last executing test programs: 2m13.674540217s ago: executing program 2 (id=368): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendfile(r1, r1, 0x0, 0x24002de8) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.601908019s ago: executing program 2 (id=369): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close(r3) ftruncate(r2, 0x10001) sendfile(r1, r2, 0x0, 0x7ffff004) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'macsec0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4e20, 0x0, 0x4e22, 0x6, 0xa, 0x0, 0x20, 0x0, r6, 0xee00}, {0x401, 0xf64, 0x0, 0x2, 0xa76, 0x1, 0x9, 0x401}, {0xb1, 0x7c118ebc, 0x4, 0x7}, 0xfffffffa, 0x6e6bb9, 0x1, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x3, 0x5, 0x5}}, 0xe8) sendto$packet(r5, 0x0, 0x0, 0xae050000, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) setuid(0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m13.49001243s ago: executing program 2 (id=370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 2m13.47364635s ago: executing program 2 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x6c, 0xf9, 0xd3, 0x10, 0x4cb, 0x100, 0x51f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x2f, 0x6, 0x0, 0x5c, 0xc3, 0x3c, 0x8}}]}}]}}, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 2m12.740249931s ago: executing program 2 (id=372): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"], 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x61) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e1) write$selinux_access(r5, &(0x7f0000000100)={'system_u:object_r:initctl_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x4004}, 0x62) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x22, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES8=r2, @ANYRESHEX=r1, @ANYRESDEC=r3]) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r6, 0x372) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x123f41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_aout(r7, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000180)={0x7, 0x5, [{0x80000001, 0x0, 0x400000000001}, {0x1, 0x0, 0x4}, {0xf, 0x0, 0x2000000000}, {0x80000003}, {0x5fc, 0x0, 0x52}, {0x7, 0x0, 0x7}, {0xff, 0x0, 0x6}]}) keyctl$set_reqkey_keyring(0xe, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x1e) setpriority(0x2, 0x0, 0xd2f4) listen(r8, 0x3) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0x10001, 0x0) 2m12.527063335s ago: executing program 2 (id=376): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x1, 0xa, 0x4, 0x0, 0x5, 0x0, [{0x3, 0x4, 0x2, '\x00', 0x1a09}, {0xfffffffffffffffa, 0x1ff, 0xa6, '\x00', 0x888}, {0x63, 0x1, 0x1, '\x00', 0x1001}, {0x3, 0xf, 0x2, '\x00', 0x100}, {0xfff, 0x3, 0x3, '\x00', 0x102}]}) (async) r1 = gettid() r2 = syz_pidfd_open(r1, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8, 0x4) write(r2, &(0x7f00000001c0)="c6f2d3a4875ba2e985f3b8429f909700943724b560fdb04fdf2d2918bc0bdf13511a720c752985f3c43fd698bfc4142229a0fc38507d654e41b554d9df7e9e595b88c673a0ad96354a7a15bd", 0x4c) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x408080, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, r3, 0x15c63000) (async) close_range(r3, r0, 0x2) (async, rerun: 64) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000280)=0x7, 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) (async, rerun: 32) times(&(0x7f0000000380)) (async) clock_settime(0x4, &(0x7f00000003c0)={0x77359400}) listen(r5, 0x3) times(&(0x7f0000000400)) (async) r7 = dup3(r4, r5, 0x80000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000440)={{0x0, 0x3, 0x3, 0x1, 0x7}}) close(r3) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'syztnl0\x00', r6, 0x20, 0x8007, 0x7, 0x6, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local, {[@lsrr={0x83, 0xb, 0x3f, [@multicast2, @multicast2]}]}}}}}) bind$packet(r5, &(0x7f0000000500)={0x11, 0x8, r8, 0x1, 0x9, 0x6, @broadcast}, 0x14) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000540)={@private0, 0x19, r6}) (async, rerun: 32) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000580)={[{0x1, 0x83, 0x5, 0xf, 0x88, 0x1, 0x1, 0x24, 0x5, 0x3, 0x0, 0x80, 0x3}, {0x3, 0x9, 0x6, 0x3, 0x0, 0x0, 0x3, 0x8, 0xf7, 0x1, 0x0, 0x4, 0x2}, {0x5c7, 0xa, 0x2, 0x8, 0x2, 0x2, 0xb0, 0x0, 0x6c, 0x9, 0x31, 0x7, 0x10000}], 0x624}) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000600)={0x8, 0x55, 0x7, 0xffffffffffffffff, 0x6, 0x7fff, 0x3, 0x7, 0xa5d}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x1, 0x5, 0x3000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) munmap(&(0x7f0000fef000/0x11000)=nil, 0x11000) r9 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x7, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x0, 0xb2, 0x8e, 0xff, 0x7f}, 0x65, &(0x7f0000000740)={0x5, 0xf, 0x65, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x9, 0xf0f, 0x6, [0xc000, 0xffc0c0, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x4, 0xffcf}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x3, 0x2}, @generic={0x29, 0x10, 0x1, "6d97720f6c301211f0c7ee26b1ab094bc657b327885afa25009f324c042fe306dccde8cafb3d"}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x266}}]}) syz_usb_control_io$printer(r9, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x60, 0x4, 0x31, {0x31, 0x22, "255a263054caae30cf6861f6ea847902d9338f31d69ff959907ef33f5ca71064744a3a9bb72882d82db10be56094ad"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000900)={0x20, 0xe, 0xe, "e7355964f7ec4bea4e3133f918d5"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000009c0)={0x20, 0x0, 0x2c, {0x2a, "73b92c8a316280dbb664f54e979d128ebcab8ac9fec02603afd4624559ba8ca1e3d36f049eb5b7bd8bcb"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x4c}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x81}}) 2m12.496925075s ago: executing program 32 (id=376): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x1, 0xa, 0x4, 0x0, 0x5, 0x0, [{0x3, 0x4, 0x2, '\x00', 0x1a09}, {0xfffffffffffffffa, 0x1ff, 0xa6, '\x00', 0x888}, {0x63, 0x1, 0x1, '\x00', 0x1001}, {0x3, 0xf, 0x2, '\x00', 0x100}, {0xfff, 0x3, 0x3, '\x00', 0x102}]}) (async) r1 = gettid() r2 = syz_pidfd_open(r1, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8, 0x4) write(r2, &(0x7f00000001c0)="c6f2d3a4875ba2e985f3b8429f909700943724b560fdb04fdf2d2918bc0bdf13511a720c752985f3c43fd698bfc4142229a0fc38507d654e41b554d9df7e9e595b88c673a0ad96354a7a15bd", 0x4c) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x408080, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, r3, 0x15c63000) (async) close_range(r3, r0, 0x2) (async, rerun: 64) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000280)=0x7, 0x4) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) (async, rerun: 32) times(&(0x7f0000000380)) (async) clock_settime(0x4, &(0x7f00000003c0)={0x77359400}) listen(r5, 0x3) times(&(0x7f0000000400)) (async) r7 = dup3(r4, r5, 0x80000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000440)={{0x0, 0x3, 0x3, 0x1, 0x7}}) close(r3) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'syztnl0\x00', r6, 0x20, 0x8007, 0x7, 0x6, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local, {[@lsrr={0x83, 0xb, 0x3f, [@multicast2, @multicast2]}]}}}}}) bind$packet(r5, &(0x7f0000000500)={0x11, 0x8, r8, 0x1, 0x9, 0x6, @broadcast}, 0x14) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000540)={@private0, 0x19, r6}) (async, rerun: 32) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000580)={[{0x1, 0x83, 0x5, 0xf, 0x88, 0x1, 0x1, 0x24, 0x5, 0x3, 0x0, 0x80, 0x3}, {0x3, 0x9, 0x6, 0x3, 0x0, 0x0, 0x3, 0x8, 0xf7, 0x1, 0x0, 0x4, 0x2}, {0x5c7, 0xa, 0x2, 0x8, 0x2, 0x2, 0xb0, 0x0, 0x6c, 0x9, 0x31, 0x7, 0x10000}], 0x624}) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000600)={0x8, 0x55, 0x7, 0xffffffffffffffff, 0x6, 0x7fff, 0x3, 0x7, 0xa5d}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x1, 0x5, 0x3000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) munmap(&(0x7f0000fef000/0x11000)=nil, 0x11000) r9 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x7, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x0, 0xb2, 0x8e, 0xff, 0x7f}, 0x65, &(0x7f0000000740)={0x5, 0xf, 0x65, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x9, 0xf0f, 0x6, [0xc000, 0xffc0c0, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x4, 0xffcf}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x3, 0x2}, @generic={0x29, 0x10, 0x1, "6d97720f6c301211f0c7ee26b1ab094bc657b327885afa25009f324c042fe306dccde8cafb3d"}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x266}}]}) syz_usb_control_io$printer(r9, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x60, 0x4, 0x31, {0x31, 0x22, "255a263054caae30cf6861f6ea847902d9338f31d69ff959907ef33f5ca71064744a3a9bb72882d82db10be56094ad"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000900)={0x20, 0xe, 0xe, "e7355964f7ec4bea4e3133f918d5"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000009c0)={0x20, 0x0, 0x2c, {0x2a, "73b92c8a316280dbb664f54e979d128ebcab8ac9fec02603afd4624559ba8ca1e3d36f049eb5b7bd8bcb"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x4c}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x81}}) 1m26.980463424s ago: executing program 0 (id=881): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000"]) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000, 0x2}) close(r0) 1m26.980048164s ago: executing program 0 (id=882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00006c2000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x80, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x12, 0x0, 0xe446}]}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) (async) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, 0x0) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xef7}, 0x1c) syz_fuse_handle_req(r5, &(0x7f0000004200)="a0079aaa11ff5e8ef37303be8c4f4ac7f526a3f6f2436489867481efdd8b8284dd4876298c977a4fefd0b6a9cc7f8f129c9615124c276c04c0dd0c1f251cabedb3685af95d8c424553e9c2a099a43fabe4a26b4b841ecc4cda3dad9629a54f867d824cbabe4284b46c28046a59be5f3a7a684beaa790458193e11365b76e9707177474cbe4fa1d2403001529d7613a64a917e474be9bbaacad615f52a71cb702ff9abb3b7e864f8aeba2c95bca4534d499dd233e634f161b8dc00a9777b06afd660c102151bbebab22875e894f162859f14295ccc8f860a6ed93e7dadeaa0834c9c278106428637403269c6466aa343b866031d475102588c689446a551b0608fc0e8c51c43631667ad5c63b47012fbdd58ccb2781d361a9bb4f23dd8d52d94b155d88c12ac5e2e3cb00c98682da1600eac20a8afcaaf7c9643f541c499a3de6859eeef2c236d559c8a66ad137815264f4504afb9768a554ea8fe9177c5093c07861d54aeb2b46c7d0bfe323f12649b0c1112ec5b6f55684945ef9ec4c669c25559188fdf70b5e6c295a5360993f0fa1d3d296bbd69d20925762165fdd65eafd0a7aeff882aed22be61758193e3c616e86f3c6f3dfd667e664ba47610ea25e0897d464bb4812d8963dbe4025f6377cdf7570b156680a2a158cf3d53f9555f499bef4e2dc43584bb542beda80048b732542883c6df65d9b473a665e443365f35962c97e19afe8c0251507ae8273aff68a49e7e81e1ad07de52d9c0437a78b76ad77dd5b79c4257f82d8678090ee2a295c1a5f9ddad249bc4f63d6797ff18e9c22363b649d959869e45804f0c0f1246e3bd23803eed02d9e377ea3d7b31c2ca5f36c8efb5bfaf6f698c7ee4e7567c61788e61b58c88e50b5cc3b51aec1ae74ab26f9373bbb5d304446544a08c66cdc7838bc6ba4d42564101e493579797d452cc20a2eccf44718e2737c1903b0041c11cf9f76c673174efbac6894ad81bf8ec3dff0d3ad8436638bd40e6824a01f6dddd871e2be0c4b8e946c775023f7938d3e9353ea3c9550862f2e15a11daca1cfb99eb1a268a177fd05f916a210829dbb8d72c0fdc4baf446e787e904c22889673a8d368607e268c6044de51f9f2533dead5d97590839da067c9f6c8b26534dd0e568ef0ca9247125cc6c16c0425f3af65ef21e926f010236bebf75ff3be02a26ca2382680fd9aeba21306e9d6e45dcf72d6b495f8ac7240193180c45de1fb54cea7a7f38b67c2f5c9fb1e7eacbdbc840122de66fdc828d703380cc05d8319cc47495e803c2386654f9a885a9665160aac3fed6ab5d670bfabdd8c4b307b1fbd0aa2112542a645cec6dcd0365317f0097dd893175c0b29f5e15cb6b4cb79fa8083e84f11e9863798ce7203207557106bb93326af9e0b618aafabdc7cbb0bd36a22f1266e9a51232701886912b01fa128bcdc418a19bea4f4929ec106ebc4ebfff2a146586f1a3915b2c4b413165d0cbe770d1619b4150f5415c410c2644955dafbd22ce48af7044041b089342cbbba94169a35cd2e8ec7dbdda0f2af14146eaad1ca07b5b00665f9e7ef926d4436e461d802cec0181bfc26edf36381c20e2f5d3827652327da598a1e7c0b5107d85aa2cf96158dbb27ba2aedf7819687bb905f19d2d8c8449afcc4abf96574685cac038e7aad14da057d1d03952ac766a5876cee59537da992d94aa323c7b9c6723dda0c317b00db0255a538434bb51db99461820c3a5893e4f02542a511d1a0e6613532f38bb2cdaf594bed23c6a3bcec14e7ff44f9d0ece051a28c844f340442d036365394033deed2b14e494a094dc0517235b6d3adf15b2394af59280bef07bdc82df1ae8130b27061d2f3ab465d2843da9c0e1b320a88dde89add391301dd8239b43100c0ade00f7733230aab0ee6c8b63e01b46c57460ea82b7f0b13b73de02781fdc9e3f15f4ad472567fde8fdcdd680aab6b3f3e4ea86c7bcc555d74253c1a2301acf5b6c58ac1541544cdb64ca559094e96e01ff23a06e1bf6385cc7b5b063e4bbc0fc864ce68a0935969227aff08a5c6a13e1264f12f200a7ef1bbc4650a33a2ef4c2a2be2f27c33e8259bb1c6fc81b4250678adf81f9056c1f872da3d959450733820bcbbf36d4f756f54baa2b87e8183c7d65404a8e6758e6d18c2e6b117ecbfbfa76da00d8018cf8faf23ffdad84788d6a973bda98e2e8fad114dd9df4ad8ce2fb91b4104e1661de375d98841b06d039817785b4ee3d624209d7d940d1db2ada93d6c037d946759f42ed547a52ada9fab21d10710ff9c35cacab00f85828f8bce1afc3a9146fc85f6d8933de2c8d856290e2a750da93669963b9c8b546510c52f443d92be208c8eb9a6d9f027fc5fe637fccb05cc71dd59617970d0cbf34f1bc57ee7de17b7d45e779a3b263cc045f17c063e5ea64843009da006dcc70b7486b95a1e9bdf12838c30ffdb21ad3198d6172673a6016e8784fffdf66496929731d02e22d8d61711fd49a4032947686d28b7c32d7167fcc2b3edbbf0be31232b965dcd5361083e014cf502a02fd51a7b5a594280a8432147c295f1dd0e0c1c435863d8ff28f5ecd9d3ad56a5bf5bdb85216204b94093ba0337bed9e71ebb453c2fd13770b43862ba89d10cb255934217939a899f1e9ff1e3ab5e370f0b8e08beeddd9a0482556a4995838b1c22453c563d8d194e80e9fa6ef8750e965b5bd4776986eb7e8c57f1447cb6be8f7727527052cfb812262d9b69af80972903b4690d209417fc3238ff8c88684842271ecda7ab630b7d800996b2f805b58a52b82a9a39e2db5102d0fcc821806a8d6ed77276a3b4f7f27b079b77e100663bf554aeee9e8cdca134fa16a3554b4c934f6dd5297751d26839ca857a97b9c50f196783246ce11c818621fb463be668ab0963f7c469a8c2ce728102bd02f8b977ba537809b7748525832477197d6e47c8d98fb03149c111c11eb94cbec24677844b43bc4ebd521ec0acade33f729c797c9f8d4cd8f406253c199aade117a2a3f3737d7ff1c74af8299c9ea8c1634a8236e9e3c58185874147ae1073e9e6b6c154fb7d2e0a85f6a85a43724018527e4e86e80bc8e80f70ff36bd703e25751a34528c84ea0029903bcb9fba94e56dde65eede2e8f08b852652f1d31d53557432857c7a99e5965c66f361ec6f61cb9d0a8e36d2b9070c3381d405eac07566e5d2ce5e1c3f847a5f7f28ab0ab842a3197da5663e1a495168b57e27db6d77004cebc2d6f42bce0eee639a07fe1aee3f231e4fb3be9bd8490632f7b27de750bd3ebed357214e87e7db3b75e9d95149efe02d3eb14ebfc4e10edf82b26e1bc0c196b54bc5f6c26f21167e3eaa725db3a087659a0dba3a0d506707f90289970a72d2e8d37adb2b8d336c169864457abeae62a52c3c88de8da5b19cba07ccdd67b5765178032f6372de56e867a3d9aea57974d5c70b0c6f24f6c9aafe8fe0d7587d72c556d422d47f8b946f1a36f202ac7f681dc99e5de9c7d9aa32f4a5b919e304394dd616ce6ed7cd64256f774778b6ab8e26f4aad040fcbd68f14f0100925ee91b866f44f4192fa07aeb699985ff0841d1cec941d44445b075e1a18b84c1533aac8c0ee0acceed5293e879a1b6d336fd85d00e33c2cea6853ea63b9aa16a496f9a7bc47b35673e7676bc4224c1496969c3e695c1cf48b8c3375a63256391d059f543ec93fc3ca8adafd9f3d254d950147560ea42a34859e43e3c02db53c9072f3dd7573086ec80dc6230205b223dfbc8d85d9969b9587128bf98fdc174714aee3afa20d274097a05ed03f4ed4e3e743d9af3df10ff32770ef073f95238a49ac9e0ec1a7b46d15af918b5b5c96d13ce8144098e4ea8ef64bfede831b4e1d11327a9a75500755d053c882dccbd90463018ac5cbb755326873042799f507f86172117a475ac7cb0e95b27ee968626021885ce04f5f000829a27af6d57419d675659e417f6918f7446deb3319a9c35d31731200a7af1c99c597278e6d94cbe0a29ab300b4d89cca86502eb310728090336e67928b196343d7471f74bc12de537af4f3b9245b20153c2184260056ddea534ead79ba92bad458e10632d01ce40ccda9d003736de6d72564847d94400f541092a4e8c8a16cb5e36870e59e29d4372fb3987acb5bab741404c643582d713be602a1b78ab6f9139ea89e470b663080eff0bf3e6b8d5d26e548e8c2e1d6cb0ec45222f7afad4b55421c20111b83f617786a16a17836a7a3622d1d5854c772e9f7f76ccd6e4dedf0302b6d84334999bf8fba66a2560ead8c505dd18a91d79fe24ff8bf7dfaf821ba1a7b205267d765e7e7f8a4a24d918c57f0d2e97caa3494349e6be77adb5547a564df111a8d653b618d7517ef720485fa06abd97e75e20c575b5b7d124b51dc9c865cef43a3308bb68ec516de96da5b064deee5d61e5462ded78811d04d319f7470438f9e3ec8a2e32dfe177e57b55f99a9721f9dcceb8a276ca5f6e0e6af9ad13f795ef8374e66b3fb1a3a51207c07e09d5ac43517ea4e7addbbe201c6d8503700477a7c75ae568e317556e080ba8ab39e79962d7430b3c5922746bdd285c1d2c5293cb8e097036b81b82f987ab80c1363183f2216ddb7d5d3f5eff03803dc2eb5fe269d347c1e8788eb970eda959e75908f0bacd3083d71036969949365f1d50d3f55012fc551e99eee078115af653769bbf68baf0ea8a2dffc394d9738108293ffa17c87e851a57709066ccae2bb18092d61fde656799e63184ae3a6c746fe6d1ac373737dda7dc96cc5b47d031ceb3238dbc8ac1590ad3eeba5563da6d274a8b8d5bb4a382ae83475d981495628d3e26b8699380215d466300ecf1d645f2530d0f08d2298dc2cb22fa6abb9736a11316e2c7f6ab7ee9a1262bcc57a93cfef27bcdf7057f63db97fc165065cf6fd9c58846d8ac35398a9dceeef11733b9ed3a4a4ac664a584d816f623aca2bb96ce7475996c108fffb23fe2690e839d76dff8be3fddd5beb04d7896c70ab5bd387e0238c417ebab5a7f48a3a9311c5c3b92d1e2ec6171313991d71b297d521e09cd71df60246d7eac4163bb1e5b72e6104b74389cd021f9526210cf69da1743edb82bfb1580633fac2499cd3c674aaa8d2eb4376b1a5478005f958d9ba90e24443975c4e95554b13602a7688eac0bc9ecd2756629b4390020d8895e39de2f7ba0ed35792257fffde6cb9442be0b4e6910b9db2f376040e7373a3597e2f70d3a36e65c10a5f766f3ee027782f31f1fd861ff07e10a1dfafe66e6d5f2931439fd59a0dce0d82fdc4cac5053191a1a247ec6b6ddfe812ac436646b6a7e45d46c6d2d54845b4427951c48fba2766431169b69aac50a641ce0f6fa3e63e2887c16431b80b4a502915b7aa65d2936b7e3783ac0a8837adf8c72d1133e969e11b23dc408757a6b45c4a47d6e93b44b8706a5af3c362004aaef2ddeb4655de5b4a506f3a8477cf82bbd3efc76afa26fcf6d5b5506d9180d64e8c7242825b3533e2a11a391e736a5f2394ad74f11952c27e4e06d42940c6a15fc52aacfcff087e0a006011d626d34cee3a5248b4dd74df21251b083ca2d2f91ebd684173e3b25a98ab9791b904cb24f16c5a7811e6bb9451c6481aa1db70848dc2f439acb9944de3af051a61423959d95df54093ad49048f7efa725a42b693c8cd25ffa3097b0b22fb0860c04dc956715abe694aace6a6a37abb26080619464165022de131d9ce01fc84d3d7cc0a8d15bc85ee09b648eaee02552410dfb829d0710bf553d5a40871cb3e7138630ca528cc1ab5bb10c858f28e6f6b142bfc532a96a28558589d7f729c23c7db1abba71bb7e2d90f347c6f437427dd2a005bbd5017cef4aee46697a842a94d40811dd25509321a370c85c855a864c3663c92306636b8469262cbfa97a02e93bb3746d8f837affec328a0ee35386174d919b0a05efddf7869c1d41280a563f69aec542aff42b82a9b10b788df33547a8cfc8b8cca38ec60717ab06635441a9ba1fe1a15e9c8e6545423327f0e904dc241b7a4c49d696ff2c92980d6e77728f955a1e4ec13c89b92a8f7256bc0098c040e83414f6a7fce220c942b0627771e198bc91068cca0a3f25559610bb