a29fe48e15471f21f338a7d1a0bb7c40a0"}, @generic={0xa9, 0x4, "929e5d880feb25d3e6f17d7819298233fef4413e4c013cdb0347784cba7c336bbcfcf5ff4b474f95a715579ad47d23bb83dd1384a5a0c1addc141b6e464e448da08ae8979a972d63ce452fab64b3cda52b89b89fa21680f175a179dd55097a503d97dc0bd3d25c96c7e7cb404e952a6ea11df3a124b5a6427dc8e3f1631ae6e3f6756d64e01e651cc3fdf92cf29257a87615391abe55006972df70d56b34b97620cd9885bcba41"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x4, 0xf3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x56, 0x9, 0x6, [@generic={0x79, 0x21, "1630032f7e567e347e2f22a8a6a48275fb24054f05b5caa1b3852b56fe01c117b5091a09af4fe81cffa55b964782fde5af49b8b790646959dfd043385de9757aceb7540e611e0f4ae4cbe0af1bf367cca1139440e6d44a100fb9fb23d0a413a6f1f802a1c34d6c328fd98f678eaa6c060c871342ea3534"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x6, 0x6, 0xff, [@generic={0xbe, 0x21, "ed318a1005b314c0c70ebca5b83e5007bffc83433b779618bee996f2d0f5d4215ea2712c9a2176835464bc25fa22113bcb8fd8ee0089b35864e816cc6749a3e2554f4b5d4e75ef10bd1005112f8517c72880a12a9e964d3737ec952aac46f5243336d14d4dd758194ac6a7cf644f906c410f2038bfae51bdab3de6dcd9df0eb491d78fd8e477f0f4e35a2626f2e2e2b6eff1653e2b2d39ec23b22dbcb402ba5fe6dd4025beb591ca5c9b3ee1a0f842d6ddf6ab330f02451c6d9ce224"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x1, 0x3, 0x7, [@generic={0x83, 0x31, "d1a5daaba8e110cf8c8ea4b168d6df71365b2ecd8803ef377a4c97f046e0284e8f08747d5bc80e5a86ac5a4634fb6c781921ab9de0778e0d3d670a6c0cf63349b422e551f7878e5f637348d96f255ef57f7c006c7e0d4b3b2ffd748f4d80dde8827912b52ff6d52dcc0830822f86d9cbbdaf3d6cdb0cd4bb0a3103c2ddbf3e3eba"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x8, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x2c, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x4}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xc00}, @generic={0xd4, 0x11, "34528ed87a30d08ad43dfce5869bd75e8eeb5e7f9bd04998a8b3fce465bad805b56eb5a030fdfea2209933bffb60b75f132de775601341c5f89d4e1db863dbc362522da21a9061c36f54ca9cbcc181f533800b55a040092c5f6a015d0eb62d6978818a6dffcafad2a4afa7de8e0e43fb9df24abd05009cc4a73f52a0cc66d092fd9ad9a1dbbbe5a3a549c027bfd7b3ccf81cfb9cde3ae7eb36cb56a57abb567edcf91343092b0abaf9b408b297ffaefae49984c3b20679f418b1914e37ef9efecdc2404e2798b9505a25231b3cf9388188a6"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x68, 0x81, 0x7, [@generic={0x4f, 0x24, "4f3c284d6ecc66c2fa4aad02c3a38ab35741b20a37cd6e4e275eee4a108adc569c1507d33e71a4d7aa49969267795c0e8b692bdd6ff5f5d0e6bf9b0b2d98bb95d284866043c9bbaf57f86b2f7b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xf, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x3}, @generic={0x37, 0x23, "8209ff6579939cbf8fd3a6b43ba57dcb35379ba649126086f5942018e1ada7260db33e079313eeeb3cb66e940f641463622eadc27b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x9, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x82}, @generic={0xcb, 0xf, "f773c51f94ec7fb69fc7fa8d5ee420f625970a7aff0866f19baaa92092b061475bcb4da7785865afc8abe473652a6735ae1856ecdb49a5f524bde6b0707ec8a27043a57766783a33780ed86cfcde52441141b607611a8f4cde90b9d9ef1c43eb80e2cda82b61d199bdcf7352a5aaa36afe9c5c0602b3f51a2b93e89b8b96bfd3a8d1e80896b12ae57e709b83984249332b97016a95f37e8e474d79602c7ac13ebea95c3d301fc5c1e76ec61dcbe573e6be6805e7cd934551d3b28ae2116294ea13b45256cdec414c4b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0xf, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8000}]}}]}}, {{0x9, 0x4, 0x23, 0x9f, 0x3, 0xff, 0xf5, 0x5f, 0x5, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e5a89e0a"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0xfd0c, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x9, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0x1, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x7, [0x40, 0x8000, 0x9]}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x7, 0x3}]}, @uac_control={{0xa, 0x24, 0x1, 0x57e, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x6, 0x1, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x6, 0x4f, 0x8, 0x82, 0x8}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x9, "5fa59fe69d"}]}], [{{0x9, 0x5, 0xe, 0xc, 0x20, 0xb4, 0x2, 0x81, [@generic={0x23, 0x21, "c4ad495a547330e465d5a81a875c2253758bd2af1f160f9d73544660d33b56cb09"}]}}, {{0x9, 0x5, 0x0, 0x12, 0x3ff, 0xa5, 0x4, 0x5b, [@generic={0xea, 0xe, "c8bc2637c426174ae9ccd22471a9ce0548929d67e0cda69ed96dd4aafa04d305395ac7c20618a05b9cc8cf9913f71671886b4911666c9d14182fbab4949b8aadf5b03832c37025d8bf12890f267867b0d69970b5d3a4023ac74c8d6df8fa2ed5fe05cbce0a8c11c1c86acdfc1b6c72b8b1bcc165779cfdbb3b0ded73173afa9377782e5e7d76638616a107c3205c8a06f1a17438ae5b810598b375d8e5cdd1cbccb62916e50e56a3aa604e2ff8be99fdce8643f39151cb4bff11480b3c4130ed66af25c4494403d219c449443f000384924386633a0811140edff40742fa45362fc0a17617bb812b"}, @generic={0x99, 0xe, "607a8ad7e15d8dc82855e3b19a0b30a015312e12595101d79891c8f44d23c66881f1c61632aa8f3ede42851da95fa871266ebef44cf3b8ac0ad8de951fbb4f83a232e0c3c16f96939987f964a75092fd7943cd93aa448699d7f2f9ea0ca0b46686dc127b9e66d2427dd7c9a66a025fea848382612c23f264c497d1d2b703033b701cc07e362763e2680d8941e9e7978f4566001d6ea247"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xf, 0xad, 0xd, [@generic={0xc9, 0x23, "4d8be913b5b9e4dc106d604a550e3b2a444e5f7330af01cc66cf7a9eeb479a61e86bac119a798feea9e337e36c019f4e5cd8df8565a30345d92eee6f5ba879dc6ab68d56fedb0b8b991b69228746e44367ee6c2b8dd59f3e060e3c1506eada4899b674544c23647813643263dbd63827ea6e015b47f4db9998eaaca2fa58962ecc5290f3b68eae3b7ed0222d5860151f9949b83e76b961ba1cdd24c14c9026a4397f1765479aa8c3b2c8c6eb2badf35c656b39f7b427a5ceeffc9fc6cb512a203a9af79c5fc96a"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x81, 0x7, 0x7, 0x8, 0x10}, 0xb4, &(0x7f00000001c0)={0x5, 0xf, 0xb4, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x7, 0x3, 0x6, 0xcc}, @generic={0x7b, 0x10, 0x3, "f10cf666523bd28b6aaa9543defdd91b61aa21778a726f32f60495e04b586f91c883a5e60f4eb76b3275ce118f5704546aff1d87ca04bc4fbc75085a1f5f5db4d912304378367867ce068da5b633005e4beeac625e00b8934d26e80a56ea959ee4e84c36ca62089e423a12c8588b23bab6dac19a4a7b12d7"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x0, 0x2e}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb, 0x9, 0xa, 0x7fff}, @ssp_cap={0x10, 0x10, 0xa, 0xbc, 0x1, 0x1, 0xf00, 0x4, [0x3f0f]}]}, 0x9, [{0x3b, &(0x7f0000000100)=@string={0x3b, 0x3, "f852c41e9ac1f3b8631584245c742cc10e7b99ad24dbc8bae92b7b6ea900d9d854d7fd72baf12f6d36a87d4072f8494d6f90f92e116280f6df"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x830}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc36}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}, {0x65, &(0x7f00000003c0)=@string={0x65, 0x3, "9a32233cd0cb423a57973d3244251550c8aca1881340b7c7e7cc3492447828a07aeee2e9b5a0d55470ca8c27a0e4e9529eb63399710a02628324ccc33d376b8fa3d35b88a15919dc0c1e151aaf940851f10c15d3dc39da3a671eccb812c8a4e5fd9024"}}, {0xfa, &(0x7f0000000540)=@string={0xfa, 0x3, "88edce0d42e6c743ef0949e6aae0a86f1c9f3a12687e2d6f227fcf9523d8554313c4532dfe542f357c360a87ed8c8d8d3bf32dc39de0a311fe1d6eb6a2edc02f75939a5b3a1351bc1c902017b22c6ab4cc522631d64419f6a88a1648965c5c99cb3973ff6d0716647d10e756594be6d5556d3c2644dfe9dae20c7078568b9c43463ec02ace160502560cdca2d12652a5812ba678e569a9ba7477d2d2fede4b5af8707ff21923618a7da29136b81c1c24b2cb1f1be3195473ccbbfa21709aa298bb1c51cb51190f7ce5f03663eb44d400330849dcbd6a191b61b96dbcc03e283e03c0cf1379269b382423f0fa4392f844ae7af006625079f7"}}, {0x17, &(0x7f00000004c0)=@string={0x17, 0x3, "279c35c4fdf41df88d535c44b7bc5baca9e50f4337"}}]})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000000f80)={0x0, 0x6, 0x3, "0f4461"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0xd1383000)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r3, 0x0)

1m56.242844382s ago: executing program 4 (id=6991):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x18}}], 0x1, 0x20000000)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x51, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x4, 0xffff, 0xe, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x6, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x7, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x7, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x800009, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x1000, 0xfffffffe, 0x15, 0x8002, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
clock_settime(0xfffffffb, &(0x7f0000000140))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0)
r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={0x10001, 0x6, 0xf}, 0x18)
ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f0000000600)=""/222)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r7=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r8, &(0x7f0000000700)={0x2c, 0x1, r7, 0x33, r5}, 0x10)

1m56.210287533s ago: executing program 40 (id=6991):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x18}}], 0x1, 0x20000000)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x51, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x4, 0xffff, 0xe, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x6, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x7, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x7, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x800009, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x1000, 0xfffffffe, 0x15, 0x8002, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
clock_settime(0xfffffffb, &(0x7f0000000140))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0)
r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={0x10001, 0x6, 0xf}, 0x18)
ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f0000000600)=""/222)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r7=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r8, &(0x7f0000000700)={0x2c, 0x1, r7, 0x33, r5}, 0x10)

48.219337953s ago: executing program 3 (id=8083):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'})

48.219004313s ago: executing program 3 (id=8084):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0xb8, 0xc, 0x0, 0x9, 0x3, 0x10, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x1, 0x4, 0x1, 0x5, 0x0, 0xc, '\x00', 0xf1, 0xfffffffffffffff2}) (rerun: 32)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
r4 = syz_socket_connect_nvme_tcp() (async)
clock_gettime(0x0, &(0x7f0000007ac0)={<r5=>0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000007840)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000001400)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/237, 0xed}, {&(0x7f0000001340)=""/180, 0xb4}], 0x6, &(0x7f0000001480)=""/60, 0x3c}, 0x80000000}, {{&(0x7f00000014c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001540)=""/101, 0x65}, {&(0x7f00000015c0)=""/167, 0xa7}, {&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/49, 0x31}, {&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/84, 0x54}, {&(0x7f0000001840)=""/35, 0x23}, {&(0x7f0000001880)=""/61, 0x3d}], 0x8, &(0x7f0000001940)=""/211, 0xd3}, 0x69}, {{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001ac0)=""/147, 0x93}], 0x1}, 0x9}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c40)=""/196, 0xc4}, {&(0x7f0000001d40)=""/254, 0xfe}, {&(0x7f0000001e40)=""/198, 0xc6}, {&(0x7f0000001f40)=""/182, 0xb6}, {&(0x7f0000002000)=""/148, 0x94}, {&(0x7f00000020c0)=""/93, 0x5d}, {&(0x7f0000002140)=""/28, 0x1c}], 0x7, &(0x7f0000002200)}, 0x6}, {{&(0x7f0000002240)=@isdn, 0x80, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/185, 0xb9}, {&(0x7f0000002380)=""/72, 0x48}, {&(0x7f0000002400)=""/94, 0x5e}], 0x3, &(0x7f00000024c0)=""/116, 0x74}, 0x5}, {{&(0x7f0000002540)=@qipcrtr, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/167, 0xa7}], 0x1, &(0x7f00000026c0)=""/49, 0x31}, 0x4}, {{&(0x7f0000002700)=@nl, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/63, 0x3f}, {&(0x7f00000027c0)=""/141, 0x8d}, {&(0x7f0000002880)=""/34, 0x22}, {&(0x7f00000028c0)=""/157, 0x9d}, {&(0x7f0000002980)=""/111, 0x6f}], 0x5, &(0x7f0000002a80)=""/109, 0x6d}, 0x8a}, {{&(0x7f0000002b00)=@caif, 0x80, &(0x7f0000003000)=[{&(0x7f0000002b80)=""/27, 0x1b}, {&(0x7f0000002bc0)=""/160, 0xa0}, {&(0x7f0000002c80)=""/76, 0x4c}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/122, 0x7a}, {&(0x7f0000002dc0)=""/255, 0xff}, {&(0x7f0000002ec0)=""/140, 0x8c}, {&(0x7f0000002f80)=""/84, 0x54}], 0x8, &(0x7f0000003080)=""/175, 0xaf}, 0x10001}, {{&(0x7f0000003140)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000053c0)=[{&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/223, 0xdf}, {&(0x7f00000042c0)=""/66, 0x42}, {&(0x7f0000004340)=""/91, 0x5b}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005440)=""/187, 0xbb}, 0x7}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f0000005500)=""/247, 0xf7}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/131, 0x83}, {&(0x7f00000066c0)=""/36, 0x24}, {&(0x7f0000006700)=""/4096, 0x1000}], 0x5, &(0x7f0000007780)=""/189, 0xbd}, 0x9}], 0xa, 0x0, &(0x7f0000007b00)={r5, r6+10000000})

48.218521184s ago: executing program 3 (id=8085):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sched_setscheduler(0x0, 0x2, 0x0) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(0x0, 0x0, 0x0, 0x400, 0x0) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async)
read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002280)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x6}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) (async, rerun: 64)
msync(&(0x7f0000640000/0xd000)=nil, 0xd000, 0x3) (async, rerun: 64)
mremap(&(0x7f0000493000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00006d0000/0x3000)=nil) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x8000002) (async, rerun: 64)
sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) (async, rerun: 64)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000000)='#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a')

48.167238114s ago: executing program 3 (id=8086):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, {0x0, @broadcast}, 0x4a, {0x2, 0x3, @broadcast}, 'syz_tun\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0})
r3 = gettid()
r4 = getpgrp(r3)
kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10)

48.166831444s ago: executing program 3 (id=8087):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x6007)
syz_pidfd_open(0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setns(0xffffffffffffffff, 0x20000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14d142, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000040)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
sendfile(r1, r1, 0x0, 0x7ffff000)
r3 = getpid()
syz_open_procfs(r3, &(0x7f0000000000)='gid_map\x00')

48.145746605s ago: executing program 3 (id=8088):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1f) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1f)
openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) (async)
openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x184, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x2}, {@in=@private, 0x0, 0x33}, @in=@private=0xa010100, {}, {0x3}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4543(rfc4106(gcm(aes)))\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

48.115909365s ago: executing program 41 (id=8088):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1f) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1f)
openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) (async)
openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x184, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x2}, {@in=@private, 0x0, 0x33}, @in=@private=0xa010100, {}, {0x3}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4543(rfc4106(gcm(aes)))\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

30.610595185s ago: executing program 6 (id=8319):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
chroot(&(0x7f0000000340)='./file0/file0/../file0\x00')
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44084)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012"], 0x26}}, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x22000, 0x40)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00')
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

30.586503185s ago: executing program 6 (id=8320):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)={0x2e}, 0x8)
setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0})

30.525471186s ago: executing program 6 (id=8321):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000044d564b"])
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x200052, r5, 0x2000)
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0)

30.376958329s ago: executing program 6 (id=8323):
stat(0x0, &(0x7f0000000300))
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00')
setns(r1, 0x24020000) (async)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2) (async)
umount2(&(0x7f0000000040)='.\x00', 0x2)
fcntl$setpipe(r1, 0x407, 0x10001)

30.361231839s ago: executing program 6 (id=8324):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x6b)
write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x82)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x63)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r4=>0x0})
r5 = socket(0x1e, 0x4, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'team0\x00'})
fcntl$dupfd(r6, 0x406, r3)
ppoll(&(0x7f0000002080)=[{r5, 0x2000}], 0x1, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x398}, 0x1, 0x0, 0x0, 0x24000084}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x11, 0x6, @multicast}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

30.231160931s ago: executing program 6 (id=8325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="674d0fc71fb9510b00000f32c4a27d19fe48b800000080000000000f23c80f21f8350000d0000f23f862b43d00797900d064f20faef36698b8c300f900f9d80f01d0f00fba695d260f3235002000000f30", 0x4d}], 0xaaaaaaaaaaaaaf4, 0x9, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r5 = socket(0x2, 0x3, 0x8)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0xa, 0x1, 0x34}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, &(0x7f0000002980))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})

30.225296871s ago: executing program 42 (id=8325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="674d0fc71fb9510b00000f32c4a27d19fe48b800000080000000000f23c80f21f8350000d0000f23f862b43d00797900d064f20faef36698b8c300f900f9d80f01d0f00fba695d260f3235002000000f30", 0x4d}], 0xaaaaaaaaaaaaaf4, 0x9, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r5 = socket(0x2, 0x3, 0x8)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0xa, 0x1, 0x34}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, &(0x7f0000002980))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})

2.742013329s ago: executing program 8 (id=8590):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x10001)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045)
connect$tipc(r2, &(0x7f0000000280)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x2, 0x0, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/123, 0x7b, 0x0, 0x2a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}, 0x400}, @decrefs], 0x0, 0x0, 0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
fgetxattr(r3, &(0x7f0000000100)=@known='security.apparmor\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800)
setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/221, 0xdd}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
setreuid(0xffffffffffffffff, r8)
write$UHID_INPUT(r7, &(0x7f00000015c0)={0x8, {"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", 0xfffffffffffffe72}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
futex(0x0, 0x80, 0x2, &(0x7f0000000580)={0x0, 0x989680}, 0x0, 0x2)
lseek(r4, 0xfffffffffffffff9, 0x2)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$ARCH_SET_GS(0x1e, r10, 0xfffffffffffffffc, 0x1001)
sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000002600)="47c685013ce51d60b936a212ad114f67964c24193e961fc903d81866f2478f0ef776607f8faac3d678561ec7b9449bb5b0e095581a7a5e761cbe57269ac1809be1b17d7a40033134ce333eb3b8db43000e4667ba07879ab3ffffb575644260b958b4a7ce30e27daa1b74c79d9692527efc68f7a9dbcb7189602c4d0d3a36169b6f80ecd56e406bb46f5d185ba5d4398f2273daa3df5228fb1ed810211867365c6d94c970214bcbe1f8f94d040cacf9562be8cb15084db0d2a57e9a622c764798af75cd93cc7a8f90f3d66a850755da012e58a321b593ded92ff3745ebc687ae7c6f5e35db115663bcbee9f034fe40fd1d0081ef170c05bb3e3b2bca17af12559abddd29a8a1b625955643a3ebad015ea5e4dc3d7dafa06f3d1fc672018892027398e37b86ae505a9e2439f4145b8847a4490c00d3a8e977c6cc5c8eae0d73aa9e74efbe4e80a9cc094d2ad8e8da6e1ed80e168ffcbeae9ca4c58ef64f9d51b6aa97b82d7d0b3a38727cd63fd51872748bb57303903884c1808c6d4587f39e0337e2e2a136b35664b3e30b35ad86254af1a214d42787be30043cd5477990da8d3d6868927b445330c4773d39ce88e10096d39d8aed9f029987c64ca0d00e231872b76c1d145ce3b2602bb62759120d78f2ba6e580114bbfc605caf0d87b36a0764593a8c634c0b079546151848b7a04e183fc4806b7c63fd6a16687f8626c12d407038d56ccef436601d84d11909032c41253b02f3955863837e32beeeedc28c99b64016053d063a44724a901cac1db2386e19fe4c01b54dd16a3970686b58ac6c7975a284a24c5882952d7671a29b315ff59f9d318d960ace7faabb7a7580528b306e2a5e4e94ba200ef6a9d75483cb2b7cd95c06eef7ca7603f345644e1961ebf1bd6bfe4c65fc46f278d8e9d1aee91141487448dc9ac830a96574d1b59fd3560979c8e46a9afb13481800d52dd0db6193e4191af4ff8320cfce938df494868be15070990579b450d430160a052602df022209c9db6589c5250c89caba8bc470f177c53c07cff2f231e2695adb5c5c2e9203687195cbbcf52658369ebc1d672764d6c6a5282a837d0ef6a93a45bc33ebdd31996a37dc1e8e59c3a7988d728e23ae0e77caac9e57a0ea1693243c8de56213e85b6f432a99398bb83656944a9a2186a3e50f9275720cbb6a7e7eb96875bcfe588cae9a6d7a83ae5f3525840835ff2d1f484ee7b32b51121396687bd43647676ddbc9febdd1c9f6810832796707541ef8600a573995eea0080790fc85bdaaf7f28114e7b43cb8a37116e66d7c4d6df10f86f4e2a8a4156b724e4f4fc467e16c99667792f74fc0a24e67ae26e48b6329b15124452d71f006ff93bc0069103c0ee4e0b92dd6fa30be29b81998186df5c1a368bd2030297cd06aaa1fe0057d6695d59f4cfa47c43fd7895c0a356889b497248ebcc4c69024325016bf8fcca44ab4ffb455b7b1a249c9afc6b76d5e3efb57ea55e64dfa3c4a34712cb9a5f6754881f61f8c86a8fea44ff7ae468e43e24eaca04ba76a5abfef4e9400ee06e262d9e6171f51738fdf88652ae0953fe6b8f5e5d3c55ba2c0dd98187f784e28b0596b2a3012dd975b36a993c102743b086dfc877d7318c03902441486ada4502b9f756e0d3461bfa51b0028106062e998f237109a8733513036d1d619f2c971aedc330d8e31149aed7713b016fcb3dfa25f984f86e7b51c4d274eb75c25cc21e21ff84c75b8402c0f9385f34c63e1c5624501f97ae33d1f2a1dfca9870399c88129bf3e35fc3557e870c2d2454c5fafc36b86e05eb9f9e7f56b1c57d85e79db00ca1d98b03f73bc57f75ff2d5ee0b441658859b3598b9cf6c028689dfb9dbed603d412d51b4214bd7bf6146ce3bd7457a7776b04732274c89ab3086b9528992ea7284421511e173274fd6377532ccfb7e19d7a0acbc378bf70cee7f1e55365173c286277f3dfd37b15f275bb01805c0b6d3f769a20acf7beefc20b026f53f02106a71d4e2ecb63369628e0c4aed41eefa5d2619530cd6e721a1c66a968f29db6f55f09fad391190dbc3e5311b4f86c1b79df94245cd28c7b64e8937568f789805f9b7062b50e662ee171ddfbf9eaf2339462ef0ac801f89b1fe438dfadd5077830d3d048a9fcaf15be2c16dc06d610605ff2aceb53aeeedfbfddc4510949c2407b4d81046c65cf127c60d6abf86756e5673e3cef9d474912e57fe5f8681ee745442577a8beec690c9acc0a041f951e45b55fee4861ed46165448fdbf0ee2becb2e10d4c5f942c6f10c972b9d2b387e22c9f19a8c0d1e6a8035b82365e34c2899fb8dec7550273e92e30c69e45c5c294806f2a708d658be7740b83988869bdfc45ff65fd792e91687a934c186e7d8382f45f1722208a5700f348a1220d38f42451c4334d28b47056b6ba16e15b3bcf0084653bc45508dbe27e63dc54a96968371b12c83965236473fe5fe25a39caba70f5f281348934111f75323ba47d63fecac2aea42c351e3fc494b22653fe6dc6f979ca2dd78bbdf10b382dc8eb6089ef0fd238fcb8ffc9c5dc551fbde331d4644e73aff46f080bd2aa18768d59808bb8677e5ec0698739f08434a44b4ab3785740b9664bd25dc90de0aeb65647a3dbb1d31e1a8424e0bb76ccd23816c518408dff4849c15c06597c21ca3d115b085c9e98ac3a37c9e8348e4e9f634e58246978d8d2255414601ec1dffbb4baa64811a322c1c19c8c24aea153a6e54251d45faf2873bcafbd2fa07b1b13ab29f56af8106df578a12c3401fd7e50d9802654da24624e2964dff950307763a5292546818d42d30a8cbaf252409d3195cf8c7caf2a1f0b128c6a34249f53702f10195f78dcdaeb77d764113f777a72033e8691bf52e927f8c807390bf561765b2cbce31839264f6a69db10ad5ecccf1d5ed42ae75ba6addb8b428628917c2ade570472aa6c7a383ab61fbfee7ec0b136463ce82faee1ad9d4f7ce9a6b3b2827832461813ffea5df66ac66218ba59c3702426b514d1c7d238d9496fcf9972baae7d3759b47495a4105a1822634a93e7c797d0d18dcae51c900921ae6cd5ac969db2d4ea02dddd2b399feff326af9b8ccc54fc9f9a05fe88c0b612aaf910169826b1333ff04c620971090f415c0f9bd486650cb8f2da3d0d0f21620e2aba00d9d31fee5b2753c42b1cf0c9d26d496ea82a336eeb09161db1fd8b0a108e49c498c52e47f62aab600e71000598c59d09e6bc478e96e2fbc139f29a07fe68407ac323254bbf85e3a4bd5b35f0bbb952bc1b8d3c77f8b228cd8b8b2ebee3ec8fcd30ab71f84d831e66b96614e065ea9c9fdc0d3880df3d2b527cb96f3f53c10de3f2fcdac390d6fa719051b9749b296b4874a8dc20a3ef1d69b48bddf6745323e2778c5b84b09424b400dee1d91325abfe827891af0bcdf2f845987f5214050d630a6521185c89e53943dcf9806baef11a50d1d8765d41539743670beda901075e51e30408d8517d14090cf5a6de11b5f25ebefbd983cdef94abdadd1f58cd7dd9c8f5d17d69479b867734d909a68c694964283b3447d3f035e98f2150d8a44d451362c07b809e2be7df4e89afb8c1d1e0a9eb26f2a7a5532f2cbe2e2fa613e0a0b510b1a276a740f139db2ece09fbe6a14453498a15e3e821de122b3f40fc20c66134a282f975f4fbd8184621113489c1530037eea777a2297945d05915053e0cbeec168809ac0806ca442d807edb4b7fe731736c82e3c0126a5858e280908ad1a39165bf48ed156cd41e66ee93c32fe2ffc660867c0c3ac29f8c1177f1a4a1c6dce98d145978383b22fbb82f4092c5be9950a209480b7b82d68349e3372f6173828317f09a4d2bb19dae2d6e06635adace8609b91dba194f5ce256557677847090cbf6458e085383a505e2ff72a361559150c6b2fb243ca816706687768c38ffe7270d154725b11b6f896f2477883fda01786f6015869ca4a8955124a8d8e87a076b2e56f2f4176c9025bd7f8bb5afc5271a1d7aa540e45e005b4d2cf8b3fcc0846431a4a179a8034eceebfdac9a5ac8e094a38d8c1f83a6f9532266af5af9228681482e1952e7b09a894b792ea21f24c8f67abd7b056d4209544c1bf8cf461ea31c7d22f276987d6da059149be35ca66ed0195e7161baa0f7f2dd4acb2390508e61ceae098a72f438a47c87528e347dc4056a5c4174daa4f4923b1bf04e86c8bb642442e0327d0bd49007d50c9267d61c6ea3cbdfb7b6e03d6b94a1c12a45d2572a0aba5d426e2a1e4ebb698b126616f9327af20380f0992c246806f470067bbac279134ce06d70851000c226679689d1bf9d5a569abcf4826b7718258ed691bd157137b182aaa5b19e3c2f466ecb3738f334b224d288b3477d45163cf98f78bb089786c230d75b82d964f3a9520d60e8bf98898891af9192702fb4a1e9df7e2bb110242bb7f762e582f2eb28813b931dbd83ffd36c72046ec8a8f18d0f42c4358aa8e154bbf6a72d28225607ef709a71fc969316daa8669f98df9a10cca9bdeb016312d4666d82c93e23ee7f54e4f360c6407625bbb3fc4a090d818c909af369ea9d7408498ba4f91222b9e74bce7dfa2ed0b736a054e7643d82887597741b77722dfcb8e5148afea44a3874e11d45a8c7a076b698050da63fb6bd1e2cd932f07646c47a4bbc1394d453a899ca3e9fcc6ccbc11eb8734403cef337e197db291cf9a027a7825c4a92afd97d7b8059a517c6de9ee1dad1f78807f3a296caef6c032f48c2ba78662dc92a6cb7b99e5f20d971cb82bafed8eddbf960db7fe251e487e5c4dfbf39bd1f2af194973cd1c3e0f69b1125bab86caff846a79bb410fb32fe3c0476e3ead9123a2c4834a73cd479ee53055e32491a07026a552b1a04bff4fea391381cceede7357b867c346b858a428e9eef22680d66d5eb94c33968777b74b8e459d90d6c5e7585822c339bb563f9d4a80879759b8509453e2b893d6a618a7751c32dcf1dc287cd522e6bc24dd2fb80c09f5e63861c8dcbef155c0541aba76775ba01398c4db222b7093b42aaad486ad2884944e0a0b5dfe053f72092ea03f0afac039bc447d41ba40fda596de787c0c58fdf5e6289b637519aa7c152b0cf22812be15004e03643717eb50ce1d89e7e215c43ab11824221316127b00a19e352950863187f6e0ddcbb8733067c33a415402b6a6c2e4f8a9219ba16137380f677c2d2b8555e1e4e2465fdfa8f58343632ee29596cae108f7f32752e26b58f8275d9c78f09a49ce0775e0e8d276598a4973d19d9bc6070575530286603e9b13b62b2baa729caf2e9c8d6cd44650b952908a8b7c65b01cb172e870f2b766ffafe92c5fcc4701cb8ad3b9b360af9d7dc6e111a68adc635bd5b575762eb057028e45e93a4f5bbe64f5aa1aa6e6a30f8a261f7ed9b65c525d646bfa43399d6460497d5eeead1c4f9d9b2d889d79fc59e8d18e4a7d65c5873388566a419a74e64d569a5bd7e64f3e9513df06fc68bb506fb887fa937b3f65dab2ffcf08f9b9e3fd25ee5429b97ffceb666a5d9db3b665fd676af13a3c0d65c732d0114ad1f1e2f892d444ce7adc6b6c0ff641f954a7fb88b47c506b4bd8a5ce62631c70cb8d9eb5b537ef5a8a1cf9a674afc26fc137d478f014e0884b667f770864142cde0ef0bfd8e7966ec5386db8b71fbec7d0a29f4d04c5c886d7303c9b33991649ade4fa809c13d8f9ca2af6d4bf76f532e4c0ff04e4df3e0f845de872f22f256b54abaeec68fff4927279bbd7b38e1d39bde709fb2b7734dc60d0322cc3aff7", 0x1000}, {&(0x7f00000006c0)="1bc7d5b5651b698c2139b6bc8dbd7df5f4a3fe93fee68507d49f31ee0f403050a3719046ab7c5a57a2b0af5d7850febe52160663a350be1fb10672d1d05bbcbcd60be62fe29aa6140341fcdd6f63bc2463b784d217d9be078a0748656f9d0fbce4063d7165b173f852e308ed100e", 0x6e}, {&(0x7f0000000740)="5a749e2d42c3600406cf840feb7569d2087adc8e0f804b27a932997a08c09aab289d984cb4943c341ec887c6d5eac2d873ad196467bad25c5f55d41c885d45d12b002ce94d15871c6561d9bb602807daaeb481f3f40c2d12207e7af8f6f1a3673ee3cbf66d8f940bffcbb39d47154f18f72c427bb7001ea7b67967100d3ecb053836dbd1912e3881c04c0691a399fb821db256a3de4efc8060c9511bcc958e276d586040e2801aa9d3ab9e2d8075e3f4a38d2bf3cb2d87d25f72eba270f0cdcd6952a1ed3559bdb2776525d3a60155", 0xcf}, {&(0x7f0000000840)="ef9df3ac7d84a6b18d78b7ffcc47fc2b650999f6f97168acf721a9012185ac35e2c1c5f50da52535d003e89968a5b59587eecb77fb2cdb39732fab82d7b626f5cf76139201f618e6d58078a7c6d98b8f74700a4ee626d9a802a174", 0x5b}, {&(0x7f0000003600)="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", 0x1000}], 0x5, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r8, r9}}}], 0x80, 0x4008048}, 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040))