00f82a4d445dcbc6cb5a2e45b68ef8a3e8dd7ff21deed4b27a54bc0fa956755aab9b799ef184b2f417c32617c52f525afc96134a369e03ecc8c5b223f7fbee080ec52be643bb10d751b2796bf3d6d0420b7b5dfd8745074d317b224c7325fd4df2bfeb3c5782f1699722a75f3a0fd90fc21e8ec1b1cf0fe7aae0d9171d72b4c54f293f1f5bb81f5cbd612f6449183eb3ea462f5fc98ac6c843ec53a6280becae835f5c1882bc2a2a771953a75c054aa39e97c72ede75baf2177bded79d43d3eb44c1833ec78af69db1475d3436c913c7f7eb213f9250492feefb214d04df8a20c028f559c289af3a97c0a1f766b51ce0757ab3518c9b832abb4f7e008c8387cdc6f81bff50c5d9e3bb0da50abe9a744bac529e3e70dafa60a52063681a46d7ef928f02241e872a6084d94eeca75a08a40a32a87e7a87ecc7a0fd57d1e630998905aff693accb021a3deaa4c64194dc0ed15c03a7a7ec8c6c9fb09315cf8285b0685ebc6af90ae20f5df0d160a7b3ac1a00dad3726d21d57d2b437d586cc09f02f5b8d0d1817601b951d3365ea1f56ade888ca6f0cb1629dadaeaf123ac0f0d76f56719d064855fc744323642ec928670d81833652a5fe17abe98bdc470b98aa429eace2af8027b1e5d9be405045ced4dee2dfd37b234197918b03390bf45ad664e0f38b3da9c55390de681be6a45079477ff92a41e0439a4651a6a5303df430f16bd228319456727b9825795ac92e7db0e6fb23be0f12476712053e73de58a5e508876bab9bc23d1f7a54cf50027b54f6122245c426d4966ea3d04dd5ffe16093dcb7291b28f7d94c4821e2113979211fbe747b324b357cc257c10fa5c5150dd06fba9480473b258c6cef649a4c7256d8ee750da58cdbc5d631a007ab61c0e58b67a79c4f62016ec40515a4387be1a9b980803066f8563c97f04f72e5a8ffe78a4b372eaabdced7b8d5455e5f97c5218f15365a0166cd29043677fa968eadf792fc4548be81bc8799c65f8f7d349c84dc3b8ac7ffa08e926ff36b20277b8223d772d4d59f0d190d6db47157ca8fef897ad7d6e013da1649925618daac956f38bf3d3181560482eb0beb8c2c7594d82e1a7ddeb01f8d3377fa2985af5d9807d2b9d92ae7ac5d78fd5bdcf558ab151ad824972c7080a02ec12cc18f250d58a487578577be6e6f2a7e0278c356a937bde8c83f11cff2c36ba39e34383aaa59b64590917e69878fe9613daca87ce94d19dfc2fa53a1922ffd458782936108f7bb6b8fd900c6f61832e4036b206a8d5bfc1198a5ef8f44be3e8b7ea982241742148204a8f9cafd2719fa0b423ca38c2369ecfd5a75b1ad638488c2c206924687f2dba76aebd5faaf87c2f8114c7265d1504e0540236c2adbd99f4bc1abe64b8724cbe0594892df5fbc13bfa359554f7e297aac91d1e186f19ac6bc0cd6ac18bb574eeffc64dd2869d69a9cc5ca3793d50c7cca32739427442c3ed497b7c3281e3f2accc7507e40374f1941a879d5f51c6ce6b599bc960aede51a786f05f14cf5eb8fb918125a2a5603cf9f94ed65c96dd1fbf750afc9aeb20970cfb92e0384ad68bf549a6743544935d73bb3bd8303c8c7772c9bc52c7899d7408332eb1c4b41f2fee85a55ff3d646d0cbfdc51f373845cb18da22ed4fdcaae9187e3a9066a6ebc9fee4fdf0aa83c977ac3908b936d8063343079242c063293ec41dc41d278a1213a5cb7eef608e88900e5a22690deb8dedbba2c788162d6755e049818e7e436b6dba5acdc72de3c3aada46175e4623d30ee5c6099bf9b258c54040f163efe3f55b3b5e3c07c9f55c9539bf16b3643edece66416567633f582eac104b060c631dc9f790f8b3215e3dbb60534173507c4a30b56578f502eced9af0cbcd89151874044599a6f4b9313eb52cee9b6c0812c7f66579ff83634309f9615a86f9a0b3896813938d205de319d155c5bd5a3985cdb832d235a76d097b12000b1630b1b1bab815057736179e187331d889b8631561a178604dae6af6c3589de4ef16f4c280bb43705609d441838b11a4b3a523e185784df001fd1ce03d025befbdb25ed13c5f3c5aee2abbbef93c188fa493b2f8280f434a0598115f62e009389133f989a245ea4caf36ea995ba78c925029643d0584f81953c11310cb7a94726958d2686bf3597462b96d6a51f97a640a2a252682c530e2ba57de023de9c25a293a1be36b994415ffc4125cbb88afc0d772632168fd1dfac6bb60dff732787b11a62bc3c808364aefa6eafdad299426602181f7af1fcd62b7bf63d3dea975fa595cf8be87b6f52cc7d20a01acb3c5bdfeff36f07b550c3acccf949fa7071bd042f0db1d777a84a8da19abe1fb102d87a87582787f2611b0ced8e4f6f0bff921389e87c1cd5d32fa85ef53ca32bd51ecbb4cacd2e13f304e6cf1f4f4d98f87a485ebeff96d7ac1f3643741b03eb0be96c8eeefeb49af28f9adb5b45832027046416848d1271694e8aaf96e57302edece57c96b3f54ba200c39fe1295837326c622b6cf50070369f609fe44dc8777b49d2c9f31d99baefbecb7231c96a816163f8131b4383a2790aed11ae566924b43e4c43726a9d1273c0b9e15f179b29cd2304f55b6cf8f2358eac1f39e238ad17890da57c9ffd2adcf40e5e85843c3ee69868950057652ea7d0a6a81b4c06817698cadbe9bd78ceef85b932b11632f59c311c40a6353ba72e604edee2dd25b085a5c44926c254d2ddffd9edc05997becdbfb11be8df67cc4c0b8a4880923ab1dae958e40b14fb733d7317ee9335dc49418d8e55b00363af4d3bd6ec9d50ec62e5544febe71bdb1a04cf69bd240bdc33fbcd4c67aa0aaa45eb4a030c454cccb64dafaffa47eaa72a077e29615ef32b0ce12cee54c8bebfa982b77150d4096219518d96b469854c854f36af326de81dee36772508b716d38d709e91772e216d3c1a6bbd23329dd487d719646e37a47479c83d517bdc0c9efbb73eb4289af4d213f2e2259b393bb54873dacabd504699e1f44e1e9adbf34f22b2132f95253aa3d3d5274b0af77873b82cc37614883f1a92b7192c6c8a20670d103f720a587cdebde199b84272ccc51d76dacc04dce2504d4846b037056342e8478cfa389d9b3c310133c1c92b53c154a277778085be8cc211708f286ff3905ad5f9e0388eae0108a5216d71c4c7b8c462fa08d03697d15e1ff9734d9dbe9373649260f47b33ccdf0c6654948f21fd1b50f837815ba458cc586139886664c07a59bfcd2eadf22ef02bacd1a921e6d2b2ae6976809021926a8399dc55b4005ce894858a134d61d329c7930613f77ba1d61d1b69fcbca15184308e7241b0551f4dd651c8fb53baa76266adb9e83fd15840fc8ace9551e32c1470551d929039bbfbd7e47aaf0b18be153bc70801a865ae2ee18d85516e9fbc1537cd4a665e8b1aecc319e5246af163ded0f35c9ed71732dacdda10d121f3a69be0f69f13af6bbefaac12fa05e7158f67c645ec3cc6f28e1fdc45db7fbcc9da12c969c8d22090827935491f82cc9c4ff36adc4c68d5d8b27fd09f3c915eb1939d49c16213b6f06ee724b1d8fbbd6c4856f3e432aa1fe29171734e70215e02f29a8ebd823d73f6fe3916eb40b823866623b5a145349d51e7fded719e60547a4b607da9f291bc85962fee854613d17c9487bed375c3718f1a51b80e32ae2f1995cef7140aa01ea1b19d202017af4989679f33e078ca2c578f16bbffc317fe7ec7988f450272a6ef7adaf86ddba29eb40c8da217197717ecbefb228716d8972906e49c60cfcf288bf32ecd82f4b382cbdbd670f4f08cf42312e20627882cc8ef7b2c1c227f38ab6602ea0971f2abc5f407998e0691d84f54b422c566d04a4c810773b5e4d0b82006154032fbeb00aa60adaf4a1464c04aa458af3cab5da7c1e72ef71c8748d6993ce5d2bf5299951e3d7f8536f203d4d07c1de5c1f0c6b5de1da980ada41b380d52cad8fe6d770dcc8a4403ce5086ad81454b90a08e6bc676a05877a434d9b5383dbccde7ddba2d0e5582e081db2bb769754a0929f7658caba2caa4812221137205028ee41902bde1ebf8a2354bb899c21bbd128567a173539255bff07d68ef2eecc1d8c6891e711a1d6ee33560fe246979a229446efe7bd4311e80178e7ccd7774c55370bc9a643a6a52de879274c73ada62104a277fa154d4500c54f336a0d21360e943df22ebd77041d1d9d60abf0a03a70f74d817549ef20887fe9ba92201fb408c073005eb530aa6433abde6891dde34f6cdc85d49a06675d57c847ab35b65911bb921dfb8a925c5fffa69261ffdcc17b3acd023cb88b4c9507bc605a3408f76ba08bbf6addb5d857fd689d0d23a9b72a72ec9dd33d7a6ad0d6d9722b74e03be70e9c0113852c693b343f0adaf9deaad9d5d146f08dea1f2cca1e3fed2b7d86c6ecaf2e322e8e409ce98b3cc3106037675cd644a60c0e486775fb7792c80c044c3fdc62fc4f9b9c60b6145a2064106eabf4a64e962eb557dec8d3802aab9ffa990ae9a72cff868b8cd639d41ee5c91d67d61b36ab98dd03949e282329368ec67823061c6c93abc7393ecddbd52f8513a2cd916e7115aaf08d126dc48a19e84ee9f6d408ab6089b7faaaf0812b10ec0f673032e189d1469ff32a40a7d0f05110cf279c27bd0157c3ce6da7d017ee66e579743414e98982451e21279a1d175f0b62135af8be9bf905e47671d9e5507f4b24c10e8f6433ed2c13b54a74200e84fdbb5a319da87947545e721d2577d5b96b2fb2c3777d32f81bdb04a8cc746ec83cd5ceff6b97d365e2729beb5b8df5ec5be2e5f81a8b1309274a762a3fbd993c0ec64e3446216fb04e844c7e6650a71cc50f552699c967542216a403b0ada33fdc4c28cf481f7c86e45ffb7b8ef6c2ff408c38814172e72c31d39ff84a0b3e35f20ca9674615ca576726e859b2c04af25fefcf9d1d52a5b807c740155bcdc4fca3a00a5f787f12ec9823e421500b22b40ae330e5bcc5ee7272b97291bd58a35d424673fad824307673886c528d1b7e967214729f963d0b4658891da011dd3825747ab66662d2618ea062bb82d28bbe52d002af94cf41aebc8184ce3004fa0505880c97c26c4595dd5260be94b206fef2d46a98df0537aee1a5ac26b9c85a2d2ecb27c1cfbf02108f571b819609cb512f4377a3d03b232320fbea2ffc459095ed58fb6da563f840eb6124b314386366516780b3ec08839bd981245dbfa9da31e204d4ac563a1ff5d1905755afddaa8c4e19b21e6fc0d6099bb3af7d3b69ba7348c62c3b66b46f0028c81b5fdcbc5a6c769d4ee2ed0d522313bfdd2260ec7acc4f3e9fcb319a6ced4218bddb9b35bfde32a8974658f6a73569ca61f7644cfbab1c4d15ccd812bc4c79ff49f246b0a322c0c51961a9a57102330a12b1907cc3a9440f951a8e0b29e9d27f9756f97641634bc7420b25d7787c511bb2d080", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x1020, 0x0, 0x31, {0x3baf, 0x0, 0x7fff, 0xffffffff}}, 0x0}) 1m26.768442647s ago: executing program 0 (id=885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x181800) sendmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="19591e3eb3b64dcc8d37419aeebecf83166903fbc8ed2f9ef290354a28b97719d58842f18bb26015e09f4d09a63b237dac839da64d525e1c2fd2dc1aad50a886d722f9d4e1a6c953e6a2227c1dd73306128026d400ffe79e444ebf5e6e08d7cd905c63e43c7af4012fa63e5672e2fce30cb7eb83c809cb361448c08746876d", 0x7f}, {&(0x7f00000004c0)="a805afb8a3830e34cc4355153a88d3f26f1419df01393e6efea3b5cb67422d3ae782ebfcf87e4b04068c9ad7946ae7b4301cf63a78d0110cacd3fc4a29a6da3f34c98c68945f253175d2d0f1c5c3ea18729ed083b6f361dd4e636cc46aaff904c2ec68653e94d946cb03b3cd54e051dd416c0d20e2643b2a4ec869224d907f9c5624fe828a0890596864493bfd9f35888d53f27b703dbc3d249b947760b7b33845f10e0d7cf13353024091bd9397e647b15fe896de61d749a4a7331dea", 0xbd}, {&(0x7f0000000580)="168e74568416ba7da8f13312ee52c086512a97c47d9c4a3fab70431059f692a8ac688a30fd540b72cc3c1e981d730e6ff6740119361f2f8d59d2b828ad52365cabaefc0e5a8dc5cf2e84a1623e07e91c168aa9210113e9683dd45f9d930506a7c04266f7b9779f6d42275930261e707fcba3aa7dee424ff27926e150aa7a2e19d12f91db7b6af7e9d2785309f374bafa78487a3710b68f37b20faa3a78792b9f518982485cdf81675fd88a197a09c3c50d05fc34104106b9e50e02d6", 0xbc}], 0x3, &(0x7f0000000640)=[{0x68, 0x111, 0x7, "463e8cfc814f1dd8ab651bdfdfd26da82738d0177ec7fec4b9f4f0895072993c2a9252119899661a948c672299316700fe878abd64ac38747f9ef9171ffa594d5ffb4a8248b3f1e2a4f791c58e7e9e822e4c"}, {0xe8, 0x110, 0x4, "8bda9a2e1393705f95a37455b9ceefe441bcf4f596b1f3fc51608126612e16be7d97000edba55ad5d302f9015a2a8a60a1e9dbd549e81629e3f1f8317274e8b60ce45aac93a3a6852d7cc1414e96fdc65eccb12f30fdb77bd463081d9e7e1ee88d49eb09dd34b631199d99385c1290b2b87118ffc10b0f3263ff28001eba1fea5c7b0824e4c34b6b9ab46a6883819b4e800a15a4f25ba743aa48f801f5b25b450d4580e59740d6d63b5181af4e069ed8a55f4f906833d6c083e76513f97a041047407819fd940197399c943cabe4eb2ec1fca8ef"}, {0x110, 0x2601600212148581, 0x60000000, "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"}, {0xe0, 0x112, 0x8, "aa6050b7090b02b5c60c6d8abafd7543cc637bb82d4c57df9c8f60427dca2a1fbcb57cfb06626cc48f0e3c9b81c8eec555f226a70aa295e78524b9c1222864adc4391319a46bdc6943e508d86eecdad0af2d4e433024bd5fadc22115a041cdb2f99059081514ee848a37dfa57fcb47876180ee6d4db9e44a02fcab3bfe76e9cbf2a6ebc0c12e87e22c868f80fa409f5d87f26fc6506a7d2b42426eddb912053e15d6caf3d31c4a7849bc125c6454f2d81d401f1bbfeae8b06c81dc6e485e6ff76fed1f69f81fc27ed542d79443828ba0"}, {0x18, 0x10f, 0x9, "054743"}, {0x110, 0x1, 0x0, "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"}, {0x70, 0x110, 0x7fffffff, "205226ea3628461b4bf50d3f5c3d5ac0583e78accfb2fbccc197927032ba40d10e3870b54d9f7f3d6a8dc1e90989e93859bd0b19527d6db21043221782173b817b1c76a93e82bd54cf1bf144a5a56325c57a68beee2680483509"}, {0xd8, 0x115, 0x6, "c75ef1485ff06af07dbb88fe702051ff3cea185712e642816be1b9c0fa2bf0e9fb1bf8620a96e1a7c2351bc3e38d45d5be3e0e308be3c4f122f1bb0bb172e1bf0ae3268288022b3230636af3e3c767becd29472db4546c53a60588622b7b5c133b9946b779a3722301a8c42d2380fa943c65523dae8bea0c29a23f9653edd4144a8710c91446d8d0ea58e04aa0487936a28c937dbbdba9408666d7ad30ef57b68a2acccefda55d75780738af6ff71c1abd5373be6508086aa4b12f32dd985d946bba9aac384373"}, {0x78, 0x119, 0x3, "fe12ac64562c8b158ac371299d0d619dfc49ba81261dc95ac40ebcc0b518faed754e933866a939b5b3f52747e91532c0e7000184c03297934a789b162526fc37d7a5032fe30d8e05f8171383966aa13b275259d8484dfcb56a55473fbaa8c740f6"}], 0x628}}], 0x1, 0x10) (async) sendmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="19591e3eb3b64dcc8d37419aeebecf83166903fbc8ed2f9ef290354a28b97719d58842f18bb26015e09f4d09a63b237dac839da64d525e1c2fd2dc1aad50a886d722f9d4e1a6c953e6a2227c1dd73306128026d400ffe79e444ebf5e6e08d7cd905c63e43c7af4012fa63e5672e2fce30cb7eb83c809cb361448c08746876d", 0x7f}, {&(0x7f00000004c0)="a805afb8a3830e34cc4355153a88d3f26f1419df01393e6efea3b5cb67422d3ae782ebfcf87e4b04068c9ad7946ae7b4301cf63a78d0110cacd3fc4a29a6da3f34c98c68945f253175d2d0f1c5c3ea18729ed083b6f361dd4e636cc46aaff904c2ec68653e94d946cb03b3cd54e051dd416c0d20e2643b2a4ec869224d907f9c5624fe828a0890596864493bfd9f35888d53f27b703dbc3d249b947760b7b33845f10e0d7cf13353024091bd9397e647b15fe896de61d749a4a7331dea", 0xbd}, {&(0x7f0000000580)="168e74568416ba7da8f13312ee52c086512a97c47d9c4a3fab70431059f692a8ac688a30fd540b72cc3c1e981d730e6ff6740119361f2f8d59d2b828ad52365cabaefc0e5a8dc5cf2e84a1623e07e91c168aa9210113e9683dd45f9d930506a7c04266f7b9779f6d42275930261e707fcba3aa7dee424ff27926e150aa7a2e19d12f91db7b6af7e9d2785309f374bafa78487a3710b68f37b20faa3a78792b9f518982485cdf81675fd88a197a09c3c50d05fc34104106b9e50e02d6", 0xbc}], 0x3, &(0x7f0000000640)=[{0x68, 0x111, 0x7, "463e8cfc814f1dd8ab651bdfdfd26da82738d0177ec7fec4b9f4f0895072993c2a9252119899661a948c672299316700fe878abd64ac38747f9ef9171ffa594d5ffb4a8248b3f1e2a4f791c58e7e9e822e4c"}, {0xe8, 0x110, 0x4, "8bda9a2e1393705f95a37455b9ceefe441bcf4f596b1f3fc51608126612e16be7d97000edba55ad5d302f9015a2a8a60a1e9dbd549e81629e3f1f8317274e8b60ce45aac93a3a6852d7cc1414e96fdc65eccb12f30fdb77bd463081d9e7e1ee88d49eb09dd34b631199d99385c1290b2b87118ffc10b0f3263ff28001eba1fea5c7b0824e4c34b6b9ab46a6883819b4e800a15a4f25ba743aa48f801f5b25b450d4580e59740d6d63b5181af4e069ed8a55f4f906833d6c083e76513f97a041047407819fd940197399c943cabe4eb2ec1fca8ef"}, {0x110, 0x2601600212148581, 0x60000000, "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"}, {0xe0, 0x112, 0x8, "aa6050b7090b02b5c60c6d8abafd7543cc637bb82d4c57df9c8f60427dca2a1fbcb57cfb06626cc48f0e3c9b81c8eec555f226a70aa295e78524b9c1222864adc4391319a46bdc6943e508d86eecdad0af2d4e433024bd5fadc22115a041cdb2f99059081514ee848a37dfa57fcb47876180ee6d4db9e44a02fcab3bfe76e9cbf2a6ebc0c12e87e22c868f80fa409f5d87f26fc6506a7d2b42426eddb912053e15d6caf3d31c4a7849bc125c6454f2d81d401f1bbfeae8b06c81dc6e485e6ff76fed1f69f81fc27ed542d79443828ba0"}, {0x18, 0x10f, 0x9, "054743"}, {0x110, 0x1, 0x0, "c31d7464940f50d062cc8057449a66b7cb7ad076dee25a55532ba35e34d9e55da33e791d11496f18a362456a64510ffb46f205cb91d3b1944d13c9becc24fd3eeb20c875548bae0722c976760b72b30508273a30825f2862ea2ed28cf5d156e32e13b5c32ec5bf014733de15a14cd9d4f6b1e3437d2ec87531cecfa1836e068164446af0a326d7c8d9b7dca26bfbd58855a128cc455c80ba180040909b02de72710d3a06451f8e53a428bd6bc3716e647a3818ae927b4d0dd00b748957cbe0510e6167f67a29f0a08b265064b924530b67aad6f80ef16de6a6fdcd2b7e124a2d94ebe2f77eada18d75e05e0c9a8e5419c08b25384fa8fde8f039"}, {0x70, 0x110, 0x7fffffff, "205226ea3628461b4bf50d3f5c3d5ac0583e78accfb2fbccc197927032ba40d10e3870b54d9f7f3d6a8dc1e90989e93859bd0b19527d6db21043221782173b817b1c76a93e82bd54cf1bf144a5a56325c57a68beee2680483509"}, {0xd8, 0x115, 0x6, "c75ef1485ff06af07dbb88fe702051ff3cea185712e642816be1b9c0fa2bf0e9fb1bf8620a96e1a7c2351bc3e38d45d5be3e0e308be3c4f122f1bb0bb172e1bf0ae3268288022b3230636af3e3c767becd29472db4546c53a60588622b7b5c133b9946b779a3722301a8c42d2380fa943c65523dae8bea0c29a23f9653edd4144a8710c91446d8d0ea58e04aa0487936a28c937dbbdba9408666d7ad30ef57b68a2acccefda55d75780738af6ff71c1abd5373be6508086aa4b12f32dd985d946bba9aac384373"}, {0x78, 0x119, 0x3, "fe12ac64562c8b158ac371299d0d619dfc49ba81261dc95ac40ebcc0b518faed754e933866a939b5b3f52747e91532c0e7000184c03297934a789b162526fc37d7a5032fe30d8e05f8171383966aa13b275259d8484dfcb56a55473fbaa8c740f6"}], 0x628}}], 0x1, 0x10) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000240)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x7a, 0x0, &(0x7f0000000440)="be7407e246d8d831466a3afc435dea8bd7eb1b5cb8b0c1ff9c88d6c7adb65c57e5f927a0c414014b127cdd15a159c7c84dd96efda19591476e24d2c2f43304bab2ba9a3c80b443fbe584087b1cdf876d9dc36ad8380cc10b7dba038c1d9c4fab5fd3710f0bc2ad920b3f68c51a993dec941bc0c4b992c677716b"}) 1m25.91241611s ago: executing program 0 (id=888): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa40, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x64000, 0x40) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000040)={0x0}) 1m25.91213437s ago: executing program 0 (id=889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8008) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x1, r3, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x4, r3}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd(0xff7ffff7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r5, 0x0, 0x8000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x33) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.836151621s ago: executing program 0 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0xa0, 0x7, 0xc, 0xd, 0x8, 0x8, 0x5, 0x8c, [0x1, 0x2, 0x800, 0x4, 0x0, 0x2, 0x5, 0xb591], [0x6]}}) r1 = eventfd(0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x101) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d0, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x260}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x187}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93be}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff3c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x815}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20040810}, 0x4005004) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x80800) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000500)=[{r3, 0x489}, {r1, 0x10}, {r0, 0x4}, {r4, 0x481}, {r6, 0x2041}, {r1, 0x2000}], 0x6, 0xe) r7 = syz_clone(0x40201280, &(0x7f0000000540)="618090fa0e7a3464fb4cde31465edeab80c758a2d2ddccd846145b76da52ecfa9938854a96df06e74b52bfa970c1d716a73e405b360d2f5f2f2e0e1df7f9f5c1d2008a54a2f988c205ed", 0x4a, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="b81013ffc623c1b6a9cdf2e7aab8508f8679f2c0d2ce2144022c6c463c4de8adbe2d79a86fb9358e144f6e3f70b93fb1d0362f5a83ade055634d9f19") ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000740)=""/11, 0xb}], 0x3, &(0x7f00000007c0)=""/188, 0xbc}, 0x2}], 0x1, 0x20, &(0x7f00000008c0)={0x0, 0x989680}) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000900)=0x8, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000980)) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000ac0)=0x71d) mount$bind(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x1000800, 0x0) mount$bind(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000c80)=0x4, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x194, r8, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25544c789043ec95c361abf690b8133ce963c58edbeed6b5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f38681485dfc0f04286aba246637073972060fab9fd1de4c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x194}}, 0x4008080) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001540)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001640)=0xe8) getgroups(0x9, &(0x7f0000001680)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x40400, 0x0) sendmmsg$unix(r5, &(0x7f0000001900)=[{{&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001040)="57609bebdf68b206b237e59470945a37f9722bbca5122af33b8956befb6420fa576bd8400212ffe21034336f184203cc6d8c711e9d5fe5f078d9c886d43a6ff443b4ba4fc7c03b2360123d78952aa3e854e3", 0x52}, {&(0x7f00000010c0)="55cbc711a3ea23c034e4264db6d906cb0e537cb062ea853a54c564f547231ef30054b71ac9139a7a88f2c1b2f869bdfa1751563211b81bd741fd31674a3989fe7d6daa262185181eae50629c1a95c2ce1ada2e743777799e80c7ee9828c63f94b281de016b1dacd6173b1bc06164d5836db7d93dfe085a0ff7bc444bd341f92c5d731d60b313d8d4b22fe48af0ac38d219648732c428e4a4138ed3e394fa0b4fa3a08a85d2a9fb14420477", 0xab}, {&(0x7f0000001180)="221a05aa8401859ac44eab89baf9c57b91d33e54f8cd9305982232fb95ad177cac8c33c51fb621d60c2bc2a6e921e1e13736e2960a9b6bc399eadcd32993ce2f0bb64d5d1098e2fc903a309fe9a0a25620371780bf5d0df86ca63a93ead2a95939eaeea778a3b2", 0x67}, {&(0x7f0000001200)}, {&(0x7f0000001240)="6f973b5f373e257ada9fc61597a45cf91bae7be4b7e88ed20f8e14c65c9cb41871914abd5fde63b6e9c7985a7fbc8cbc2c3923fd800095ce335f5b83b55be3afc48e6a85e6adaed8773babbe920fc2c849767ff252ab68143da0e83c", 0x5c}, {&(0x7f00000012c0)="d317862f8051cc8434afc7bf1fdd47b799ff1a1c90b30c79d44c4b4ec356e9ab69c89a9972c688fd5813169f46009c1cfe86e63f49c89eca1dd27c10cc2327d17c1ef259539096469987332ad65d2cbf56c180ecc95951cd29bed6bb313bcfc07d0adaedce3ba227668cb3d44212b5456c4d6c22284fb400c48be0c128627ea8938073c5830312f3587ac99962c5e883f64a3b8e3588ea1d32f742a1690100728c5cfe65ff4c14e1e201f97021f08978cec747d73e72362035", 0xb9}, {&(0x7f0000001380)="df589b70c9868dcd18449cd806ab", 0xe}, {&(0x7f00000013c0)="01cc90f7cd2ce1127e9a02c3c826402e8523a5e19f67c3cf524bc8a6711e831cb79a8231669d9435933a295f3b61c0e6125774b70f6d9573f3a76282dd503b62c420516ccb80432997a323b64568e39660da791ee438a31a0e21b6a0f5d2636d72a64b47835d5d688ca1b672908a903dc7c88bb5264c25d4fc4a7dcb88ef29e6e45e4291dd83c7ddc0486f8398908e39cd19700a2903791926cc6e2edcd1ae90e46ab34a6eb712c0e79f2a5a2ab4987955a0882800477871ccf03f869635dbd56b67f5b8f0e795df89ae96f4dd148de80d4ea37cbcc5cd6273dde2ebc5fddbc49cfc961fa3d9abf1", 0xe8}], 0x8, &(0x7f00000017c0)=[@rights={{0x20, 0x1, 0x1, [r1, r6, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r10, r0, r3, r4, r0, r6, r6, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r11, r12}}}, @rights={{0x2c, 0x1, 0x1, [r13, r0, r0, r5, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x108, 0x9010}}], 0x1, 0x4000) 1m25.747079143s ago: executing program 33 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0xa0, 0x7, 0xc, 0xd, 0x8, 0x8, 0x5, 0x8c, [0x1, 0x2, 0x800, 0x4, 0x0, 0x2, 0x5, 0xb591], [0x6]}}) r1 = eventfd(0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x101) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d0, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x260}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x187}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93be}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff3c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x815}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20040810}, 0x4005004) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x80800) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000500)=[{r3, 0x489}, {r1, 0x10}, {r0, 0x4}, {r4, 0x481}, {r6, 0x2041}, {r1, 0x2000}], 0x6, 0xe) r7 = syz_clone(0x40201280, &(0x7f0000000540)="618090fa0e7a3464fb4cde31465edeab80c758a2d2ddccd846145b76da52ecfa9938854a96df06e74b52bfa970c1d716a73e405b360d2f5f2f2e0e1df7f9f5c1d2008a54a2f988c205ed", 0x4a, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="b81013ffc623c1b6a9cdf2e7aab8508f8679f2c0d2ce2144022c6c463c4de8adbe2d79a86fb9358e144f6e3f70b93fb1d0362f5a83ade055634d9f19") ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000740)=""/11, 0xb}], 0x3, &(0x7f00000007c0)=""/188, 0xbc}, 0x2}], 0x1, 0x20, &(0x7f00000008c0)={0x0, 0x989680}) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000900)=0x8, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000980)) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000ac0)=0x71d) mount$bind(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x1000800, 0x0) mount$bind(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000c80)=0x4, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x194, r8, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25544c789043ec95c361abf690b8133ce963c58edbeed6b5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f38681485dfc0f04286aba246637073972060fab9fd1de4c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x194}}, 0x4008080) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001540)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001640)=0xe8) getgroups(0x9, &(0x7f0000001680)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x40400, 0x0) sendmmsg$unix(r5, &(0x7f0000001900)=[{{&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001040)="57609bebdf68b206b237e59470945a37f9722bbca5122af33b8956befb6420fa576bd8400212ffe21034336f184203cc6d8c711e9d5fe5f078d9c886d43a6ff443b4ba4fc7c03b2360123d78952aa3e854e3", 0x52}, {&(0x7f00000010c0)="55cbc711a3ea23c034e4264db6d906cb0e537cb062ea853a54c564f547231ef30054b71ac9139a7a88f2c1b2f869bdfa1751563211b81bd741fd31674a3989fe7d6daa262185181eae50629c1a95c2ce1ada2e743777799e80c7ee9828c63f94b281de016b1dacd6173b1bc06164d5836db7d93dfe085a0ff7bc444bd341f92c5d731d60b313d8d4b22fe48af0ac38d219648732c428e4a4138ed3e394fa0b4fa3a08a85d2a9fb14420477", 0xab}, {&(0x7f0000001180)="221a05aa8401859ac44eab89baf9c57b91d33e54f8cd9305982232fb95ad177cac8c33c51fb621d60c2bc2a6e921e1e13736e2960a9b6bc399eadcd32993ce2f0bb64d5d1098e2fc903a309fe9a0a25620371780bf5d0df86ca63a93ead2a95939eaeea778a3b2", 0x67}, {&(0x7f0000001200)}, {&(0x7f0000001240)="6f973b5f373e257ada9fc61597a45cf91bae7be4b7e88ed20f8e14c65c9cb41871914abd5fde63b6e9c7985a7fbc8cbc2c3923fd800095ce335f5b83b55be3afc48e6a85e6adaed8773babbe920fc2c849767ff252ab68143da0e83c", 0x5c}, {&(0x7f00000012c0)="d317862f8051cc8434afc7bf1fdd47b799ff1a1c90b30c79d44c4b4ec356e9ab69c89a9972c688fd5813169f46009c1cfe86e63f49c89eca1dd27c10cc2327d17c1ef259539096469987332ad65d2cbf56c180ecc95951cd29bed6bb313bcfc07d0adaedce3ba227668cb3d44212b5456c4d6c22284fb400c48be0c128627ea8938073c5830312f3587ac99962c5e883f64a3b8e3588ea1d32f742a1690100728c5cfe65ff4c14e1e201f97021f08978cec747d73e72362035", 0xb9}, {&(0x7f0000001380)="df589b70c9868dcd18449cd806ab", 0xe}, {&(0x7f00000013c0)="01cc90f7cd2ce1127e9a02c3c826402e8523a5e19f67c3cf524bc8a6711e831cb79a8231669d9435933a295f3b61c0e6125774b70f6d9573f3a76282dd503b62c420516ccb80432997a323b64568e39660da791ee438a31a0e21b6a0f5d2636d72a64b47835d5d688ca1b672908a903dc7c88bb5264c25d4fc4a7dcb88ef29e6e45e4291dd83c7ddc0486f8398908e39cd19700a2903791926cc6e2edcd1ae90e46ab34a6eb712c0e79f2a5a2ab4987955a0882800477871ccf03f869635dbd56b67f5b8f0e795df89ae96f4dd148de80d4ea37cbcc5cd6273dde2ebc5fddbc49cfc961fa3d9abf1", 0xe8}], 0x8, &(0x7f00000017c0)=[@rights={{0x20, 0x1, 0x1, [r1, r6, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r10, r0, r3, r4, r0, r6, r6, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r11, r12}}}, @rights={{0x2c, 0x1, 0x1, [r13, r0, r0, r5, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x108, 0x9010}}], 0x1, 0x4000) 1m6.904784587s ago: executing program 1 (id=1113): socket$netlink(0x10, 0x3, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x6289c, &(0x7f0000000080)={[{@max={'max', 0x3d, 0x4}}]}) 1m6.852195398s ago: executing program 1 (id=1114): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/46, 0x2e) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/46, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1b0, 0x12, 0x20, 0x70bd26, 0x25dfdbfd, {0x13}, [@generic="8956f607ce1dfc1e2d62a8f89b2e2fa6ea799f3138e2aa87b8a42a13e4c17f067a8217cbc83da57bd764e16645d127d78b85e08b68de21c63245583bedc9ddbb71487e010919414acdcbe3553f49fc79d25df92e14b5b576d24e0251b345cbec29f57fd367985a2db33d5f893d13c2e801e58d16838c6c68c2b4dd4257c48fd815cbe1e262bbf4461a541366c0abedc1a53f691e382c5c38dfefeb48832325956da6fe12e05f6e89479d0627b4195f5f341cfb3cdadbdee78e75a57b406a4f8d7245a3377e4552d4f3d4ff65fb1ad22acb0cc1eb6538a354", @generic="469fa1cc617fc2899552a73287acf80da5a5e3b7d45402cdd30f72d4002357d4008840b3e8dfc56ab43ba92eb6565d8e9c657e372afd0babec1855251410e191dce3b446814f9eb7f372ecb53f9b6d6850dc4635db4c896c8acfad8d16de972f76979d5d857505562f5fe1a96ba9a8acc29e7540279d28994dd19e0edb27f850586977b71806d615e305215319234915d8d4852be2cdc2b69e3afbaae6007cfa31919c8c15c6e37bcb79bb45227b1e70e412531515735111682bc33e0beb9854b0a7"]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) (async) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1b0, 0x12, 0x20, 0x70bd26, 0x25dfdbfd, {0x13}, [@generic="8956f607ce1dfc1e2d62a8f89b2e2fa6ea799f3138e2aa87b8a42a13e4c17f067a8217cbc83da57bd764e16645d127d78b85e08b68de21c63245583bedc9ddbb71487e010919414acdcbe3553f49fc79d25df92e14b5b576d24e0251b345cbec29f57fd367985a2db33d5f893d13c2e801e58d16838c6c68c2b4dd4257c48fd815cbe1e262bbf4461a541366c0abedc1a53f691e382c5c38dfefeb48832325956da6fe12e05f6e89479d0627b4195f5f341cfb3cdadbdee78e75a57b406a4f8d7245a3377e4552d4f3d4ff65fb1ad22acb0cc1eb6538a354", @generic="469fa1cc617fc2899552a73287acf80da5a5e3b7d45402cdd30f72d4002357d4008840b3e8dfc56ab43ba92eb6565d8e9c657e372afd0babec1855251410e191dce3b446814f9eb7f372ecb53f9b6d6850dc4635db4c896c8acfad8d16de972f76979d5d857505562f5fe1a96ba9a8acc29e7540279d28994dd19e0edb27f850586977b71806d615e305215319234915d8d4852be2cdc2b69e3afbaae6007cfa31919c8c15c6e37bcb79bb45227b1e70e412531515735111682bc33e0beb9854b0a7"]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340), 0x208840, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000003c0)=0x5, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xec, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000740)=0x1, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000740)=0x1, 0x8) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000780)={0x9f, 0x0, 0x1}) listen(r3, 0x2) fchdir(r2) (async) fchdir(r2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x3, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x3, 0x0) writev(r6, &(0x7f0000000f00)=[{&(0x7f0000000840)="f85f1e9073c403215b11bd70d544ad2f393315f8254b1fc5bd87cea7d72b05bd78516c6a4b8e4e3fe47e243dab964dce9406c24bee61ee626d535813f67d240625d3c1bbdce716d16b62180fb917bfd60aa8a79698cc981eb006c30d20dcf550de7a052d4bf09ec7be0b619700ee85cc2f68e2e76e43d4e4bdafe3290e1af507159d8df6250ca303ae8d5b0629a83d8262812b90893e1e72a40ee0c51f2407cfc7a6748c4c63bf9292c5fb78659712db16f8a62674781583931940541842b02b4af0982ccd27eb4309025a17e531", 0xce}, {&(0x7f0000000940)="183a13a27049415e71993e36dbc843cf48aa5bba509d97f220b89440e05faaf276cc8505f312adf029524e06bc090bd50d87c524e3fe814453539f0cdc66b4ad6fe26973560406d9cf295717452857cabbab7dcc80a9cdb5cc0e2c992b46882a865d4439392248e23f5cca9fcbd976bc4643b05908a371b9c7de884f8b7ada3db5ca8b8c6da59b7a1655e1f06e95adc987af83d14c350ad8e38cdeaab29108b15d2d3fcce3f311a3", 0xa8}, {&(0x7f0000000a00)="72964720ef6f8db5994544c50115e4ca3137de853c6072f39b11b615376aa778647aa0a1029ba8e57c7e93b4e7f77f6a6202cae7ef6abf2362250eb6cab84fc98e6bbf35d937d86b2d6172fd25b41276195997bfefa351ae76fb7a949ead19e6cdc5433069f2286306ef5059dc2be597ab37d549de86235e3de7e6a5d0166b8dbdc0291d3ad544ea54b2c7b37b0a9692989f364486c45201ecc41d3f51742b83717c3a931da3c5fbe4ccd0e26617b84748ed14edabd1e6cc9162797cbccb79be23d84f001972bc606b", 0xc9}, {&(0x7f0000000b00)="f99fa01086e4f03df1c41cc9b43ff86a1ff2ee2c702859733a5c453d50908e01ad37862a269e9ecee1df7fd5ce", 0x2d}, {&(0x7f0000000b40)="92a68b6409af6f0a5a1ec879ce1b22d790c8d1715fc064db27b2bb7c1787a7b2195a29da47553d0458fd1c4fdbb1e322784f79608f2450aa4aaa3141b1149d43baab04a0475752a861f5970a1300ecccc22b5050b81337ef9dbc1f47ae014630ad09dd20900e61ac5c7d9977ba19ff2921f9b3428f0b47a6b19583b1a22562f568bcf104bcb2069cf053126fc1fd79786bcb8fd025d09b3f15e0fcb9626a355bccbb5eaed549ca80351ff01f28d8072642ac8c10b5b9ffe2ac58b7676c2e0e2f54ff56ee231031e336552ca11c2ffa6c9c7460b99f82834276e5f7c2547e0f80564ceea6cc90efc54b798a41adb2c03cbd7392", 0xf3}, {&(0x7f0000000c40)="dd07e21cc6b993559668d0d78f9e704ff568898c5c4b5578bec7c0a0d2248f50379991b76201b3f0640516ed93713c393621216a621484baf9617af7e37866c1307bba2289a9bc814d5d38cd316acf25d21931f92d028de71f76274689af52d96004058f3464ee0612906088f5c3e7ff34275e2b71b88df3c7474591d30f586f949e0dcf713489702f3693c87218bc2fad4a41597b003035d94aece8265306869af606af767595cfb44431bb951d3be5057577ee4b291ad5675b0fdf3178086c09ba2486cd671ba26ca6d35b925ad5f8e968d5d4bcbe", 0xd6}, {&(0x7f0000000d40)="ea5a39960126f85a106959b36a8803d4cb8307021e79c89fbd18bbcf4c741c318a8becdf864603d5768a9d7a7706caf212b1e8f60378426afaaaa817aa856337fc7f881fd88c843da0397059eeaecff47a93395ef6fdde50500c4d18ce63441d5ea4b6fd19552d7628e53d3317547d241953682353a1bf346ad7ff60d9394b82fa95bef858086df3", 0x88}, {&(0x7f0000000e00)="cefcf3a0dbb11cb2aa935ec1e3bb22cd09037f10dea25832f954844bda5bd91aa7884035a6e0a26e6c1a649673ec9b291f4ce66c92a8860d28023c0ddaf7f4739b2c14ce7994f6f1886eab582efceb9eba8a76819c7670820b4d3172d4a3319635f92b61051464ecffc2876a196637bdfd88811acb8ea0879e22651d9e9bfd59865ee3bab2f0a64c3d53b42c954a637cc97467027b409612d728ee1407b59d157431b6a977fe45e99bb4d010840a957abc", 0xb1}, {&(0x7f0000000ec0)="f135be3df9abbd772517526210", 0xd}], 0x9) (async) writev(r6, &(0x7f0000000f00)=[{&(0x7f0000000840)="f85f1e9073c403215b11bd70d544ad2f393315f8254b1fc5bd87cea7d72b05bd78516c6a4b8e4e3fe47e243dab964dce9406c24bee61ee626d535813f67d240625d3c1bbdce716d16b62180fb917bfd60aa8a79698cc981eb006c30d20dcf550de7a052d4bf09ec7be0b619700ee85cc2f68e2e76e43d4e4bdafe3290e1af507159d8df6250ca303ae8d5b0629a83d8262812b90893e1e72a40ee0c51f2407cfc7a6748c4c63bf9292c5fb78659712db16f8a62674781583931940541842b02b4af0982ccd27eb4309025a17e531", 0xce}, {&(0x7f0000000940)="183a13a27049415e71993e36dbc843cf48aa5bba509d97f220b89440e05faaf276cc8505f312adf029524e06bc090bd50d87c524e3fe814453539f0cdc66b4ad6fe26973560406d9cf295717452857cabbab7dcc80a9cdb5cc0e2c992b46882a865d4439392248e23f5cca9fcbd976bc4643b05908a371b9c7de884f8b7ada3db5ca8b8c6da59b7a1655e1f06e95adc987af83d14c350ad8e38cdeaab29108b15d2d3fcce3f311a3", 0xa8}, {&(0x7f0000000a00)="72964720ef6f8db5994544c50115e4ca3137de853c6072f39b11b615376aa778647aa0a1029ba8e57c7e93b4e7f77f6a6202cae7ef6abf2362250eb6cab84fc98e6bbf35d937d86b2d6172fd25b41276195997bfefa351ae76fb7a949ead19e6cdc5433069f2286306ef5059dc2be597ab37d549de86235e3de7e6a5d0166b8dbdc0291d3ad544ea54b2c7b37b0a9692989f364486c45201ecc41d3f51742b83717c3a931da3c5fbe4ccd0e26617b84748ed14edabd1e6cc9162797cbccb79be23d84f001972bc606b", 0xc9}, {&(0x7f0000000b00)="f99fa01086e4f03df1c41cc9b43ff86a1ff2ee2c702859733a5c453d50908e01ad37862a269e9ecee1df7fd5ce", 0x2d}, {&(0x7f0000000b40)="92a68b6409af6f0a5a1ec879ce1b22d790c8d1715fc064db27b2bb7c1787a7b2195a29da47553d0458fd1c4fdbb1e322784f79608f2450aa4aaa3141b1149d43baab04a0475752a861f5970a1300ecccc22b5050b81337ef9dbc1f47ae014630ad09dd20900e61ac5c7d9977ba19ff2921f9b3428f0b47a6b19583b1a22562f568bcf104bcb2069cf053126fc1fd79786bcb8fd025d09b3f15e0fcb9626a355bccbb5eaed549ca80351ff01f28d8072642ac8c10b5b9ffe2ac58b7676c2e0e2f54ff56ee231031e336552ca11c2ffa6c9c7460b99f82834276e5f7c2547e0f80564ceea6cc90efc54b798a41adb2c03cbd7392", 0xf3}, {&(0x7f0000000c40)="dd07e21cc6b993559668d0d78f9e704ff568898c5c4b5578bec7c0a0d2248f50379991b76201b3f0640516ed93713c393621216a621484baf9617af7e37866c1307bba2289a9bc814d5d38cd316acf25d21931f92d028de71f76274689af52d96004058f3464ee0612906088f5c3e7ff34275e2b71b88df3c7474591d30f586f949e0dcf713489702f3693c87218bc2fad4a41597b003035d94aece8265306869af606af767595cfb44431bb951d3be5057577ee4b291ad5675b0fdf3178086c09ba2486cd671ba26ca6d35b925ad5f8e968d5d4bcbe", 0xd6}, {&(0x7f0000000d40)="ea5a39960126f85a106959b36a8803d4cb8307021e79c89fbd18bbcf4c741c318a8becdf864603d5768a9d7a7706caf212b1e8f60378426afaaaa817aa856337fc7f881fd88c843da0397059eeaecff47a93395ef6fdde50500c4d18ce63441d5ea4b6fd19552d7628e53d3317547d241953682353a1bf346ad7ff60d9394b82fa95bef858086df3", 0x88}, {&(0x7f0000000e00)="cefcf3a0dbb11cb2aa935ec1e3bb22cd09037f10dea25832f954844bda5bd91aa7884035a6e0a26e6c1a649673ec9b291f4ce66c92a8860d28023c0ddaf7f4739b2c14ce7994f6f1886eab582efceb9eba8a76819c7670820b4d3172d4a3319635f92b61051464ecffc2876a196637bdfd88811acb8ea0879e22651d9e9bfd59865ee3bab2f0a64c3d53b42c954a637cc97467027b409612d728ee1407b59d157431b6a977fe45e99bb4d010840a957abc", 0xb1}, {&(0x7f0000000ec0)="f135be3df9abbd772517526210", 0xd}], 0x9) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x8000, 0x0) r8 = accept$packet(r3, &(0x7f0000001080), &(0x7f00000010c0)=0x14) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() getresuid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001280)={{{@in=@dev, @in6=@private2}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000001380)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001280)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000001380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x14a010, &(0x7f00000013c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@privport}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r9}}, {@dfltgid={'dfltgid', 0x3d, r10}}], [{@uid_lt={'uid<', r11}}, {@fsmagic={'fsmagic', 0x3d, 0xa422}}, {@obj_role}, {@measure}, {@euid_lt={'euid<', r12}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/selinux/mls\x00'}}, {@measure}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x14a010, &(0x7f00000013c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@privport}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r9}}, {@dfltgid={'dfltgid', 0x3d, r10}}], [{@uid_lt={'uid<', r11}}, {@fsmagic={'fsmagic', 0x3d, 0xa422}}, {@obj_role}, {@measure}, {@euid_lt={'euid<', r12}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/selinux/mls\x00'}}, {@measure}]}}) pipe2$9p(&(0x7f0000001580)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x8, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x7fffffff}}, {@afid={'afid', 0x3d, 0xfffffffffffff66d}}, {@debug={'debug', 0x3d, 0x80}}, {@fscache}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_gt={'uid>', r9}}, {@subj_role}, {@fowner_lt={'fowner<', r11}}]}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000001840)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @a}) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000001840)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @a}) 1m6.846155328s ago: executing program 1 (id=1115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r0, r0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x9, 