1.890681552s ago: executing program 8 (id=8606):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x531300, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00')
read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0xfdf7)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
read(r2, &(0x7f0000000080)=""/93, 0xffffff6c)

1.819230213s ago: executing program 8 (id=8607):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)

1.613549926s ago: executing program 8 (id=8610):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000000080)=0xa0)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f00000000c0)='./file0\x00')
copy_file_range(r0, &(0x7f0000000040)=0x370, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0})

1.516031318s ago: executing program 8 (id=8611):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket(0x22, 0x2, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18)
memfd_create(&(0x7f0000000100)='pimreg0\x00', 0x5)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r6, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}})
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50)
io_setup(0x3, &(0x7f0000000200)=<r8=>0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
io_submit(r8, 0x5a, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r9, 0x0, 0x52}])
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000340)=@xdp={0x2c, 0xdd86, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, 0xffffffffffffffff, 0x7dfff000)
r11 = socket$inet6(0xa, 0x3, 0x3a)
dup3(r0, r11, 0x80000)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.243057282s ago: executing program 8 (id=8614):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r0 = gettid()
r1 = gettid()
tkill(r0, 0x12)
tkill(r1, 0x14)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10000003)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7)
fcntl$getownex(r4, 0x10, &(0x7f0000003640))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
ptrace(0x10, r3)
ptrace$getregs(0xc, r3, 0x7fffffff, &(0x7f0000000300)=""/138)
r7 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvfrom$unix(r7, 0x0, 0x0, 0x40000100, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x3f, 0x2)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

1.201962102s ago: executing program 1 (id=8617):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x52b, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="752c39e81728", 0x6}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000009c0)="0a01387e24484c89408109f4dbdc3e5dad017abf67295abf618da3483b73d681457120e7d92c004763f53ce8df86e78805e82cb932d60a27bf33a44b0c4035afb707b07536215ce1fa05c1a697ac2681c8d8b95c3c80f39dc8fd9c409405ec08887f075e33ce68f5453295e870d9b2e39c3ae401c02cac4ffe90cd905a7a5b2b2c963735620c29a54e5961a291a8da57acde4a139a47da1137d1bd5ce088bece36a24a081adb2c7209b36c39", 0xac}, {&(0x7f0000000a80)="618905f3fd680cdafeb8451e8109f00c991cab0a86c8a114643d091fa9708b21c86491214431ca3cf1e020f5fd90febb41483794c0b5d83ba37433932e0db82635826a09f11c0d5c19fd76c3af25e810ca0ae3089080f147fd44a99d8b918ec6fd8b8c9b63c889ee93e9959aaed5880d3df269a37d71b34b2875be78b73024711fa8982892770272b755d37ef10781d7c7b30853d20279265d7c3152cab6a74922a6fafa1d8a03973a26c726914c910ad8ea39b04ffb91415648a0ddb58a6d9cab69ea247895f5326e98fef57237fa085cd11de34e9fdbbc14ff2c04fbc38b17bb21", 0xe2}, {&(0x7f0000000b80)="32352c5c5554fbd03d70558284bf80e2550127b98cd5588957faf920bb1a17f66fa88b692a047eaddcaacddd23904448879f564a237a543d45633209e2ed7cb3d53d3ebc8c7ac57b028284b2a9eca2d559c016254fa27f6cbb5a81cc64b5c83981d2014e65b124b73f15d39db766f462ebd607a3f109537ad3a7dcd2a8", 0x7d}, {&(0x7f0000000c00)="159486a1dbff1bba5f35eece057410dbe51a3a13d917c5", 0x17}], 0x4}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000ec0)="d1f5c8149d50d5cb2073ffa2558463c6b04ee16d670e1f0bdee0bf4240a7546a776c56df918a7ac8e1217de26acbc47ec7625ca3193e9a80977a451d4900174e9269e2c6ee56d0e7351799cfd98f4b077fac9a6e2eb8851ce1c9bcf0256536c93def87a84723883bdc570c8c174ea5a0e79095dea05a2bef6d6cc43c0e40f64536ce913224ea8feb5e86fb5632e03148ee81dfecce3bcf5cb083cb975514ec5b38e110be59c779605df011d7553e45ed5e224f96565aee9ae4d385a52c8ba0176f0f807ec79697009aede7f3ebfcc50ff9393d4dd0bf9de923e5fa67e5f446e6853e7075ab0eca33a83e02fc12", 0xed}, {&(0x7f0000000fc0)="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", 0x651}], 0x2}}], 0x4, 0x8001)
socket$inet(0x2, 0xa, 0xfffffffc)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00')
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="1400000000000000000024a01284001400edffffffff00290000000b0000ace92c000000000a00"], 0x30}, 0x4051)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fstat(r3, &(0x7f0000000780))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x1104c0, 0x4)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)

1.130909443s ago: executing program 9 (id=8619):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x11})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x400000002)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357)
close(r6)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r7, 0x45809000)
mount$tmpfs(0x0, 0x0, 0x0, 0x20, &(0x7f0000005cc0)=ANY=[@ANYBLOB='x'])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f00000000c0), 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r9 = socket(0x18, 0x0, 0x2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
syz_pidfd_open(r4, 0x0)

972.265776ms ago: executing program 9 (id=8620):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24048850}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x7fffffffffffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14, 0x80000)
sendmsg$sock(r6, &(0x7f0000000640)={&(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)="cce9e751c95d46b345f663d8c85d65688bd2dc152a39f7be4936d537bd2bd150854f5621fd5e9496f92e5e435cd74d0da2b67143d1d2701440351c77dbc3ad1b2d7d4e7b9d8ae55bc6191f3634efa45dd26b4337cfc6faa4717d1051318b9b2cbb237d0dd792d9942a86395e09e896ffb40f925232e85024a8b889ae3780593be966", 0x82}, {&(0x7f0000000240)="6f0a671b51b989458d5a53be709b52a6f55e2f3a31a73f4c1a", 0x19}, {&(0x7f0000000340)="0002", 0x2}, {&(0x7f0000000500)}], 0x4, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x1d27}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfc000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0xa8}, 0x4811) (async)
r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x38, 0x0, &(0x7f0000000500)=[@enter_looper, @increfs_done, @free_buffer={0x40086303, r7}, @enter_looper, @increfs, @acquire], 0x87, 0x0, &(0x7f0000000680)="029fc6820acbb7d68380917a30a3e74d9d53c7c982478e7c963469d9e094bdcbb096614c457c0bbc55ddeda7b6e7eac9da26929aa875524c00076396914972b9d818f4d5d325b89537d09623ba4abe8c6dbcd3a35248e061a15380cd203c97760e6da957c6978327c827dbf25caf4ea4cc9d1db4caada10f6dc5e304f60892125427cba20b02fe"}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0xb5, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0x93, 0x80000001}}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

950.606166ms ago: executing program 9 (id=8621):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002140)={{{@in=@dev, @in6=@remote}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x254e, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x1, @multicast2}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
getuid()
r6 = getpid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x2406c0, 0x0)
read$FUSE(r7, 0x0, 0x0)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b00)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000005c00)=0xe8)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726fc65672e7643d", @ANYRES16=r8])
read$FUSE(r9, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(r9, &(0x7f0000004300)="afe28a28263ffd9dbc5af980196765a3c1f82c4a1fae7a322fdf0f6eec50303f6104db417704a701a8d6c5e7f5c99a5cf3eed4e0e1c82545122d6933469933ec605aaf61a5b8b1f8aacbafca498796976da62837e4a0d818ea71474d0412cfe162a7260456c425f2604cbd262e2aef92d09d6d2e105b7e7d377c95ccfe1d0f9af9f7e6a6d85d4a8ebee6fa703efd8c4a106793205a405938d47f97266eaa5fda88f11a03a8305399889ccc48f85c4b6a7747f489dc76c93b06be84635190224018e13954cd2fe714fec88f6aac3c57d5fec99307b8c8327e8854000e81d781e2f5bc37e96bbc3077555f696c6fadd199d9bfbf0997e76925fe17923ac5976e32f52ee407c43070cd8a709a2326ac96b94051cd0cc8f29b43edbc4ed850ae7a30b45db7e72114aeb46bd3a91775582c9206a638456a0e3da847a7be2e21620df89ea7e2da53f77f39cf0eb2d0b601d507d4dd57a534b5c77076052cdb03dd0c241f75f442fdb07624ad9d9fcbba92a4f20b20b424e3c9c92f2831e5efe0be454f3b4dbb9dbe6152bb152206ff0451edeffdbaba54deb39f00e74297c676effb60950dce7a847031ca85a1b3690f573bc31094d6e7d95f5821c0eae6a2685958619d94108eefcbc0dc5dda47ca509878dd8caa875d69af6c88997b5d67e5c67bf9daf89547a55061eb0cc55e2c696b71c7384ba16928fa81f7394a048329c467ef813df172236464f9d1418e5d5386b0eb6d5c4f765d0246ee91ab39c07310b61680788e3a57dab96d1eabe1a0efc2b6c882aed50d993d15f8561bc1f6bde7e79b711bb206685344aae196c1c4b97cd515911341cd60c6ad108e0013f87d063385ea5f057de4315284cb6f8545436981ce1c4bbf13f178e3a504bc0c8b1bead105f7e7622c288aca7206ee18dbb97b1b393d102d9c65e3a765e87f554d98383e4e49ad1c600d8fac4acb970ce04e0c866806bd44b21b5c891c3bccefb87bdf389d6a36992cacfe52b96e7e1014cc58ec29fe0ac221ea6d49f759f2a746e7603272d572515fbbb33d2b6f94eb9c6571118b606e18ef88ff88366aa3ecccd6c845f9b8534f49997c940a930693fcdf742fde3676c6cee9eda06ab856a4dfee75c7c9cda6b11da6441644b62116e6fdcae5b5e0148047028a5842c21fb9637771a5ac84ba9740c9c9b56b58c08730a48e81c05b312449edd27843c173d1875c28aeca43761a06fed193378129243aa514bf74d6b76ccd70807440401948d6f3bd9a352cd432e1289f2d4e78add381e4477dd8ac2f2ccd3b6533121ac51c393dc773b9e120ea8194e51d76749b4f0c4e6e40132ba1535015d5ff224ff77310be5a31a6defa004262918136b9db98a94a1fd244be1f5a7cf6762e7bea536df1d312a72776baa881833d295f1a60f2ac98d54f302d8fc72f135ab3256d065a618b60d2a6982ee89c60bac90dd81e0cfc24118c568e8e3a29a9f29e55f479a8fb5638d6cd724605b69aaacafd440020f4776652537454041acc13cdb0bf1489fbac78c4bfae755b259764756407204b22cfe838ddf82523c03b4bc1eeb55c43b1f50b7d03fd4da448ae51cc4a844fd0240e0d131c2693ed770844bf25e3bbea974a5c2a40ed65f1c3a729ed93ec22b93899aa861ce301e1cc1f3e98846a39a49169cbe3eef35e3595207f1014a8dc89d6b512dc05cd23ed4b4741f6ac778794cd1282f42a72301f37816859cb92d53db6793f294df19d0ef1bb453685f3c666b3941c25c92b204c8307c0e83469032f276cef4ce538a4570d652aa212de6fae8ae4d62399de49f0d4bfc0a47fbd79e7a86e12c9d863dde004f9e9d605dac7d688dc5daff78c27bbe727fbab0cd3058e75544261d5d83468ef23e3a224f0ec460855aad927c5c5b3bfce0a3e3c45abb0ee6dbd04242ec765e324209bdf07f4ed21eb15e2f030476fbc3cd05554f54858232625e9b37ac41b8e354ebc85a0282fbf9ad5d6e0c2d7b093bc1f887646faa1e7622f110b546dadf44eff6bafb2a58631a93e560bd67b42ab96d4a9f044f26a481feb8b3f2018a7236799c2d1877a63e5fe64dd207be729eb1cda7977d59bc139e1d2f6cae1defe90b8f6a99ae4dbac317413745521247f3691e894af33c7484afb11f4d2f858ee87e93ad202f9853c6ceee0a92e052225ebf283a017ae2e7cfcf924ea4e3b319a05a9bfe3f476308aa5039fb8a7d3642043957a2090e0727120a7aea16d16e7a4b15d5676966041f76188fb69d89080b6eb2d4d42bc84e298dedda4db06b78df5c7198230ab439f0c3b4f3f649d531664c59eee2d73fe14f01133776b717f6b7118afdb264ace9e44af5bfdf35bfa7f7ab538004c0085c11da725ed284a34c7f27da78acf488bd0f54e6026efbf81af934558c36473d0fdc85519e11b4f30fa3b7ef757c35f4c88a360549def898cc460557433e44621589e71f3118003b4695f3130dc005d32c0330b950c12e430d2a2a6b9a68995bc9e1345dcfa30585603f09e74296cffe8d758b216de00e8302eed0e06f94e7bdf835cf27fcbe57651f36d6d2de82f179f42fc8e7fed4f5c7f5b691c6e038a76cab3e604e42ceda945e155db89cc0013564726053ccd77cd8e626bac72468ae0998f686450d5e0a17ce88e1b15d05f212c336d7cb5013eb94fa861b588be01ed252b487b4d1918c87a341b5daf74f3083bd49ccc6ee26ff8993b5398145ae7f9505c1398f1bdd2cb90636f9e99da243cedccc97252fe15ee10e886c187e5c614f33bbf630c654b1d87e693b765f3a36b67bd1fb46afcd24c96a00e00000000000000abca853d51694da85296a430b8856f51173946c9f143db65fd1b51b9534657d3a7953ba7186651ddc6f0a625563c3b43cfbc83330507d399ae87731e1ab1f15320779da21d2000d85155a8c9cbd6f642695a565dec615d7bdf8a47a76005b3607cde6176b8303b7eeb2212179d6f5176e45b1759810fcec418e6c41e7b33da9f92211631a070257cea55e644498466d5fc5744f903e6c4a2d3809eb6e70d50a82f66a1a05079ebe9ae0b756bb2781dafd14b1a06c0eb2c9b77b0d8d005d47aacf5447a104f85df3decb0ef8bf1483b47be9c945b95634c474f9cebdc97a91f85aba7172d05cd7b06afa043b8900ab400770fa270029e34ebab31a69367a18057ce532cd66e52b807b8665475977a56ec5407c778994ce9c85e8b96f1313e468cf83d266f14250acee2a4a52001de174d2208bc2a679916e4231fb30a99263a0398e99e9f8236010f17a5de367d673a95b374158d2baae4612ec6898d0fec2f95b45c6bd760a0cabcac1067470492c5e66c11ea745ae803dd24a5c89cac5a0d64bcc15648b1d812be638d10311d640b3251a8001619d09f138bf04e35c02807c2c87c222a6f54da320f0169cece864f4d37af54f0fdcfd455051c0effe17d2c04b3b67807af05cd8176017cd8e35c1ca1b13112f2dddde84be95ef67a6c8ad8a4ab0e7175fd124bda62656c4afec4dc8c0261a855e75575ddbb375e45a5b635fc7bc528ba387dd24f485ba69a9ba2761c243d359bce078d0ba0cdc13b6ee7d66a8546c49a4429af5866f866ba2e1e0a10ff4a3c3b5e240d918f6a896c35f51ad7b02e6d0747ee80a99c8812577600e359b703e571ec18d6b88866f28aef250de65f39b266f6795237f7d3f741127f3d47cefb255d1b3c06c7d8fec9bb8e5c666d7ca7b803dbabc6cacecbca1ed8e89ddc2140f45c4f8572c146d7ab2be20eb72baaee4b1d371aa9f06833ba1a0cb66b701c1fd90e8bcdcfb9bd57a8cad381e7cb2b99250d21384ebf771833ac6f32f4115fcb0ffa177dcae6673b1ff80cbefbaec2c863b263035ad2a0d0a340fed260d4fbf008745bc1b51e5b011b54584f6c0cf3a401f8cfd23f23e830a311bec365064895cbe8a664184aff212bac6f164f6b619e4d8521ae447abc8f59b284aa2e94061aa15afd9070fef452d4fd644da4b6b716784109d92abd31d3221a76eaf592e6529e70a67bd92cdb431c7af9f658b2ace3d954c4a5208f1edcdb8a04461262ed26b24bb3df41b1c28ec42880590b3685f56a3982250ae96c7e1fcb9aa6a9887639d2209cf190e9ea82d5634513eb36c5c0e0769250948967240e29921da36aa0c07c76c81c7bd8b7f1c1c9063b4b1fcd88f63aaf568a7cc9249fad5c996853dd160d80f5251673643fb5e0067c97b0d2b513c1d22a3c2e73786c3c5c17f14c57c2df7c830216e5c3ef066468069428501e1a78c935f4c520c5cfe9daa89ca4bb4895fec8a328453ff630848eeac719bcc09d7bee73e58f4b7cf90f098bb7019c73912b630af92ed9b309c53c5c4edaa3788f9e6d486bd363619cd2c140d9a7175f6c5f977eb6e6f58f18c8d0ace671570e0dd6ed78ca228782ddb71c6f137cf0e27fa85b52b1c15ddf184a72dab098a8b1c1f6746238a8a92848f2478b690b80c131c85e90b69953f5eb54c0b47d59b7e440190e1c9b2d72fdd94c64296ca33aab32cc8f69091df05aaefd4ea00303a3522672f01b5373abae33d34844831a1af2e51276b61e637a93e02e09c306e5fb9619e82bbcf0e43e2f5e8ec8a458b9f1c612634645eb82051fa34f4b13439c3ba2e016972df37f197d09121bd377b1472a2da64698efb11cc88fa36ac173c83ee155b73716639f5d73a29fb783fb27e5ccbab5f9b95a4dca6a7406cd053a7ac9ff25f42ebddd9afe7df308979c314acaacecea602267c6d57fb5f5222e4ccd4b18573b32d6a19f1798a1d78b36b32f0723f7b33b06c2ca43b22e4cce6cda741b3e68a056a0cd6d51b6929cf4a16fb7b2490cbe87e5612dfa7d26ad40ec412021f9033aa2884ee86c7610623fb64663ac5554e694e84877708e77d243bcdb198714fff672b0f927f9cbe5b2436002f02a559dda5232cc150170d7b32d547a080f852c6838809f8ae1995e7ad4b24c7d1ecdb6b5dabca5da671493a3a1b4da1e7ad13ca4b4dbcf53a71348366cef7ee45cb719a8321205aa70da47104e66f344393e64dcfcd015b9d6bc75ec3dd31551de4b614bdc4d89c8de1254a91c4f33cdddf98d8ddf36e8cdc537a7d11dbf51913ca87ca9f644a2a08905e15c0f2bc58168e425b52055e7878ba468909dbed30815e01720df5a1be196471d30c1525070efa59fe62720960e473dc237d7866d77e8ac69cbaa50cea6205b7ccef9437b132f41e87906f3b9c48e9750e7ed1993597f8e599ab8596f4378853ee10e26289e72b92c425f5f0ad0f94d4694415739ccfc06bc5a49237157071116578df4f8aaa1eb4c123c8ada753e4a631f3f9660fbc9404d8af9ef1af380ccee1f2e520c03615fe7c5d276e917d84061f8cc0e5814caac9ecb0ebdf8bfae551197d66ff22236832a0ac38586b059a4ae9054d1810d361f50da921b33904cb6ea7faf44b811e7f7348d07cd32c8f83da01d4d74092493ef5cd3d2cbb9eeed6986f3e4615b8d341cbe13d6eac3bc1e9217fc2f86dd0cab958a6b4e0f0604501b48d352118611e96a974e3642fa785538e7d5b3bc7a363ca95a98a0816e6179bb438f3c110036770da0978987ebcd241464136b2a8d45bf1c2b499b6dba8e44448c73163ae7df71d7c98b705af886dc195cc918c2552fc1696d6749222a4e83279a14001ccb540a64a713fa1691c30e99ae0bf8fdacaaf4aea9d4f89db7d4f364f7a30c80b782f5cd7af01347d78769902f2ed675b6b859b5467cad1bed59a64f13a4b5a827e029c9a3107b08e5f18b930855f7d85f1d78d45d7d3c909b87213158dbe5cfda90936388885a32a61529ab30bf31fcc1d6df9ead0f49ada899dc8be042d2289383f6d09411aea11e6002359ff2e36345b8454ec5f126db94349666a3666323ca164a0f72873b63c9dcc0c60785a66862655d4ab5749bc00bd98ba9e20325e78a572fc93739ce884f3398218c614f8ea33cdff4b797dc2c2874d20670733f30acf52ae4d14c9e83f54533acd42931ea42fcbf89f7a8e68c3c8ecefa4a1e1c693244d4604f9488df30718c455f719a6d93b30173305264c9bdb21e8a68a74e7310dbecdc27afc7b162466c444ce4bda0d937104e683349828a4f0ca8723d54fe13287286f7a6dbb8ece6a7ece355fbee7424e7e524ec33ed5fed03a1ea964af0830108c5e69a071606d9d28450977245cba4d0e1ed8177752526e218cb5e113dff2236c663808533c580da3d83ad502a3d5d30949ca2cea660ccb613cc7661d6857b3b70588976ac8ceed944f7f738e43101369bea05a26ff31692ab45b6c95f794a5c92d8bd42ce8803162cc730782e0c1e468c9d090488763d9d1f1471c2ab1cd8599e078d81a0e84707ea02a0f91c3d588bb54f1f5ba58845617b80263ab8fb2c6757d72eebe00591c7b6cffddb969f6fee2ef9f016f641aa2ccfd59c839ba40ac1a10bb9d94f96e1c6829dd4d2dcb9d0f71726c31d813fa78af8b7621fa47f4b0ed9d9d98e4209676969728a00a92dd592dfee41c806076f0e4100e371c7427f888ef91f03c5b16d87b2ade294f69b77afb199de38bfebfa3ec9285d1829c7c0714bd100c84efc8eb71146a1d4c7f659d77c42119b738d6bcfede23855780a6627d4a417aab498ec60bf69c44fc1f3fd4f99ed941a1234ad1f3120dcc71275c464be23453749841dc1c36a76b28b3659e809a1216aea67658ff76e99580cb202eedb9d4cab23e879723d11f8d4086362271f8f2e6816d47eaeaa5066c3c4338868fd3c8b832581490b6801278e9d1d59771dcc73eef6b9903ba9b9f5e565eece392568c878662ad9cbb931242a27d883fe7839e7e502c368e736f5dc057ed2e4b5c963c54712c772535e22e94c61a13ed50682c065cad0d861b3888ef332ed0236e2747720f97793b46eb39b51057b44f2b9e05de8c077cff7ef5afb56a5d28754d76161909a05573f8aaee5fdf260d80eda7e1b83539e09362a4f9aa0e8f069e0cf221eca87593457b342de27c99cf14c4bc0d8050aa19c8e4a56b3b5d2c3fcc23633f5ab20ec063270c9922292b645a5523f9bba5c6f66368c227bb4b2ad6c1f4c8927552f6b41a312a4bec49669e2968a7d6bf30cf09f8d3fb473ce5a839ed27fa906dbf504aec3a5a2884bf4c569235202dffa763b14f4501ecb8608e77aeb4fda0e4177fad0bc02da3224f183355ad62f6c50efa3c8f8e02bf3cf47ff31210606bb87ce4acb53ead7eff942d65d9905e9bf6acf5829eed4855da2488e0896ad346da16a5c988e31b0632592a2dc3030d28b6d62a3a4638a0a3736f5103ce5fe72baac7fa23d5295c42cd81075ca9f7a9a7fe3cf418f50f7eccd8a7c3e6fb1e8b30c5d8dbb0772a8b44f44cebd8249ce10eb24d1f668765796b4a56a482580456ac49db677284f3b2deaa9514973ad5c156bb4961b2ad05bcde1bcea522790765208eab6eb27777c2ef643ab0c85e9625d259ae29a3b2e864bf936cefd90b63ba2281f8bf8505ef6040335c258d338c014c31810a324dfe382699ac0b92a2747973a297e94fcd75ec7d156bd61cf848d7144f9a9dd89c72b9c323ed6f37110f722da90396816050ad800fb33a92651b0356fd15c4cf876a3509ab32cca3f5bd6906ce5ec186391effb13fac0a10525622023645bfb9742472695c81461db0298f84af1983b6e5e94ae355e0e790fb51fe558bd70e889744872c9ababf42b930340e192ab4295ee72e1392f2bbb137533a919d72e651cbafa37a88232d0f464bd4531e49c65abd629f3e8b920ae3bde61a3538514866f18a937848f7bd99e4a0fbea506b9ee5a0400000000000000020f91d65c88bf2251c617cfde3314ec540c8128adf417f1ee716473c3d3c049dc7714a832c128869bb4a9bad6f8be1b0a6bb5c0e40417d594a876a5fb50055e7c67e2519698e5ca89fada7c84032a811b0eb5c67364ea809c6be960c9a7b98afc8e6315e780d8f556b97ea65b7fd27ca6fab61164d60a109d182b9b8f7995ee915eb68be320000db4b0bb821ce13a8d55ff70629a5f2bb89a1c7a4b874b49bcb13105493a9560344f89877e7c5e409a15bcda6d27073c3b744b386b0b82098d307dc3aab1ead4306a73cf8382bd3451c0aaa14a8333c6f34e6b5e5d3b240e01243749b3938840c835e16129ddca5d9439511b4fd22752d904dcd60f9405467918e48fa17547493e51a14ccb47128c7449b51cef63178f32cb06155b9e9cb65dba65f8a6f9a45d8d49852609dd0cf8418f463cb15eaaea77c1c89f530c1f6c6c7820d66957ff2fe731628a328f4e7896d5cf6fcc0782c05c47b8f01d28908913e379334fa90ea01906e865202fc6386fc69fb683a1dfd037ec5bbdb368b3530a3cbbbecf2107faeaf32081c65b48a3bd352998df0a781dd86c7c8112407db1bf1ac6446a0c77e8f2e3374fb8217abd59b3d40c9582a3ab663f278a83b22685914b4b2bacc973ffb2dec5e6eb98d6c16463c1e9a896ca4e65206687ca4423c359b4e1ce06a57ecb083b750026719dff109a1d823b4ccff79e5ce416bf3756d913b31faad8c0bab1c62276a581ba8830da7c59c5224db7dd38b032db7cf7022502a8f3cef31dc8344a2d02af978d6f901b1b0097dc425f4f34b73c6ee02a8b48d7a23299c1c6e5190221f84c2ecfe5bdb67b36c5dc23455ae466722c5e4f52b07aa667a6cb55c6a411225e88cf513c7cdd2065a1e044c0008f8b6a5b28f3f00f14e7da47e944ca666cec951593ac26ce5e75f17ca2d438dd8f926ac57d1761a72024187a2f77ef42a7d246f906166afecdcdcf8db8cef6f8855ecd97185fda05bae717eaf3165b99021fbdcee50384a22c8c025c8f82d4839dcb0a6075642dc453c21a4dcdc997d70315dce9a3ac7eb0185924436965d1376624b5c08772ba59b142a066bcd0ad044628e463921d78f1efcf8e8cd1e0fcf525115ae2b104c31561574003770c21e847ab80b65d3a2b53e6ad4a3d5227e3bc82b58b5feabc9c70b55264b32b658227851518664baa871f8128bd826ce818be1edef708e033155ed69a0bd83b246d83ac85b33d7370dcc7f930c25609e2e5f86f1738ba266b079a3743180b9b84a24e4915b1743834ec319e5b238ba6942e4128348be821b21892477e4c5ad3a2031f0ef11d9d54cc90f87cf093e582b1384c8960c36421969f7ee247001f37c66f10ff6dc3edc7de984acb599e9b8bd3e792855ddc703698578edfe74bd27e967dbe77bd4cd0bcbe08ebfa7c5bf95745e670438097ee29215d3ecbde9e8e50e14ec41a9d746de20230140d854e36e95f7c13446db26715b9a30a3d3afa3a5645e0afd3eaf8457a87c528792241e99a415b8709ae334bfa81fd8508c77b50e3d1f2ecf8f7b6b1d187bbac0bd3d49f00fb5c21836a2bd79ea2839bd3a1d396422699dfe0958479c36964efdb2f602d25f202a534df612f347696de6fecffb673d2162f2572c6d04895fc22b638dbf54dfad4d6058683919ec47cc3d3d1f5e4528bae31632081b9b80770ce0e7d44287e18fde786801e7beda77c0b9ee3965f3a4956496fe8e892b65e137d9e47e8e164f7c6fe9c6ac9ece1b7eead32a5a188df5539537e1b736f1c5d67b604d064eda6b6730c51e182cae81e65290f12f68a7146888e438a799d04931f2a0b9b6c565d47d9d322e7358ccdbc08eafc2470414c44f97e33013b976b995bcf96409789bc2bc97d7add4b6eaaa84c18ea936f0eb332185f9de597d6f7793215df2c0be4b5b4085910adb83d248be16deeac399070ad00a24a67cebef51694726a612ea5763f1bbff03a77357d867ec5461c33d73a47db4a51b496be6960ca7c8cb92a51dd578f99e4b1d2b18ce406b2751aeb065ad0225aeb1eedce3b26e3feec915361cd6b4acc105a2962edcd6547691a557f4deb9ca96d39bd92ebc96e763b6139a0421f42c561a7a20ffebef94bc0b7538466064610134ede0221cde98d085531471c0e9761880904952234f0ae34502b3790aad682fe6e7fd7977816e21aa3f7793ca99312ee07ef9b34a31102710bbaa31dcd57d941e6d5fd6b6607d3449bbffb1434d67edc10727230c3283ab7e212152039e9403bc7ae082cb3934794468dc7549aa35cdf35d3c0f754b7fdf47dbb5bc5047923f6841b9a4054a0eef23de222f0ecc04410fccfe3779820d2ac659b84ea56eeefaae980f1bd43aef8e78705ce1995cee4f88400903f66e6d24307090e23d04387909a62a3394890118549baec01b6f2a5c416f68b71bfc2b7a0bf289587664a2b6194d4eccb51bd4177c9487b724f91d088ce68f20882a8dd633b17ad73584e68382877eba4fae1af839baca07f3adc4c9796e07dc69e90bd5efe3a84d3ca40fa8209c2bc9c9303ff2c7979a9508d925c021cea6c7f1483b5c5b00232c292f302fad79aa5fa4820b04a5aed1f9be4cbf4430bd2b6b559133979e5239f514e87559950808fd098792c0b1bd0b9cb94463b22be92962692dca35a8bd0fe0edc28e7e759d2d753177fc29860d419a29fd89c0a2c11e957483f9c13637e2f66e96bf3454b943b7dd368b71243ef58b0b3d469cdf5572a990a5c998c5796b80031f56bc98f5bf70a717cc5ff4febbfc32b29543548d8862f1ab57fbdbeda2a9901593c0d92d4eca205312c18ce649ed5a3263b66d8ca52734a16035daaa182c24e9ae2851e8dd153d2fe34978e8df50402f133190ada04cfaaac56ca6fa20771a195c76a84651ca4aa9c7c4eb16007ef1e965055ab6cb08a02db6c1a82f8c695ec370095c0afd535ed8abf17ff514451055854a99de69863f393e1679ddf5326e1f4de42220df3839ee71c8fab2c3faee9af0f5e9ee5a3c4c146ae7d36536064a11644a9a195290f3d75f64652050ca8a1ef17eed6f5077a651af1ce5304f2e6fa781a83df2a7c4f5e1c8337d35f93633d684803b7bec4fea60e1f9925580f9199f40f307bfd84de2d51f1df191eeb52a48ed4a19c4f524cc26f7043bbabb1c43c4f20d950e218dbcf09a8bda0e1ca1759466938dd764c85c3d8de92b3534ff5c492d024e6ca87952243fe8b6379ba189032926685afcd3839a4423ba19cb0c5488982ce7cad134c60bc329f855ba4be63475ade6110d6db66613c3c7647e76e3949f8e5299738014743523662fd6b1626bcc0cffdb3b757ddcbeefa2facc49da06d907d21888b9344a3167d143e5f8e022d8c75229fd491145c451ac92f000aeee43219215a8136c7c17327f6e0a3eef7fe1861930d143d92f33aa74984c89f9ba3e9ee887bef4f9b16654cbc739fd6b2eebb255596dfd6639896685b72b0e1ea92019884468f5c78d21a3a69df24a3d8d517cec2122417bad0ac7db0182cc87b8b752e7474a36acb8508d118d44d509cd8594dea3a3a611a6c1c0b3bcf48b4834d8bb5cd18f420ed7aea21810c0303ca2d5fc67b116491f1bbd055221c79ec0dfcfc22c17cba3eb4fea49127615fdcef9cbecba603dd2e01e07af17ab0f4a6179f54edb34db2dc0c937a0aa1151c8a9474afd1af7c0a83174aa1fdd8e4bfb9b10841df5ccf068a5612627c8724b1c68fd3879a57265836409a6d851f1baf0023ca", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r10, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