0x7fc, 0x1ff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x4010744d, &(0x7f0000000000)=0x20000002) r2 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r2}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r0) 1m6.816804009s ago: executing program 1 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x1802c60, &(0x7f00000000c0)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 1m6.803789229s ago: executing program 1 (id=1117): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000080)={[{@subsystem='freezer'}, {@none}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = userfaultfd(0x80001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/34, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x8080000, 0x77, &(0x7f00000006c0)=""/119}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500), 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="2c1073e0f35ddfeb8ab69b45b56458866c04fbb6b1d139d97e4d42b8316e27034bae690230d0b2072f46c311cfc681a243b75709e2dadfc40fb0419b8ced9e73fc3d14b94e196ac5f5b889c93ea77c2e0c4eeb9a5a17f1fbbac11539b91b79625e0215a893997319d36492bdb8902ee292a8164b1e9a1554f40acb48af5e77e8209a971447d67fa2dedcbdae83b28761c4ec403e0c2e7ea6a96d216b97e7a7c99192d07a9948c614018835efab89e35465b0ae69f774ecf0091900000000"]) setuid(r5) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, 0xffffffffffffffff, 0x2000) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) 1m6.648183992s ago: executing program 1 (id=1118): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003980)={0x130, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0xe8, 0x10, [{{}, @broadcast, 0x4, @void, 0xf}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x11}, {{}, @broadcast, 0x100, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x7}, {{}, @device_a, 0x9, @void, 0x42}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x35}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x12}, {{}, @broadcast, 0x7, @void, 0x14}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x2}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_a, 0x7f, @value=@device_b, 0x1a}, {{}, @device_b, 0xfff, @void, 0x8}, {{}, @device_a, 0x6, @void, 0x13}, {{}, @broadcast, 0x7c97, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0xfffffff6, @value=@device_b, 0x2c}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004080) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340), 0x80500, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) dup2(r3, r4) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r4, 0x4758f000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4001, 0x5) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) utimensat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}, 0x100) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xff) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_clone(0x4080800, &(0x7f0000000180)="24795fb24ac0e7545d08c9e249f385c0602397b4f747523f9eeaf48e05aa5e4ca9d9323a18dbc3205ca4f3d692d075719e0df61ca525beff7ed95fb18b3b0a657c7e9387c8a8d3da94af39d94ea1b99ac2b81ff3c6fded2f46056730a68d7ee6b4693651f82de7fe9595d869074703f4fe2c4755f6015521f949cd9e295b676ad74d46f2c049175d849e4d9b79", 0x8d, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000001e40)="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") sendmsg$netlink(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x18, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=r9}]}, 0x18}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x20}) 1m6.637027361s ago: executing program 34 (id=1118): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003980)={0x130, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0xe8, 0x10, [{{}, @broadcast, 0x4, @void, 0xf}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x11}, {{}, @broadcast, 0x100, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x7}, {{}, @device_a, 0x9, @void, 0x42}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x35}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x12}, {{}, @broadcast, 0x7, @void, 0x14}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x2}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @device_a, 0x7f, @value=@device_b, 0x1a}, {{}, @device_b, 0xfff, @void, 0x8}, {{}, @device_a, 0x6, @void, 0x13}, {{}, @broadcast, 0x7c97, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0xfffffff6, @value=@device_b, 0x2c}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004080) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340), 0x80500, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) dup2(r3, r4) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r4, 0x4758f000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4001, 0x5) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) utimensat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}, 0x100) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xff) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_clone(0x4080800, &(0x7f0000000180)="24795fb24ac0e7545d08c9e249f385c0602397b4f747523f9eeaf48e05aa5e4ca9d9323a18dbc3205ca4f3d692d075719e0df61ca525beff7ed95fb18b3b0a657c7e9387c8a8d3da94af39d94ea1b99ac2b81ff3c6fded2f46056730a68d7ee6b4693651f82de7fe9595d869074703f4fe2c4755f6015521f949cd9e295b676ad74d46f2c049175d849e4d9b79", 0x8d, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000001e40)="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") sendmsg$netlink(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x18, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=r9}]}, 0x18}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x20}) 44.200477611s ago: executing program 6 (id=1410): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000080)={[{@subsystem='freezer'}, {@none}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/34, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x8080000, 0x77, &(0x7f00000006c0)=""/119}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, 0xffffffffffffffff, 0x2000) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) 44.198351241s ago: executing program 6 (id=1412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='$@!#\x00', 0xfffffffffffffffe) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140), 0x10) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220200000025"], 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc001102a, 0x0, 0x390}]}) r8 = syz_io_uring_setup(0x3dce, &(0x7f0000000180)={0x0, 0x75f4, 0x4000, 0x0, 0x260, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/97, 0x61, 0x0, 0x19}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x31}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 42.475778737s ago: executing program 6 (id=1448): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0xfffffffffffffffc) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000240)={0x68c, r3, 0x200, 0x70bd29, 0xc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x214, 0x11d, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x940c, 0x8000, 0x7, 0x9c, 0x5, 0x1, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0x98, 0x2, 0x1, 0x6, 0x4, 0x40]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x4}, {0x5, 0x1}, {0x4, 0x7}, {0x5, 0x4}, {}, {0x7, 0x2}, {0x6, 0x9}]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x9, 0x4, 0x24, 0x9, 0x9, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x7, 0x400, 0x3, 0x57, 0x56a, 0xfffa]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x6, 0x7}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x3}, {0x2, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x5}, {0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0xc, 0x30, 0x48, 0x12, 0x2, 0xc, 0x48, 0x18, 0x6c, 0x54, 0x6c, 0x2, 0x1b, 0xc, 0x5, 0x12, 0x3]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x7e, 0x18, 0xb, 0x48, 0x6c]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x7, 0x8}, {0x2}, {0x5, 0x9}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x6}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfa, 0x1, 0x8, 0x30, 0xf, 0xc7, 0x100]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2000, 0x63b, 0x2, 0x564, 0x4, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0xa}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x9}, {0x5, 0x4}, {0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x18, 0x60, 0xb, 0x24, 0xb, 0x24, 0x2, 0x16, 0x1b, 0x1b, 0x24, 0x36, 0x24, 0x9, 0x16, 0x5, 0x1, 0x6, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x2, 0x9, 0x8, 0x523f, 0x3, 0x1]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0x48, 0xc, 0x16, 0x4, 0x6c, 0x24, 0x6c, 0xc, 0x6c, 0x18, 0x6c, 0x16, 0x60, 0x6c, 0x4, 0xc, 0xe, 0x16, 0x3, 0x1b, 0x3, 0x1b, 0x699883b00af2407c, 0x48, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3ff, 0x4, 0x3, 0x4, 0x5, 0x200, 0x8f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x5]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x45c, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4372}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x87}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x32c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x5}, {0x4, 0x9}, {0x0, 0x4}, {0x3}, {0x2, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x1}, {0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x7}, {0x3, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x7, 0x8}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0x2, 0x7fff, 0x4, 0xfbff, 0xe6c, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x100, 0x3, 0x8, 0x6, 0x0, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0x9}, {0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x593, 0x4, 0xfffe, 0x7ff, 0xff, 0x3500, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x18, 0xb, 0xc, 0x6c, 0x30, 0x18, 0xb, 0x12, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9af6, 0x6, 0xd135, 0x812d, 0x7, 0x9, 0x5]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe, 0x12fe, 0x6, 0xfffb, 0x17c, 0x6, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3e81, 0xc000, 0x7, 0x7, 0x0, 0x9, 0x400, 0xef51]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1d, 0x9, 0x6, 0x0, 0x98, 0xce0, 0x7, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0xb, 0x1, 0x48, 0x12, 0x9, 0x60, 0x9, 0x18, 0x0, 0xb]}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x6c, 0x5, 0x18, 0xc, 0x3, 0x60, 0x60, 0x1, 0x9, 0x60, 0x16, 0x6c, 0x48, 0x60, 0xc, 0x4, 0xb, 0x12, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x18, 0x1b, 0x60, 0xb, 0x12, 0x4, 0x9, 0x6, 0x2, 0x30, 0x12, 0x6, 0x60, 0x24, 0x49, 0x5, 0x1b, 0xb, 0x24, 0x36, 0x1b, 0x38]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0xc, 0x4, 0x6c, 0x1b, 0x6, 0x36, 0x1, 0x14, 0xc, 0x2, 0x24, 0x3, 0x35, 0x36, 0xc, 0x3, 0x9, 0x18, 0x16, 0x9, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x1, 0x3, 0x0, 0x9, 0xb, 0x13a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x2}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x7}, {0x4, 0x9}, {0x3, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x3}, {0x2}, {0x6, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x2}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x2}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x9, 0x4, 0xf6, 0xfffc, 0x5, 0xfffe, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x2, 0x2, 0x9, 0x9, 0xf, 0x8]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0xa}, {0x4, 0xa}, {0x2}, {0x2, 0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0xa}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0x5}, {}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x7}, {0x5, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xe, 0x0, 0x80, 0x1f3a, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x40, 0x400, 0x6, 0xe0f, 0x7, 0x920]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x5, 0x60, 0x16, 0x2, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xb, 0x5, 0x3, 0x9e2, 0x3, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xae3, 0x6, 0x0, 0x2, 0x8, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8eb, 0x908f, 0x34cf, 0x5, 0x1, 0xe, 0xfab, 0x6]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}]}]}]}, 0x68c}, 0x1, 0x0, 0x0, 0x40}, 0x20000054) sendfile(r0, r1, 0x0, 0x3a8) sendfile(r0, r0, &(0x7f0000000980)=0x7f, 0xb) (async, rerun: 32) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000009c0)={0x5000, 0x8080000, 0x2, 0x0, 0x3}) (async, rerun: 32) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r6, r7) (async) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000c00)={"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"}) (async) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000001400)={0x1c9, 0x1f, &(0x7f0000001000)}) clock_adjtime(0x6, &(0x7f0000001440)={0xffffffffffffffff, 0x8, 0x9, 0x2, 0x9d4d, 0x7, 0x4, 0x1, 0xbb6, 0x6, 0x9, 0x4, 0x9, 0x2, 0x7, 0xc7, 0x4, 0x8, 0xbd, 0x6, 0x100000000, 0x7, 0xce16, 0x5, 0x100, 0x7fffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000001580)={0x4, &(0x7f0000001540)=[{0x9, 0x1, 0x9, 0x8f6}, {0x80, 0x9, 0x94, 0x1}, {0xaf4, 0x4, 0x64, 0x4}, {0x8000, 0x10, 0xb0, 0x1}]}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r8) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001640), 0xffffffffffffffff) (rerun: 64) sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0xf, 0xffffff60}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x74, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3d}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) (async, rerun: 32) ioctl$KVM_RUN(r1, 0xae80, 0x0) (rerun: 32) 42.396330588s ago: executing program 6 (id=1451): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000700), 0x408100, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="1f58d7e19d3f010027bd7000ffdbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) mlock(&(0x7f00004e2000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000002c0)='./file1\x00', 0x1610, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40000, 0xae) r5 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') statfs(&(0x7f0000000280)='./file1\x00', 0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000018c0)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000004c0)="ef8e591379e0f5583904995cfc7870e2641efa36e204c58b7156f7008ee8bfaacd9499b9e781db767b729119628bb10ebdb4373d2ddc3927c44a01bca6c6a9adbbccae82c465bcdfad326ee63377a7b40ec1010c17115722f4503b0ebed51a618b04437f88012827f5bcd4427e87c0b4097e1b8b9c3889f0629071c2d68f0785f06879a99c910262481fe4645fce825e0d2626a5b805ec35f906df49c04e5b34aac2d530448e8713c08d392944ee29ca6a655d2245cfeddf156dd677ef095c1ff82c4f599c86e5a7cfba72640854b9f06cbc459a692a12c005e77dcc66b8967a32f669a9efe9b54ac3e8f484341080e4bb17e5", 0xf3}, {&(0x7f0000000380)="782400a11a2e8bdc5e33a47faea390fc955ac407f830fdb6d0eb123b1055a28700671f87f900ece527278553731e3fd6af4d", 0x32}, {&(0x7f00000005c0)="84531b98a86b2d033d30ed976122890e9cd9fc103fdc7360f145bd1d744b65d290edeab41e9199664e14adf1197f9c06d227dcb8c351006891893c1efbc14fa7ab9ac90743a2f5a06e1625808c9d287eb26b", 0x52}, {&(0x7f0000000680)="6bdcd40b546b371c758e7d0fbc6eb4eb8840a9231f6908b6845f909fb6223b253cb27e8e0a2d9c7b2e9b3817cb18e6f0dd6f7b1e93de0a142c9218dc77c8d332a21f621350cbf9d7478e7cdb2c6031fc653b0801bbcf6939a71262", 0x5b}, {&(0x7f0000000d80)="600b22e0ee072072de88d6253f55ae04f7703dcacfdec5073c5adaef4494fae24a5b2dbda3cc43c6", 0x28}, {&(0x7f0000000740)="decad5fe3c8f12f22fdeb12d7b75412194e75a448221fa3c561550b8f126934df7010fa651da27d7b345f52801002a26882eabdada828d0187bda1400ce1aa82f46c30265332e58e1086a2d45a359d4353b6d3d217dda4adebacdf2f09062a1d19f8034b98bf1de24b364b964fc89052b84f36945974d5d73cae88f0f19cfcff2e41e13e1c8cdb10a21901e78e92fb67764a23d6661c70b837c36e88db49b6e9f346c4175ed74ae7", 0xa8}, {&(0x7f0000000800)="a0614f90cc69aaf6ece57972f521ee0420bb05ffd000d49663377dddb1beaafe4cdabc5b68b950536b34e62264dfe4a592be32b1588b77c2b69b866e314986a70c0ca8d78fb66effa30938a23213fb146d4c1bfce71319898223acb5c08bdfe89c30a569fb7f55b9df5a5b883e42887a38122344fb94f9efaefe728eb681f07e7bcab12c7acac467c73dcc0c1e405d34dedd4cc4121a", 0x96}, {&(0x7f0000000940)="5bbf3ea4e63dded4b931e24b9c23f80d8587d6643db3169e69b4f9a53c83b38aa202efe0be414f672f7025b11719e5e872c04571556a7521459cf667a53da3512d02df02db7ade768852be850ecb1bde4e5c684e70935fbf0402de603a07380d8b84ad091e86d71c7af5c952efc66da0d021284a50d049d2be5d10df731544c0f4291c679690052aa048a3274eb33f148293e8ba85c9ff6a84f631eae5c90dc120206e620e02040f9b75b611e92b2de4f2c0c321b0d890d4a988d6", 0xbb}, {&(0x7f0000000a00)="3a178afa1611ae328ef27760478effef905256554fd4239f2fb49507edf8775a821a1056c1c347434449a14bca575e7d11180f09946fa58810f15a538851ba1f726bbfad0ad7ed1f223b1a3826b457ae074505b6edfb47b380a52748dac0167221359d97790642efe09214aad68d8c97c835ac9c3e46f50ff9408ec3bd1db326bf37c29a97f8b64a92772270c37f9550177dd4bb0366c07dbbea5732d4b3f23ff16e1034eb79d51368baf4a24531170ed94feb303199b6feb6e123a513e24bf3110660ee0474809b66989b4faf", 0xcd}, {&(0x7f0000000b00)="aa9e34c90059151e80f6c69c48d16930f15ca15da38bd387b18dfc805ea83408a073dd90d8a6257d8be059515eaa57ad438bbc3ca702e04678f2233955401ebeba1f91fcef3800b2524af7773148639653c8cf34060e7f22ec0a71f16fa649cac5b60032bba0a8edd6027b52a456cf2033ac9e7d3adef64c951d9931e23ec0b9c27ca462df1dd2018c6f57161f3acde0312af2bb7778da304fb04a91445916d0517c9025d6bc8ebd27", 0xa9}], 0xa, &(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="0000008e109180ed"], 0xe8, 0x41}}, {{&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001380)="da40e5fedf58def15d860d243436f62599cd311aeca968a400437b77e7dfd3e7856b6c75b836e1b76b4958a15a89ebb4e0f9aed9136e91c9aa08942018c11d3bd6a49f67acd53abdc4644cf8e368290f26b4527b067c071b6ee88775353cce72bb907e6dcc44448dd0bb6962bcc8dd6180e41065b50586e67a28a721cd374934d03f3486c89e353dd1f29febf4fccc983e9fc303d04813d51a32dc875d7d18", 0x9f}, {&(0x7f0000001440)="b1bd9dd492e40c4ccef476a520f55cd93c64ba12f6a9ffa0b67f7ec5e32e9be4a7efe99f6a71d7c016e2e39ba81595f59e08b8f8c4454adf83b5050754b705060beb496656408035e5190829a754f8dbe4bfea38897e55ed97dce8269980f8c5ffc5cff71b6833afe5a14d47a77554161fab87cb1a858ea643c87b12995c66bc5ecb91641c5cd42fb85d26549f1e60dbae7279b28e66446775a4328b00fe675eb9116e48f5cc8b1c868be517fc61115accd7599032bf7cb94b30583ab193219161", 0xc1}, {&(0x7f0000001540)="d4f56b7d5960fa67ba4cb5ef78e62a5741aff607069a007f64ecab7b1941f1cf3105736dd834dd5893a3205918a50ce4d31ae4c666e8262a4e9f280befd8a773a634a7fd", 0x44}, {&(0x7f00000015c0)="866123d1d891df956dd1f549a24740fbd22a5d07d3b7e856dfb736bffac6d7", 