891.297707ms ago: executing program 9 (id=8622):
process_vm_writev(0x0, &(0x7f0000002340), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa) (fail_nth: 1)

832.759078ms ago: executing program 9 (id=8623):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_usb_connect(0x0, 0xda, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000cdbbc240d112d1a77e39010203010902c80001000000000904d50800ff030b060824060001d3c0761f240006000d240f01adbc0000080081000606241a0000081524120e00a317a88b045e4f01a607c0ffcb7e392a0c241b07009003090703001a0c241b0100fbff095bf92cb50c24070e018005000e009e0007240600012d69052400177f0d240f0102000000010193530106249ea260446992a3990e1a060001052415fe4b5045ff272413018e9dc7e52300284e3e989f1f471f9f4ff1e5ccbc4d1f8829fa61ba8ec5f40fd9ea435f1224070603000100008006000d0004"], 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000013c00))
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0xf4, 0xa, 0x7, '\x00', 0x8000000000000001})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xe0001})
setpgid(0xffffffffffffffff, r0)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

640.259531ms ago: executing program 1 (id=8624):
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x206080, 0x118)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x101, 0x114, 0xc}, 0x18)
renameat2(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r4, &(0x7f0000000880)="32a4", 0x2, 0x4, &(0x7f0000000900)={0x2, 0x4e24, @empty}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='ns\x00')
openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0)
unshare(0x2040600)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r9 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x2, 0x8a2e, @loopback, 0x6}, 0x1c)
sendmmsg(r9, &(0x7f0000008d80)=[{{&(0x7f0000000900)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}}], 0x1, 0x2000ff98)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffffffefffffffff)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r10, 0x29, 0x40, 0x0, 0xd0060)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

526.733253ms ago: executing program 1 (id=8625):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000000)=[@code={0x1, 0x67, {"c74424000e600000c74424026f90a7efc7442406000000000f011c24b805000000b9000000000f01d9c40209be4f0d440f20c03504000000440f22c047ddc6450f07f0201a72022e2e660f78c4000c2664430f73d127"}}, @code={0x1, 0x49, {"66ba410066ed66ba4300ed45a11fef000000000000b9570300000f323e66f2420f00d00f01cb410f07f3410f09c4e32546520c0cf30faeea"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x77, {"f30f098f8858efdadbc40149e5b94e3414bcb910000040b804000000ba008000000f303e36660fd6ca66baf80cb8c8f7fc8def66bafc0cb854f50000efc74424001a000000c7442402bbbef838ff2c24b93a0a00000f32b9a00900000f32673636363e0f01cf"}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x5d, {"268f0066baf80cb8c4f42687ef66bafc0c66b8070066ef2666440fe03432410f32400f009e00980000c4c17ae6bca800100000400fece5650f01c9660ff88b07000000660fc734552eac0000"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x6613}, @cpuid={0x2, 0x18, {0x7fffffff, 0x7d}}, @cpuid={0x2, 0x18, {0x8001, 0x7f}}, @code={0x1, 0x8f, {"48b802000000000000000f23d00f21f8352000000d0f23f8c744240067980000c7442402f2670000c7442406000000000f011424c44298f35cfffa663e660f3802fa48b800000100000000000f23c00f21f835000001000f23f8430f22e20f01c966b822000f00d066b80a008ec066baf80cb870e16d8eef66bafc0c66ed"}}, @code={0x1, 0x86, {"c461fa7e0bb9800000c00f3235001000000f30c4e28d095456cb420f79b700300000410f01c9c74424000d000000c74424024a000000c7442406000000000f011c2466baf80cb8dd4d368aef66bafc0cec8fc858970ed83626470f001b48b804200000000000000f23c80f21f835080090000f23f8"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x2, 0xe0}}, @code={0x1, 0x63, {"c74424007c000000c74424029e890000c7442406000000000f011c246566470f3a624600610f01c80fb3ca0f401f660f38818a00900000f3450f09c483f916943b005800007fb8010000000f01c1400f229d"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xb1}, @code={0x1, 0x6d, {"0f01d1410f0f940878b7015d9eb92a030000b800000000ba008000000f300f01f8b8010000000f01c1b9800000c00f3235010000000f30b9ea0200000f3266ba4300ec43f7051800000044b9bd25b9800000c00f3235008000000f30"}}, @cpuid={0x2, 0x18, {0x96e, 0x4}}, @code={0x1, 0x57, {"66b8f2008ec067470f005420df6665460f22010f01c50fc465180066baf80cb87f2c948bef66bafc0cb002ee66b86d000f00d0c4a265ba8309000000f2f3410f060f38f6479b"}}, @code={0x1, 0x83, {"b9800000c00f3235000400000f3066ba2100b0a7ee66430fc7341b36f3a6646666430f38827e00b805000000b9fd7f00000f01d948b80b000000000000000f23c00f21f83503000b000f23f8c4015d5858e8430f2308c74424000000c0fec74424029a6d5e8bc7442406000000000f011424"}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x2, 0x7}}, @code={0x1, 0x53, {"460f01f13e6666470f382a25da8b1c440f01cbb99f0a00000f32f0080f66470f38808e00000100c4a3215dde09c461f853c70f20d835200000000f22d8660f38f6d1"}}, @cpuid={0x2, 0x18, {0x8, 0x6}}, @code={0x1, 0x6b, {"b9550900000f32410f01cb64364b0fc79a000000000f20d835080000000f22d8b9c70b0000b8406d0000ba000000000f30f236420f00db8f880096ca072ef20f00d0f2640f0f514aa666baf80cb8c4bafa87ef66bafc0cb00aee"}}], 0x669})
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000006c0)={0x4, 0x0, [{0x7, 0x9, 0x5, 0xfffeffff}, {0x4, 0xb65e, 0x6, 0x7, 0x6}, {0xd, 0x10000, 0x9, 0x9e87, 0x1}, {0x80000000, 0x45b3, 0x0, 0x1, 0x401}]}) (async)
pipe2(&(0x7f0000000740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004084}, 0x40) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) (async, rerun: 32)
openat$uhid(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) (async)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x85, 0x5, 0xd4, 0xfffffffc, 0x9, 0x2, "20ce4229e73771a5de95858a2339072a11395dc0335bb53f236ce37861be7b957b488f2732a0a576e06e56fa859f41477615116573b93cd7d176d87fec44ef8ebb9378e54fac8b9f01099ac8b0d9e0bf9e463d0d9417856a2245e0c41b07fd3cc30fb22762fe7dfea3e943372f65dc02dea548941df7dcfc02f4a1a061c5c25f3349e22779"}}, 0x19d) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000b00)={"9caf5a4dff81f2d8af4d950b1b4c85c9", 0x0, <r5=>0x0, {0x4, 0xff}, {0xffffffff}, 0x4, [0x6, 0x453e, 0x6, 0x0, 0x8a56, 0x7fffffffffffffff, 0x1, 0x3, 0x0, 0x4, 0x7, 0x5, 0xfffffffffffffffd, 0x1000, 0x0, 0x2]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000c80)={<r6=>0x0, 0xfffffffffffffffd, 0x5})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001080)={{r1}, r5, 0x0, @inherit={0x50, &(0x7f0000000c00)={0x0, 0x1, 0xab5e, 0x5, {0xb, 0x9, 0x1, 0x5, 0x4}, [0x1]}}, @devid=r6}) (async, rerun: 64)
getsockopt(r2, 0x400, 0xf201, &(0x7f0000002080)=""/20, &(0x7f00000020c0)=0x14) (rerun: 64)
syz_usb_connect$uac1(0x2, 0x10a, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x90, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd1d, 0x11}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x181, 0x5, 0x5, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x1, 0xf, "eacd"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x2, 0xfd, 0x7, 0x0, 0xf4}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x0, "1528c8b8f2"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x4, 0x1, "653be5ecf6"}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x3, 0x40, "122ad72cc5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x0, 0xa, "3b9edd5fb8864f67"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x2, 0x6e, 0x8, "f0df"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9a, 0x0, 0x1001}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x401, 0xcd, 0x4, "50e415b46c"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x5, 0x15, "b781757fdcf408bf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x1, 0xf, {0x7, 0x25, 0x1, 0x0, 0xd0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x10, 0x66, "18", "cc"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x8f, {0x7, 0x25, 0x1, 0x0, 0x4e, 0xd63b}}}}}}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x110, 0x3, 0xe9, 0x9, 0x1de, 0x4}, 0x136, &(0x7f0000002280)={0x5, 0xf, 0x136, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xf7, 0x6, 0xff, 0xf000, 0x96f, [0x3f00, 0x30, 0xc030, 0x0, 0x30, 0xffc000]}, @ptm_cap={0x3}, @generic={0xe8, 0x10, 0xa, "baf43677c68edab66d74b92c0ebd80ac3803a4d04937f81eb16c8fbdbc733d2a0d3d691a39409f56ad19499ec6b774c8aa9aa5ea83a330942ec697a3a04afa6271d03b0adc76c98a2d7c8cce72b789e46f277a0d9ef81d5949868dccd078ed676342ae1e39d702ed6a38b382042a322cdfdbeaf766ae6d2cccb4299e3a7c8d9b8504ff48f23a96292f62c9c5e992817db018f75f80bf17191a3e84fcb4faf709f23ec4df1b615b8c585d91801b1164e007ef403803392e1c23d8db0c3b41627f40b8a944d25f24c977cd628decf4d97ab37513dee1ecdb86b4b04f6497dc37e27b360f6b4b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x1, 0x800}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0xb, 0x1e00, 0x1, [0xfff0, 0x3fc0, 0xf]}]}, 0x4, [{0x4b, &(0x7f00000023c0)=@string={0x4b, 0x3, "279b02e3e15de455f30836039826a9ef8c7aed2518aadb5ee09e06108e46da66cb69c6941ce95dd606d6c5857d7ab9b161bc58cc5644a1164e28623dfde6788b44685084aafd51aa47"}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x41f}}, {0x36, &(0x7f0000002480)=@string={0x36, 0x3, "3bc0daf4ba0d3b322cb414b5c8fdbdff489ad6ef99d8b2aeadbf381fe740d488661d6e4dec6df02b84010c73dbe765bdd949ac34"}}, {0xef, &(0x7f00000024c0)=@string={0xef, 0x3, "ab20efa87b0774c0be76da3c346a3ac06e5b642567c0ef64ec8bd349987c3332c6c79d1cef6853ba1d5f048c14ee9d28cbfadce19e496647e4b5754d456d9a983a2ea26c9a6b2f6734dd452f16b9ad2bdfb9d0147a46d40bac5c84502bf67d3ee7094fc23110ccd9d2aafc6988f6b1efe4c0de7dc72194192ad49b78c80b7196f05527b0025270589a8af21374b46e063df6f22684999e92a86798d21dc8134df76014a76ac073ae6688248d7a9e6f2022643c5492518792eee84161488bd30e39f054020df27e0136ccc462d1da0cfbf0b5d8089e15fa0dc98daa6da8749e75dad24e8ccbeb2738fb1dda1acb"}}]})
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000002640)) (async, rerun: 32)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002680)='/sys/power/pm_debug_messages', 0x10000, 0x44) (rerun: 32)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f00000026c0)) (async)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002700)=<r8=>0x0)
write$P9_RGETLOCK(r1, &(0x7f0000002740)={0x20, 0x37, 0x2, {0x2, 0x100000000, 0x9, r8, 0x2, ',}'}}, 0x20)
write$UHID_CREATE(r1, &(0x7f0000002880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000002780)=""/227, 0xe3, 0x42fd, 0x9a, 0x8, 0x80000001, 0x7365}}, 0x120) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x20810, r4, 0x661f5000) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000029c0)) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r7)
sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000002b40)={&(0x7f0000002a00), 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x44, r9, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0), r7)
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000002d40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c00)={0xe4, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0xd}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async, rerun: 32)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000002f40)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002d80)=""/199, 0xc7, 0x1, &(0x7f0000002e80)=""/163, 0xa3}, &(0x7f0000002f80)=0x40) (rerun: 32)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000002fc0)=0x5)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000003000), 0x4)

526.249593ms ago: executing program 1 (id=8626):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffe, &(0x7f0000000040))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x22000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r3, 0x11a, 0x2, 0x0, 0x0)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000001ac0)={0x0, 0x80000000, 0x101, 0xfff, 0x7, "e42efaaa02fa03538bfeb569332ea5f25940c0", 0x6, 0x7fffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'bridge0\x00', 0x8000})
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})

525.939953ms ago: executing program 1 (id=8627):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0})

525.729473ms ago: executing program 1 (id=8628):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x64000600)
syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x20000, 0x1, 0x20029d, 0x0, r1}, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0xd1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x1, 0x5, 0x2}}}}}]}}]}}, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r2, &(0x7f0000000900)="c45cf7035c053bdf388b125b37fbf978a43202842b9ac13bb7dee6033985e3740e8d079e39e2c5e4ba5f17c1b798855a5d69c649e0d43207700ae9514eb2c63b4eea814097f18f92836e37df71d03d84e0d30e768b1a7daf3d79a14dc45c4f44ad479df36d6e4da3566add6226729d0a3dd251ead94249389e4699eb8c0953ceb4cb9e002320c4e402df794cd43375afa9a2a704ab5615a78a83bda5e0c3c24e9943d5fea00756cc35e63e55603da5ad3bedf80031b90dbb40b0a0c7dd088dc9964d2a8d8c3879", 0xc7, 0x44088881, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

286.509396ms ago: executing program 2 (id=8631):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x141342)
ioctl$EVIOCGREP(r0, 0x80084503, 0x0) (async, rerun: 64)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x410840, 0x70, 0x20}, 0x18) (rerun: 64)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x100) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESHEX=0x0], 0x40}, 0x6048090) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000540)=""/177, 0xb1}) (async)
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000240)=""/170) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

280.134236ms ago: executing program 9 (id=8632):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ppoll(&(0x7f0000000200)=[{r3, 0x20c}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x4840, &(0x7f0000002400)={0x2, 0x4e20, @multicast2}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000019000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500fe8800000000000000000000000000011400040000000000000000000000000000000001"], 0xc0}}, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0)
write$cgroup_int(r7, &(0x7f0000000180), 0x12)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
writev(r8, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)="100e670873968ef09ad2dc91a457ec22b19fc326b944f5c4c818", 0x1a}], 0x2)
close_range(r8, r8, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000600)={0x20, 0xd, 0xc5, {0xc5, 0xd, "4cfea7888ddf25f3f6970d2ec8145b3dcd0d81e27f065424e2d49160b33a2fb3701a840bbd04e7310bf7dcc5341dee27d623c7b97208270eaf0f7681ac7f6ca76ae0774426b87e5f82c8359b003518112a4915b5314af89fad7abc5f69e58223ffe54ec4ec4ded65ecc699342c70f80d1b931910977c96cce1ecd94a11b00c17aaa9e0a3db4d171cc4b682d5bc3c20917b2499ab8d0ed434184479b0a08d5d129986544f3ddb020bdb9fc548f64813bdb9c8e8adce63f6d676750b3a5eb101d17d1d91"}}, &(0x7f0000000500)={0x0, 0x3, 0x80, @string={0x80, 0x3, "4853f84a8fcef529710066ff62e04a52d9edbd79fc90f80ab44463151b88146b3f8cea368dd3c237e8b173067a1f77a1d1b2a1234e19ebf29a14d267f148b1e3e255d260ee3ae784d3af5d03227eaffd0b57dbc20bf960dfeced93719dad3e61e8ae618d964fff17d22fd21b11654949ef32870eb2618581f0455431cba2"}}, &(0x7f0000000700)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x1, "2493"}, @main=@item_012={0x2, 0x0, 0xb, "c27f"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ad, 0x7, 0x1, {0x22, 0x6aa}}}}, &(0x7f0000000a00)={0x2c, &(0x7f00000007c0)={0x20, 0x13, 0xd3, "529108ba2106e6a074066679230b342bd6426ed8ec9a099f1c01cfe167e5a6ac71f2cbf681d2298073d721c683da771f2483ebc873eade6bd8bbb0b3abb770f16671aefca766a6149f78b537953eafb93d825eee2c394fa02a2c46c46e85b0c71464cbb06c39b4eb201276c41699df7cced44245d00d723ae9cb5a8c5ef6c276b1d005f6241c670d9b376ffd54049d64c96fa0a502963aa21b105ffb9875bde45bdf1a39c1346ebf38437639dd14f9ebc528269ec5d7d0ac50a3a8a8466f40a9c2d9dd1fe1605c99be87a4b94fd663d2590368"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000940)={0x20, 0x1, 0x74, "b5548ad8b64f6a04071ebc56419e8b98c3bc28ed83503b8c53ba374e8e258eea5acd5d25aab5c33e674064d9cd1a4a7bc3481595b0eb8813f88fb39f0b4e8794916bf98b67519ccf1680f6d1f687a7fd417972d7fa30378aac06fe77057347d815614fca3272efdd23a4c48c847f8145793e3287"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x9}})

205.791077ms ago: executing program 2 (id=8633):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x190e}, @flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x7, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x60, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x3}, @register_looper, @request_death={0x400c630e, 0x2}, @acquire_done, @increfs_done, @increfs={0x40046304, 0x3}, @dead_binder_done], 0x80, 0x0, &(0x7f00000002c0)="7fbbd00aab638c09e76602304b2e72debaff1866cbcf0ee7aa92fcb3e5e0dd8a4df76c3b5ebc0fdd7eb9b063239c84c1d367fe22b74556cbe8b2137579d7bc1678df4724b7f198db8bcf3c7a14f76d1a7bc6fe53a0be1448a8152ccd5efc35587e4415e3904c84083c2f51ac87b7d8be69e7fdc2845ab825464f5ec2682cc8d4"})

123.929948ms ago: executing program 2 (id=8634):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
write$evdev(r0, &(0x7f00000002c0)=[{{}, 0x2, 0xfffe, 0x7}], 0x18)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x2230c0, 0x0)

81.730309ms ago: executing program 2 (id=8635):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, r1, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000)
io_setup(0x4, &(0x7f0000000100))

2.99627ms ago: executing program 2 (id=8636):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffe, &(0x7f0000000040))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x22000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
fsetxattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='./binderfs/binder0\x00', 0x13, 0x3)
chdir(&(0x7f0000000240)='./file0\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000580)=""/176, 0xb0)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000001ac0)={0x0, 0x80000000, 0x101, 0xfff, 0x7, "e42efaaa02fa03538bfeb569332ea5f25940c0", 0x6, 0x7fffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000000)=0x5, 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'bridge0\x00', 0x8000})
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})

0s ago: executing program 2 (id=8637):
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x1, 0xfffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
chroot(&(0x7f0000000480)='./file0/../file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x218000, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

lt 29357
[  541.214829][T23920] total_inactive_anon 145666048
[  541.219717][T23920] total_active_anon 84103168
[  541.224311][T23920] total_inactive_file 0
[  541.228496][T23920] total_active_file 0
[  541.232474][T23920] total_unevictable 66822144
[  541.237066][T23920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23920,uid=0
[  541.252245][T23920] Memory cgroup out of memory: Killed process 23920 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:47232kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000
[  541.422019][T23914] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  541.437203][   T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  541.472521][T23914] CPU: 1 UID: 0 PID: 23914 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  541.472555][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  541.472569][T23914] Call Trace:
[  541.472576][T23914]  <TASK>
[  541.472584][T23914]  __dump_stack+0x21/0x30
[  541.472614][T23914]  dump_stack_lvl+0x10c/0x190
[  541.472638][T23914]  ? __cfi_dump_stack_lvl+0x10/0x10
[  541.472662][T23914]  ? ___ratelimit+0x3f7/0x5a0
[  541.472684][T23914]  dump_stack+0x19/0x20
[  541.472707][T23914]  dump_header+0xd7/0x490
[  541.472737][T23914]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  541.472761][T23914]  oom_kill_process+0x4c0/0x7e0
[  541.472780][T23914]  ? sched_clock_cpu+0x75/0x400
[  541.472804][T23914]  out_of_memory+0x7ee/0xbd0
[  541.472824][T23914]  ? __cfi_out_of_memory+0x10/0x10
[  541.472842][T23914]  ? mutex_lock_killable+0x92/0x1c0
[  541.472866][T23914]  ? __cfi_mutex_lock_killable+0x10/0x10
[  541.472892][T23914]  mem_cgroup_out_of_memory+0x279/0x350
[  541.472919][T23914]  ? drain_obj_stock+0xed0/0xed0
[  541.472953][T23914]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  541.472980][T23914]  try_charge_memcg+0x8f7/0xde0
[  541.473004][T23914]  ? __cfi_try_charge_memcg+0x10/0x10
[  541.473026][T23914]  ? __alloc_pages_noprof+0x30d/0x6c0
[  541.473048][T23914]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  541.473071][T23914]  __mem_cgroup_charge+0xf6/0x410
[  541.473097][T23914]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  541.473121][T23914]  ? _raw_spin_unlock+0x45/0x60
[  541.473150][T23914]  shmem_alloc_and_add_folio+0x86d/0x1050
[  541.473184][T23914]  ? put_swap_device+0x130/0x130
[  541.473214][T23914]  ? shmem_huge_global_enabled+0x2da/0x360
[  541.473244][T23914]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  541.473273][T23914]  ? __kasan_check_write+0x18/0x20
[  541.473297][T23914]  ? _raw_spin_lock+0x8c/0x120
[  541.473326][T23914]  shmem_get_folio_gfp+0x5f0/0x1380
[  541.473358][T23914]  ? shmem_get_folio+0xc0/0xc0
[  541.473384][T23914]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  541.473408][T23914]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  541.473432][T23914]  ? inode_to_bdi+0x6d/0x100
[  541.473455][T23914]  shmem_write_begin+0xf4/0x270
[  541.473485][T23914]  generic_perform_write+0x32d/0x960
[  541.473511][T23914]  ? __cfi_generic_perform_write+0x10/0x10
[  541.473535][T23914]  ? down_write+0xe9/0x2a0
[  541.473559][T23914]  ? mnt_get_write_access_file+0x1af/0x3b0
[  541.473581][T23914]  ? mnt_put_write_access_file+0xc2/0x100
[  541.473602][T23914]  ? file_update_time+0x1ef/0x220
[  541.473624][T23914]  shmem_file_write_iter+0x105/0x130
[  541.473646][T23914]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  541.473669][T23914]  __kernel_write_iter+0x392/0x830
[  541.473694][T23914]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  541.473716][T23914]  ? __cfi___kernel_write_iter+0x10/0x10
[  541.473741][T23914]  ? get_dump_page+0x160/0x220
[  541.473761][T23914]  ? __asan_memset+0x39/0x50
[  541.473784][T23914]  ? iov_iter_bvec+0xc0/0x180
[  541.473814][T23914]  dump_user_range+0xb06/0xdf0
[  541.473840][T23914]  ? __cfi_dump_emit+0x10/0x10
[  541.473865][T23914]  ? __cfi_dump_user_range+0x10/0x10
[  541.473890][T23914]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  541.473917][T23914]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  541.473951][T23914]  elf_core_dump+0x2cd9/0x3810
[  541.473986][T23914]  ? __cfi_elf_core_dump+0x10/0x10
[  541.474021][T23914]  ? dump_interrupted+0xf0/0xf0
[  541.474045][T23914]  ? filp_open+0x182/0x1d0
[  541.474065][T23914]  ? 0xffffffffff600000
[  541.474082][T23914]  do_coredump+0x1bf7/0x2bd0
[  541.474110][T23914]  ? __cfi_do_coredump+0x10/0x10
[  541.474133][T23914]  ? asm_exc_page_fault+0x2b/0x30
[  541.474160][T23914]  ? __kasan_slab_free+0x6a/0x80
[  541.474189][T23914]  ? kmem_cache_free+0x1c1/0x4c0
[  541.474216][T23914]  get_signal+0x11fd/0x14f0
[  541.474241][T23914]  arch_do_signal_or_restart+0x96/0x720
[  541.474268][T23914]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  541.474300][T23914]  irqentry_exit_to_user_mode+0x4e/0xb0
[  541.474326][T23914]  irqentry_exit+0x16/0x60
[  541.474350][T23914]  exc_page_fault+0x66/0xc0
[  541.474373][T23914]  asm_exc_page_fault+0x2b/0x30
[  541.474392][T23914] RIP: 0033:0x307a7973
[  541.474412][T23914] Code: Unable to access opcode bytes at 0x307a7949.
[  541.474423][T23914] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  541.474443][T23914] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  541.474460][T23914] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  541.474476][T23914] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  541.474492][T23914] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  541.474507][T23914] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  541.474525][T23914]  </TASK>
[  541.474533][T23914] memory: usage 307200kB, limit 307200kB, failcnt 40281
[  541.819411][T24152] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaa
[  541.824965][T23914] memory+swap: usage 431832kB, limit 9007199254740988kB, failcnt 0
[  541.952557][T23914] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  541.959492][T23914] Memory cgroup stats for /syz1:
[  541.959630][T23914] cache 313905152
[  541.968699][T23914] rss 323584
[  541.971964][T23914] rss_huge 0
[  541.972690][   T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  541.975203][T23914] shmem 247074816
[  541.986121][   T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  541.990791][T23914] mapped_file 4096
[  542.003288][   T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  542.005582][T23914] dirty 0
[  542.005592][T23914] writeback 0
[  542.005601][T23914] workingset_refault_anon 29
[  542.015061][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  542.017570][T23914] workingset_refault_file 65
[  542.017580][T23914] swap 127623168
[  542.017589][T23914] swapcached 368640
[  542.021147][   T31] usb 3-1: SerialNumber: syz
[  542.025422][T23914] pgpgin 1408477
[  542.025432][T23914] pgpgout 1333721
[  542.025440][T23914] pgfault 681769
[  542.025448][T23914] pgmajfault 29362
[  542.025456][T23914] inactive_anon 132849664
[  542.034941][T24137] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  542.038095][T23914] active_anon 114892800
[  542.042935][   T31] usb 3-1: bad CDC descriptors
[  542.045341][T23914] inactive_file 8192
[  542.045353][T23914] active_file 0
[  542.045361][T23914] unevictable 66822144
[  542.045369][T23914] hierarchical_memory_limit 314572800
[  542.101576][T23914] hierarchical_memsw_limit 9223372036854771712
[  542.107814][T23914] total_cache 313905152
[  542.111979][T23914] total_rss 323584
[  542.115696][T23914] total_rss_huge 0
[  542.119429][T23914] total_shmem 247074816
[  542.123581][T23914] total_mapped_file 4096
[  542.127827][T23914] total_dirty 0
[  542.131280][T23914] total_writeback 0
[  542.135071][T23914] total_workingset_refault_anon 29
[  542.140199][T23914] total_workingset_refault_file 65
[  542.145353][T23914] total_swap 127623168
[  542.149458][T23914] total_swapcached 368640
[  542.153782][T23914] total_pgpgin 1408477
[  542.157858][T23914] total_pgpgout 1333721
[  542.162005][T23914] total_pgfault 681769
[  542.166053][T23914] total_pgmajfault 29362
[  542.170314][T23914] total_inactive_anon 132849664
[  542.175180][T23914] total_active_anon 114892800
[  542.179869][T23914] total_inactive_file 8192
[  542.184281][T23914] total_active_file 0
[  542.188267][T23914] total_unevictable 66822144
[  542.192849][T23914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23902,uid=0
[  542.207771][T23914] Memory cgroup out of memory: Killed process 23902 (syz.1.8352) total-vm:89960kB, anon-rss:916kB, file-rss:45440kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  542.293918][T24154] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  542.304564][   T31] usb 3-1: USB disconnect, device number 21
[  542.326571][T24157] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  542.417802][T23887] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  542.697339][T23887] CPU: 0 UID: 0 PID: 23887 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  542.697376][T23887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  542.697390][T23887] Call Trace:
[  542.697398][T23887]  <TASK>
[  542.697406][T23887]  __dump_stack+0x21/0x30
[  542.697436][T23887]  dump_stack_lvl+0x10c/0x190
[  542.697461][T23887]  ? __cfi_dump_stack_lvl+0x10/0x10
[  542.697485][T23887]  ? ___ratelimit+0x3f7/0x5a0
[  542.697507][T23887]  dump_stack+0x19/0x20
[  542.697533][T23887]  dump_header+0xd7/0x490
[  542.697564][T23887]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  542.697586][T23887]  oom_kill_process+0x4c0/0x7e0
[  542.697606][T23887]  ? sched_clock_cpu+0x75/0x400
[  542.697641][T23887]  out_of_memory+0x7ee/0xbd0
[  542.697660][T23887]  ? __cfi_out_of_memory+0x10/0x10
[  542.697678][T23887]  ? mutex_lock_killable+0x92/0x1c0
[  542.697703][T23887]  ? __cfi_mutex_lock_killable+0x10/0x10
[  542.697729][T23887]  mem_cgroup_out_of_memory+0x279/0x350
[  542.697758][T23887]  ? drain_obj_stock+0xed0/0xed0
[  542.697786][T23887]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  542.697813][T23887]  try_charge_memcg+0x8f7/0xde0
[  542.697836][T23887]  ? __cfi_try_charge_memcg+0x10/0x10
[  542.697858][T23887]  ? __alloc_pages_noprof+0x30d/0x6c0
[  542.697880][T23887]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  542.697902][T23887]  ? __folio_batch_add_and_move+0x2ab/0x370
[  542.697923][T23887]  __mem_cgroup_charge+0xf6/0x410
[  542.697948][T23887]  ? __kasan_check_write+0x18/0x20
[  542.697973][T23887]  ? _raw_spin_lock+0x8c/0x120
[  542.698001][T23887]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  542.698028][T23887]  shmem_alloc_and_add_folio+0x86d/0x1050
[  542.698062][T23887]  ? put_swap_device+0x130/0x130
[  542.698093][T23887]  ? shmem_huge_global_enabled+0x2da/0x360
[  542.698122][T23887]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  542.698152][T23887]  ? __kasan_check_write+0x18/0x20
[  542.698176][T23887]  ? _raw_spin_lock+0x8c/0x120
[  542.698205][T23887]  shmem_get_folio_gfp+0x5f0/0x1380
[  542.698237][T23887]  ? shmem_get_folio+0xc0/0xc0
[  542.698264][T23887]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  542.698288][T23887]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  542.698312][T23887]  ? inode_to_bdi+0x6d/0x100
[  542.698335][T23887]  shmem_write_begin+0xf4/0x270
[  542.698366][T23887]  generic_perform_write+0x32d/0x960
[  542.698393][T23887]  ? __cfi_generic_perform_write+0x10/0x10
[  542.698417][T23887]  ? down_write+0xe9/0x2a0
[  542.698441][T23887]  ? mnt_get_write_access_file+0x1af/0x3b0
[  542.698462][T23887]  ? mnt_put_write_access_file+0xc2/0x100
[  542.698484][T23887]  ? file_update_time+0x1ef/0x220
[  542.698506][T23887]  shmem_file_write_iter+0x105/0x130
[  542.698528][T23887]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  542.698550][T23887]  __kernel_write_iter+0x392/0x830
[  542.698576][T23887]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  542.698599][T23887]  ? __cfi___kernel_write_iter+0x10/0x10
[  542.698631][T23887]  ? get_dump_page+0x160/0x220
[  542.698651][T23887]  ? __asan_memset+0x39/0x50
[  542.698675][T23887]  ? iov_iter_bvec+0xc0/0x180
[  542.698704][T23887]  dump_user_range+0xb06/0xdf0
[  542.698731][T23887]  ? __cfi_dump_emit+0x10/0x10
[  542.698756][T23887]  ? __cfi_dump_user_range+0x10/0x10
[  542.698782][T23887]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  542.698809][T23887]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  542.698837][T23887]  elf_core_dump+0x2cd9/0x3810
[  542.698870][T23887]  ? __cfi_elf_core_dump+0x10/0x10
[  542.698908][T23887]  ? dump_interrupted+0xf0/0xf0
[  542.698932][T23887]  ? filp_open+0x182/0x1d0
[  542.698953][T23887]  ? 0xffffffffff600000
[  542.698970][T23887]  do_coredump+0x1bf7/0x2bd0
[  542.698998][T23887]  ? __cfi_do_coredump+0x10/0x10
[  542.699022][T23887]  ? asm_exc_page_fault+0x2b/0x30
[  542.699049][T23887]  ? __kasan_slab_free+0x6a/0x80
[  542.699078][T23887]  ? kmem_cache_free+0x1c1/0x4c0
[  542.699105][T23887]  get_signal+0x11fd/0x14f0
[  542.699131][T23887]  arch_do_signal_or_restart+0x96/0x720
[  542.699159][T23887]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  542.699190][T23887]  irqentry_exit_to_user_mode+0x4e/0xb0
[  542.699217][T23887]  irqentry_exit+0x16/0x60
[  542.699240][T23887]  exc_page_fault+0x66/0xc0
[  542.699264][T23887]  asm_exc_page_fault+0x2b/0x30
[  542.699284][T23887] RIP: 0033:0x307a7973
[  542.699305][T23887] Code: Unable to access opcode bytes at 0x307a7949.
[  542.699316][T23887] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  542.699337][T23887] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  542.699354][T23887] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  542.699369][T23887] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  542.699385][T23887] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  542.699401][T23887] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  542.699419][T23887]  </TASK>
[  543.259138][T23887] memory: usage 307200kB, limit 307200kB, failcnt 41991
[  543.290738][T23887] memory+swap: usage 431920kB, limit 9007199254740988kB, failcnt 0
[  543.371670][T23887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  543.387207][  T390] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  543.433652][T23887] Memory cgroup stats for /syz1:
[  543.433801][T23887] cache 310382592
[  543.503201][T23887] rss 229376
[  543.506440][T23887] rss_huge 0
[  543.537186][T23887] shmem 243556352
[  543.538230][  T390] usb 3-1: config 0 has an invalid interface number: 213 but max is 0
[  543.540935][T23887] mapped_file 0
[  543.540948][T23887] dirty 0
[  543.549117][  T390] usb 3-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config
[  543.549143][  T390] usb 3-1: config 0 has no interface number 0
[  543.571947][  T390] usb 3-1: config 0 interface 213 has no altsetting 0
[  543.578818][T23887] writeback 114688
[  543.582589][T23887] workingset_refault_anon 29
[  543.587293][T23887] workingset_refault_file 65
[  543.591948][T23887] swap 127770624
[  543.595589][T23887] swapcached 225280
[  543.599460][T23887] pgpgin 1412530
[  543.603087][T23887] pgpgout 1338691
[  543.606753][T23887] pgfault 682023
[  543.610459][  T390] usb 3-1: New USB device found, idVendor=12d1, idProduct=a7d1, bcdDevice=39.7e
[  543.619523][  T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.627540][  T390] usb 3-1: Product: syz
[  543.631705][  T390] usb 3-1: Manufacturer: syz
[  543.636302][  T390] usb 3-1: SerialNumber: syz
[  543.639696][T23887] pgmajfault 29363
[  543.641997][  T390] usb 3-1: config 0 descriptor??
[  543.644716][T23887] inactive_anon 135901184
[  543.653933][T23887] active_anon 107819008
[  543.658183][T23887] inactive_file 0
[  543.661818][T23887] active_file 4096
[  543.665527][T23887] unevictable 66822144
[  543.669716][T23887] hierarchical_memory_limit 314572800
[  543.675108][T23887] hierarchical_memsw_limit 9223372036854771712
[  543.681353][T23887] total_cache 310382592
[  543.685510][T23887] total_rss 229376
[  543.689278][T23887] total_rss_huge 0
[  543.693078][T23887] total_shmem 243556352
[  543.697304][T23887] total_mapped_file 0
[  543.701328][T23887] total_dirty 0
[  543.704844][T23887] total_writeback 114688
[  543.709131][T23887] total_workingset_refault_anon 29
[  543.714247][T23887] total_workingset_refault_file 65
[  543.719401][T23887] total_swap 127770624
[  543.723470][T23887] total_swapcached 225280
[  543.727818][T23887] total_pgpgin 1412530
[  543.731886][T23887] total_pgpgout 1338691
[  543.736030][T23887] total_pgfault 682023
[  543.740125][T23887] total_pgmajfault 29363
[  543.744359][T23887] total_inactive_anon 135901184
[  543.749223][T23887] total_active_anon 107819008
[  543.753898][T23887] total_inactive_file 0
[  543.758072][T23887] total_active_file 4096
[  543.762310][T23887] total_unevictable 66822144
[  543.766898][T23887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23904,uid=0
[  543.781858][T23887] Memory cgroup out of memory: Killed process 23904 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  543.915769][T23890] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  543.934201][  T390] usb 3-1: USB disconnect, device number 22
[  543.961243][T23890] CPU: 0 UID: 0 PID: 23890 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  543.961276][T23890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  543.961289][T23890] Call Trace:
[  543.961296][T23890]  <TASK>
[  543.961303][T23890]  __dump_stack+0x21/0x30
[  543.961330][T23890]  dump_stack_lvl+0x10c/0x190
[  543.961353][T23890]  ? __cfi_dump_stack_lvl+0x10/0x10
[  543.961376][T23890]  ? ___ratelimit+0x3f7/0x5a0
[  543.961399][T23890]  dump_stack+0x19/0x20
[  543.961421][T23890]  dump_header+0xd7/0x490
[  543.961452][T23890]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  543.961474][T23890]  oom_kill_process+0x4c0/0x7e0
[  543.961494][T23890]  ? sched_clock_cpu+0x75/0x400
[  543.961519][T23890]  out_of_memory+0x7ee/0xbd0
[  543.961539][T23890]  ? __cfi_out_of_memory+0x10/0x10
[  543.961557][T23890]  ? mutex_lock_killable+0x92/0x1c0
[  543.961582][T23890]  ? __cfi_mutex_lock_killable+0x10/0x10
[  543.961608][T23890]  mem_cgroup_out_of_memory+0x279/0x350
[  543.961636][T23890]  ? drain_obj_stock+0xed0/0xed0
[  543.961664][T23890]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  543.961691][T23890]  try_charge_memcg+0x8f7/0xde0
[  543.961715][T23890]  ? __cfi_try_charge_memcg+0x10/0x10
[  543.961738][T23890]  ? __alloc_pages_noprof+0x30d/0x6c0
[  543.961761][T23890]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  543.961791][T23890]  ? __folio_batch_add_and_move+0x2ab/0x370
[  543.961814][T23890]  __mem_cgroup_charge+0xf6/0x410
[  543.961839][T23890]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  543.961863][T23890]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  543.961890][T23890]  shmem_alloc_and_add_folio+0x86d/0x1050
[  543.961924][T23890]  ? put_swap_device+0x130/0x130
[  543.961955][T23890]  ? shmem_huge_global_enabled+0x2da/0x360
[  543.961985][T23890]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  543.962015][T23890]  ? __kasan_check_write+0x18/0x20
[  543.962039][T23890]  ? _raw_spin_lock+0x8c/0x120
[  543.962069][T23890]  shmem_get_folio_gfp+0x5f0/0x1380
[  543.962101][T23890]  ? shmem_get_folio+0xc0/0xc0
[  543.962128][T23890]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  543.962152][T23890]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  543.962176][T23890]  ? inode_to_bdi+0x6d/0x100
[  543.962200][T23890]  shmem_write_begin+0xf4/0x270
[  543.962232][T23890]  generic_perform_write+0x32d/0x960
[  543.962258][T23890]  ? __cfi_generic_perform_write+0x10/0x10
[  543.962282][T23890]  ? down_write+0xe9/0x2a0
[  543.962306][T23890]  ? mnt_get_write_access_file+0x1af/0x3b0
[  543.962328][T23890]  ? mnt_put_write_access_file+0xc2/0x100
[  543.962350][T23890]  ? file_update_time+0x1ef/0x220
[  543.962372][T23890]  shmem_file_write_iter+0x105/0x130
[  543.962395][T23890]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  543.962417][T23890]  __kernel_write_iter+0x392/0x830
[  543.962444][T23890]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  543.962467][T23890]  ? __cfi___kernel_write_iter+0x10/0x10
[  543.962492][T23890]  ? get_dump_page+0x160/0x220
[  543.962513][T23890]  ? __asan_memset+0x39/0x50
[  543.962537][T23890]  ? iov_iter_bvec+0xc0/0x180
[  543.962567][T23890]  dump_user_range+0xb06/0xdf0
[  543.962612][T23890]  ? __cfi_dump_emit+0x10/0x10
[  543.962637][T23890]  ? __cfi_dump_user_range+0x10/0x10
[  543.962663][T23890]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  543.962690][T23890]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  543.962718][T23890]  elf_core_dump+0x2cd9/0x3810
[  543.962752][T23890]  ? __cfi_elf_core_dump+0x10/0x10
[  543.962794][T23890]  ? dump_interrupted+0xf0/0xf0
[  543.962819][T23890]  ? filp_open+0x182/0x1d0
[  543.962839][T23890]  ? 0xffffffffff600000
[  543.962857][T23890]  do_coredump+0x1bf7/0x2bd0
[  543.962884][T23890]  ? __cfi_do_coredump+0x10/0x10
[  543.962908][T23890]  ? asm_exc_page_fault+0x2b/0x30
[  543.962935][T23890]  ? __kasan_slab_free+0x6a/0x80
[  543.962964][T23890]  ? kmem_cache_free+0x1c1/0x4c0
[  543.962992][T23890]  get_signal+0x11fd/0x14f0
[  543.963017][T23890]  arch_do_signal_or_restart+0x96/0x720
[  543.963046][T23890]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  543.963077][T23890]  irqentry_exit_to_user_mode+0x4e/0xb0
[  543.963103][T23890]  irqentry_exit+0x16/0x60
[  543.963128][T23890]  exc_page_fault+0x66/0xc0
[  543.963152][T23890]  asm_exc_page_fault+0x2b/0x30
[  543.963171][T23890] RIP: 0033:0x307a7973
[  543.963191][T23890] Code: Unable to access opcode bytes at 0x307a7949.
[  543.963202][T23890] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  543.963222][T23890] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  543.963238][T23890] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  543.963254][T23890] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  543.963269][T23890] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  543.963284][T23890] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  543.963302][T23890]  </TASK>
[  543.963310][T23890] memory: usage 307196kB, limit 307200kB, failcnt 43016
[  544.430954][T23890] memory+swap: usage 393860kB, limit 9007199254740988kB, failcnt 0
[  544.439245][T23890] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  544.446115][T23890] Memory cgroup stats for /syz1:
[  544.446264][T23890] cache 282619904
[  544.467263][T23890] rss 200704
[  544.470490][T23890] rss_huge 0
[  544.473693][T23890] shmem 215793664
[  544.480432][T23890] mapped_file 0
[  544.483937][T23890] dirty 0
[  544.486963][T23890] writeback 0
[  544.490535][T24193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=24193 comm=syz.2.8457
[  544.490669][T23890] workingset_refault_anon 29
[  544.507947][T23890] workingset_refault_file 65
[  544.512534][T23890] swap 120389632
[  544.516082][T23890] swapcached 102400
[  544.520436][T23890] pgpgin 1414795
[  544.524097][T23890] pgpgout 1347766
[  544.527991][T23890] pgfault 682164
[  544.537324][T23890] pgmajfault 29363
[  544.547336][T23890] inactive_anon 118784
[  544.555597][T23890] active_anon 215977984
[  544.571122][T23890] inactive_file 0
[  544.571442][   T36] audit: type=1326 audit(2000000072.950:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24194 comm="syz.2.8458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdabaf8e929 code=0x0
[  544.574962][T23890] active_file 4096
[  544.601846][T23890] unevictable 66822144
[  544.606132][T23890] hierarchical_memory_limit 314572800
[  544.613080][T23890] hierarchical_memsw_limit 9223372036854771712
[  544.619388][T23890] total_cache 282619904
[  544.624379][T23890] total_rss 200704
[  544.634437][T23890] total_rss_huge 0
[  544.641831][T23890] total_shmem 215793664
[  544.654858][T23890] total_mapped_file 0
[  544.661364][T23890] total_dirty 0
[  544.664835][T23890] total_writeback 0
[  544.669760][T23890] total_workingset_refault_anon 29
[  544.676864][T24198] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8458'.
[  544.692384][T24198] 0ªö»ôM: renamed from gretap0 (while UP)
[  544.703281][T24198] 0ªö»ôM: entered allmulticast mode
[  544.710483][T23890] total_workingset_refault_file 65
[  544.715972][T24198] A link change request failed with some changes committed already. Interface 
30ªö»ôM may have been left with an inconsistent configuration, please check.
[  544.732295][T23890] total_swap 120389632
[  544.737050][T23890] total_swapcached 102400
[  544.742369][T23890] total_pgpgin 1414795
[  544.746452][T23890] total_pgpgout 1347766
[  544.753215][T24198] rust_binder: Write failure EFAULT in pid:48
[  544.754353][T23890] total_pgfault 682164
[  544.764760][T23890] total_pgmajfault 29363
[  544.769554][T23890] total_inactive_anon 118784
[  544.774184][T23890] total_active_anon 215977984
[  544.779098][T23890] total_inactive_file 0
[  544.783293][T23890] total_active_file 4096
[  544.788007][T23890] total_unevictable 66822144
[  544.792707][T23890] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23890,uid=0
[  544.817209][T23890] Memory cgroup out of memory: Killed process 23890 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:45824kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  545.333238][T24200] syz.1.8460 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  545.360130][T24200] CPU: 1 UID: 0 PID: 24200 Comm: syz.1.8460 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  545.360171][T24200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  545.360185][T24200] Call Trace:
[  545.360192][T24200]  <TASK>
[  545.360202][T24200]  __dump_stack+0x21/0x30
[  545.360233][T24200]  dump_stack_lvl+0x10c/0x190
[  545.360259][T24200]  ? __cfi_dump_stack_lvl+0x10/0x10
[  545.360285][T24200]  ? ___ratelimit+0x3f7/0x5a0
[  545.360309][T24200]  dump_stack+0x19/0x20
[  545.360333][T24200]  dump_header+0xd7/0x490
[  545.360365][T24200]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  545.360390][T24200]  oom_kill_process+0x4c0/0x7e0
[  545.360410][T24200]  ? sched_clock_cpu+0x75/0x400
[  545.360434][T24200]  out_of_memory+0x7ee/0xbd0
[  545.360451][T24200]  ? __cfi_out_of_memory+0x10/0x10
[  545.360466][T24200]  ? mutex_lock_killable+0x92/0x1c0
[  545.360488][T24200]  ? __cfi_mutex_lock_killable+0x10/0x10
[  545.360511][T24200]  mem_cgroup_out_of_memory+0x279/0x350
[  545.360536][T24200]  ? drain_obj_stock+0xed0/0xed0
[  545.360564][T24200]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  545.360588][T24200]  try_charge_memcg+0x8f7/0xde0
[  545.360608][T24200]  ? __cfi_try_charge_memcg+0x10/0x10
[  545.360628][T24200]  ? __alloc_pages_noprof+0x30d/0x6c0
[  545.360648][T24200]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  545.360666][T24200]  ? __folio_batch_add_and_move+0x2ab/0x370
[  545.360691][T24200]  __mem_cgroup_charge+0xf6/0x410
[  545.360713][T24200]  ? __kasan_check_write+0x18/0x20
[  545.360735][T24200]  ? _raw_spin_lock+0x8c/0x120
[  545.360760][T24200]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  545.360783][T24200]  shmem_alloc_and_add_folio+0x86d/0x1050
[  545.360813][T24200]  ? put_swap_device+0x130/0x130
[  545.360840][T24200]  ? shmem_huge_global_enabled+0x2da/0x360
[  545.360866][T24200]  ? shmem_allowable_huge_orders+0x405/0x430
[  545.360893][T24200]  shmem_get_folio_gfp+0x5f0/0x1380
[  545.360921][T24200]  ? shmem_get_folio+0xc0/0xc0
[  545.360945][T24200]  ? __cfi_filemap_map_pages+0x10/0x10
[  545.360964][T24200]  ? folio_unlock+0x12f/0x1a0
[  545.360981][T24200]  shmem_fault+0x17d/0x350
[  545.361006][T24200]  do_pte_missing+0x376e/0x3e50
[  545.361024][T24200]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[  545.361046][T24200]  ? __schedule+0x1463/0x1f10
[  545.361063][T24200]  ? pte_marker_clear+0x1b0/0x1b0
[  545.361079][T24200]  ? __pte_offset_map+0x1b0/0x230
[  545.361100][T24200]  ? pte_offset_map_rw_nolock+0xba/0x110
[  545.361121][T24200]  handle_mm_fault+0x1166/0x1b90
[  545.361147][T24200]  ? __kasan_check_write+0x18/0x20
[  545.361171][T24200]  ? __cfi_handle_mm_fault+0x10/0x10
[  545.361197][T24200]  ? follow_page_pte+0x4a3/0xb90
[  545.361215][T24200]  ? gup_must_unshare+0x1e0/0x1e0
[  545.361235][T24200]  __get_user_pages+0x1169/0x22d0
[  545.361252][T24200]  ? __cfi_mt_find+0x10/0x10
[  545.361278][T24200]  ? populate_vma_page_range+0x230/0x230
[  545.361294][T24200]  ? down_read+0x79/0xe0
[  545.361314][T24200]  ? __cfi_down_read+0x10/0x10
[  545.361336][T24200]  __mm_populate+0x2f9/0x440
[  545.361353][T24200]  vm_mmap_pgoff+0x454/0x4e0
[  545.361376][T24200]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  545.361399][T24200]  ? xfd_validate_state+0x68/0x150
[  545.361420][T24200]  ksys_mmap_pgoff+0xfb/0x1e0
[  545.361443][T24200]  ? __kasan_check_write+0x18/0x20
[  545.361465][T24200]  __x64_sys_mmap+0x121/0x140
[  545.361490][T24200]  x64_sys_call+0x13bf/0x2ee0
[  545.361514][T24200]  do_syscall_64+0x58/0xf0
[  545.361540][T24200]  ? clear_bhb_loop+0x50/0xa0
[  545.361560][T24200]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  545.361578][T24200] RIP: 0033:0x7f96f238e929
[  545.361593][T24200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.361609][T24200] RSP: 002b:00007f96f3270038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  545.361630][T24200] RAX: ffffffffffffffda RBX: 00007f96f25b5fa0 RCX: 00007f96f238e929
[  545.361645][T24200] RDX: 000000000200000d RSI: 0000000000b36000 RDI: 0000200000000000
[  545.361659][T24200] RBP: 00007f96f2410b39 R08: ffffffffffffffff R09: 0000000000000000
[  545.361677][T24200] R10: 0000000004008031 R11: 0000000000000246 R12: 0000000000000000
[  545.361689][T24200] R13: 0000000000000000 R14: 00007f96f25b5fa0 R15: 00007ffe46cfadc8
[  545.361706][T24200]  </TASK>
[  545.361740][T24200] memory: usage 307200kB, limit 307200kB, failcnt 45943
[  545.784317][T24200] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0
[  545.787212][  T390] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  545.792282][T24200] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  545.806692][T24200] Memory cgroup stats for /syz1:
[  545.806850][T24200] cache 314388480
[  545.815430][T24200] rss 163840
[  545.818992][T24200] rss_huge 0
[  545.822362][T24200] shmem 247566336
[  545.826009][T24200] mapped_file 9023488
[  545.830015][T24200] dirty 0
[  545.832997][T24200] writeback 0
[  545.836281][T24200] workingset_refault_anon 29
[  545.840910][T24200] workingset_refault_file 66
[  545.845500][T24200] swap 127975424
[  545.849072][T24200] swapcached 20480
[  545.852842][T24200] pgpgin 1430866
[  545.856389][T24200] pgpgout 1356110
[  545.860039][T24200] pgfault 685550
[  545.863591][T24200] pgmajfault 29363
[  545.867342][T24200] inactive_anon 43298816
[  545.871591][T24200] active_anon 204451840
[  545.875746][T24200] inactive_file 0
[  545.879405][T24200] active_file 0
[  545.882864][T24200] unevictable 66822144
[  545.886928][T24200] hierarchical_memory_limit 314572800
[  545.892329][T24200] hierarchical_memsw_limit 9223372036854771712
[  545.898507][T24200] total_cache 314388480
[  545.902664][T24200] total_rss 163840
[  545.906391][T24200] total_rss_huge 0
[  545.910129][T24200] total_shmem 247566336
[  545.914295][T24200] total_mapped_file 9023488
[  545.918824][T24200] total_dirty 0
[  545.922285][T24200] total_writeback 0
[  545.926092][T24200] total_workingset_refault_anon 29
[  545.931227][T24200] total_workingset_refault_file 66
[  545.936339][T24200] total_swap 127975424
[  545.940433][T24200] total_swapcached 20480
[  545.944762][T24200] total_pgpgin 1430866
[  545.948849][T24200] total_pgpgout 1356110
[  545.953001][T24200] total_pgfault 685550
[  545.957069][T24200] total_pgmajfault 29363
[  545.957194][  T390] usb 3-1: Using ep0 maxpacket: 8
[  545.961399][T24200] total_inactive_anon 43298816
[  545.971366][T24200] total_active_anon 204451840
[  545.976142][T24200] total_inactive_file 0
[  545.980469][T24200] total_active_file 0
[  545.984563][T24200] total_unevictable 66822144
[  545.989273][T24200] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23924,uid=0
[  546.004339][T24200] Memory cgroup out of memory: Killed process 23924 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:48384kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000
[  546.021453][  T390] usb 3-1: config 5 has an invalid interface number: 143 but max is 2
[  546.029685][  T390] usb 3-1: config 5 has an invalid interface number: 6 but max is 2
[  546.037708][  T390] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  546.046426][  T390] usb 3-1: config 5 has an invalid descriptor of length 103, skipping remainder of the config
[  546.066814][  T390] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3
[  546.087097][  T390] usb 3-1: config 5 has no interface number 0
[  546.093244][  T390] usb 3-1: config 5 has no interface number 1
[  546.099416][  T390] usb 3-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  546.118281][  T390] usb 3-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30
[  546.131131][  T390] usb 3-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122
[  546.144379][  T390] usb 3-1: config 5 interface 143 has no altsetting 0
[  546.151213][  T390] usb 3-1: config 5 interface 6 has no altsetting 0
[  546.159498][  T390] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3
[  546.168613][  T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.176608][  T390] usb 3-1: Product: syz
[  546.180968][  T390] usb 3-1: Manufacturer: syz
[  546.185579][  T390] usb 3-1: SerialNumber: syz
[  546.393637][T24208] tmpfs: Unknown parameter 'ˆize'
[  546.407875][  T390] usb 3-1: USB disconnect, device number 23
[  546.446455][T23899] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  546.495356][T23899] CPU: 1 UID: 0 PID: 23899 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  546.495391][T23899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  546.495405][T23899] Call Trace:
[  546.495412][T23899]  <TASK>
[  546.495420][T23899]  __dump_stack+0x21/0x30
[  546.495449][T23899]  dump_stack_lvl+0x10c/0x190
[  546.495473][T23899]  ? __cfi_dump_stack_lvl+0x10/0x10
[  546.495497][T23899]  ? ___ratelimit+0x3f7/0x5a0
[  546.495519][T23899]  dump_stack+0x19/0x20
[  546.495542][T23899]  dump_header+0xd7/0x490
[  546.495572][T23899]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  546.495601][T23899]  oom_kill_process+0x4c0/0x7e0
[  546.495620][T23899]  ? sched_clock_cpu+0x75/0x400
[  546.495645][T23899]  out_of_memory+0x7ee/0xbd0
[  546.495664][T23899]  ? __cfi_out_of_memory+0x10/0x10
[  546.495682][T23899]  ? mutex_lock_killable+0x92/0x1c0
[  546.495706][T23899]  ? __cfi_mutex_lock_killable+0x10/0x10
[  546.495731][T23899]  mem_cgroup_out_of_memory+0x279/0x350
[  546.495759][T23899]  ? drain_obj_stock+0xed0/0xed0
[  546.495788][T23899]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  546.495814][T23899]  try_charge_memcg+0x8f7/0xde0
[  546.495838][T23899]  ? __cfi_try_charge_memcg+0x10/0x10
[  546.495860][T23899]  ? __alloc_pages_noprof+0x30d/0x6c0
[  546.495883][T23899]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  546.495904][T23899]  ? __folio_batch_add_and_move+0x2ab/0x370
[  546.495927][T23899]  __mem_cgroup_charge+0xf6/0x410
[  546.495951][T23899]  ? __kasan_check_write+0x18/0x20
[  546.495976][T23899]  ? _raw_spin_lock+0x8c/0x120
[  546.496005][T23899]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  546.496032][T23899]  shmem_alloc_and_add_folio+0x86d/0x1050
[  546.496066][T23899]  ? put_swap_device+0x130/0x130
[  546.496097][T23899]  ? shmem_huge_global_enabled+0x2da/0x360
[  546.496128][T23899]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  546.496158][T23899]  ? __kasan_check_write+0x18/0x20
[  546.496182][T23899]  ? _raw_spin_lock+0x8c/0x120
[  546.496212][T23899]  shmem_get_folio_gfp+0x5f0/0x1380
[  546.496244][T23899]  ? shmem_get_folio+0xc0/0xc0
[  546.496271][T23899]  ? follow_page_pte+0xa5c/0xb90
[  546.496293][T23899]  ? inode_to_bdi+0x6d/0x100
[  546.496317][T23899]  shmem_write_begin+0xf4/0x270
[  546.496349][T23899]  generic_perform_write+0x32d/0x960
[  546.496375][T23899]  ? __cfi_generic_perform_write+0x10/0x10
[  546.496399][T23899]  ? down_write+0xe9/0x2a0
[  546.496424][T23899]  ? file_update_time+0xa3/0x220
[  546.496446][T23899]  shmem_file_write_iter+0x105/0x130
[  546.496468][T23899]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  546.496491][T23899]  __kernel_write_iter+0x392/0x830
[  546.496517][T23899]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  546.496540][T23899]  ? __cfi___kernel_write_iter+0x10/0x10
[  546.496565][T23899]  ? get_dump_page+0x160/0x220
[  546.496590][T23899]  ? __asan_memset+0x39/0x50
[  546.496615][T23899]  ? iov_iter_bvec+0xc0/0x180
[  546.496645][T23899]  dump_user_range+0xb06/0xdf0
[  546.496672][T23899]  ? __cfi_dump_emit+0x10/0x10
[  546.496696][T23899]  ? __cfi_dump_user_range+0x10/0x10
[  546.496722][T23899]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  546.496749][T23899]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  546.496778][T23899]  elf_core_dump+0x2cd9/0x3810
[  546.496812][T23899]  ? __cfi_elf_core_dump+0x10/0x10
[  546.496849][T23899]  ? dump_interrupted+0xf0/0xf0
[  546.496873][T23899]  ? filp_open+0x182/0x1d0
[  546.496893][T23899]  ? 0xffffffffff600000
[  546.496911][T23899]  do_coredump+0x1bf7/0x2bd0
[  546.496943][T23899]  ? __cfi_do_coredump+0x10/0x10
[  546.496967][T23899]  ? asm_exc_page_fault+0x2b/0x30
[  546.496995][T23899]  ? __kasan_slab_free+0x6a/0x80
[  546.497024][T23899]  ? kmem_cache_free+0x1c1/0x4c0
[  546.497051][T23899]  get_signal+0x11fd/0x14f0
[  546.497076][T23899]  arch_do_signal_or_restart+0x96/0x720
[  546.497104][T23899]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  546.497136][T23899]  irqentry_exit_to_user_mode+0x4e/0xb0
[  546.497161][T23899]  irqentry_exit+0x16/0x60
[  546.497184][T23899]  exc_page_fault+0x66/0xc0
[  546.497207][T23899]  asm_exc_page_fault+0x2b/0x30
[  546.497226][T23899] RIP: 0033:0x307a7973
[  546.497245][T23899] Code: Unable to access opcode bytes at 0x307a7949.
[  546.497255][T23899] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  546.497275][T23899] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  546.497291][T23899] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  546.497306][T23899] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  546.497322][T23899] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  546.497337][T23899] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  546.497355][T23899]  </TASK>
[  546.943060][T23899] memory: usage 307164kB, limit 307200kB, failcnt 49542
[  546.950823][T23899] memory+swap: usage 428452kB, limit 9007199254740988kB, failcnt 0
[  547.033950][T23899] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  547.041767][T23899] Memory cgroup stats for /syz1:
[  547.041913][T23899] cache 314187776
[  547.051184][T23899] rss 155648
[  547.054403][T23899] rss_huge 0
[  547.057862][T23899] shmem 247300096
[  547.061707][T23899] mapped_file 4071424
[  547.065872][T23899] dirty 0
[  547.068854][T23899] writeback 126976
[  547.072640][T23899] workingset_refault_anon 37
[  547.077289][T23899] workingset_refault_file 82
[  547.127336][T23899] swap 126058496
[  547.130909][T23899] swapcached 196608
[  547.134977][T23899] pgpgin 1438755
[  547.140133][T23899] pgpgout 1364013
[  547.143776][T23899] pgfault 686187
[  547.149363][   T36] audit: type=1326 audit(2000000075.530:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.9.8486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e0d58e929 code=0x0
[  547.172410][T23899] pgmajfault 29371
[  547.176137][T23899] inactive_anon 157372416
[  547.182664][T23899] active_anon 89534464
[  547.186743][T23899] inactive_file 0
[  547.190555][T23899] active_file 65536
[  547.194460][T23899] unevictable 66822144
[  547.198740][T23899] hierarchical_memory_limit 314572800
[  547.204393][T23899] hierarchical_memsw_limit 9223372036854771712
[  547.211182][T23899] total_cache 314187776
[  547.215402][T23899] total_rss 155648
[  547.219321][T23899] total_rss_huge 0
[  547.223132][T23899] total_shmem 247300096
[  547.227514][T23899] total_mapped_file 4071424
[  547.232031][T23899] total_dirty 0
[  547.235551][T23899] total_writeback 126976
[  547.239853][T23899] total_workingset_refault_anon 37
[  547.244974][T23899] total_workingset_refault_file 82
[  547.250210][T23899] total_swap 126058496
[  547.254338][T23899] total_swapcached 196608
[  547.258717][T23899] total_pgpgin 1438755
[  547.262835][T23899] total_pgpgout 1364013
[  547.266988][T23899] total_pgfault 686187
[  547.271059][T23899] total_pgmajfault 29371
[  547.275311][T23899] total_inactive_anon 157372416
[  547.280176][T23899] total_active_anon 89534464
[  547.284756][T23899] total_inactive_file 0
[  547.288915][T23899] total_active_file 65536
[  547.293250][T23899] total_unevictable 66822144
[  547.297850][T23899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23885,uid=0
[  547.312795][  T390] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  547.313288][T23899] Memory cgroup out of memory: Killed process 23885 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:45056kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  547.366566][T23891] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  547.376594][T23891] CPU: 1 UID: 0 PID: 23891 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  547.376621][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  547.376633][T23891] Call Trace:
[  547.376639][T23891]  <TASK>
[  547.376646][T23891]  __dump_stack+0x21/0x30
[  547.376675][T23891]  dump_stack_lvl+0x10c/0x190
[  547.376697][T23891]  ? __cfi_dump_stack_lvl+0x10/0x10
[  547.376721][T23891]  ? ___ratelimit+0x3f7/0x5a0
[  547.376743][T23891]  dump_stack+0x19/0x20
[  547.376765][T23891]  dump_header+0xd7/0x490
[  547.376795][T23891]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  547.376818][T23891]  oom_kill_process+0x4c0/0x7e0
[  547.376837][T23891]  ? sched_clock_cpu+0x75/0x400
[  547.376861][T23891]  out_of_memory+0x7ee/0xbd0
[  547.376880][T23891]  ? __cfi_out_of_memory+0x10/0x10
[  547.376899][T23891]  ? mutex_lock_killable+0x104/0x1c0
[  547.376923][T23891]  ? __cfi_mutex_lock_killable+0x10/0x10
[  547.376948][T23891]  mem_cgroup_out_of_memory+0x279/0x350
[  547.376975][T23891]  ? drain_obj_stock+0xed0/0xed0
[  547.377002][T23891]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  547.377028][T23891]  try_charge_memcg+0x8f7/0xde0
[  547.377052][T23891]  ? __cfi_try_charge_memcg+0x10/0x10
[  547.377075][T23891]  ? __alloc_pages_noprof+0x30d/0x6c0
[  547.377095][T23891]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  547.377113][T23891]  ? __folio_batch_add_and_move+0x2ab/0x370
[  547.377135][T23891]  __mem_cgroup_charge+0xf6/0x410
[  547.377164][T23891]  ? __kasan_check_write+0x18/0x20
[  547.377188][T23891]  ? _raw_spin_lock+0x8c/0x120
[  547.377215][T23891]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  547.377242][T23891]  shmem_alloc_and_add_folio+0x86d/0x1050
[  547.377275][T23891]  ? put_swap_device+0x130/0x130
[  547.377305][T23891]  ? shmem_huge_global_enabled+0x2da/0x360
[  547.377335][T23891]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  547.377364][T23891]  ? __kasan_check_write+0x18/0x20
[  547.377387][T23891]  ? _raw_spin_lock+0x8c/0x120
[  547.377416][T23891]  shmem_get_folio_gfp+0x5f0/0x1380
[  547.377447][T23891]  ? shmem_get_folio+0xc0/0xc0
[  547.377474][T23891]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  547.377497][T23891]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  547.377536][T23891]  ? inode_to_bdi+0x6d/0x100
[  547.377559][T23891]  shmem_write_begin+0xf4/0x270
[  547.377590][T23891]  generic_perform_write+0x32d/0x960
[  547.377617][T23891]  ? __cfi_generic_perform_write+0x10/0x10
[  547.377640][T23891]  ? down_write+0xe9/0x2a0
[  547.377665][T23891]  ? mnt_get_write_access_file+0x1af/0x3b0
[  547.377686][T23891]  ? mnt_put_write_access_file+0xc2/0x100
[  547.377709][T23891]  ? file_update_time+0x1ef/0x220
[  547.377731][T23891]  shmem_file_write_iter+0x105/0x130
[  547.377753][T23891]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  547.377775][T23891]  __kernel_write_iter+0x392/0x830
[  547.377801][T23891]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  547.377823][T23891]  ? __cfi___kernel_write_iter+0x10/0x10
[  547.377848][T23891]  ? get_dump_page+0x160/0x220
[  547.377868][T23891]  ? __asan_memset+0x39/0x50
[  547.377891][T23891]  ? iov_iter_bvec+0xc0/0x180
[  547.377921][T23891]  dump_user_range+0xb06/0xdf0
[  547.377948][T23891]  ? __cfi_dump_emit+0x10/0x10
[  547.377973][T23891]  ? __cfi_dump_user_range+0x10/0x10
[  547.377998][T23891]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  547.378025][T23891]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  547.378053][T23891]  elf_core_dump+0x2cd9/0x3810
[  547.378086][T23891]  ? __cfi_elf_core_dump+0x10/0x10
[  547.378123][T23891]  ? dump_interrupted+0xf0/0xf0
[  547.378146][T23891]  ? filp_open+0x182/0x1d0
[  547.378167][T23891]  ? 0xffffffffff600000
[  547.378183][T23891]  do_coredump+0x1bf7/0x2bd0
[  547.378211][T23891]  ? __cfi_do_coredump+0x10/0x10
[  547.378234][T23891]  ? asm_exc_page_fault+0x2b/0x30
[  547.378263][T23891]  ? __kasan_slab_free+0x6a/0x80
[  547.378291][T23891]  ? kmem_cache_free+0x1c1/0x4c0
[  547.378318][T23891]  get_signal+0x11fd/0x14f0
[  547.378343][T23891]  arch_do_signal_or_restart+0x96/0x720
[  547.378372][T23891]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  547.378402][T23891]  irqentry_exit_to_user_mode+0x4e/0xb0
[  547.378427][T23891]  irqentry_exit+0x16/0x60
[  547.378452][T23891]  exc_page_fault+0x66/0xc0
[  547.378475][T23891]  asm_exc_page_fault+0x2b/0x30
[  547.378495][T23891] RIP: 0033:0x307a7973
[  547.378515][T23891] Code: Unable to access opcode bytes at 0x307a7949.
[  547.378532][T23891] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  547.378551][T23891] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  547.378567][T23891] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  547.378583][T23891] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  547.378598][T23891] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  547.378613][T23891] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  547.378631][T23891]  </TASK>
[  547.447242][  T390] usb 3-1: device descriptor read/64, error -71
[  547.456650][T23891] memory: usage 304280kB, limit 307200kB, failcnt 50768
[  547.707236][  T390] usb 3-1: device descriptor read/64, error -71
[  547.716817][T23891] memory+swap: usage 432040kB, limit 9007199254740988kB, failcnt 0
[  547.870634][T23891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  547.877573][T23891] Memory cgroup stats for /syz1:
[  547.877684][T23891] cache 314281984
[  547.886243][T23891] rss 163840
[  547.889472][T23891] rss_huge 0
[  547.892671][T23891] shmem 247459840
[  547.896291][T23891] mapped_file 2920448
[  547.900590][T23891] dirty 0
[  547.903532][T23891] writeback 0
[  547.906802][T23891] workingset_refault_anon 38
[  547.911430][T23891] workingset_refault_file 82
[  547.916020][T23891] swap 127836160
[  547.919581][T23891] swapcached 159744
[  547.923386][T23891] pgpgin 1445610
[  547.926927][T23891] pgpgout 1370854
[  547.930568][T23891] pgfault 686610
[  547.934110][T23891] pgmajfault 29372
[  547.937842][T23891] inactive_anon 133832704
[  547.942173][T23891] active_anon 113917952
[  547.946315][T23891] inactive_file 0
[  547.949951][T23891] active_file 0
[  547.953405][T23891] unevictable 66822144
[  547.957518][  T390] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  547.957737][T23891] hierarchical_memory_limit 314572800
[  547.970523][T23891] hierarchical_memsw_limit 9223372036854771712
[  547.976681][T23891] total_cache 314281984
[  547.980921][T23891] total_rss 163840
[  547.984811][T23891] total_rss_huge 0
[  547.988791][T23891] total_shmem 247459840
[  547.992963][T23891] total_mapped_file 2920448
[  547.997489][T23891] total_dirty 0
[  548.000942][T23891] total_writeback 0
[  548.004731][T23891] total_workingset_refault_anon 38
[  548.009838][T23891] total_workingset_refault_file 82
[  548.014941][T23891] total_swap 127836160
[  548.019017][T23891] total_swapcached 159744
[  548.023340][T23891] total_pgpgin 1445610
[  548.027413][T23891] total_pgpgout 1370854
[  548.031561][T23891] total_pgfault 686610
[  548.035609][T23891] total_pgmajfault 29372
[  548.039858][T23891] total_inactive_anon 133832704
[  548.044706][T23891] total_active_anon 113917952
[  548.049410][T23891] total_inactive_file 0
[  548.053569][T23891] total_active_file 0
[  548.057805][T23891] total_unevictable 66822144
[  548.062407][T23891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23887,uid=0
[  548.077354][T23891] Memory cgroup out of memory: Killed process 23887 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  548.127272][  T390] usb 3-1: device descriptor read/64, error -71
[  548.437207][  T390] usb 3-1: device descriptor read/64, error -71
[  548.550664][  T390] usb usb3-port1: attempt power cycle
[  548.793059][T23883] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  548.810337][   T36] audit: type=1326 audit(2000000077.190:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24280 comm="syz.1.8489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f238e929 code=0x0
[  548.869822][T23883] CPU: 0 UID: 0 PID: 23883 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  548.869856][T23883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  548.869870][T23883] Call Trace:
[  548.869877][T23883]  <TASK>
[  548.869886][T23883]  __dump_stack+0x21/0x30
[  548.869916][T23883]  dump_stack_lvl+0x10c/0x190
[  548.869941][T23883]  ? __cfi_dump_stack_lvl+0x10/0x10
[  548.869966][T23883]  ? ___ratelimit+0x3f7/0x5a0
[  548.869988][T23883]  dump_stack+0x19/0x20
[  548.870012][T23883]  dump_header+0xd7/0x490
[  548.870061][T23883]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  548.870084][T23883]  oom_kill_process+0x4c0/0x7e0
[  548.870104][T23883]  ? sched_clock_cpu+0x75/0x400
[  548.870129][T23883]  out_of_memory+0x7ee/0xbd0
[  548.870153][T23883]  ? __cfi_out_of_memory+0x10/0x10
[  548.870179][T23883]  ? mutex_lock_killable+0x92/0x1c0
[  548.870204][T23883]  ? __cfi_mutex_lock_killable+0x10/0x10
[  548.870229][T23883]  mem_cgroup_out_of_memory+0x279/0x350
[  548.870258][T23883]  ? drain_obj_stock+0xed0/0xed0
[  548.870287][T23883]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  548.870313][T23883]  try_charge_memcg+0x8f7/0xde0
[  548.870336][T23883]  ? __cfi_try_charge_memcg+0x10/0x10
[  548.870358][T23883]  ? __alloc_pages_noprof+0x30d/0x6c0
[  548.870380][T23883]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  548.870401][T23883]  ? __folio_batch_add_and_move+0x2ab/0x370
[  548.870422][T23883]  __mem_cgroup_charge+0xf6/0x410
[  548.870446][T23883]  ? __kasan_check_write+0x18/0x20
[  548.870470][T23883]  ? _raw_spin_lock+0x8c/0x120
[  548.870499][T23883]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  548.870526][T23883]  shmem_alloc_and_add_folio+0x86d/0x1050
[  548.870560][T23883]  ? put_swap_device+0x130/0x130
[  548.870590][T23883]  ? shmem_huge_global_enabled+0x2da/0x360