0x1f}, {&(0x7f0000000f80)="cc32f70bbf08bc0bf5113938de727ec58f5644ad0c9a6097d7d6a7b7eec6b8c30c61bb749228ccb6d9e1d93eee27957ddf67ebe8dbe95cee8d13072088d20c9df218a4a89f24ac00c392d1b669163375f627f22d389501bb09d214533ad7486e6fe53e818e662bc4b79f6ca792d8e9d3543937293b70d15782358115d512e2e95dbe940380a084d5852510ccf30b17b7d6a2f659ac30ecda54beb4ff9bc0f70e742777859488b99249bb53273bf8eaf5015f2c346286e55bf308b69efead37396ff2f2281f54a49bd7bb929c9aceaa82ca9c7ada7e9ea2f2b8dbab9823346346ce5a305632f08580b8fdfa4695e43132b0e3cb7db932957c347129a49d5ca8a2a33c0767e6aec79f448ce2b98f253a845f4c2c733669af3d70c3182274d1e93a2d254d12f5550fff77751e051ab9cac80b95618a836949b027440bf6494728d2811b5340c757fb0e338cadb20fe5a3394b87c1d1f7d064416f25e6c9ef37e4592e301bd42ca4ebd566bf7178efd9a3d1786ef9bdec609a2b8bb6d41941", 0x17d}], 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="1cc7b0a7e6c76c1a000000000000000100000006000000c88159b4651aff1fdabbb303a09d45ed6e423cd414", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r3], 0x68}}], 0x2, 0x4080000) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYRES16=r0]) capset(0x0, 0x0) 42.362846299s ago: executing program 6 (id=1453): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x9) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000021c0)=@newqdisc={0x9c, 0x24, 0x400, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x5}, {0xa, 0x6}, {0xffff, 0xe}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x644}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x15}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4100) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) read(r2, &(0x7f0000000000)=""/175, 0xfffffe14) 42.235137401s ago: executing program 6 (id=1456): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0}, 0x0) clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4}) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x51) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) fcntl$setown(r3, 0x8, r5) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="010000000000040000000100000014000200776731000000000000000000000019006000088050"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="003146000000460f3b13a77c7f663896dec6c55103c5fafc61481391da7af655ebcd285a74880bd10e83ae9f3f35fcc395e72334325aff0300009e356c84965b661335e744d21ff05bace392"], &(0x7f0000000080)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b828c4c1a8d94c3959ed0f992761b15032a4d5f85e83fb3ff5d6fed71e915ac22cda790b8d51a17f0a54fb84551e45986f3b1cee33373e693401f723a112c4366dc6122a126d55848269660bd83957d7d62d74b81c97d719"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="000f67000000050f67000207100216c30c005b100ab775363ff2d4f9123fd2763c27c3a671c49572ffa5288c12e307529a8cc8865aa0bda37d0293abe3e4fd3f68067b9e820bba9ff40e98c5d2ceb87f5e5ad1856628c8d2ca30b5f226c1d52e22cc78af50f496bd5817be5de8"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x5, 0x5, "23789d80", "d06536d0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x1, 0x2, 0x6, 0x3, 0x4, 0x7}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x20, 0x8b, "a54b3d20d6939ea87d1b589a646ee7415bcec54ce187278973c67c61f14e46992986d71ed38379b2556abd51d2e3733b620a090a76fe609cdbc9a2728f2a7e7c650af605bd76ca0a00def7d5b03a5750e20fc80ad25bd085ac120e5aadf841b45084afece98ad9f680d5916dbf9048bc5b241996bcabfd52662b7f1465824570730e97fe0b64f4cf7707e8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x0, 0x10, [0xf]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "bad2"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "d347"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000640)={0x40, 0x1c, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) 42.211390051s ago: executing program 35 (id=1456): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0}, 0x0) clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4}) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x51) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) fcntl$setown(r3, 0x8, r5) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="010000000000040000000100000014000200776731000000000000000000000019006000088050"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="003146000000460f3b13a77c7f663896dec6c55103c5fafc61481391da7af655ebcd285a74880bd10e83ae9f3f35fcc395e72334325aff0300009e356c84965b661335e744d21ff05bace392"], &(0x7f0000000080)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "b828c4c1a8d94c3959ed0f992761b15032a4d5f85e83fb3ff5d6fed71e915ac22cda790b8d51a17f0a54fb84551e45986f3b1cee33373e693401f723a112c4366dc6122a126d55848269660bd83957d7d62d74b81c97d719"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="000f67000000050f67000207100216c30c005b100ab775363ff2d4f9123fd2763c27c3a671c49572ffa5288c12e307529a8cc8865aa0bda37d0293abe3e4fd3f68067b9e820bba9ff40e98c5d2ceb87f5e5ad1856628c8d2ca30b5f226c1d52e22cc78af50f496bd5817be5de8"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x5, 0x5, "23789d80", "d06536d0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x1, 0x2, 0x6, 0x3, 0x4, 0x7}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x20, 0x8b, "a54b3d20d6939ea87d1b589a646ee7415bcec54ce187278973c67c61f14e46992986d71ed38379b2556abd51d2e3733b620a090a76fe609cdbc9a2728f2a7e7c650af605bd76ca0a00def7d5b03a5750e20fc80ad25bd085ac120e5aadf841b45084afece98ad9f680d5916dbf9048bc5b241996bcabfd52662b7f1465824570730e97fe0b64f4cf7707e8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x0, 0x10, [0xf]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "bad2"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "d347"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000640)={0x40, 0x1c, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) 34.37651486s ago: executing program 5 (id=1587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000080)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) openat$ttynull(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) pipe2$9p(0x0, 0x4000) (async) ptrace(0xffffffffffffffff, 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x23, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x84db9bd51560ea27, 0x99, 0x9, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x1, 0x8}}]}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000002040)={0xa, 0x6, 0x201, 0x5, 0x5, 0x8, 0x20, 0x9}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x80, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x13, 0x34, @random="1359a1149e85cabe9311eda1126fec"}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x80, 0xb2, 0xd6}}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0x65, 0x3, @device_a, 0xfffffff9, @void, 0x1, 0x5a0c, @device_b}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x804) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8, 0x1, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 34.36336265s ago: executing program 5 (id=1588): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000300", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(0x0, 0x8e) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0) timer_create(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000020600000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000005d37a43ab32fa7877262a46e0010000000400008007000000d467aef0f23fe7380ec2c90b79e562c6ff143e06d071ab8b6afb5562910dd1c056b241fc8f84e63904a78136950c63fb82f0706759b2c6f0ad3efeb46b4ea3ccb82574e51a4bdf0afac09b9c9ede90e118e83e3002a42525cd020e5bef87ec11457ecb81a9aa5b2ce5207d6ba550fade8bdc"], 0x48}}, 0x4000000) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000103000040002100000001220500090581030000000000"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = syz_usb_connect$uac1(0x3, 0xbb, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x79, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x78, 0x5}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x8, 0x6, 0x6], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x6, 0x8, "50e79d", "3ea8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x40, 0x0, "107c05", "b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x5, {0x7, 0x25, 0x1, 0x0, 0xff, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x8, 'H'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x3, "9ab4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xb, 0xf720, 0xf, "7e4ddf6144d10667"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5c, 0x4, 0x5, {0x7, 0x25, 0x1, 0x0, 0x6, 0xe}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x6, 0xa9, 0x3, 0x10, 0x9}, 0xa2, &(0x7f0000000400)={0x5, 0xf, 0xa2, 0x6, [@generic={0x65, 0x10, 0xb, "9e67d77020cc403e91dec4dd0750980fc137bc28ad6645b794b5e647cabe4a414f8cc6ef40a3148569eb6bfc4f103a570f47a92361ed099f6a13afe6bc1e72896167460192f7d04b2d57aacf8fb022888c1de585a9edaa5f907a3b4fde05e247288c"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x3, 0x9, 0xda17, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x8, 0xed, 0xfa4, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x3, 0xf000, 0x800, [0xff00f0, 0x3f30, 0xffffff, 0xc060]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xd1, &(0x7f0000000500)=@string={0xd1, 0x3, "d6283de13891972c6ab67736a4c384e19b2ed82f244ffb4af886966f562abd6af3a9c3a178988520f15e2523de1f528be65c0420c4238ce578a2aba95d620a1b07564ee062d8b6448c20f08d5d05d4b3dff196045668c24d94d0fe49dc3e2b5b3bc056b03c31dea8f1a993f2bb1842eb5944d14ecbc72b8c7ff800d6fbaf70d1261f6c06462b6ab16e0f7125e5c11c0f8a2079d0297e1dd70af50f9185de95e2f1ee81b4dc66566b99b22f5f896df8feb94fe4ed38cbef6ef5e8840b179178b915cd6430b17738b368f9ef2e8be589"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c23}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$uac1(r10, &(0x7f00000007c0)={0x14, &(0x7f0000000700)={0x20, 0x24, 0x60, {0x60, 0xb, "76ced4f79c4bd63b2ef3c570c9e9d25b0672046ec5cc101cbbbc52dbf84df0a28788182ce97cea7b15eefc6248f7b42647e639260605c4846b2b4f95e7520f72cd74d23c362430a290c5fd94feeb92ca773ac8fecb7325f53ad967d20ac9"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x20, 0x5, 0x18, "dc0101a578fda4a318a86d3d2c34fba5d30596f950513253"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000008c0)={0x20, 0x81, 0x2, "31b6"}, &(0x7f0000000900)={0x20, 0x82, 0x1, '0'}, &(0x7f0000000940)={0x20, 0x83, 0x1, "b2"}, &(0x7f0000000980)={0x20, 0x84, 0x4, "3bd7a962"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "93f7bf"}}) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) lseek(r4, 0x10001, 0x0) 33.831085768s ago: executing program 5 (id=1598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000000)=""/172, &(0x7f00000000c0)=0xac) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/40, 0x28, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 33.760522689s ago: executing program 5 (id=1599): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 33.760232159s ago: executing program 5 (id=1600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0xd19e, 0x20400000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e543bc200fa8d657078aa2d00", 0xf}], 0x1, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000002000099000040e51f6c70c1787f62d16c47a000"/36]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setns(r10, 0x24020000) umount2(&(0x7f0000000180)='.\x00', 0x2) close_range(r7, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 33.719355729s ago: executing program 5 (id=1601): prctl$PR_SET_IO_FLUSHER(0x34, 0x1) r0 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r0, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) (async) epoll_create(0x3) (async) ppoll(&(0x7f0000000200)=[{r0, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) (async) 33.67547376s ago: executing program 36 (id=1601): prctl$PR_SET_IO_FLUSHER(0x34, 0x1) r0 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r0, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) (async) epoll_create(0x3) (async) ppoll(&(0x7f0000000200)=[{r0, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) (async) 15.539900724s ago: executing program 4 (id=1795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xeeee0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000001580)=@gcm_256={{0x304}, "9f82f1860d0eec5e", "ba680c8daf53e860ebb6784b92b7c1bdbc3182e2d159a7b84b7b882d16addf62", "de83765a", "2d5b8400"}, 0x38) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_pidfd_open(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.276587299s ago: executing program 4 (id=1797): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f00008fc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 15.275421499s ago: executing program 4 (id=1798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101, 0x3}) poll(&(0x7f0000000140)=[{r0, 0x240}], 0x1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 15.264666509s ago: executing program 4 (id=1800): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030", @ANYRESOCT, @ANYRES16=r0, @ANYRESDEC=r1], 0x15) r2 = dup(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x14, r4, 0x101, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x400) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6f616368653d6d6d61702c69670600"]) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) 15.19876882s ago: executing program 4 (id=1802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000400)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x260383, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup(r5) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r8, 0x40, 0x10, 0x7, 0x4, {{0x13, 0x4, 0x0, 0x2d, 0x4c, 0x68, 0x0, 0xfa, 0x0, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x13, 0x5, [@rand_addr=0x64010100, @remote, @multicast1, @local]}, @lsrr={0x83, 0x1f, 0xb4, [@remote, @rand_addr=0x64010101, @multicast1, @broadcast, @private=0xa010102, @multicast1, @local]}, @end, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x14d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000380)=""/113, 0x71}], 0xa}, 0x80}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.1900923s ago: executing program 4 (id=1803): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = fsopen(&(0x7f0000000480)='romfs\x00', 0x0) fadvise64(r2, 0x6, 0x3, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r5, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r4, 0x0, r3, &(0x7f0000000140)=0x8008, 0x4, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x6, 0x40010, r1, 0x3dae7000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x42, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',allow_other,default_permissions,blksize=0x0000000000000000,max_read=0x0000000000000004,blksize=0x0000000000001000,max_read=0x000000000000000d,blksize=0x0000000000001200,euid<', @ANYRESDEC=r11, @ANYBLOB=',rootcontdxt=system_u,obj_role=,\x00']) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0xf, 0x0, 0x7, 0x7, 0x1}, {0x4ffe, 0x2, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x10, 0x2, 0x1, 0x5, 0xf, 0x8, 0x6, 0x2}, {0x0, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x1, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x4000, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0xfe, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x70, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xeeee8000, 0x40, 0x8, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) iopl(0xff) setsockopt$inet6_mreq(r12, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 1.571148846s ago: executing program 7 (id=1901): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x20000, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x440) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x31a, 0x12, 0x10, 0x19, "a99b0ded5eeac3d37b5a7ed9e250928e5b078d8b5dde4d2c2b1f11842dd40360ca19312836decf240dd0d17e0af6a4f8e61ddb85ab1af2fde536c383becdc134", "b548bd3fb3d3dfb10aa3900c4dd900080000a077830d405efb0d593d91852987", [0xc1, 0x8000000000000001]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) poll(&(0x7f0000002980)=[{r6, 0x3001}, {r5, 0x4004}], 0x2, 0x6) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000180)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) 1.538088637s ago: executing program 7 (id=1903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x70, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @enter_looper, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 1.437286158s ago: executing program 7 (id=1905): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88900) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x84aebfbd6349b7f2}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r3, 0xf21, 0x70bd2a, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x10, 0x803, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x2, 0x2d, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf0ff}}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) bind$can_raw(r7, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x40, 0x1, 0x2, 0xffffffff, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, {[@lsrr={0x83, 0xf, 0x7a, [@multicast2, @multicast1, @empty]}, @generic={0x88, 0xf, "3f88597328f93cf2ea24c94a0a"}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x2, [{@private=0xa010102, 0xfffffff1}, {@remote, 0x800}, {@dev={0xac, 0x14, 0x14, 0x2}, 0x1}, {@broadcast, 0xa9f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x80000001}]}, @generic={0x88, 0x4, "87a9"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x144}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)={0x288, r6, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x220, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "382dfe1641265acb68c8c8d4c5a6f31dd75d2c97708a333744255b0ef6696f13d101d5dee9a3e8cab27b83f075b1648b9f0158c67208d6ec022c0cbeee9c148c77ecea7c90308db8882860849436962e372088c7acfcdeb60c5703a6d69cca2e091c7ada0aa58e00c91d136b4d08a03a45701495d992c32c2025e0c35045b3f55946d8871ea7f45182505bbeca3b6aaf3d1b396fb7994f3af76b7c87a73798ee31ba555a81f4f5b73c9db6d5e383596e4866fed838ae50"}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "05a712c8f78b0a74143ff006c1e9a51058d6d51c5be7b75bac339b9067660920531e188449a4c791f2b2ef0fce4e53d603b90dd02b90b6612609e5204ce371bd49"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff86}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$(!!