[  548.870620][T23883]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  548.870649][T23883]  ? __kasan_check_write+0x18/0x20
[  548.870673][T23883]  ? _raw_spin_lock+0x8c/0x120
[  548.870702][T23883]  shmem_get_folio_gfp+0x5f0/0x1380
[  548.870734][T23883]  ? shmem_get_folio+0xc0/0xc0
[  548.870761][T23883]  ? follow_page_pte+0xa5c/0xb90
[  548.870782][T23883]  ? inode_to_bdi+0x6d/0x100
[  548.870806][T23883]  shmem_write_begin+0xf4/0x270
[  548.870837][T23883]  generic_perform_write+0x32d/0x960
[  548.870864][T23883]  ? __cfi_generic_perform_write+0x10/0x10
[  548.870887][T23883]  ? down_write+0xe9/0x2a0
[  548.870912][T23883]  ? file_update_time+0xa3/0x220
[  548.870935][T23883]  shmem_file_write_iter+0x105/0x130
[  548.870957][T23883]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  548.870979][T23883]  __kernel_write_iter+0x392/0x830
[  548.871005][T23883]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  548.871027][T23883]  ? __cfi___kernel_write_iter+0x10/0x10
[  548.871053][T23883]  ? get_dump_page+0x160/0x220
[  548.871074][T23883]  ? __asan_memset+0x39/0x50
[  548.871097][T23883]  ? iov_iter_bvec+0xc0/0x180
[  548.871127][T23883]  dump_user_range+0xb06/0xdf0
[  548.871154][T23883]  ? __cfi_dump_emit+0x10/0x10
[  548.871187][T23883]  ? __cfi_dump_user_range+0x10/0x10
[  548.871213][T23883]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  548.871240][T23883]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  548.871268][T23883]  elf_core_dump+0x2cd9/0x3810
[  548.871302][T23883]  ? __cfi_elf_core_dump+0x10/0x10
[  548.871339][T23883]  ? dump_interrupted+0xf0/0xf0
[  548.871363][T23883]  ? filp_open+0x182/0x1d0
[  548.871383][T23883]  ? 0xffffffffff600000
[  548.871401][T23883]  do_coredump+0x1bf7/0x2bd0
[  548.871428][T23883]  ? __cfi_do_coredump+0x10/0x10
[  548.871451][T23883]  ? asm_exc_page_fault+0x2b/0x30
[  548.871479][T23883]  ? __kasan_slab_free+0x6a/0x80
[  548.871508][T23883]  ? kmem_cache_free+0x1c1/0x4c0
[  548.871534][T23883]  get_signal+0x11fd/0x14f0
[  548.871560][T23883]  arch_do_signal_or_restart+0x96/0x720
[  548.871587][T23883]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  548.871618][T23883]  irqentry_exit_to_user_mode+0x4e/0xb0
[  548.871645][T23883]  irqentry_exit+0x16/0x60
[  548.871669][T23883]  exc_page_fault+0x66/0xc0
[  548.871692][T23883]  asm_exc_page_fault+0x2b/0x30
[  548.871712][T23883] RIP: 0033:0x307a7973
[  548.871733][T23883] Code: Unable to access opcode bytes at 0x307a7949.
[  548.871744][T23883] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  548.871764][T23883] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  548.871780][T23883] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  548.871796][T23883] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  548.871813][T23883] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  548.871827][T23883] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  548.871845][T23883]  </TASK>
[  548.871904][T23883] memory: usage 307200kB, limit 307200kB, failcnt 53747
[  549.334759][T23883] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  549.355502][  T390] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  549.356032][T23883] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  549.370088][T23883] Memory cgroup stats for /syz1:
[  549.372780][T23883] cache 314335232
[  549.381493][T23883] rss 237568
[  549.384708][T23883] rss_huge 0
[  549.387969][T23883] shmem 247513088
[  549.391679][T23883] mapped_file 0
[  549.395209][T23883] dirty 0
[  549.398233][T23883] writeback 0
[  549.401631][T23883] workingset_refault_anon 41
[  549.406300][T23883] workingset_refault_file 82
[  549.410961][  T390] usb 3-1: device descriptor read/8, error -71
[  549.417215][T23883] swap 127995904
[  549.420793][T23883] swapcached 0
[  549.424171][T23883] pgpgin 1454806
[  549.427747][T23883] pgpgout 1380050
[  549.431378][T23883] pgfault 687290
[  549.434922][T23883] pgmajfault 29374
[  549.438690][T23883] inactive_anon 198995968
[  549.443057][T23883] active_anon 48754688
[  549.447131][T23883] inactive_file 0
[  549.450925][T23883] active_file 0
[  549.456086][T23883] unevictable 66822144
[  549.460410][T23883] hierarchical_memory_limit 314572800
[  549.465911][T23883] hierarchical_memsw_limit 9223372036854771712
[  549.472215][T23883] total_cache 314335232
[  549.476660][T23883] total_rss 237568
[  549.482751][T23883] total_rss_huge 0
[  549.486488][T23883] total_shmem 247513088
[  549.490676][T23883] total_mapped_file 0
[  549.494658][T23883] total_dirty 0
[  549.498183][T23883] total_writeback 0
[  549.501991][T23883] total_workingset_refault_anon 41
[  549.507099][T23883] total_workingset_refault_file 82
[  549.512280][T23883] total_swap 127995904
[  549.516350][T23883] total_swapcached 0
[  549.520293][T23883] total_pgpgin 1454806
[  549.524361][T23883] total_pgpgout 1380050
[  549.528556][T23883] total_pgfault 687290
[  549.532651][T23883] total_pgmajfault 29374
[  549.536890][T23883] total_inactive_anon 198995968
[  549.541811][T23883] total_active_anon 48754688
[  549.546439][T23883] total_inactive_file 0
[  549.550688][T23883] total_active_file 0
[  549.554706][T23883] total_unevictable 66822144
[  549.559401][T23883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23912,uid=0
[  549.574420][T23883] Memory cgroup out of memory: Killed process 23912 (syz.1.8352) total-vm:89960kB, anon-rss:916kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[  549.591558][  T390] usb 3-1: device descriptor read/8, error -71
[  549.698099][T23899] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  549.708043][T23899] CPU: 1 UID: 0 PID: 23899 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  549.708075][T23899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  549.708089][T23899] Call Trace:
[  549.708096][T23899]  <TASK>
[  549.708104][T23899]  __dump_stack+0x21/0x30
[  549.708134][T23899]  dump_stack_lvl+0x10c/0x190
[  549.708159][T23899]  ? __cfi_dump_stack_lvl+0x10/0x10
[  549.708183][T23899]  ? ___ratelimit+0x3f7/0x5a0
[  549.708206][T23899]  dump_stack+0x19/0x20
[  549.708229][T23899]  dump_header+0xd7/0x490
[  549.708259][T23899]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  549.708282][T23899]  oom_kill_process+0x4c0/0x7e0
[  549.708302][T23899]  ? sched_clock_cpu+0x75/0x400
[  549.708327][T23899]  out_of_memory+0x7ee/0xbd0
[  549.708352][T23899]  ? __cfi_out_of_memory+0x10/0x10
[  549.708372][T23899]  ? mutex_lock_killable+0x104/0x1c0
[  549.708397][T23899]  ? __cfi_mutex_lock_killable+0x10/0x10
[  549.708423][T23899]  mem_cgroup_out_of_memory+0x279/0x350
[  549.708451][T23899]  ? drain_obj_stock+0xed0/0xed0
[  549.708479][T23899]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  549.708507][T23899]  try_charge_memcg+0x8f7/0xde0
[  549.708531][T23899]  ? __cfi_try_charge_memcg+0x10/0x10
[  549.708554][T23899]  ? __alloc_pages_noprof+0x30d/0x6c0
[  549.708576][T23899]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  549.708598][T23899]  ? __folio_batch_add_and_move+0x2ab/0x370
[  549.708620][T23899]  __mem_cgroup_charge+0xf6/0x410
[  549.708644][T23899]  ? __kasan_check_write+0x18/0x20
[  549.708669][T23899]  ? _raw_spin_lock+0x8c/0x120
[  549.708697][T23899]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  549.708725][T23899]  shmem_alloc_and_add_folio+0x86d/0x1050
[  549.708759][T23899]  ? put_swap_device+0x130/0x130
[  549.708789][T23899]  ? shmem_huge_global_enabled+0x2da/0x360
[  549.708819][T23899]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  549.708848][T23899]  ? __kasan_check_write+0x18/0x20
[  549.708873][T23899]  ? _raw_spin_lock+0x8c/0x120
[  549.708902][T23899]  shmem_get_folio_gfp+0x5f0/0x1380
[  549.708933][T23899]  ? shmem_get_folio+0xc0/0xc0
[  549.708961][T23899]  ? follow_page_pte+0xa5c/0xb90
[  549.708982][T23899]  ? inode_to_bdi+0x6d/0x100
[  549.709006][T23899]  shmem_write_begin+0xf4/0x270
[  549.709037][T23899]  generic_perform_write+0x32d/0x960
[  549.709064][T23899]  ? __cfi_generic_perform_write+0x10/0x10
[  549.709088][T23899]  ? down_write+0xe9/0x2a0
[  549.709114][T23899]  ? file_update_time+0xa3/0x220
[  549.709136][T23899]  shmem_file_write_iter+0x105/0x130
[  549.709159][T23899]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  549.709181][T23899]  __kernel_write_iter+0x392/0x830
[  549.709207][T23899]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  549.709230][T23899]  ? __cfi___kernel_write_iter+0x10/0x10
[  549.709256][T23899]  ? get_dump_page+0x160/0x220
[  549.709276][T23899]  ? __asan_memset+0x39/0x50
[  549.709300][T23899]  ? iov_iter_bvec+0xc0/0x180
[  549.709329][T23899]  dump_user_range+0xb06/0xdf0
[  549.709362][T23899]  ? __cfi_dump_emit+0x10/0x10
[  549.709387][T23899]  ? __cfi_dump_user_range+0x10/0x10
[  549.709414][T23899]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  549.709441][T23899]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  549.709469][T23899]  elf_core_dump+0x2cd9/0x3810
[  549.709503][T23899]  ? __cfi_elf_core_dump+0x10/0x10
[  549.709541][T23899]  ? dump_interrupted+0xf0/0xf0
[  549.709565][T23899]  ? filp_open+0x182/0x1d0
[  549.709586][T23899]  ? 0xffffffffff600000
[  549.709603][T23899]  do_coredump+0x1bf7/0x2bd0
[  549.709632][T23899]  ? __cfi_do_coredump+0x10/0x10
[  549.709655][T23899]  ? asm_exc_page_fault+0x2b/0x30
[  549.709684][T23899]  ? __kasan_slab_free+0x6a/0x80
[  549.709713][T23899]  ? kmem_cache_free+0x1c1/0x4c0
[  549.709740][T23899]  get_signal+0x11fd/0x14f0
[  549.709766][T23899]  arch_do_signal_or_restart+0x96/0x720
[  549.709794][T23899]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  549.709826][T23899]  irqentry_exit_to_user_mode+0x4e/0xb0
[  549.709853][T23899]  irqentry_exit+0x16/0x60
[  549.709877][T23899]  exc_page_fault+0x66/0xc0
[  549.709901][T23899]  asm_exc_page_fault+0x2b/0x30
[  549.709921][T23899] RIP: 0033:0x307a7973
[  549.709941][T23899] Code: Unable to access opcode bytes at 0x307a7949.
[  549.709952][T23899] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  549.709988][T23899] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  549.710004][T23899] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  549.710021][T23899] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  549.710038][T23899] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  549.710052][T23899] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  549.710071][T23899]  </TASK>
[  549.710079][T23899] memory: usage 307200kB, limit 307200kB, failcnt 55166
[  549.837200][  T390] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  549.880383][T23899] memory+swap: usage 425076kB, limit 9007199254740988kB, failcnt 0
[  549.898293][  T390] usb 3-1: device descriptor read/8, error -71
[  549.898923][T23899] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  550.037756][  T390] usb 3-1: device descriptor read/8, error -71
[  550.040725][T23899] Memory cgroup stats for 
[  550.157287][  T390] usb usb3-port1: unable to enumerate USB device
[  550.162602][T23899] /syz1:
[  550.208676][T23899] cache 314130432
[  550.215162][T23899] rss 270336
[  550.218456][T23899] rss_huge 0
[  550.221653][T23899] shmem 247308288
[  550.225279][T23899] mapped_file 0
[  550.228931][T23899] dirty 0
[  550.231872][T23899] writeback 0
[  550.235157][T23899] workingset_refault_anon 49
[  550.240689][T23899] workingset_refault_file 98
[  550.245293][T23899] swap 127848448
[  550.248939][T23899] swapcached 28672
[  550.271189][T23899] pgpgin 1462609
[  550.274818][T23899] pgpgout 1387895
[  550.278509][T23899] pgfault 687676
[  550.282106][T23899] pgmajfault 29383
[  550.285903][T23899] inactive_anon 69754880
[  550.291405][T23899] active_anon 177823744
[  550.292101][   T36] audit: type=1326 audit(2000000078.670:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.2.8504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdabaf8e929 code=0x0
[  550.295571][T23899] inactive_file 0
[  550.323927][T23899] active_file 0
[  550.327526][T23899] unevictable 66822144
[  550.331597][T23899] hierarchical_memory_limit 314572800
[  550.337057][T23899] hierarchical_memsw_limit 9223372036854771712
[  550.343743][T23899] total_cache 314130432
[  550.348257][T23899] total_rss 270336
[  550.352049][T23899] total_rss_huge 0
[  550.355774][T23899] total_shmem 247308288
[  550.361569][T23899] total_mapped_file 0
[  550.365860][T23899] total_dirty 0
[  550.369455][T23899] total_writeback 0
[  550.373340][T23899] total_workingset_refault_anon 49
[  550.378769][T23899] total_workingset_refault_file 98
[  550.383969][T23899] total_swap 127848448
[  550.388269][T23899] total_swapcached 28672
[  550.392525][T23899] total_pgpgin 1462609
[  550.396688][T23899] total_pgpgout 1387895
[  550.401191][T23899] total_pgfault 687676
[  550.406985][T23899] total_pgmajfault 29383
[  550.411470][T23899] total_inactive_anon 69754880
[  550.416274][T23899] total_active_anon 177823744
[  550.420996][T23899] total_inactive_file 0
[  550.425184][T23899] total_active_file 0
[  550.429207][T23899] total_unevictable 66822144
[  550.433834][T23899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23899,uid=0
[  550.448809][T23899] Memory cgroup out of memory: Killed process 23899 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:51456kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[  550.701269][T24347] tmpfs: Unknown parameter 'ˆize'
[  550.711080][T24347] overlayfs: failed to clone upperpath
[  550.773543][T23921] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  550.807174][T23921] CPU: 0 UID: 0 PID: 23921 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  550.807208][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  550.807221][T23921] Call Trace:
[  550.807229][T23921]  <TASK>
[  550.807237][T23921]  __dump_stack+0x21/0x30
[  550.807266][T23921]  dump_stack_lvl+0x10c/0x190
[  550.807290][T23921]  ? __cfi_dump_stack_lvl+0x10/0x10
[  550.807314][T23921]  ? ___ratelimit+0x3f7/0x5a0
[  550.807336][T23921]  dump_stack+0x19/0x20
[  550.807360][T23921]  dump_header+0xd7/0x490
[  550.807390][T23921]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  550.807412][T23921]  oom_kill_process+0x4c0/0x7e0
[  550.807432][T23921]  ? sched_clock_cpu+0x75/0x400
[  550.807456][T23921]  out_of_memory+0x7ee/0xbd0
[  550.807475][T23921]  ? __cfi_out_of_memory+0x10/0x10
[  550.807494][T23921]  ? mutex_lock_killable+0x92/0x1c0
[  550.807519][T23921]  ? __cfi_mutex_lock_killable+0x10/0x10
[  550.807544][T23921]  mem_cgroup_out_of_memory+0x279/0x350
[  550.807572][T23921]  ? drain_obj_stock+0xed0/0xed0
[  550.807600][T23921]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  550.807627][T23921]  try_charge_memcg+0x8f7/0xde0
[  550.807651][T23921]  ? __cfi_try_charge_memcg+0x10/0x10
[  550.807673][T23921]  ? __alloc_pages_noprof+0x30d/0x6c0
[  550.807697][T23921]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  550.807718][T23921]  ? __folio_batch_add_and_move+0x2ab/0x370
[  550.807740][T23921]  __mem_cgroup_charge+0xf6/0x410
[  550.807781][T23921]  ? __kasan_check_write+0x18/0x20
[  550.807807][T23921]  ? _raw_spin_lock+0x8c/0x120
[  550.807838][T23921]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  550.807866][T23921]  shmem_alloc_and_add_folio+0x86d/0x1050
[  550.807902][T23921]  ? put_swap_device+0x130/0x130
[  550.807935][T23921]  ? shmem_huge_global_enabled+0x2da/0x360
[  550.807967][T23921]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  550.807998][T23921]  ? __kasan_check_write+0x18/0x20
[  550.808053][T23921]  ? _raw_spin_lock+0x8c/0x120
[  550.808085][T23921]  shmem_get_folio_gfp+0x5f0/0x1380
[  550.808121][T23921]  ? shmem_get_folio+0xc0/0xc0
[  550.808152][T23921]  ? follow_page_pte+0xa5c/0xb90
[  550.808177][T23921]  ? inode_to_bdi+0x6d/0x100
[  550.808203][T23921]  shmem_write_begin+0xf4/0x270
[  550.808239][T23921]  generic_perform_write+0x32d/0x960
[  550.808269][T23921]  ? __cfi_generic_perform_write+0x10/0x10
[  550.808297][T23921]  ? down_write+0xe9/0x2a0
[  550.808325][T23921]  ? file_update_time+0xa3/0x220
[  550.808351][T23921]  shmem_file_write_iter+0x105/0x130
[  550.808377][T23921]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  550.808402][T23921]  __kernel_write_iter+0x392/0x830
[  550.808431][T23921]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  550.808457][T23921]  ? __cfi___kernel_write_iter+0x10/0x10
[  550.808487][T23921]  ? get_dump_page+0x160/0x220
[  550.808510][T23921]  ? __asan_memset+0x39/0x50
[  550.808554][T23921]  ? iov_iter_bvec+0xc0/0x180
[  550.808590][T23921]  dump_user_range+0xb06/0xdf0
[  550.808621][T23921]  ? __cfi_dump_emit+0x10/0x10
[  550.808661][T23921]  ? __cfi_dump_user_range+0x10/0x10
[  550.808691][T23921]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  550.808721][T23921]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  550.808753][T23921]  elf_core_dump+0x2cd9/0x3810
[  550.808792][T23921]  ? __cfi_elf_core_dump+0x10/0x10
[  550.808834][T23921]  ? dump_interrupted+0xf0/0xf0
[  550.808861][T23921]  ? filp_open+0x182/0x1d0
[  550.808885][T23921]  ? 0xffffffffff600000
[  550.808904][T23921]  do_coredump+0x1bf7/0x2bd0
[  550.808936][T23921]  ? __cfi_do_coredump+0x10/0x10
[  550.808963][T23921]  ? asm_exc_page_fault+0x2b/0x30
[  550.808995][T23921]  ? __kasan_slab_free+0x6a/0x80
[  550.809033][T23921]  ? kmem_cache_free+0x1c1/0x4c0
[  550.809065][T23921]  get_signal+0x11fd/0x14f0
[  550.809094][T23921]  arch_do_signal_or_restart+0x96/0x720
[  550.809125][T23921]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  550.809160][T23921]  irqentry_exit_to_user_mode+0x4e/0xb0
[  550.809190][T23921]  irqentry_exit+0x16/0x60
[  550.809217][T23921]  exc_page_fault+0x66/0xc0
[  550.809244][T23921]  asm_exc_page_fault+0x2b/0x30
[  550.809266][T23921] RIP: 0033:0x307a7973
[  550.809288][T23921] Code: Unable to access opcode bytes at 0x307a7949.
[  550.809313][T23921] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  550.809333][T23921] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  550.809350][T23921] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  550.809368][T23921] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  550.809385][T23921] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  550.809401][T23921] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  550.809421][T23921]  </TASK>
[  550.809430][T23921] memory: usage 304856kB, limit 307200kB, failcnt 59105
[  551.263066][T23921] memory+swap: usage 423952kB, limit 9007199254740988kB, failcnt 0
[  551.271045][T23921] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  551.280341][T23921] Memory cgroup stats for /syz1:
[  551.280485][T23921] cache 307412992
[  551.289091][T23921] rss 278528
[  551.292293][T23921] rss_huge 0
[  551.295490][T23921] shmem 240529408
[  551.299156][T23921] mapped_file 61440
[  551.302966][T23921] dirty 0
[  551.305910][T23921] writeback 0
[  551.309456][T23921] workingset_refault_anon 51
[  551.315305][T23921] workingset_refault_file 114
[  551.320124][T23921] swap 127954944
[  551.323745][T23921] swapcached 40960
[  551.328202][T23921] pgpgin 1468762
[  551.331756][T23921] pgpgout 1395684
[  551.335392][T23921] pgfault 688002
[  551.340507][T23921] pgmajfault 29386
[  551.344238][T23921] inactive_anon 212766720
[  551.351903][T23921] active_anon 27660288
[  551.355986][T23921] inactive_file 0
[  551.359785][T23921] active_file 61440
[  551.363591][T23921] unevictable 66822144
[  551.370839][T23921] hierarchical_memory_limit 314572800
[  551.380404][T23921] hierarchical_memsw_limit 9223372036854771712
[  551.387930][T23921] total_cache 307412992
[  551.392121][T23921] total_rss 278528
[  551.395859][T23921] total_rss_huge 0
[  551.399704][T23921] total_shmem 240529408
[  551.403883][T23921] total_mapped_file 61440
[  551.408266][T23921] total_dirty 0
[  551.411855][T23921] total_writeback 0
[  551.424981][T23921] total_workingset_refault_anon 51
[  551.432567][T23921] total_workingset_refault_file 114
[  551.437981][T23921] total_swap 127954944
[  551.442055][T23921] total_swapcached 40960
[  551.446293][T23921] total_pgpgin 1468762
[  551.450665][T23921] total_pgpgout 1395684
[  551.454819][T23921] total_pgfault 688002
[  551.459045][T23921] total_pgmajfault 29386
[  551.463357][T23921] total_inactive_anon 212766720
[  551.468406][T23921] total_active_anon 27660288
[  551.473007][T23921] total_inactive_file 0
[  551.477357][T23921] total_active_file 61440
[  551.487282][T23921] total_unevictable 66822144
[  551.491948][T23921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23916,uid=0
[  551.507406][T23921] Memory cgroup out of memory: Killed process 23916 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  551.781990][T23933] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  551.874870][T23933] CPU: 0 UID: 0 PID: 23933 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  551.874907][T23933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.874920][T23933] Call Trace:
[  551.874927][T23933]  <TASK>
[  551.874935][T23933]  __dump_stack+0x21/0x30
[  551.874964][T23933]  dump_stack_lvl+0x10c/0x190
[  551.874989][T23933]  ? __cfi_dump_stack_lvl+0x10/0x10
[  551.875013][T23933]  ? ___ratelimit+0x3f7/0x5a0
[  551.875035][T23933]  dump_stack+0x19/0x20
[  551.875057][T23933]  dump_header+0xd7/0x490
[  551.875087][T23933]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  551.875110][T23933]  oom_kill_process+0x4c0/0x7e0
[  551.875130][T23933]  ? sched_clock_cpu+0x75/0x400
[  551.875154][T23933]  out_of_memory+0x7ee/0xbd0
[  551.875173][T23933]  ? __cfi_out_of_memory+0x10/0x10
[  551.875199][T23933]  ? mutex_lock_killable+0x92/0x1c0
[  551.875223][T23933]  ? __cfi_mutex_lock_killable+0x10/0x10
[  551.875249][T23933]  mem_cgroup_out_of_memory+0x279/0x350
[  551.875277][T23933]  ? drain_obj_stock+0xed0/0xed0
[  551.875305][T23933]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  551.875332][T23933]  try_charge_memcg+0x8f7/0xde0
[  551.875356][T23933]  ? __cfi_try_charge_memcg+0x10/0x10
[  551.875378][T23933]  ? __alloc_pages_noprof+0x30d/0x6c0
[  551.875401][T23933]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  551.875423][T23933]  ? __folio_batch_add_and_move+0x2ab/0x370
[  551.875444][T23933]  __mem_cgroup_charge+0xf6/0x410
[  551.875469][T23933]  ? __kasan_check_write+0x18/0x20
[  551.875493][T23933]  ? _raw_spin_lock+0x8c/0x120
[  551.875521][T23933]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  551.875549][T23933]  shmem_alloc_and_add_folio+0x86d/0x1050
[  551.875582][T23933]  ? put_swap_device+0x130/0x130
[  551.875613][T23933]  ? shmem_huge_global_enabled+0x2da/0x360
[  551.875643][T23933]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  551.875672][T23933]  ? __kasan_check_write+0x18/0x20
[  551.875696][T23933]  ? _raw_spin_lock+0x8c/0x120
[  551.875726][T23933]  shmem_get_folio_gfp+0x5f0/0x1380
[  551.875757][T23933]  ? shmem_get_folio+0xc0/0xc0
[  551.875788][T23933]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  551.875811][T23933]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  551.875835][T23933]  ? inode_to_bdi+0x6d/0x100
[  551.875858][T23933]  shmem_write_begin+0xf4/0x270
[  551.875890][T23933]  generic_perform_write+0x32d/0x960
[  551.875920][T23933]  ? __cfi_generic_perform_write+0x10/0x10
[  551.875943][T23933]  ? down_write+0xe9/0x2a0
[  551.875967][T23933]  ? mnt_get_write_access_file+0x1af/0x3b0
[  551.875988][T23933]  ? mnt_put_write_access_file+0xc2/0x100
[  551.876010][T23933]  ? file_update_time+0x1ef/0x220
[  551.876032][T23933]  shmem_file_write_iter+0x105/0x130
[  551.876054][T23933]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  551.876075][T23933]  __kernel_write_iter+0x392/0x830
[  551.876102][T23933]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  551.876125][T23933]  ? __cfi___kernel_write_iter+0x10/0x10
[  551.876150][T23933]  ? get_dump_page+0x160/0x220
[  551.876170][T23933]  ? __asan_memset+0x39/0x50
[  551.876200][T23933]  ? iov_iter_bvec+0xc0/0x180
[  551.876229][T23933]  dump_user_range+0xb06/0xdf0
[  551.876257][T23933]  ? __cfi_dump_emit+0x10/0x10
[  551.876281][T23933]  ? __cfi_dump_user_range+0x10/0x10
[  551.876307][T23933]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  551.876334][T23933]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  551.876362][T23933]  elf_core_dump+0x2cd9/0x3810
[  551.876395][T23933]  ? __cfi_elf_core_dump+0x10/0x10
[  551.876432][T23933]  ? dump_interrupted+0xf0/0xf0
[  551.876456][T23933]  ? filp_open+0x182/0x1d0
[  551.876477][T23933]  ? 0xffffffffff600000
[  551.876494][T23933]  do_coredump+0x1bf7/0x2bd0
[  551.876522][T23933]  ? __cfi_do_coredump+0x10/0x10
[  551.876546][T23933]  ? asm_exc_page_fault+0x2b/0x30
[  551.876574][T23933]  ? __kasan_slab_free+0x6a/0x80
[  551.876603][T23933]  ? kmem_cache_free+0x1c1/0x4c0
[  551.876630][T23933]  get_signal+0x11fd/0x14f0
[  551.876655][T23933]  arch_do_signal_or_restart+0x96/0x720
[  551.876684][T23933]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  551.876715][T23933]  irqentry_exit_to_user_mode+0x4e/0xb0
[  551.876742][T23933]  irqentry_exit+0x16/0x60
[  551.876766][T23933]  exc_page_fault+0x66/0xc0
[  551.876789][T23933]  asm_exc_page_fault+0x2b/0x30
[  551.876809][T23933] RIP: 0033:0x307a7973
[  551.876829][T23933] Code: Unable to access opcode bytes at 0x307a7949.
[  551.876839][T23933] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  551.876860][T23933] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  551.876876][T23933] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  551.876892][T23933] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  551.876908][T23933] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  551.876922][T23933] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  551.876940][T23933]  </TASK>