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000804}, 0x850) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4880) 867.172187ms ago: executing program 8 (id=1911): ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000150001c0"]) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000100)=0xd, 0x4) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000040)=0x7) (async) sendfile(r5, r5, 0x0, 0x7ffff000) 760.431668ms ago: executing program 7 (id=1912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x401, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) r3 = socket(0x1e, 0x2, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="306e0000010101020900573c1985c6000000000000000a0000000c001980080001003e0b0000100001800c0002800500"], 0x30}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x401, 0x1) (async) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) socket(0x1e, 0x2, 0x0) (async) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="306e0000010101020900573c1985c6000000000000000a0000000c001980080001003e0b0000100001800c0002800500"], 0x30}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) 760.092868ms ago: executing program 7 (id=1913): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004200)='/sys/power/sync_on_suspend', 0x40082, 0x14c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r2, 0x2000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000004280)={0x32, 0x4, 0x0, {0x5, 0x10, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) 759.332868ms ago: executing program 8 (id=1914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) (async) ustat(0x5, &(0x7f00000003c0)) (async) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a0210000000122080009058103200000fe09890448f3213d2fc883b080d6b46ba2a2344f3bc90d551f4f3bac09a57d7febc2dafaa8bf13c5e2efdf218d20bfe7fc9af4b6fa9016cef10251d88e04e0d620d94c05f9fcf54ae2415462d257b19546a07458888ce83962bfc8d5e227a62a5154def9ec7c0c7b4d96ee061d8526eeee863b6f6e7e72ba798818c4115f1c32a9fd703d1834ccfb834a4b33b3b6d1593b3f6336701c9cf238f8a119"], 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000140)) syslog(0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) (async) r3 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 731.671399ms ago: executing program 7 (id=1915): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r5, 0xfffffffffffffc01, 0x0) tee(r0, r5, 0x60000000000, 0x0) 713.113219ms ago: executing program 8 (id=1916): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x0, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) execve(0x0, 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) futex(&(0x7f0000000500), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x25000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000004d80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYBLOB="010029bd7000fbdbdf254a0000000c009900ff0300007d000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040801}, 0x404a0a0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x4000fffffffe) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0xf2984000) 591.513951ms ago: executing program 8 (id=1918): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vxcan1\x00', 0x0}) getpeername$packet(r0, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002d40)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000003680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x24, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xdea5, 0x28}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x3, 0x6, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, 0x40, 0x700, 0x1ff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002ec0)={'gre0\x00', &(0x7f0000002e40)={'gretap0\x00', 0x0, 0x700, 0x0, 0xc00000, 0x80000001, {{0xa, 0x4, 0x1, 0x1c, 0x28, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x6, [{@multicast1, 0x1}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003440)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000340)="ece821db215a98acbf44d9ba8d8ab733605158e799751f7e9b46d969a58c517bed6455cbbac85ca00f71e3b5df89056e95e58eb897913c3fcf2b575afb65e1ef05d8e2af59d27d7422cc386903c358d0fba5928b13651691d92abf25f1fba4dd6509c1986b07d41733ccdb8a1195b7058298cd5e16e3047f82a6a3bca33ecb2aaa35704dc3515cf6b26a2dcc24ce8af7985828a28806fb2f1909696d676cbb781000edf9deb2d160e7737bddafd4fa6061cee9f925781cb728e4ff108dd94b4aae898c5c496d1081442ef5cba6a58923af47f0e62cfe61f5960695ed87950b", 0xdf}, {&(0x7f0000000540)="0b12c01a110ec62632c8689095744c43c4750840bdd23c47006c3c49e106ea5e472b785bf7d10c8bf76c2b7812b49b6bb721f1f647ce51a198de5410f71a7d0cbf323164a22acff06ecda332c7794a630c17ee170e5b356ea0db781f939b257469a30cafe096286b2dacd1a363da0305c79a684d9121bfd1853c0464ac31fb242b10c5010e24aea84221a3c2101e1ed1cb03dc83076d29df4ad2e2b991d1e9ee6414a2d8734f082157d38b622b8b8660db0da0a3de701e5ddc200dbe376d6442712b18876825f5ac4cfad5", 0xcb}, {&(0x7f0000000200)}, {&(0x7f0000000640)="830d86d6db5c6572f273830d20d7683bef9a52b0eddc1dd6946df8099cac9a3e19273715ff9177761da3c783639108d31b8c5017f329a7c534e1b6ffabcd52eaecd6a66bd9dff780361485789b3207e7bc41826f0601d3575edc28f61e5fdd7255d478d115bc69efd9d62de2dc365efef2f8cdadfb8e9d8e5a0d81c64094641e587dc3bea96aa4414ee521dbf936269e2ee80010018b6f04931609f19e68152700fd87916ec4ae403dd0e48350c224e0e9f400fa5166988b12c7bb980c83540bc586e580a96a8712e8adf43efe82749c86cb392316de0c952a5ce82727b777a7fca5", 0xe2}, {&(0x7f0000000740)="7a607c53386d523163691034e01e18003d56c7dfe3668f3312f7ce85912e18424fb4d23df57ac1fa50d4514d8ae19e0aa738ef84872a8890b8a5c651d39ed1339480", 0x42}, {&(0x7f00000007c0)="3823b4d11ce8016b832dc86abf439bec2dbe1bbcbaab5b21877f30fd93152da09d2e10acbb4cc99fa706524d5ad52f0b0ee6da6a1b010d345e3997ea00e3e5382873a4a8ec3abbc2e5f91543b135967f6050912326442af059c24301238a15ef193c0c0b9f77df738ed284cf9d6ca9de7a95273dfb9ca76fa5d24c488cdb40dcf80fdbfcaf419f5cf4589ef9bb1b6cb5e3991ebb7a45d2e03cce4bf2ff77e023bed6151943863c2a28104f9ad955b51b756e88628e8c8b9eda9458857fe80e49ef844d9b201bb3ab867640ada70c4ef79c48", 0xd2}, {&(0x7f0000000440)="047881723fd7d1c293cb448f988b573e0794879f52c7eb92d576000698e0cb1cd72dd0924ec8eaf20ad13d", 0x2b}, {&(0x7f00000008c0)="7e1db9692a46edda55eb5365dcfec3aa14ac2a88a549f44b2647df515a239b225e2ee6c3e28aac75dd498dea1135e440c88f3e5950758363b7bf4d48b2182fbe42a50a9b5fe54b16b5c19450dd41c51f3ee60561f3d8e58b8dbacfd95d02c3e29af641d17a074decebc7586ccbefc5095e", 0x71}], 0x8, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x19}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5, 0x3, "a0"}, {0x0, 0xa, "42bc2f05619aee34"}, {0x5, 0x5, "a3c430"}]}, @cipso={0x86, 0x9, 0x0, [{0x6, 0x3, "9b"}]}, @timestamp_prespec={0x44, 0x4c, 0x7d, 0x3, 0xa, [{@loopback, 0xffff}, {@multicast1, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty}, {@loopback, 0x3}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x66}, {@remote, 0xebdd}, {@multicast1, 0x401}]}, @noop, @noop, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff13f}}], 0x118}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="5aff73310ef1106e3e3490b26508c6d6769a8c83f8d09767f2b8b28a649afca07f942452a6f292a4df751a7de38e4d01ecc58629b8f1d4efcaa85b2bf7f943b57b7d141ba7d5e099632fb9a772a9fda3ba63876a", 0x54}, {&(0x7f0000002bc0)="08087d5407d8d9f1577e07f2a7c9c6f2762a42641b9ff45d85856149e261abb5ba65b1137201af", 0x27}, {&(0x7f0000002c00)="dfdea7c96d00f4e40140b07e88dea7e8c74a118c5623fbb0aeb57c3b27ad81987d856a034e68d3f86f6d41177aa64ca73dbcac6543b85b7bae606052faa3b25e185d6d771078", 0x46}], 0x5, &(0x7f0000002f00)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x2a, 0x0, 0xb, [0x0, 0xab, 0x9, 0x9, 0x43d, 0x7d0]}, @lsrr={0x83, 0xb, 0x10, [@local, @multicast1]}, @timestamp={0x44, 0x18, 0x58, 0x0, 0x9, [0x5e, 0xffff80ae, 0x8, 0x3, 0x5]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010101, @empty}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x4c, 0xf1, 0x3, 0x3, [{@broadcast, 0xffff}, {@multicast2, 0x6}, {@loopback, 0x89}, {@broadcast, 0x7}, {@private=0xa010101, 0xab}, {@multicast2, 0x6}, {@remote, 0x5}, {@multicast1, 0xe6}, {@private=0xa010101, 0xfffffff8}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8512}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5d}}], 0x160}}, {{&(0x7f0000003080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000033c0)=[{&(0x7f00000030c0)="f25676f006ba0c59dcf5e73e24c76d73518726b2e24da087c2e702e6e912c6c62cde915205651c0f34d9cfc921302980ce7dae6b15eaa88c5f8df8af48b3bf468c847a662e57411b74eff650be52c1113988acae24f5af74fadd726c16543b44336964d0bf98e945e418ffe6a4a35e677247d5d14b575a97e4659012fb7010a13e5e5c32c6c2c1f869ba9ed14aea3445c9c300796a460d8a500bf0415506d92e9b52", 0xa2}, {&(0x7f0000003180)="0edcc794354828570cbf4efb0097043053e87f0fdb2f4c82dee1106353b622be2c929a92e7efe572e0bde0f5543f864db82ebafa932e59d9cfe2c51d3b8c4406cd191061ed00922b5108e029c3a054c4209cbaad0c9556fd9c5275b2702ea612cf29319f3954a03e54d8def3da84e106e157230ffc121992b1dfa081f2098ecb68207199dda3a53a40663ab2c52274bb621240", 0x93}, {&(0x7f0000003240)="af27bd8d3b0786f30fe8023ca72472b1d2dadc7bbb6de80b21bba94bd191aa04b242e54ff95ba26101eca4c91c610ed675d11255", 0x34}, {&(0x7f0000003280)="692340a71c24da854422887b2671778261c39940da806458397395e08fbc16f54c79ae23e525e4ae204b918a45fd85599e9a20f0596d07fc0d65cbe8e713c4af6e35073772ea752cbf09bf13ef88143c255de2228a91df6ede6460ed23be10fb4fc82f1badc778e4c4258ee30fe1db5c52bfbc9f28e0e322843207cbbc366a2d20ebadfe82513943b1ddf53a71d20563761e9c9d1a47b287a62563fd1bcb6ccf0887bf5e8b62102748bda6d75a86e433f2e430f8b80ef826b6480025f7ac67d0486e527fa1958698c048e50eb7d6302a09ec4e07", 0xd4}, {&(0x7f0000003380)="5efdbd907b91", 0x6}], 0x5, &(0x7f0000003480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @dev={0xac, 0x14, 0x14, 0x92}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x33b3e0c5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x50}}], 0x3, 0x8090) 563.531271ms ago: executing program 8 (id=1919): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="87c530a69c6d95844ebdb6749a", 0xd}], 0x2, 0x0, 0x1b0}, 0x4005) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000000)) 512.484492ms ago: executing program 3 (id=1920): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'user.', '\x00'}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r8 = dup(r7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009f"]) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x99b33000) 496.309122ms ago: executing program 8 (id=1921): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000020104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010101020000000000000000000000040c0019"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8) splice(r0, 0x0, r2, 0x0, 0xaf4, 0xd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000140)=0xa5, 0x4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000200)=@md0, r6, &(0x7f0000000300)) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = dup(r1) ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x800, 0x82) read$FUSE(r8, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000080)="f7e69113ff3c89dfabdac403e34a0db8de8f1e2409254ff92125961035f352572be6344ccbbe1d2320278192d3bc92689e989d2e75e674cc979003cb7d9212e6bbb88e441f23e02890821521dbaca3b41720eced61b91d7c1cb0fdb6ab14fab68882dd41", 0x64) 332.784295ms ago: executing program 3 (id=1922): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x9}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000a40)=@add_del={0x2, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x242000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x40000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x5) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x9, 0x1, 0x3, 0x400000, 0x8, 0x4, 0x100000, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x9d], 0x5000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) (async) prctl$PR_SET_THP_DISABLE(0x42, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r9) 204.498987ms ago: executing program 3 (id=1923): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x260a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, r1, 0x45809000) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="726c88de9b96616b65757057636e743d313534dcc82a79d30328463730393535313631352c0040cd2b1ed2bc85d49c236746b00f75e1106a638300d5922796ba526749e3c8a9272bf8de452925b953340449b0bdc2e6740151b3f37ac59d87b689e23a7b6b24e2c6c0d40fe2b874cc73ee4e9cebae8b8c4def122b41fde013eb750300"/145]) (async) getdents64(r2, 0x0, 0x0) 200.017067ms ago: executing program 3 (id=1924): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="280000001200010000e1ad453f1efe0c604434bc393100000000000000100000000c000000000000000000000008001d80b112ec56"], 0x28}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x90, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x3, 0x0, 0x3d}, @fda={0x66646185, 0x1, 0x2, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/133, 0x85, 0x2, 0x12}}, &(0x7f0000000140)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x7, &(0x7f0000000240)=""/248, 0xf8, 0x1, 0x3c}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0xb0, 0x0, &(0x7f00000004c0)="75f9a1c92585870c65453c662bb0c2c5750afd4972d6c71f7e011f0396983927b1d3c3a356884e8a05e88f9e4eeb666d9e55628682b0fd54347273da273cc6b5b491b12d7f782b46d26c84444b8000c004c67a68c68e1f6299330a6a3a00e57e722f6f82adaa02c5615f253450c3e562568c61de2b89d1951cd3ce9d77ca8ab408526715ffce109444b1fe5eb68aad2c5afc6adc738d0b2b92ba86464f82fec0a111e9cd45026478a8d4e3a8c40fa492"}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000780)={0x181e02, 0x100, 0x21}, 0x18) move_mount(r3, &(0x7f00000007c0)='./file2\x00', r0, &(0x7f0000000800)='./file1\x00', 0x210) (async) move_mount(r3, &(0x7f00000007c0)='./file2\x00', r0, &(0x7f0000000800)='./file1\x00', 0x210) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb000000000000000005000000007f83440dbf2e000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c0014"], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb000000000000000005000000007f83440dbf2e000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c0014"], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_on}, {@uuid_null}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) close(r6) linkat(r5, &(0x7f0000000380)='./file1\x00', r5, &(0x7f00000003c0)='./bus\x00', 0x400) (async) linkat(r5, &(0x7f0000000380)='./file1\x00', r5, &(0x7f00000003c0)='./bus\x00', 0x400) rename(&(0x7f0000000880)='./bus\x00', &(0x7f0000000840)='./bus\x00') ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x3) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) fcntl$dupfd(r1, 0x0, r1) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000008c0)={'netdevsim0\x00'}) 185.131927ms ago: executing program 37 (id=1803): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = fsopen(&(0x7f0000000480)='romfs\x00', 0x0) fadvise64(r2, 0x6, 0x3, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r5, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r4, 0x0, r3, &(0x7f0000000140)=0x8008, 0x4, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x6, 0x40010, r1, 0x3dae7000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x42, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',allow_other,default_permissions,blksize=0x0000000000000000,max_read=0x0000000000000004,blksize=0x0000000000001000,max_read=0x000000000000000d,blksize=0x0000000000001200,euid<', @ANYRESDEC=r11, @ANYBLOB=',rootcontdxt=system_u,obj_role=,\x00']) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0xf, 0x0, 0x7, 0x7, 0x1}, {0x4ffe, 0x2, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x10, 0x2, 0x1, 0x5, 0xf, 0x8, 0x6, 0x2}, {0x0, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x1, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x4000, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0xfe, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x70, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xeeee8000, 0x40, 0x8, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) iopl(0xff) setsockopt$inet6_mreq(r12, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 36.304929ms ago: executing program 3 (id=1926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4) close_range(r0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) syz_io_uring_setup(0x7100, &(0x7f0000000100)={0x0, 0x3013, 0x8000, 0x2, 0x235}, &(0x7f0000000180), &(0x7f00000001c0)) 0s ago: executing program 3 (id=1927): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '!/'}, {0x20, '#^\'@,%\'\\\x11:+.+'}, {0x20, '/dev/rnullb0\x00'}, {0x20, '^-'}, {0x20, '\\'}, {0x20, '/.\xb9['}, {0x20, '/dev/rnullb0\x00'}, {0x20, '/dev/rnullb0\x00'}], 0xa, "1daf8a26a4e9c105054f2f9adfe7f4f3f65c0e53c663ebd972faf2b1573dbfd66bd7d17b8a6e6bbadf48ea5e8b353b4857e41eaee6921d0d700e89323eef190eb91fa8c6a347a5fe1ff7d56f7ff1f48a1620134aaa11536f1ab0c6b172f7ac436fd4580741b17fcdbcdfe25ad6b43ff082d317311a1ac2dcadb8e1d21fb231ff765d7fca173251a6026d2ee2ea433848643fba4b6ce9ec436b3f78686dcc8e9920868d09fc091010d69665f60ec901d26d37e4d3f86043e557f1f358a09cf4747f7ccff5c612031041e6e83a17611ff50a957ca336aea9cf95eb135ea420d4d394d740"}, 0x133) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) kernel console output (not intermixed with test programs): l=202 compat=0 ip=0x7f185a18e929 code=0x0 [ 114.318059][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.348273][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.356289][ T31] usb 6-1: Product: 痦쐥僪쩉驑筥鵍珱悄⣪鋩鑆捥顥뀜쐘왬䉜㛔춲桠䅓慊齀갂趝㫤ǭ蚬ꔝ묬 [ 114.369017][ T31] usb 6-1: Manufacturer: ␽ [ 114.373640][ T31] usb 6-1: SerialNumber: 䫮䭹ҭ⌕漖⍘桍Ò磁鯫嫡좀ꄬ锶◲陌嵿筜쉇냬맖頟㴌╲ₙᷭ污ᡎ赞⃀蝖닫ᷨ핰봹珴㿕䩍ᒪퟃ덃 [ 114.390619][ T3901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 114.397849][ T3901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 114.462697][ T36] audit: type=1400 audit(2000000343.771:484): avc: denied { read } for pid=3914 comm="syz.4.1085" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.486981][ T36] audit: type=1400 audit(2000000343.771:485): avc: denied { open } for pid=3914 comm="syz.4.1085" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.511844][ T36] audit: type=1400 audit(2000000343.771:486): avc: denied { ioctl } for pid=3914 comm="syz.4.1085" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.551102][ T1475] Bluetooth: hci0: command 0x1003 tx timeout [ 114.557285][ T1472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.606574][ T36] audit: type=1400 audit(2000000343.911:487): avc: denied { create } for pid=3900 comm="syz.5.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.608906][ T3901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.635763][ T3901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.667891][ T3920] kvm: pic: non byte write [ 114.710516][ T3929] cgroup: none used incorrectly [ 114.718588][ T3929] bpf: Bad value for 'uid' [ 114.804188][ T3945] overlay: ./file0 is not a directory [ 114.825463][ T3949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.840751][ T3952] tipc: Can't bind to reserved service type 0 [ 114.877429][ T3957] cgroup: none used incorrectly [ 114.884948][ T3957] bpf: Bad value for 'uid' [ 114.916840][ T3960] binder: Unknown parameter 'euid' [ 115.031090][ T750] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 115.181081][ T750] usb 2-1: device descriptor read/64, error -71 [ 115.421102][ T750] usb 2-1: device descriptor read/64, error -71 [ 115.661107][ T750] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 115.681093][ T486] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 115.791082][ T750] usb 2-1: device descriptor read/64, error -71 [ 115.833013][ T486] usb 4-1: config 192 has an invalid interface number: 162 but max is 0 [ 115.841575][ T486] usb 4-1: config 192 has no interface number 0 [ 115.847875][ T486] usb 4-1: config 192 interface 162 has no altsetting 0 [ 115.856516][ T486] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 115.865713][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.873756][ T486] usb 4-1: Product: syz [ 115.878000][ T486] usb 4-1: Manufacturer: syz [ 115.882644][ T486] usb 4-1: SerialNumber: syz [ 116.041108][ T750] usb 2-1: device descriptor read/64, error -71 [ 116.090354][ T3971] Unsupported ieee802154 address type: 0 [ 116.090378][ T36] audit: type=1400 audit(2000000345.391:488): avc: denied { bind } for pid=3970 comm="syz.3.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.098925][ T486] usb-storage 4-1:192.162: USB Mass Storage device detected [ 116.124210][ T486] usb-storage 4-1:192.162: device ignored [ 116.146420][ T486] usb 4-1: USB disconnect, device number 36 [ 116.161344][ T750] usb usb2-port1: attempt power cycle [ 116.501159][ T750] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 116.522433][ T750] usb 2-1: device descriptor read/8, error -71 [ 116.613744][ T3978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.613912][ T3978] rust_binder: Read failure Err(EAGAIN) in pid:828 [ 116.653684][ T3985] cgroup: none used incorrectly [ 116.661108][ T750] usb 2-1: device descriptor read/8, error -71 [ 116.667737][ T3985] bpf: Bad value for 'uid' [ 116.723074][ T3990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.843672][ T3995] rust_binder: Error while translating object. [ 116.850208][ T3995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 116.856503][ T3995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:840 [ 116.886769][ T31] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 116.907295][ T31] usb 6-1: USB disconnect, device number 5 [ 116.922518][ T750] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 116.952339][ T750] usb 2-1: device descriptor read/8, error -71 [ 117.082151][ T750] usb 2-1: device descriptor read/8, error -71 [ 117.191230][ T750] usb usb2-port1: unable to enumerate USB device [ 117.241146][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 117.391109][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 117.398072][ T31] usb 6-1: config 1 interface 0 altsetting 75 bulk endpoint 0x1 has invalid maxpacket 1023 [ 117.408144][ T31] usb 6-1: config 1 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.421087][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 117.429236][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.438412][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.446482][ T31] usb 6-1: Product: 㼕㪟ꄞ鮽腎㬾Ἶ鳣蟹鎥ﾤ窦髇抃፜勀䙓⭡ᱱ쐆쬼 [ 117.456419][ T31] usb 6-1: Manufacturer: 첦坾旑馋蛰狘ș콉펛ᓽ誓拉皂鬯礌甩銩괓冶Ꝭ㸼藂⬾๎객狇콳ꡲ欒閞꫕퓤㝞鄏륁盞䙽졑ꭜ扻蜮㪣긋邡沞燥啶箵ѕ张䶗砯৒ࢭ벂꾳ⷚẃ░鑌娃썈휐鱛ણ拙 [ 117.480751][ T31] usb 6-1: SerialNumber: ж [ 117.486414][ T4002] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 117.697416][ T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 75 proto 1 vid 0x0525 pid 0xA4A8 [ 117.709473][ T31] usb 6-1: USB disconnect, device number 6 [ 117.718066][ T31] usblp0: removed [ 117.815893][ T36] audit: type=1400 audit(2000000347.121:489): avc: denied { listen } for pid=4007 comm="syz.1.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.012978][ T292] bridge_slave_1: left allmulticast mode [ 118.018665][ T292] bridge_slave_1: left promiscuous mode [ 118.024639][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.032785][ T292] bridge_slave_0: left allmulticast mode [ 118.038519][ T292] bridge_slave_0: left promiscuous mode [ 118.044462][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.141123][ T306] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 118.170090][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.177230][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.184427][ T4016] bridge_slave_0: entered allmulticast mode [ 118.190688][ T4016] bridge_slave_0: entered promiscuous mode [ 118.197335][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.204476][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.211625][ T4016] bridge_slave_1: entered allmulticast mode [ 118.217963][ T4016] bridge_slave_1: entered promiscuous mode [ 118.224059][ T292] tipc: Left network mode [ 118.228933][ T4021] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1120'. [ 118.240718][ T292] veth1_macvtap: left promiscuous mode [ 118.246374][ T292] >: left promiscuous mode [ 118.294651][ T306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.321311][ T306] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.332087][ T4025] exFAT-fs (rnullb0): invalid boot record signature [ 118.338737][ T4025] exFAT-fs (rnullb0): failed to read boot sector [ 118.342581][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.349500][ T4025] exFAT-fs (rnullb0): failed to recognize exfat type [ 118.359882][ T306] usb 6-1: Product: 槡ࢹ졽䡙痼쮺﨟껡臫퀚ꘇ㟪㥳⇅᳞䢸踐鹫ᒚ㝽➁욼ট᪮⫨笗᤾뢟쵸椣ﹹ늠 [ 118.380449][ T306] usb 6-1: Manufacturer: 䡌ﴱ紌ᬋ粙௳ዥ൱끅觧淝㤸䪓ማ㤊䅆₢﬘ᴔꢝ獁뗬ꕅ⏋넰䘧흛밙퐫㐫䬢ᙸ宅㳄䔺씼푗쩽娕葺⒌⫪繤젙긃뱄㠺坿盿琞㝑砳삼鼖읊킍畛兹 [ 118.401884][ T306] usb 6-1: SerialNumber: ഥ퉅猐卽剫 㢠뎽鈘拸齀갨并놸跑涆楧饘쳪Թ좼ꁇ⹯偔Ꮻꌟ侭댛뼱␄ﳑ놇똏蹦솂堃퓜៿ᵂ졜쒪옱몫ꂈ篚｠쩀꾣詮㿗艴볦찹՚ﰃᆇ쪉銰ﰂ緑瘥ꛊꎌ䥼䰤蕱헅鼭픞䀈鐁찕ᣣ㰥ᙏ꣑蹞䂍堐솹綹춤㊮᮶ጭ﬈̰奞튀韾Ꞅ憭ᅹ [ 118.453377][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.460553][ T4016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.467917][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.475001][ T4016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.499288][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.506758][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.517167][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.524285][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.534555][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.541623][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.571366][ T4016] veth0_vlan: entered promiscuous mode [ 118.583634][ T4016] veth1_macvtap: entered promiscuous mode [ 118.620250][ T36] audit: type=1400 audit(2000000347.921:490): avc: denied { append } for pid=4026 comm="syz.6.1119" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.662326][ T306] cdc_ncm 6-1:1.0: bind() failure [ 118.673596][ T306] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 118.685858][ T306] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 118.714488][ T306] usb 6-1: USB disconnect, device number 7 [ 118.778771][ T4047] cgroup: none used incorrectly [ 118.795288][ T4047] bpf: Bad value for 'uid' [ 118.836903][ T36] audit: type=1400 audit(2000000348.141:491): avc: denied { mounton } for pid=4061 comm="syz.6.1131" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.836915][ T4062] 9pnet: Could not find request transport: fdo=JA u6-u*/0x0000000000000006 [ 119.041160][ T306] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 119.201309][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 119.209060][ T306] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.218234][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.226505][ T306] usb 6-1: Product: syz [ 119.230694][ T306] usb 6-1: Manufacturer: syz [ 119.235340][ T306] usb 6-1: SerialNumber: syz [ 119.241773][ T306] r8152-cfgselector 6-1: Unknown version 0x0000 [ 119.248034][ T306] r8152-cfgselector 6-1: config 0 descriptor?? [ 119.458543][ T306] r8152-cfgselector 6-1: Needed 1 retries to read version [ 119.465816][ T306] r8152-cfgselector 6-1: Unknown version 0x0000 [ 119.472333][ T306] r8152-cfgselector 6-1: bad CDC descriptors [ 119.719594][ T4072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 119.719635][ T4072] rust_binder: Read failure Err(EFAULT) in pid:254 [ 119.831099][ T306] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 120.012441][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.020481][ T306] usb 4-1: not running at top speed; connect to a high speed hub [ 120.029305][ T306] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 120.051810][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.060882][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.081081][ T306] usb 4-1: Product: syz [ 120.085285][ T306] usb 4-1: Manufacturer: syz [ 120.089883][ T306] usb 4-1: SerialNumber: syz [ 120.388612][ T306] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.412176][ T306] usb 4-1: unit 5 not found! [ 120.420112][ T306] usb 4-1: USB disconnect, device number 37 [ 120.439818][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 120.439846][ T36] audit: type=1400 audit(2000000349.741:493): avc: denied { map } for pid=4074 comm="syz.6.1134" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 120.553855][ T36] audit: type=1400 audit(2000000349.861:494): avc: denied { mount } for pid=4076 comm="syz.6.1135" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 120.663981][ T4086] cgroup: none used incorrectly [ 120.670984][ T4086] bpf: Bad value for 'uid' [ 121.540754][ T4098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.548053][ T4098] rust_binder: Error in use_page_slow: ESRCH [ 121.548073][ T4098] rust_binder: use_range failure ESRCH [ 121.554307][ T4098] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 121.559772][ T4098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.567769][ T4098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:35 [ 121.736285][ T751] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 121.780056][ T36] audit: type=1400 audit(2000000351.081:495): avc: denied { setattr } for pid=4101 comm="syz.5.1144" name="L2CAP" dev="sockfs" ino=33855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.011813][ T4115] SELinux: security_context_str_to_sid () failed with errno=-22 [ 122.025413][ T36] audit: type=1400 audit(2000000351.331:496): avc: denied { read } for pid=4114 comm="syz.3.1150" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 122.141144][ T751] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 122.298429][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.311482][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.320441][ T36] audit: type=1400 audit(2000000351.621:497): avc: denied { accept } for pid=4105 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 122.344114][ T751] usb 6-1: unable to get BOS descriptor or descriptor too short [ 122.367679][ T751] usb 6-1: too many configurations: 36, using maximum allowed: 8 [ 122.405464][ T751] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 122.415523][ T751] usb 6-1: can't read configurations, error -71 [ 122.453365][ T36] audit: type=1400 audit(2000000351.761:498): avc: denied { attach_queue } for pid=4125 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.495125][ T4130] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 122.633426][ T4145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.698293][ T4146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.714357][ T4145] rust_binder: Write failure EINVAL in pid:909 [ 122.721330][ T4145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:909 [ 122.780715][ T4152] ./cgroup: Can't lookup blockdev [ 122.802301][ T4154] ./cgroup: Can't lookup blockdev [ 122.893099][ T4170] input: syz0 as /devices/virtual/input/input18 [ 122.933761][ T4174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.942328][ T4178] rust_binder: Write failure EINVAL in pid:265 [ 123.094132][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 123.144204][ T4206] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 123.252417][ T4217] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.302603][ T4215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.302930][ T4215] rust_binder: Error in use_page_slow: ESRCH [ 123.309490][ T4215] rust_binder: use_range failure ESRCH [ 123.315515][ T4215] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 123.321642][ T4215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.329755][ T4215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:280 [ 123.357403][ T4225] FAT-fs (rnullb0): bogus number of reserved sectors [ 123.361958][ T4227] /dev/rnullb0: Can't open blockdev [ 123.366629][ T4225] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 123.405899][ T4231] binder: Unknown parameter 'statsl' [ 123.411342][ T4232] binder: Unknown parameter 'statsl' [ 123.424882][ T4232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.434552][ T4232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.565185][ T36] audit: type=1326 audit(2000000352.871:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.5.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff0178e929 code=0x0 [ 123.661100][ T306] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 123.669160][ T4237] validate_nla: 24 callbacks suppressed [ 123.669175][ T4237] netlink: 'syz.5.1191': attribute type 15 has an invalid length. [ 123.683726][ T4237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.811097][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 123.823975][ T306] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.830594][ T306] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 123.839825][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.848592][ T306] usb 4-1: config 0 descriptor?? [ 124.056889][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 124.063110][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 124.071892][ T306] usb 4-1: USB disconnect, device number 38 [ 124.470858][ T36] audit: type=1400 audit(2000000353.771:500): avc: denied { watch } for pid=4240 comm="syz.5.1193" path="/95/file0" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 124.523519][ T4241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.574377][ T4242] rust_binder: Error in use_page_slow: ESRCH [ 124.580841][ T4242] rust_binder: use_range failure ESRCH [ 124.587033][ T4242] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 124.592929][ T4242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.600911][ T4242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:294 [ 124.611693][ T4242] rust_binder: Error in use_page_slow: ESRCH [ 124.620747][ T4242] rust_binder: use_range failure ESRCH [ 124.626805][ T4242] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 124.632565][ T4242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.640605][ T4242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:294 [ 124.736401][ T36] audit: type=1400 audit(2000000354.041:501): avc: denied { setopt } for pid=4258 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.271287][ T4261] exFAT-fs (rnullb0): invalid boot record signature [ 125.278014][ T4261] exFAT-fs (rnullb0): failed to read boot sector [ 125.284406][ T4261] exFAT-fs (rnullb0): failed to recognize exfat type [ 125.324038][ T4267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.332202][ T4267] rust_binder: Error in use_page_slow: ESRCH [ 125.332221][ T4267] rust_binder: use_range failure ESRCH [ 125.338670][ T4267] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 125.346671][ T4267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 125.354961][ T4267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:303 [ 125.455788][ T4277] FAT-fs (rnullb0): bogus number of reserved sectors [ 125.471601][ T4277] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 125.501383][ T4280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1203'. [ 125.577720][ T4287] batadv_slave_1: entered promiscuous mode [ 125.587188][ T4286] batadv_slave_1: left promiscuous mode [ 125.662767][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1214'. [ 125.769451][ T36] audit: type=1400 audit(2000000355.071:502): avc: denied { map } for pid=4311 comm="syz.3.1216" path="socket:[34632]" dev="sockfs" ino=34632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 125.983583][ T4322] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 126.079932][ T4326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.080274][ T4326] rust_binder: Error in use_page_slow: ESRCH [ 126.086855][ T4326] rust_binder: use_range failure ESRCH [ 126.092894][ T4326] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 126.098525][ T4326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.106469][ T4326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:512 [ 126.117197][ T4327] binder: Unknown parameter 'fscontext?}' [ 126.303889][ T36] audit: type=1400 audit(2000000355.611:503): avc: denied { getattr } for pid=4337 comm="syz.4.1225" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.304843][ T4341] 9pnet_fd: Insufficient options for proto=fd [ 126.404446][ T4345] tipc: Started in network mode [ 126.409321][ T4345] tipc: Node identity fffffffc, cluster identity 4711 [ 126.416239][ T4345] tipc: Node number set to 4294967292 [ 126.425402][ T4345] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1227'. [ 126.434743][ T4345] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 126.434759][ T4345] rust_binder: Read failure Err(EFAULT) in pid:62 [ 127.138113][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 127.247018][ T4395] netlink: 'syz.4.1244': attribute type 4 has an invalid length. [ 127.273437][ T4397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.282305][ T36] audit: type=1400 audit(2000000356.591:504): avc: denied { execute } for pid=4398 comm="syz.6.1246" path="/27/memory.events" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.312061][ T10] usb 4-1: device descriptor read/64, error -71 [ 127.327846][ T36] audit: type=1400 audit(2000000356.631:505): avc: denied { bpf } for pid=4400 comm="syz.5.1247" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.399206][ T4415] cgroup: none used incorrectly [ 127.405825][ T4415] bpf: Bad value for 'uid' [ 127.551095][ T10] usb 4-1: device descriptor read/64, error -71 [ 127.580610][ T4424] overlayfs: conflicting options: nfs_export=on,index=off [ 127.801138][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 127.931118][ T10] usb 4-1: device descriptor read/64, error -71 [ 128.145582][ T36] audit: type=1400 audit(2000000357.451:506): avc: denied { connect } for pid=4435 comm="syz.5.