[  552.354321][T23933] memory: usage 293168kB, limit 307200kB, failcnt 61449
[  552.361339][T23933] memory+swap: usage 416296kB, limit 9007199254740988kB, failcnt 0
[  552.475094][T23933] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  552.483421][T23933] Memory cgroup stats for /syz1:
[  552.483565][T23933] cache 299212800
[  552.601756][T23933] rss 118784
[  552.638058][T23933] rss_huge 0
[  552.641384][T23933] shmem 232390656
[  552.702621][T24382] tmpfs: Unknown parameter 'ˆize'
[  552.713280][T24382] overlayfs: failed to clone upperpath
[  552.718848][  T531] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  552.719643][T23933] mapped_file 0
[  552.729900][T23933] dirty 0
[  552.732940][T23933] writeback 192512
[  552.736675][T23933] workingset_refault_anon 54
[  552.741303][T23933] workingset_refault_file 114
[  552.745988][T23933] swap 125980672
[  552.749567][T23933] swapcached 364544
[  552.753376][T23933] pgpgin 1473686
[  552.756949][T23933] pgpgout 1402556
[  552.760615][T23933] pgfault 688168
[  552.764167][T23933] pgmajfault 29388
[  552.767914][T23933] inactive_anon 200454144
[  552.772249][T23933] active_anon 31928320
[  552.776321][T23933] inactive_file 0
[  552.779998][T23933] active_file 0
[  552.783465][T23933] unevictable 66822144
[  552.787570][T23933] hierarchical_memory_limit 314572800
[  552.792951][T23933] hierarchical_memsw_limit 9223372036854771712
[  552.799142][T23933] total_cache 299212800
[  552.809314][T23933] total_rss 118784
[  552.813145][T23933] total_rss_huge 0
[  552.817337][T23933] total_shmem 232390656
[  552.821506][T23933] total_mapped_file 0
[  552.825492][T23933] total_dirty 0
[  552.847188][T23933] total_writeback 192512
[  552.851454][T23933] total_workingset_refault_anon 54
[  552.856572][T23933] total_workingset_refault_file 114
[  552.877169][T23933] total_swap 125980672
[  552.881252][T23933] total_swapcached 364544
[  552.885582][T23933] total_pgpgin 1473686
[  552.895226][T23933] total_pgpgout 1402556
[  552.897263][  T531] usb 3-1: Using ep0 maxpacket: 32
[  552.904368][T23933] total_pgfault 688168
[  552.911524][  T531] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  552.920916][  T531] usb 3-1: config 0 has no interface number 0
[  552.921130][T23933] total_pgmajfault 29388
[  552.927008][  T531] usb 3-1: config 0 interface 49 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  552.951399][T23933] total_inactive_anon 200454144
[  552.957226][  T531] usb 3-1: config 0 interface 49 has no altsetting 0
[  552.965386][  T531] usb 3-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19
[  552.974710][  T531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.976743][T23933] total_active_anon 31928320
[  552.985587][  T531] usb 3-1: Product: syz
[  552.991774][  T531] usb 3-1: Manufacturer: syz
[  552.996400][  T531] usb 3-1: SerialNumber: syz
[  553.004220][  T531] usb 3-1: config 0 descriptor??
[  553.015863][T23933] total_inactive_file 0
[  553.033581][T23933] total_active_file 0
[  553.050388][T23933] total_unevictable 66822144
[  553.066534][T23933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23892,uid=0
[  553.125359][T23933] Memory cgroup out of memory: Killed process 23892 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  553.259498][  T531] usb 3-1: USB disconnect, device number 28
[  553.849651][T23891] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  553.874422][   T36] audit: type=1326 audit(2000000082.250:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24399 comm="syz.2.8530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdabaf8e929 code=0x0
[  553.915618][T23891] CPU: 0 UID: 0 PID: 23891 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  553.915653][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  553.915666][T23891] Call Trace:
[  553.915674][T23891]  <TASK>
[  553.915682][T23891]  __dump_stack+0x21/0x30
[  553.915713][T23891]  dump_stack_lvl+0x10c/0x190
[  553.915737][T23891]  ? __cfi_dump_stack_lvl+0x10/0x10
[  553.915761][T23891]  ? ___ratelimit+0x3f7/0x5a0
[  553.915789][T23891]  dump_stack+0x19/0x20
[  553.915812][T23891]  dump_header+0xd7/0x490
[  553.915841][T23891]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  553.915864][T23891]  oom_kill_process+0x4c0/0x7e0
[  553.915884][T23891]  ? sched_clock_cpu+0x75/0x400
[  553.915908][T23891]  out_of_memory+0x7ee/0xbd0
[  553.915928][T23891]  ? __cfi_out_of_memory+0x10/0x10
[  553.915946][T23891]  ? mutex_lock_killable+0x92/0x1c0
[  553.915970][T23891]  ? __cfi_mutex_lock_killable+0x10/0x10
[  553.915995][T23891]  mem_cgroup_out_of_memory+0x279/0x350
[  553.916023][T23891]  ? drain_obj_stock+0xed0/0xed0
[  553.916057][T23891]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  553.916084][T23891]  try_charge_memcg+0x8f7/0xde0
[  553.916107][T23891]  ? _raw_spin_lock+0x8c/0x120
[  553.916136][T23891]  ? __cfi_try_charge_memcg+0x10/0x10
[  553.916158][T23891]  ? __alloc_pages_noprof+0x30d/0x6c0
[  553.916180][T23891]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  553.916201][T23891]  ? __folio_batch_add_and_move+0x2ab/0x370
[  553.916222][T23891]  __mem_cgroup_charge+0xf6/0x410
[  553.916247][T23891]  ? __kasan_check_write+0x18/0x20
[  553.916271][T23891]  ? _raw_spin_lock+0x8c/0x120
[  553.916299][T23891]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  553.916325][T23891]  shmem_alloc_and_add_folio+0x86d/0x1050
[  553.916359][T23891]  ? put_swap_device+0x130/0x130
[  553.916389][T23891]  ? shmem_huge_global_enabled+0x2da/0x360
[  553.916419][T23891]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  553.916448][T23891]  ? __kasan_check_write+0x18/0x20
[  553.916472][T23891]  ? _raw_spin_lock+0x8c/0x120
[  553.916501][T23891]  shmem_get_folio_gfp+0x5f0/0x1380
[  553.916532][T23891]  ? shmem_get_folio+0xc0/0xc0
[  553.916558][T23891]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  553.916582][T23891]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  553.916605][T23891]  ? inode_to_bdi+0x6d/0x100
[  553.916628][T23891]  shmem_write_begin+0xf4/0x270
[  553.916659][T23891]  generic_perform_write+0x32d/0x960
[  553.916686][T23891]  ? __cfi_generic_perform_write+0x10/0x10
[  553.916710][T23891]  ? down_write+0xe9/0x2a0
[  553.916733][T23891]  ? mnt_get_write_access_file+0x1af/0x3b0
[  553.916755][T23891]  ? mnt_put_write_access_file+0xc2/0x100
[  553.916776][T23891]  ? file_update_time+0x1ef/0x220
[  553.916799][T23891]  shmem_file_write_iter+0x105/0x130
[  553.916820][T23891]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  553.916842][T23891]  __kernel_write_iter+0x392/0x830
[  553.916868][T23891]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  553.916890][T23891]  ? __cfi___kernel_write_iter+0x10/0x10
[  553.916915][T23891]  ? get_dump_page+0x160/0x220
[  553.916936][T23891]  ? __asan_memset+0x39/0x50
[  553.916960][T23891]  ? iov_iter_bvec+0xc0/0x180
[  553.916989][T23891]  dump_user_range+0xb06/0xdf0
[  553.917016][T23891]  ? __cfi_dump_emit+0x10/0x10
[  553.917046][T23891]  ? __cfi_dump_user_range+0x10/0x10
[  553.917072][T23891]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  553.917098][T23891]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  553.917125][T23891]  elf_core_dump+0x2cd9/0x3810
[  553.917162][T23891]  ? __cfi_elf_core_dump+0x10/0x10
[  553.917197][T23891]  ? dump_interrupted+0xf0/0xf0
[  553.917221][T23891]  ? filp_open+0x182/0x1d0
[  553.917241][T23891]  ? 0xffffffffff600000
[  553.917259][T23891]  do_coredump+0x1bf7/0x2bd0
[  553.917288][T23891]  ? __cfi_do_coredump+0x10/0x10
[  553.917311][T23891]  ? asm_exc_page_fault+0x2b/0x30
[  553.917340][T23891]  ? __kasan_slab_free+0x6a/0x80
[  553.917369][T23891]  ? kmem_cache_free+0x1c1/0x4c0
[  553.917392][T23891]  get_signal+0x11fd/0x14f0
[  553.917414][T23891]  arch_do_signal_or_restart+0x96/0x720
[  553.917438][T23891]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  553.917464][T23891]  irqentry_exit_to_user_mode+0x4e/0xb0
[  553.917486][T23891]  irqentry_exit+0x16/0x60
[  553.917506][T23891]  exc_page_fault+0x66/0xc0
[  553.917526][T23891]  asm_exc_page_fault+0x2b/0x30
[  553.917542][T23891] RIP: 0033:0x307a7973
[  553.917560][T23891] Code: Unable to access opcode bytes at 0x307a7949.
[  553.917569][T23891] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  553.917586][T23891] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  553.917600][T23891] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  553.917613][T23891] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  553.917626][T23891] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  553.917639][T23891] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  553.917654][T23891]  </TASK>
[  554.390750][T23891] memory: usage 307200kB, limit 307200kB, failcnt 67766
[  554.397797][T23891] memory+swap: usage 432032kB, limit 9007199254740988kB, failcnt 0
[  554.405718][T23891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  554.412657][T23891] Memory cgroup stats for /syz1:
[  554.412793][T23891] cache 314380288
[  554.421536][T23891] rss 147456
[  554.424799][T23891] rss_huge 0
[  554.428048][T23891] shmem 247558144
[  554.431725][T23891] mapped_file 0
[  554.435237][T23891] dirty 0
[  554.438225][T23891] writeback 0
[  554.441537][T23891] workingset_refault_anon 112
[  554.446258][T23891] workingset_refault_file 1841
[  554.451068][T23891] swap 127827968
[  554.454642][T23891] swapcached 65536
[  554.458470][T23891] pgpgin 1507264
[  554.462054][T23891] pgpgout 1432508
[  554.465708][T23891] pgfault 689581
[  554.469352][T23891] pgmajfault 29414
[  554.473106][T23891] inactive_anon 160817152
[  554.477491][T23891] active_anon 86933504
[  554.481616][T23891] inactive_file 0
[  554.485274][T23891] active_file 0
[  554.494364][T23891] unevictable 66822144
[  554.498503][T23891] hierarchical_memory_limit 314572800
[  554.505237][T23891] hierarchical_memsw_limit 9223372036854771712
[  554.506848][T24404] tmpfs: Unknown parameter 'ˆize'
[  554.516467][T23891] total_cache 314380288
[  554.522239][T24404] overlayfs: failed to clone upperpath
[  554.528449][T23891] total_rss 147456
[  554.532211][T23891] total_rss_huge 0
[  554.535926][T23891] total_shmem 247558144
[  554.540286][T23891] total_mapped_file 0
[  554.544327][T23891] total_dirty 0
[  554.547847][T23891] total_writeback 0
[  554.551694][T23891] total_workingset_refault_anon 112
[  554.556946][T23891] total_workingset_refault_file 1841
[  554.562263][T23891] total_swap 127827968
[  554.566372][T23891] total_swapcached 65536
[  554.570641][T23891] total_pgpgin 1507264
[  554.574711][T23891] total_pgpgout 1432508
[  554.578880][T23891] total_pgfault 689581
[  554.582943][T23891] total_pgmajfault 29414
[  554.587188][T23891] total_inactive_anon 160817152
[  554.592031][T23891] total_active_anon 86933504
[  554.596598][T23891] total_inactive_file 0
[  554.600766][T23891] total_active_file 0
[  554.604737][T23891] total_unevictable 66822144
[  554.609329][T23891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23915,uid=0
[  554.624278][T23891] Memory cgroup out of memory: Killed process 23915 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  555.018985][T23923] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  555.070812][   T36] audit: type=1326 audit(2000000083.450:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.2.8536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdabaf8e929 code=0x0
[  555.093698][T23923] CPU: 0 UID: 0 PID: 23923 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  555.093732][T23923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  555.093746][T23923] Call Trace:
[  555.093753][T23923]  <TASK>
[  555.093763][T23923]  __dump_stack+0x21/0x30
[  555.093799][T23923]  dump_stack_lvl+0x10c/0x190
[  555.093827][T23923]  ? __cfi_dump_stack_lvl+0x10/0x10
[  555.093855][T23923]  ? ___ratelimit+0x3f7/0x5a0
[  555.093878][T23923]  dump_stack+0x19/0x20
[  555.093905][T23923]  dump_header+0xd7/0x490
[  555.093937][T23923]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  555.093969][T23923]  oom_kill_process+0x4c0/0x7e0
[  555.093991][T23923]  ? sched_clock_cpu+0x75/0x400
[  555.094017][T23923]  out_of_memory+0x7ee/0xbd0
[  555.094039][T23923]  ? __cfi_out_of_memory+0x10/0x10
[  555.094058][T23923]  ? mutex_lock_killable+0x92/0x1c0
[  555.094085][T23923]  ? __cfi_mutex_lock_killable+0x10/0x10
[  555.094113][T23923]  mem_cgroup_out_of_memory+0x279/0x350
[  555.094144][T23923]  ? drain_obj_stock+0xed0/0xed0
[  555.094174][T23923]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  555.094204][T23923]  try_charge_memcg+0x8f7/0xde0
[  555.094228][T23923]  ? __cfi_try_charge_memcg+0x10/0x10
[  555.094253][T23923]  ? __alloc_pages_noprof+0x30d/0x6c0
[  555.094277][T23923]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  555.094301][T23923]  ? __folio_batch_add_and_move+0x2ab/0x370
[  555.094324][T23923]  __mem_cgroup_charge+0xf6/0x410
[  555.094352][T23923]  ? __kasan_check_write+0x18/0x20
[  555.094387][T23923]  ? _raw_spin_lock+0x8c/0x120
[  555.094418][T23923]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  555.094446][T23923]  shmem_alloc_and_add_folio+0x86d/0x1050
[  555.094482][T23923]  ? put_swap_device+0x130/0x130
[  555.094514][T23923]  ? shmem_huge_global_enabled+0x2da/0x360
[  555.094546][T23923]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  555.094577][T23923]  ? __kasan_check_write+0x18/0x20
[  555.094602][T23923]  ? _raw_spin_lock+0x8c/0x120
[  555.094632][T23923]  shmem_get_folio_gfp+0x5f0/0x1380
[  555.094666][T23923]  ? shmem_get_folio+0xc0/0xc0
[  555.094693][T23923]  ? follow_page_pte+0xa5c/0xb90
[  555.094716][T23923]  ? inode_to_bdi+0x6d/0x100
[  555.094739][T23923]  shmem_write_begin+0xf4/0x270
[  555.094773][T23923]  generic_perform_write+0x32d/0x960
[  555.094800][T23923]  ? __cfi_generic_perform_write+0x10/0x10
[  555.094826][T23923]  ? down_write+0xe9/0x2a0
[  555.094852][T23923]  ? file_update_time+0xa3/0x220
[  555.094875][T23923]  shmem_file_write_iter+0x105/0x130
[  555.094899][T23923]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  555.094921][T23923]  __kernel_write_iter+0x392/0x830
[  555.094949][T23923]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  555.094979][T23923]  ? __cfi___kernel_write_iter+0x10/0x10
[  555.095006][T23923]  ? get_dump_page+0x160/0x220
[  555.095026][T23923]  ? __asan_memset+0x39/0x50
[  555.095052][T23923]  ? iov_iter_bvec+0xc0/0x180
[  555.095083][T23923]  dump_user_range+0xb06/0xdf0
[  555.095110][T23923]  ? __cfi_dump_emit+0x10/0x10
[  555.095137][T23923]  ? __cfi_dump_user_range+0x10/0x10
[  555.095164][T23923]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  555.095193][T23923]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  555.095223][T23923]  elf_core_dump+0x2cd9/0x3810
[  555.095260][T23923]  ? __cfi_elf_core_dump+0x10/0x10
[  555.095300][T23923]  ? dump_interrupted+0xf0/0xf0
[  555.095326][T23923]  ? filp_open+0x182/0x1d0
[  555.095348][T23923]  ? 0xffffffffff600000
[  555.095365][T23923]  do_coredump+0x1bf7/0x2bd0
[  555.095394][T23923]  ? __cfi_do_coredump+0x10/0x10
[  555.095418][T23923]  ? asm_exc_page_fault+0x2b/0x30
[  555.095448][T23923]  ? __kasan_slab_free+0x6a/0x80
[  555.095478][T23923]  ? kmem_cache_free+0x1c1/0x4c0
[  555.095507][T23923]  get_signal+0x11fd/0x14f0
[  555.095550][T23923]  arch_do_signal_or_restart+0x96/0x720
[  555.095580][T23923]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  555.095613][T23923]  ? fpregs_restore_userregs+0x11d/0x260
[  555.095636][T23923]  irqentry_exit_to_user_mode+0x4e/0xb0
[  555.095663][T23923]  irqentry_exit+0x16/0x60
[  555.095690][T23923]  exc_page_fault+0x66/0xc0
[  555.095716][T23923]  asm_exc_page_fault+0x2b/0x30
[  555.095736][T23923] RIP: 0033:0x307a7973
[  555.095760][T23923] Code: Unable to access opcode bytes at 0x307a7949.
[  555.095772][T23923] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  555.095794][T23923] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  555.095811][T23923] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  555.095828][T23923] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  555.095847][T23923] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  555.095862][T23923] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  555.095881][T23923]  </TASK>
[  555.095889][T23923] memory: usage 305584kB, limit 307200kB, failcnt 71922
[  555.417260][   T36] audit: type=1326 audit(2000000083.720:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24415 comm="syz.2.8536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdabaf8e929 code=0x0
[  555.419981][T23923] memory+swap: usage 423136kB, limit 9007199254740988kB, failcnt 0
[  555.794541][T23923] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  555.802806][T23923] Memory cgroup stats for /syz1:
[  555.802959][T23923] cache 314343424
[  555.811551][T23923] rss 163840
[  555.814803][T23923] rss_huge 0
[  555.818028][T23923] shmem 247521280
[  555.821709][T23923] mapped_file 0
[  555.825169][T23923] dirty 0
[  555.828132][T23923] writeback 0
[  555.831418][T23923] workingset_refault_anon 130
[  555.836142][T23923] workingset_refault_file 1857
[  555.840934][T23923] swap 127901696
[  555.844480][T23923] swapcached 94208
[  555.848256][T23923] pgpgin 1518623
[  555.851805][T23923] pgpgout 1443867
[  555.855436][T23923] pgfault 689765
[  555.859039][T23923] pgmajfault 29419
[  555.862761][T23923] inactive_anon 133029888
[  555.867080][T23923] active_anon 114720768
[  555.871278][T23923] inactive_file 0
[  555.874911][T23923] active_file 0
[  555.878385][T23923] unevictable 66822144
[  555.882498][T23923] hierarchical_memory_limit 314572800
[  555.887920][T23923] hierarchical_memsw_limit 9223372036854771712
[  555.894107][T23923] total_cache 314343424
[  555.898280][T23923] total_rss 163840
[  555.901990][T23923] total_rss_huge 0
[  555.905707][T23923] total_shmem 247521280
[  555.909883][T23923] total_mapped_file 0
[  555.913864][T23923] total_dirty 0
[  555.917331][T23923] total_writeback 0
[  555.921139][T23923] total_workingset_refault_anon 130
[  555.926336][T23923] total_workingset_refault_file 1857
[  555.931671][T23923] total_swap 127901696
[  555.935749][T23923] total_swapcached 94208
[  555.940031][T23923] total_pgpgin 1518623
[  555.944114][T23923] total_pgpgout 1443867
[  555.948310][T23923] total_pgfault 689765
[  555.952383][T23923] total_pgmajfault 29419
[  555.956685][T23923] total_inactive_anon 133029888
[  555.961551][T23923] total_active_anon 114720768
[  555.966217][T23923] total_inactive_file 0
[  555.970388][T23923] total_active_file 0
[  555.974633][T23923] total_unevictable 66822144
[  555.979277][T23923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23910,uid=0
[  555.994222][T23923] Memory cgroup out of memory: Killed process 23910 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  556.037494][T23914] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  556.077174][T23914] CPU: 0 UID: 0 PID: 23914 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  556.077209][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  556.077222][T23914] Call Trace:
[  556.077229][T23914]  <TASK>
[  556.077237][T23914]  __dump_stack+0x21/0x30
[  556.077265][T23914]  dump_stack_lvl+0x10c/0x190
[  556.077289][T23914]  ? __cfi_dump_stack_lvl+0x10/0x10
[  556.077312][T23914]  ? ___ratelimit+0x3f7/0x5a0
[  556.077334][T23914]  dump_stack+0x19/0x20
[  556.077357][T23914]  dump_header+0xd7/0x490
[  556.077385][T23914]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  556.077408][T23914]  oom_kill_process+0x4c0/0x7e0
[  556.077427][T23914]  ? sched_clock_cpu+0x75/0x400
[  556.077451][T23914]  out_of_memory+0x7ee/0xbd0
[  556.077470][T23914]  ? __cfi_out_of_memory+0x10/0x10
[  556.077489][T23914]  ? mutex_lock_killable+0x92/0x1c0
[  556.077512][T23914]  ? __cfi_mutex_lock_killable+0x10/0x10
[  556.077537][T23914]  mem_cgroup_out_of_memory+0x279/0x350
[  556.077565][T23914]  ? drain_obj_stock+0xed0/0xed0
[  556.077592][T23914]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  556.077618][T23914]  try_charge_memcg+0x8f7/0xde0
[  556.077647][T23914]  ? __cfi_try_charge_memcg+0x10/0x10
[  556.077669][T23914]  ? __alloc_pages_noprof+0x30d/0x6c0
[  556.077692][T23914]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  556.077712][T23914]  ? __folio_batch_add_and_move+0x2ab/0x370
[  556.077733][T23914]  __mem_cgroup_charge+0xf6/0x410
[  556.077756][T23914]  ? __kasan_check_write+0x18/0x20
[  556.077778][T23914]  ? _raw_spin_lock+0x8c/0x120
[  556.077806][T23914]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  556.077830][T23914]  shmem_alloc_and_add_folio+0x86d/0x1050
[  556.077862][T23914]  ? put_swap_device+0x130/0x130
[  556.077892][T23914]  ? shmem_huge_global_enabled+0x2da/0x360
[  556.077920][T23914]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  556.077948][T23914]  ? __kasan_check_write+0x18/0x20
[  556.077971][T23914]  ? _raw_spin_lock+0x8c/0x120
[  556.077997][T23914]  shmem_get_folio_gfp+0x5f0/0x1380
[  556.078024][T23914]  ? shmem_get_folio+0xc0/0xc0
[  556.078048][T23914]  ? follow_page_pte+0xa5c/0xb90
[  556.078066][T23914]  ? inode_to_bdi+0x6d/0x100
[  556.078087][T23914]  shmem_write_begin+0xf4/0x270
[  556.078116][T23914]  generic_perform_write+0x32d/0x960
[  556.078142][T23914]  ? __cfi_generic_perform_write+0x10/0x10
[  556.078164][T23914]  ? down_write+0xe9/0x2a0
[  556.078188][T23914]  ? file_update_time+0xa3/0x220
[  556.078208][T23914]  shmem_file_write_iter+0x105/0x130
[  556.078229][T23914]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  556.078251][T23914]  __kernel_write_iter+0x392/0x830
[  556.078275][T23914]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  556.078297][T23914]  ? __cfi___kernel_write_iter+0x10/0x10
[  556.078321][T23914]  ? get_dump_page+0x160/0x220
[  556.078339][T23914]  ? __asan_memset+0x39/0x50
[  556.078360][T23914]  ? iov_iter_bvec+0xc0/0x180
[  556.078388][T23914]  dump_user_range+0xb06/0xdf0
[  556.078415][T23914]  ? __cfi_dump_emit+0x10/0x10
[  556.078456][T23914]  ? __cfi_dump_user_range+0x10/0x10
[  556.078482][T23914]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  556.078511][T23914]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  556.078541][T23914]  elf_core_dump+0x2cd9/0x3810
[  556.078576][T23914]  ? __cfi_elf_core_dump+0x10/0x10
[  556.078615][T23914]  ? dump_interrupted+0xf0/0xf0
[  556.078662][T23914]  ? filp_open+0x182/0x1d0
[  556.078684][T23914]  ? 0xffffffffff600000
[  556.078702][T23914]  do_coredump+0x1bf7/0x2bd0
[  556.078732][T23914]  ? __cfi_do_coredump+0x10/0x10
[  556.078756][T23914]  ? asm_exc_page_fault+0x2b/0x30
[  556.078787][T23914]  ? __kasan_slab_free+0x6a/0x80
[  556.078817][T23914]  ? kmem_cache_free+0x1c1/0x4c0
[  556.078844][T23914]  get_signal+0x11fd/0x14f0
[  556.078870][T23914]  arch_do_signal_or_restart+0x96/0x720
[  556.078898][T23914]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  556.078929][T23914]  irqentry_exit_to_user_mode+0x4e/0xb0
[  556.078957][T23914]  irqentry_exit+0x16/0x60
[  556.078981][T23914]  exc_page_fault+0x66/0xc0
[  556.079006][T23914]  asm_exc_page_fault+0x2b/0x30
[  556.079027][T23914] RIP: 0033:0x307a7973
[  556.079048][T23914] Code: Unable to access opcode bytes at 0x307a7949.
[  556.079059][T23914] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  556.079078][T23914] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  556.079095][T23914] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  556.079111][T23914] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  556.079128][T23914] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  556.079143][T23914] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  556.079160][T23914]  </TASK>
[  556.079173][T23914] memory: usage 302360kB, limit 307200kB, failcnt 72388
[  556.261590][T24435] overlayfs: failed to resolve './file0': -2
[  556.273261][T23914] memory+swap: usage 407828kB, limit 9007199254740988kB, failcnt 0
[  556.563078][T23914] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  556.677173][T23914] Memory cgroup stats for /syz1:
[  556.677335][T23914] cache 313745408
[  556.686004][T23914] rss 167936
[  556.754582][T23914] rss_huge 0
[  556.758038][T23914] shmem 246923264
[  556.761716][T23914] mapped_file 0
[  556.765187][T23914] dirty 0
[  556.768445][T23914] writeback 176128
[  556.772211][T23914] workingset_refault_anon 131
[  556.776940][T23914] workingset_refault_file 1873
[  556.781992][T23914] swap 127705088
[  556.785580][T23914] swapcached 290816
[  556.787191][  T390] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  556.789672][T23914] pgpgin 1528382
[  556.800665][T23914] pgpgout 1453723
[  556.804361][T23914] pgfault 690116
[  556.808097][T23914] pgmajfault 29421
[  556.811932][T23914] inactive_anon 239570944
[  556.816262][T23914] active_anon 6660096
[  556.820465][T23914] inactive_file 0
[  556.824188][T23914] active_file 0
[  556.827819][T23914] unevictable 66822144
[  556.831895][T23914] hierarchical_memory_limit 314572800
[  556.837500][T23914] hierarchical_memsw_limit 9223372036854771712
[  556.843660][T23914] total_cache 313745408
[  556.848064][T23914] total_rss 167936
[  556.851789][T23914] total_rss_huge 0
[  556.855514][T23914] total_shmem 246923264
[  556.859949][T23914] total_mapped_file 0
[  556.863930][T23914] total_dirty 0
[  556.867537][T23914] total_writeback 176128
[  556.871858][T23914] total_workingset_refault_anon 131
[  556.877058][T23914] total_workingset_refault_file 1873
[  556.882603][T23914] total_swap 127705088
[  556.886675][T23914] total_swapcached 290816
[  556.891157][T23914] total_pgpgin 1528382
[  556.895297][T23914] total_pgpgout 1453723
[  556.899600][T23914] total_pgfault 690116
[  556.903673][T23914] total_pgmajfault 29421
[  556.908141][T23914] total_inactive_anon 239570944
[  556.912998][T23914] total_active_anon 6660096
[  556.917661][T23914] total_inactive_file 0
[  556.921898][T23914] total_active_file 0
[  556.925881][T23914] total_unevictable 66822144
[  556.930717][T23914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23919,uid=0
[  556.945845][T23914] Memory cgroup out of memory: Killed process 23919 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  556.948241][  T390] usb 3-1: config 0 has an invalid interface number: 213 but max is 0
[  556.971098][  T390] usb 3-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config
[  556.981379][  T390] usb 3-1: config 0 has no interface number 0
[  556.987503][  T390] usb 3-1: config 0 interface 213 has no altsetting 0
[  556.995692][  T390] usb 3-1: New USB device found, idVendor=12d1, idProduct=a7d1, bcdDevice=39.7e
[  557.004793][  T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.012814][  T390] usb 3-1: Product: syz
[  557.016988][  T390] usb 3-1: Manufacturer: syz
[  557.021615][  T390] usb 3-1: SerialNumber: syz
[  557.030244][  T390] usb 3-1: config 0 descriptor??
[  557.145063][T23909] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  557.174354][T23909] CPU: 1 UID: 0 PID: 23909 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  557.174388][T23909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  557.174401][T23909] Call Trace:
[  557.174409][T23909]  <TASK>
[  557.174417][T23909]  __dump_stack+0x21/0x30
[  557.174447][T23909]  dump_stack_lvl+0x10c/0x190
[  557.174471][T23909]  ? __cfi_dump_stack_lvl+0x10/0x10
[  557.174495][T23909]  ? ___ratelimit+0x3f7/0x5a0
[  557.174516][T23909]  dump_stack+0x19/0x20
[  557.174539][T23909]  dump_header+0xd7/0x490
[  557.174582][T23909]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  557.174605][T23909]  oom_kill_process+0x4c0/0x7e0
[  557.174625][T23909]  ? sched_clock_cpu+0x75/0x400
[  557.174649][T23909]  out_of_memory+0x7ee/0xbd0
[  557.174669][T23909]  ? __cfi_out_of_memory+0x10/0x10
[  557.174687][T23909]  ? mutex_lock_killable+0x92/0x1c0
[  557.174711][T23909]  ? __cfi_mutex_lock_killable+0x10/0x10
[  557.174736][T23909]  mem_cgroup_out_of_memory+0x279/0x350
[  557.174764][T23909]  ? drain_obj_stock+0xed0/0xed0
[  557.174792][T23909]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  557.174819][T23909]  try_charge_memcg+0x8f7/0xde0
[  557.174843][T23909]  ? __cfi_try_charge_memcg+0x10/0x10
[  557.174866][T23909]  ? __alloc_pages_noprof+0x30d/0x6c0
[  557.174888][T23909]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  557.174912][T23909]  __mem_cgroup_charge+0xf6/0x410
[  557.174937][T23909]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  557.174963][T23909]  shmem_alloc_and_add_folio+0x86d/0x1050
[  557.174997][T23909]  ? put_swap_device+0x130/0x130
[  557.175028][T23909]  ? shmem_huge_global_enabled+0x2da/0x360
[  557.175058][T23909]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  557.175087][T23909]  ? __kasan_check_write+0x18/0x20
[  557.175114][T23909]  ? _raw_spin_lock+0x8c/0x120
[  557.175143][T23909]  shmem_get_folio_gfp+0x5f0/0x1380
[  557.175175][T23909]  ? shmem_get_folio+0xc0/0xc0
[  557.175201][T23909]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  557.175225][T23909]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  557.175248][T23909]  ? inode_to_bdi+0x6d/0x100
[  557.175271][T23909]  shmem_write_begin+0xf4/0x270
[  557.175302][T23909]  generic_perform_write+0x32d/0x960
[  557.175328][T23909]  ? __cfi_generic_perform_write+0x10/0x10
[  557.175352][T23909]  ? down_write+0xe9/0x2a0
[  557.175376][T23909]  ? mnt_get_write_access_file+0x1af/0x3b0
[  557.175397][T23909]  ? mnt_put_write_access_file+0xc2/0x100
[  557.175419][T23909]  ? file_update_time+0x1ef/0x220
[  557.175440][T23909]  shmem_file_write_iter+0x105/0x130
[  557.175463][T23909]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  557.175485][T23909]  __kernel_write_iter+0x392/0x830
[  557.175511][T23909]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  557.175534][T23909]  ? __cfi___kernel_write_iter+0x10/0x10
[  557.175563][T23909]  ? get_dump_page+0x160/0x220
[  557.175584][T23909]  ? __asan_memset+0x39/0x50
[  557.175607][T23909]  ? iov_iter_bvec+0xc0/0x180
[  557.175637][T23909]  dump_user_range+0xb06/0xdf0
[  557.175663][T23909]  ? __cfi_dump_emit+0x10/0x10
[  557.175688][T23909]  ? __cfi_dump_user_range+0x10/0x10
[  557.175714][T23909]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  557.175740][T23909]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  557.175768][T23909]  elf_core_dump+0x2cd9/0x3810
[  557.175801][T23909]  ? __cfi_elf_core_dump+0x10/0x10
[  557.175838][T23909]  ? dump_interrupted+0xf0/0xf0
[  557.175861][T23909]  ? filp_open+0x182/0x1d0
[  557.175882][T23909]  ? 0xffffffffff600000
[  557.175900][T23909]  do_coredump+0x1bf7/0x2bd0
[  557.175927][T23909]  ? __cfi_do_coredump+0x10/0x10
[  557.175950][T23909]  ? asm_exc_page_fault+0x2b/0x30
[  557.175979][T23909]  ? __kasan_slab_free+0x6a/0x80
[  557.176007][T23909]  ? kmem_cache_free+0x1c1/0x4c0
[  557.176034][T23909]  get_signal+0x11fd/0x14f0
[  557.176060][T23909]  arch_do_signal_or_restart+0x96/0x720
[  557.176087][T23909]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  557.176118][T23909]  irqentry_exit_to_user_mode+0x4e/0xb0
[  557.176143][T23909]  irqentry_exit+0x16/0x60
[  557.176169][T23909]  exc_page_fault+0x66/0xc0
[  557.176192][T23909]  asm_exc_page_fault+0x2b/0x30
[  557.176212][T23909] RIP: 0033:0x307a7973
[  557.176232][T23909] Code: Unable to access opcode bytes at 0x307a7949.
[  557.176243][T23909] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  557.176263][T23909] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  557.176279][T23909] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  557.176295][T23909] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  557.176311][T23909] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  557.176326][T23909] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  557.176344][T23909]  </TASK>
[  557.176414][T23909] memory: usage 305172kB, limit 307200kB, failcnt 74191
[  557.632789][T23909] memory+swap: usage 378880kB, limit 9007199254740988kB, failcnt 0
[  557.640722][T23909] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  557.647616][T23909] Memory cgroup stats for /syz1:
[  557.647772][T23909] cache 259903488
[  557.656333][T23909] rss 86016
[  557.659634][T23909] rss_huge 0
[  557.662837][T23909] shmem 193081344
[  557.666470][T23909] mapped_file 0
[  557.677173][T23909] dirty 0
[  557.687181][T23909] writeback 0
[  557.697179][T23909] workingset_refault_anon 131
[  557.711981][T23909] workingset_refault_file 1873
[  557.716753][T23909] swap 127983616
[  557.742741][T24465] binder: Unknown parameter 'fsÇ7ÏDqÞ@'
[  557.748415][T23909] swapcached 12288
[  557.752137][T23909] pgpgin 1528568
[  557.776161][T23909] pgpgout 1467138
[  557.779874][T23909] pgfault 690146
[  557.783572][  T390] usb 3-1: USB disconnect, device number 29
[  557.822713][T23909] pgmajfault 29421
[  557.832328][T23909] inactive_anon 74809344
[  557.836966][T23909] active_anon 117833728
[  557.841316][T23909] inactive_file 0
[  557.844991][T23909] active_file 0
[  557.851267][T23909] unevictable 66822144
[  557.865649][T23909] hierarchical_memory_limit 314572800
[  557.871169][T23909] hierarchical_memsw_limit 9223372036854771712
[  557.883547][T24468] rust_binder: Error in use_page_slow: ESRCH
[  557.883568][T24468] rust_binder: use_range failure ESRCH
[  557.889787][T23909] total_cache 259903488
[  557.899700][T24468] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  557.899746][T24468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  557.916912][T23909] total_rss 86016
[  557.924420][T24468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:430
[  557.926612][T23909] total_rss_huge 0
[  557.943184][T23909] total_shmem 193081344
[  557.960921][T23909] total_mapped_file 0
[  557.965112][T23909] total_dirty 0
[  557.985352][T23909] total_writeback 0
[  557.993346][T23909] total_workingset_refault_anon 131
[  558.027168][T23909] total_workingset_refault_file 1873
[  558.040620][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8558'.
[  558.047208][T23909] total_swap 127983616
[  558.057238][T23909] total_swapcached 12288
[  558.063769][T23909] total_pgpgin 1528568
[  558.072838][T23909] total_pgpgout 1467138
[  558.085679][T23909] total_pgfault 690146
[  558.097177][T23909] total_pgmajfault 29421
[  558.102582][T23909] total_inactive_anon 74809344
[  558.104645][   T36] audit: type=1326 audit(2000000086.480:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24485 comm="syz.1.8557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f238e929 code=0x0
[  558.107568][T23909] total_active_anon 117833728
[  558.141260][T23909] total_inactive_file 0
[  558.149435][T23909] total_active_file 0
[  558.153434][T23909] total_unevictable 66822144
[  558.174990][T23909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23933,uid=0
[  558.192619][T23909] Memory cgroup out of memory: Killed process 23933 (syz.1.8352) total-vm:89960kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000
[  558.237393][T23891] syz.1.8352 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  558.277012][T23891] CPU: 1 UID: 0 PID: 23891 Comm: syz.1.8352 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  558.277046][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  558.277060][T23891] Call Trace:
[  558.277067][T23891]  <TASK>
[  558.277075][T23891]  __dump_stack+0x21/0x30
[  558.277103][T23891]  dump_stack_lvl+0x10c/0x190
[  558.277125][T23891]  ? __cfi_dump_stack_lvl+0x10/0x10
[  558.277152][T23891]  ? ___ratelimit+0x3f7/0x5a0
[  558.277174][T23891]  dump_stack+0x19/0x20
[  558.277196][T23891]  dump_header+0xd7/0x490
[  558.277225][T23891]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  558.277251][T23891]  oom_kill_process+0x4c0/0x7e0
[  558.277273][T23891]  ? sched_clock_cpu+0x75/0x400
[  558.277299][T23891]  out_of_memory+0x7ee/0xbd0
[  558.277319][T23891]  ? __cfi_out_of_memory+0x10/0x10
[  558.277339][T23891]  ? mutex_lock_killable+0x104/0x1c0
[  558.277363][T23891]  ? __cfi_mutex_lock_killable+0x10/0x10
[  558.277389][T23891]  mem_cgroup_out_of_memory+0x279/0x350
[  558.277418][T23891]  ? drain_obj_stock+0xed0/0xed0
[  558.277446][T23891]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  558.277473][T23891]  try_charge_memcg+0x8f7/0xde0
[  558.277496][T23891]  ? _raw_spin_lock+0x8c/0x120
[  558.277526][T23891]  ? __cfi_try_charge_memcg+0x10/0x10
[  558.277548][T23891]  ? __alloc_pages_noprof+0x30d/0x6c0
[  558.277570][T23891]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  558.277592][T23891]  ? __folio_batch_add_and_move+0x2ab/0x370
[  558.277614][T23891]  __mem_cgroup_charge+0xf6/0x410
[  558.277639][T23891]  ? __kasan_check_write+0x18/0x20
[  558.277664][T23891]  ? _raw_spin_lock+0x8c/0x120
[  558.277693][T23891]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  558.277728][T23891]  shmem_alloc_and_add_folio+0x86d/0x1050
[  558.277784][T23891]  ? put_swap_device+0x130/0x130
[  558.277818][T23891]  ? shmem_huge_global_enabled+0x2da/0x360
[  558.277848][T23891]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  558.277875][T23891]  ? __kasan_check_write+0x18/0x20
[  558.277898][T23891]  ? _raw_spin_lock+0x8c/0x120
[  558.277925][T23891]  shmem_get_folio_gfp+0x5f0/0x1380
[  558.277956][T23891]  ? shmem_get_folio+0xc0/0xc0
[  558.277980][T23891]  ? inode_maybe_inc_iversion+0x17d/0x1e0
[  558.278004][T23891]  ? __cfi_inode_maybe_inc_iversion+0x10/0x10
[  558.278027][T23891]  ? inode_to_bdi+0x6d/0x100
[  558.278050][T23891]  shmem_write_begin+0xf4/0x270
[  558.278081][T23891]  generic_perform_write+0x32d/0x960
[  558.278108][T23891]  ? __cfi_generic_perform_write+0x10/0x10
[  558.278131][T23891]  ? down_write+0xe9/0x2a0
[  558.278155][T23891]  ? mnt_get_write_access_file+0x1af/0x3b0
[  558.278177][T23891]  ? mnt_put_write_access_file+0xc2/0x100
[  558.278198][T23891]  ? file_update_time+0x1ef/0x220
[  558.278220][T23891]  shmem_file_write_iter+0x105/0x130
[  558.278242][T23891]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  558.278264][T23891]  __kernel_write_iter+0x392/0x830
[  558.278290][T23891]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  558.278312][T23891]  ? __cfi___kernel_write_iter+0x10/0x10
[  558.278338][T23891]  ? get_dump_page+0x160/0x220
[  558.278357][T23891]  ? __asan_memset+0x39/0x50
[  558.278380][T23891]  ? iov_iter_bvec+0xc0/0x180
[  558.278410][T23891]  dump_user_range+0xb06/0xdf0
[  558.278437][T23891]  ? __cfi_dump_emit+0x10/0x10
[  558.278461][T23891]  ? __cfi_dump_user_range+0x10/0x10
[  558.278487][T23891]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  558.278513][T23891]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  558.278541][T23891]  elf_core_dump+0x2cd9/0x3810
[  558.278574][T23891]  ? __cfi_elf_core_dump+0x10/0x10
[  558.278610][T23891]  ? dump_interrupted+0xf0/0xf0
[  558.278633][T23891]  ? filp_open+0x182/0x1d0
[  558.278654][T23891]  ? 0xffffffffff600000
[  558.278671][T23891]  do_coredump+0x1bf7/0x2bd0
[  558.278698][T23891]  ? __cfi_do_coredump+0x10/0x10
[  558.278721][T23891]  ? asm_exc_page_fault+0x2b/0x30
[  558.278749][T23891]  ? __kasan_slab_free+0x6a/0x80
[  558.278785][T23891]  ? kmem_cache_free+0x1c1/0x4c0
[  558.278811][T23891]  get_signal+0x11fd/0x14f0
[  558.278837][T23891]  arch_do_signal_or_restart+0x96/0x720
[  558.278864][T23891]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  558.278895][T23891]  irqentry_exit_to_user_mode+0x4e/0xb0
[  558.278921][T23891]  irqentry_exit+0x16/0x60
[  558.278944][T23891]  exc_page_fault+0x66/0xc0
[  558.278968][T23891]  asm_exc_page_fault+0x2b/0x30
[  558.278987][T23891] RIP: 0033:0x307a7973
[  558.279006][T23891] Code: Unable to access opcode bytes at 0x307a7949.
[  558.279017][T23891] RSP: 002b:0000200000000088 EFLAGS: 00010217
[  558.279038][T23891] RAX: 0000000000000000 RBX: 00007f96f25b6080 RCX: 00007f96f238e929
[  558.279054][T23891] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000040000
[  558.279070][T23891] RBP: 00007f96f2410b39 R08: 0000200000000140 R09: 0000200000000140
[  558.279086][T23891] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000
[  558.279101][T23891] R13: 0000000000000000 R14: 00007f96f25b6080 R15: 00007ffe46cfadc8
[  558.279119][T23891]  </TASK>
[  558.760776][T23891] memory: usage 275336kB, limit 307200kB, failcnt 75099
[  558.772378][T24517] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  558.772829][T23891] memory+swap: usage 394644kB, limit 9007199254740988kB, failcnt 0
[  558.789052][T23891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  558.796160][T23891] Memory cgroup stats for /syz1:
[  558.796299][T23891] cache 278163456
[  558.805454][T23891] rss 335872
[  558.808758][T23891] rss_huge 0
[  558.811985][T23891] shmem 207278080
[  558.816797][T23891] mapped_file 4063232
[  558.820844][T23891] dirty 0
[  558.823780][T23891] writeback 4096
[  558.827466][T23891] workingset_refault_anon 168
[  558.832701][T23891] workingset_refault_file 3873
[  558.837513][T23891] swap 122388480
[  558.841058][T23891] swapcached 3330048
[  558.844952][T23891] pgpgin 1546103
[  558.848525][T23891] pgpgout 1479366
[  558.852161][T23891] pgfault 691011
[  558.855704][T23891] pgmajfault 29450
[  558.859473][T23891] inactive_anon 36040704
[  558.864064][T23891] active_anon 174505984
[  558.868258][T23891] inactive_file 0
[  558.873059][T23891] active_file 4063232
[  558.877526][T23891] unevictable 66822144
[  558.881631][T23891] hierarchical_memory_limit 314572800
[  558.887047][T23891] hierarchical_memsw_limit 9223372036854771712
[  558.893455][T23891] total_cache 278163456
[  558.897697][T23891] total_rss 335872
[  558.901476][T23891] total_rss_huge 0
[  558.905343][T23891] total_shmem 207278080
[  558.909701][T23891] total_mapped_file 4063232
[  558.914255][T23891] total_dirty 0
[  558.917773][T23891] total_writeback 4096
[  558.922328][T23891] total_workingset_refault_anon 168
[  558.928207][T23891] total_workingset_refault_file 3873
[  558.934058][T23891] total_swap 122388480
[  558.938216][T23891] total_swapcached 3330048
[  558.943604][T23891] total_pgpgin 1546103
[  558.947752][T23891] total_pgpgout 1479366
[  558.952168][T23891] total_pgfault 691011
[  558.956291][T23891] total_pgmajfault 29450
[  558.960757][T23891] total_inactive_anon 36040704
[  558.965950][T23891] total_active_anon 174505984
[  558.970762][T23891] total_inactive_file 0
[  558.975010][T23891] total_active_file 4063232
[  558.979590][T23891] total_unevictable 66822144
[  558.984252][T23891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8352,pid=23914,uid=0
[  558.999942][T23891] Memory cgroup out of memory: Killed process 23914 (syz.1.8352) total-vm:89960kB, anon-rss:1080kB, file-rss:56264kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  559.270024][T24534] netlink: 168 bytes leftover after parsing attributes in process `syz.9.8576'.
[  559.299802][T24536] tmpfs: Unknown parameter 'ˆize'
[  559.317135][T24536] overlayfs: failed to clone upperpath
[  559.377183][  T390] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  559.547190][  T390] usb 3-1: Using ep0 maxpacket: 32
[  559.555694][  T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.566669][  T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.586001][  T390] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  559.595103][  T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.607274][  T390] usb 3-1: config 0 descriptor??
[  559.617704][  T390] hub 3-1:0.0: USB hub found
[  559.813538][  T390] hub 3-1:0.0: 1 port detected
[  559.891253][T24546] cgroup2: Unknown parameter 'pi'
[  559.901063][T24546] cgroup2: Unknown parameter 'pi'
[  559.910658][T24546] cgroup2: Unknown parameter 'pi'
[  559.919148][T24546] cgroup2: Unknown parameter 'pi'
[  559.927635][T24546] cgroup2: Unknown parameter 'pi'
[  559.936102][T24546] cgroup2: Unknown parameter 'pi'
[  559.943434][T24546] cgroup2: Unknown parameter 'pi'
[  559.951346][T24546] cgroup2: Unknown parameter 'pi'
[  559.958720][T24546] cgroup2: Unknown parameter 'pi'
[  559.966059][T24546] cgroup2: Unknown parameter 'pi'
[  559.973404][T24546] cgroup2: Unknown parameter 'pi'
[  559.979683][T24546] cgroup2: Unknown parameter 'pi'
[  559.988226][T24546] cgroup2: Unknown parameter 'pi'
[  559.994524][T24546] cgroup2: Unknown parameter 'pi'
[  560.001859][T24546] cgroup2: Unknown parameter 'pi'
[  560.009188][T24546] cgroup2: Unknown parameter 'pi'
[  560.016550][T24546] cgroup2: Unknown parameter 'pi'
[  560.023982][T24546] cgroup2: Unknown parameter 'pi'
[  560.030247][T24546] cgroup2: Unknown parameter 'pi'
[  560.036485][T24546] cgroup2: Unknown parameter 'pi'
[  560.042773][T24546] cgroup2: Unknown parameter 'pi'
[  560.049050][T24546] cgroup2: Unknown parameter 'pi'
[  560.055274][T24546] cgroup2: Unknown parameter 'pi'
[  560.061140][T24546] cgroup2: Unknown parameter 'pi'
[  560.067372][T24546] cgroup2: Unknown parameter 'pi'
[  560.077334][T24546] cgroup2: Unknown parameter 'pi'
[  560.082466][T24546] cgroup2: Unknown parameter 'pi'
[  560.087602][T24546] cgroup2: Unknown parameter 'pi'
[  560.097268][T24546] cgroup2: Unknown parameter 'pi'
[  560.102524][T24546] cgroup2: Unknown parameter 'pi'
[  560.126294][T24546] cgroup2: Unknown parameter 'pi'
[  560.139821][T24546] cgroup2: Unknown parameter 'pi'
[  560.144965][T24546] cgroup2: Unknown parameter 'pi'
[  560.157228][T24546] cgroup2: Unknown parameter 'pi'
[  560.167246][T24546] cgroup2: Unknown parameter 'pi'
[  560.177336][T24546] cgroup2: Unknown parameter 'pi'
[  560.182464][T24546] cgroup2: Unknown parameter 'pi'
[  560.197232][T24546] cgroup2: Unknown parameter 'pi'
[  560.202362][T24546] cgroup2: Unknown parameter 'pi'
[  560.217250][T24546] cgroup2: Unknown parameter 'pi'
[  560.222375][T24546] cgroup2: Unknown parameter 'pi'
[  560.236054][T24546] cgroup2: Unknown parameter 'pi'
[  560.241273][T24546] cgroup2: Unknown parameter 'pi'
[  560.247245][T24546] cgroup2: Unknown parameter 'pi'
[  560.256213][T24546] cgroup2: Unknown parameter 'pi'
[  560.266292][T24546] cgroup2: Unknown parameter 'pi'
[  560.277237][T24546] cgroup2: Unknown parameter 'pi'
[  560.282333][T24546] cgroup2: Unknown parameter 'pi'
[  560.297435][T24546] cgroup2: Unknown parameter 'pi'
[  560.302528][T24546] cgroup2: Unknown parameter 'pi'
[  560.317428][T24546] cgroup2: Unknown parameter 'pi'
[  560.322584][T24546] cgroup2: Unknown parameter 'pi'
[  560.337267][T24546] cgroup2: Unknown parameter 'pi'
[  560.342377][T24546] cgroup2: Unknown parameter 'pi'
[  560.357421][T24546] cgroup2: Unknown parameter 'pi'
[  560.362539][T24546] cgroup2: Unknown parameter 'pi'
[  560.387250][T24546] cgroup2: Unknown parameter 'pi'
[  560.392361][T24546] cgroup2: Unknown parameter 'pi'
[  560.397522][T24546] cgroup2: Unknown parameter 'pi'
[  560.402650][T24546] cgroup2: Unknown parameter 'pi'
[  560.424377][  T390] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  560.431476][  T390] usb 3-1: USB disconnect, device number 30
[  560.437579][   T65] usb 3-1: Failed to suspend device, error -19
[  560.444030][T24546] cgroup2: Unknown parameter 'pi'
[  560.451536][T24546] cgroup2: Unknown parameter 'pi'
[  560.456679][T24546] cgroup2: Unknown parameter 'pi'
[  560.464518][T24546] cgroup2: Unknown parameter 'pi'
[  560.469791][T24546] cgroup2: Unknown parameter 'pi'
[  560.492674][T24562] tmpfs: Unknown parameter 'ˆize'
[  560.519355][T24562] overlayfs: failed to clone upperpath
[  560.694915][T24567] binder: Unknown parameter 'subj_role'
[  560.862654][T24579] overlayfs: failed to clone lowerpath
[  561.975906][   T36] audit: type=1400 audit(2000000090.350:2204): avc:  denied  { read write } for  pid=24631 comm="syz.8.8611" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  562.024855][   T36] audit: type=1400 audit(2000000090.350:2205): avc:  denied  { open } for  pid=24631 comm="syz.8.8611" path="/95/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  562.546113][T24662] fuse: Bad value for 'group_id'
[  562.551209][T24662] fuse: Bad value for 'group_id'
[  563.167224][T24692] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  563.167518][T24692] rust_binder: Write failure EINVAL in pid:141
[  563.226681][T24695] rust_binder: Write failure EFAULT in pid:144
[  563.263703][T24701] rust_binder: Error while translating object.
[  563.287508][T24701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  563.298291][   T36] audit: type=1400 audit(2000000091.680:2206): avc:  denied  { name_bind } for  pid=24698 comm="syz.9.8632" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  563.304014][T24701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148
[  563.526820][T24712] ------------[ cut here ]------------
[  563.541511][T24712] WARNING: CPU: 0 PID: 24712 at fs/overlayfs/xattrs.c:136 ovl_listxattr+0x442/0x490
[  563.550961][T24712] Modules linked in:
[  563.554877][T24712] CPU: 0 UID: 0 PID: 24712 Comm: syz.2.8637 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8
[  563.568584][T24712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  563.578692][T24712] RIP: 0010:ovl_listxattr+0x442/0x490
[  563.584138][T24712] Code: b0 96 ff e9 24 ff ff ff e8 eb bd 40 ff 48 8b 45 d0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 14 82 42 03 cc e8 ce bd 40 ff <0f> 0b 48 c7 45 d0 fb ff ff ff eb d7 e8 bd bd 40 ff e8 f8 a2 96 ff
[  563.603780][T24712] RSP: 0018:ffffc90005227d88 EFLAGS: 00010283
[  563.609884][T24712] RAX: ffffffff8244dd92 RBX: ffff888108797b00 RCX: 0000000000080000
[  563.617895][T24712] RDX: ffffc90002dd9000 RSI: 000000000000011e RDI: 000000000000011f
[  563.625887][T24712] RBP: ffffc90005227dc8 R08: ffff88811e08f107 R09: 1ffff11023c11e20
[  563.633897][T24712] R10: dffffc0000000000 R11: ffffed1023c11e21 R12: ffffffffffffffff
[  563.641916][T24712] R13: 0000000000000012 R14: ffff888110c1be38 R15: ffff888108797601
[  563.649926][T24712] FS:  00007fdabbeca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  563.658940][T24712] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  563.665544][T24712] CR2: 00007fdabbec9f98 CR3: 000000013e2f2000 CR4: 00000000003526b0
[  563.673562][T24712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  563.681565][T24712] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
[  563.689579][T24712] Call Trace:
[  563.692886][T24712]  <TASK>
[  563.695838][T24712]  ? __cfi_ovl_listxattr+0x10/0x10
[  563.701001][T24712]  listxattr+0x13a/0x360
[  563.705277][T24712]  path_listxattr+0xda/0x1c0
[  563.709920][T24712]  ? getxattr+0x1c0/0x1c0
[  563.714291][T24712]  ? __kasan_check_write+0x18/0x20
[  563.719453][T24712]  ? fpregs_restore_userregs+0x11d/0x260
[  563.725112][T24712]  __x64_sys_llistxattr+0x81/0x90
[  563.730198][T24712]  x64_sys_call+0x2cb0/0x2ee0
[  563.734903][T24712]  do_syscall_64+0x58/0xf0
[  563.739489][T24712]  ? clear_bhb_loop+0x50/0xa0
[  563.744202][T24712]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  563.750143][T24712] RIP: 0033:0x7fdabaf8e929
[  563.754579][T24712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.774240][T24712] RSP: 002b:00007fdabbeca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3
[  563.782694][T24712] RAX: ffffffffffffffda RBX: 00007fdabb1b5fa0 RCX: 00007fdabaf8e929
[  563.790708][T24712] RDX: 0000000000000088 RSI: 0000200000000200 RDI: 0000200000000000
[  563.798718][T24712] RBP: 00007fdabb010b39 R08: 0000000000000000 R09: 0000000000000000
[  563.806712][T24712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.814720][T24712] R13: 0000000000000000 R14: 00007fdabb1b5fa0 R15: 00007ffcb7c8bc78
[  563.822752][T24712]  </TASK>
[  563.825786][T24712] ---[ end trace 0000000000000000 ]---