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.146607][ T4436] tipc: Trying to set illegal importance in message [ 128.165578][ T36] audit: type=1400 audit(2000000357.451:507): avc: denied { map } for pid=4435 comm="syz.5.1260" path="socket:[36948]" dev="sockfs" ino=36948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.172145][ T10] usb 4-1: device descriptor read/64, error -71 [ 128.212784][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1261'. [ 128.223018][ T4440] netlink: 'syz.5.1261': attribute type 11 has an invalid length. [ 128.311530][ T10] usb usb4-port1: attempt power cycle [ 128.651133][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 128.672166][ T10] usb 4-1: device descriptor read/8, error -71 [ 128.802135][ T10] usb 4-1: device descriptor read/8, error -71 [ 129.041136][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 129.062250][ T10] usb 4-1: device descriptor read/8, error -71 [ 129.192386][ T10] usb 4-1: device descriptor read/8, error -71 [ 129.301231][ T10] usb usb4-port1: unable to enumerate USB device [ 129.312253][ T36] audit: type=1400 audit(2000000358.621:508): avc: denied { map } for pid=4452 comm="syz.5.1267" path="socket:[36043]" dev="sockfs" ino=36043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 129.358061][ T4463] netlink: 'syz.5.1269': attribute type 12 has an invalid length. [ 129.913511][ T36] audit: type=1326 audit(2000000359.221:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.5.1273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff0178e929 code=0x0 [ 130.286027][ T4480] cgroup: none used incorrectly [ 130.597705][ T4499] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 130.766748][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.787362][ T4512] overlayfs: failed to clone lowerpath [ 130.806708][ T4515] overlayfs: failed to clone upperpath [ 130.986108][ T4521] netlink: 'syz.6.1288': attribute type 1 has an invalid length. [ 131.074202][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.074273][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.080805][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.087544][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.094179][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.100723][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.107349][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.115601][ T4523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.674755][ T4545] overlay: Unknown parameter 'permit_directio' [ 131.688277][ T4545] fuse: Bad value for 'fd' [ 131.693708][ T4545] fuse: Unknown parameter 'Zl' [ 132.230288][ T36] audit: type=1400 audit(2000000361.531:510): avc: denied { getopt } for pid=4550 comm="syz.5.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.249873][ T36] audit: type=1400 audit(2000000361.531:511): avc: denied { write } for pid=4550 comm="syz.5.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.271083][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 132.421104][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 132.427331][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.436210][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.446455][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.791400][ T1472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.791671][ T1475] Bluetooth: hci0: command 0x1003 tx timeout [ 133.141081][ T306] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 133.281093][ T306] usb 4-1: device descriptor read/64, error -71 [ 133.521088][ T306] usb 4-1: device descriptor read/64, error -71 [ 133.627076][ T4575] netlink: 'syz.5.1306': attribute type 27 has an invalid length. [ 133.627396][ T4576] netlink: 'syz.5.1306': attribute type 27 has an invalid length. [ 133.644066][ T4576] overlayfs: failed to clone upperpath [ 133.644076][ T4575] overlayfs: failed to clone upperpath [ 133.668206][ T4578] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1307'. [ 133.771076][ T306] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 133.901072][ T306] usb 4-1: device descriptor read/64, error -71 [ 134.141079][ T306] usb 4-1: device descriptor read/64, error -71 [ 134.251219][ T306] usb usb4-port1: attempt power cycle [ 134.536620][ T4614] overlayfs: failed to clone upperpath [ 134.544102][ T4614] overlayfs: failed to clone upperpath [ 134.601125][ T306] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 134.657919][ T306] usb 4-1: device descriptor read/8, error -71 [ 134.792725][ T306] usb 4-1: device descriptor read/8, error -71 [ 135.017214][ T10] usb 7-1: string descriptor 0 read error: -71 [ 135.030425][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.040288][ T306] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 135.047944][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.057040][ T10] usb 7-1: can't set config #1, error -71 [ 135.063927][ T10] usb 7-1: USB disconnect, device number 2 [ 135.072089][ T306] usb 4-1: device descriptor read/8, error -71 [ 135.202248][ T306] usb 4-1: device descriptor read/8, error -71 [ 135.311201][ T306] usb usb4-port1: unable to enumerate USB device [ 135.361083][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 135.513264][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 135.519732][ T10] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 135.529315][ T10] usb 7-1: config 4 has no interface number 0 [ 135.536123][ T10] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.547303][ T10] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.557379][ T10] usb 7-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 135.566488][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.581921][ T10] hub 7-1:4.128: USB hub found [ 135.608513][ T4634] overlayfs: failed to clone upperpath [ 135.787908][ T4649] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 135.788176][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 135.803951][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 135.811129][ T10] hub 7-1:4.128: config failed, can't read hub descriptor (err -22) [ 135.812140][ T4654] overlayfs: failed to clone upperpath [ 135.825428][ T4655] overlayfs: failed to clone upperpath [ 135.842050][ T10] usb 7-1: USB disconnect, device number 3 [ 135.994834][ T4665] __vm_enough_memory: pid: 4665, comm: syz.3.1333, bytes: 70373039144960 not enough memory for the allocation [ 136.521118][ T308] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 136.553920][ T4691] cgroup: none used incorrectly [ 136.571078][ T4693] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1343'. [ 136.580271][ T4693] gretap0: entered promiscuous mode [ 136.587196][ T4693] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1343'. [ 136.596326][ T4693] 0{X: renamed from gretap0 [ 136.602716][ T4693] 0{X: left promiscuous mode [ 136.608679][ T4693] 0{X: entered allmulticast mode [ 136.615905][ T4693] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 136.682884][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 136.694165][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 136.705500][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.718953][ T308] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.728245][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.740787][ T308] usb 4-1: config 0 descriptor?? [ 136.746156][ T4715] cgroup: none used incorrectly [ 136.836458][ T4730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1357'. [ 136.878983][ T4735] cgroup: none used incorrectly [ 136.919676][ T36] audit: type=1400 audit(2000000000.000:512): avc: denied { setopt } for pid=4745 comm="syz.5.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.175165][ T4771] cgroup: none used incorrectly [ 137.203439][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 137.221152][ T308] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 137.233874][ T4674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.234421][ T308] usb 4-1: USB disconnect, device number 47 [ 137.853755][ T36] audit: type=1400 audit(2000000000.940:513): avc: denied { watch watch_reads } for pid=4807 comm="syz.3.1382" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 137.858407][ T4808] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 137.890858][ T4810] cgroup: none used incorrectly [ 138.064662][ T4830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 138.064696][ T4830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:178 [ 138.371099][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 138.531082][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 138.537316][ T10] usb 7-1: descriptor type invalid, skip [ 138.543760][ T10] usb 7-1: config 7 has an invalid interface number: 38 but max is 3 [ 138.551932][ T10] usb 7-1: config 7 has an invalid interface number: 48 but max is 3 [ 138.560149][ T10] usb 7-1: config 7 has an invalid interface number: 176 but max is 3 [ 138.568555][ T10] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 138.577286][ T10] usb 7-1: config 7 has an invalid interface number: 77 but max is 3 [ 138.585394][ T10] usb 7-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 138.595529][ T10] usb 7-1: config 7 has no interface number 0 [ 138.601634][ T10] usb 7-1: config 7 has no interface number 1 [ 138.607720][ T10] usb 7-1: config 7 has no interface number 2 [ 138.613816][ T10] usb 7-1: config 7 has no interface number 3 [ 138.619935][ T10] usb 7-1: config 7 interface 38 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 24 [ 138.629783][ T10] usb 7-1: config 7 interface 38 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 138.640593][ T10] usb 7-1: config 7 interface 38 altsetting 0 endpoint 0x7 has invalid maxpacket 903, setting to 64 [ 138.651432][ T10] usb 7-1: config 7 interface 38 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 138.662415][ T10] usb 7-1: config 7 interface 38 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 138.672288][ T10] usb 7-1: config 7 interface 38 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 138.683246][ T10] usb 7-1: config 7 interface 38 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 138.694208][ T10] usb 7-1: config 7 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 138.704864][ T10] usb 7-1: config 7 interface 38 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 138.715547][ T10] usb 7-1: config 7 interface 38 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 138.729280][ T10] usb 7-1: config 7 interface 48 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 138.740095][ T10] usb 7-1: config 7 interface 176 altsetting 0 has an endpoint descriptor with address 0x42, changing to 0x2 [ 138.751827][ T4841] cgroup: none used incorrectly [ 138.756945][ T10] usb 7-1: config 7 interface 176 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 138.767910][ T10] usb 7-1: config 7 interface 176 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 138.778420][ T10] usb 7-1: config 7 interface 176 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 138.792291][ T4846] __vm_enough_memory: pid: 4846, comm: syz.3.1393, bytes: 70373039144960 not enough memory for the allocation [ 138.792488][ T10] usb 7-1: config 7 interface 176 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 138.820617][ T10] usb 7-1: config 7 interface 176 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.825020][ T4849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 138.831659][ T10] usb 7-1: config 7 interface 176 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.832015][ T4849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1056 [ 138.841109][ T10] usb 7-1: config 7 interface 176 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 138.852488][ T4849] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 138.861674][ T10] usb 7-1: config 7 interface 77 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 138.876778][ T4849] rust_binder: Read failure Err(EFAULT) in pid:1056 [ 138.882811][ T10] usb 7-1: config 7 interface 48 has no altsetting 0 [ 138.909070][ T10] usb 7-1: config 7 interface 77 has no altsetting 0 [ 138.917300][ T10] usb 7-1: Dual-Role OTG device on HNP port [ 138.923585][ T10] usb 7-1: New USB device found, idVendor=07b8, idProduct=4104, bcdDevice=a7.f6 [ 138.932728][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.940745][ T10] usb 7-1: Product: 훅⚿춂둑ﴟﭖ➩쮆磋욮ឡ攢ꈥ퍺잇਌컴撒齾籨超䬚㔮熻ႎ힜葯翳 [ 138.954608][ T10] usb 7-1: Manufacturer: Н [ 138.960080][ T10] usb 7-1: SerialNumber: 䥻萟䵑⸘ꅨ瞭欆㙋迆馸쌌犒ᖱ턜턐䟖槥醻騥睜㫛ꀎ⼶搐ᄘꏣ뚠갑豀侨顇部蹩林઼珂瓒ᯥ鸏痌š럭ⷪ蘅֘宒ணꅧⲃ푢콁꽖㟿⿪ᗆ颩鑀싑鱾눛鶓뿧紮魕棐뫳ↅ잛靊衣녉ᄈ皍봀锿兌厸䒬䊄﷦͔ᣱ䋧Ἑ죢ᨪ䆠뼀觐飽喽䝴丷ʬ快쳩㩃옂꣣ﭺ커퀉 [ 138.971292][ T4851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.994587][ T4832] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 139.000265][ T4851] bridge0: entered promiscuous mode [ 139.001348][ T4832] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 139.010227][ T4851] rust_binder: ENOSPC from range_alloc.reserve_new - size: 4224 [ 139.020939][ T4851] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 139.028689][ T4851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 139.036846][ T4851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1058 [ 139.047298][ T4850] bridge0: left promiscuous mode [ 139.271178][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1388'. [ 139.280371][ T4857] rust_binder: Error in use_page_slow: ESRCH [ 139.280366][ T4832] rust_binder: Error in use_page_slow: ESRCH [ 139.280388][ T4857] rust_binder: use_range failure ESRCH [ 139.280405][ T4857] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 139.280424][ T4857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.286448][ T4832] rust_binder: use_range failure ESRCH [ 139.293115][ T4857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 139.297976][ T4832] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 139.307203][ T36] audit: type=1400 audit(2000000002.400:514): avc: denied { create } for pid=4831 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 139.315599][ T4832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.341114][ T308] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 139.357908][ T4832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 139.471990][ T10] usb 7-1: USB disconnect, device number 4 [ 139.501164][ T308] usb 4-1: device descriptor read/64, error -71 [ 139.619101][ T4870] cgroup: none used incorrectly [ 139.741179][ T308] usb 4-1: device descriptor read/64, error -71 [ 139.983303][ T308] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 140.045984][ T4877] kvm: pic: non byte write [ 140.121073][ T308] usb 4-1: device descriptor read/64, error -71 [ 140.304270][ T4891] fuse: Bad value for 'fd' [ 140.308881][ T4891] fuse: Bad value for 'fd' [ 140.313822][ T4891] fuse: Bad value for 'fd' [ 140.318384][ T4891] fuse: Bad value for 'fd' [ 140.361136][ T308] usb 4-1: device descriptor read/64, error -71 [ 140.472177][ T308] usb usb4-port1: attempt power cycle [ 140.484605][ T4897] cgroup: none used incorrectly [ 140.498015][ T4899] bridge0: entered promiscuous mode [ 140.508089][ T4898] bridge0: left promiscuous mode [ 140.572689][ T36] audit: type=1400 audit(2000000003.660:515): avc: denied { setattr } for pid=4916 comm="syz.5.1417" name="NETLINK" dev="sockfs" ino=38515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.677379][ T4925] cgroup: none used incorrectly [ 140.761074][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 140.819799][ T4958] cgroup: none used incorrectly [ 140.824793][ T308] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 140.852448][ T308] usb 4-1: device descriptor read/8, error -71 [ 140.931101][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 140.937977][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.949155][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.959324][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.965489][ T4974] netlink: 'syz.5.1436': attribute type 4 has an invalid length. [ 140.969125][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.976533][ T4974] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1436'. [ 140.989542][ T10] usb 7-1: config 0 descriptor?? [ 141.001593][ T308] usb 4-1: device descriptor read/8, error -71 [ 141.002142][ T10] hub 7-1:0.0: USB hub found [ 141.061497][ T4980] cgroup: none used incorrectly [ 141.203205][ T10] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 141.241085][ T308] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 141.262136][ T308] usb 4-1: device descriptor read/8, error -71 [ 141.392183][ T308] usb 4-1: device descriptor read/8, error -71 [ 141.413893][ T10] hid-generic 0003:046D:C31C.0015: item fetching failed at offset 0/1 [ 141.422342][ T10] hid-generic 0003:046D:C31C.0015: probe with driver hid-generic failed with error -22 [ 141.501222][ T308] usb usb4-port1: unable to enumerate USB device [ 141.619304][ T4902] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 97) [ 141.619334][ T4902] rust_binder: Error while translating object. [ 141.629837][ T4902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.636061][ T4902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 141.781177][ T10] usb 7-1: USB disconnect, device number 5 [ 142.138103][ T4994] fuse: Unknown parameter 'roomo0000000000040000' [ 142.203031][ T5001] overlayfs: failed to clone upperpath [ 142.238559][ T5007] cgroup: none used incorrectly [ 142.411766][ T5017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.529135][ T36] audit: type=1400 audit(2000000005.610:516): avc: denied { audit_read } for pid=5022 comm="syz.3.1457" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.636012][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.643279][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.650634][ T5026] bridge_slave_0: entered allmulticast mode [ 142.657687][ T5026] bridge_slave_0: entered promiscuous mode [ 142.664451][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.671634][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.678774][ T5026] bridge_slave_1: entered allmulticast mode [ 142.685198][ T5026] bridge_slave_1: entered promiscuous mode [ 142.704704][ T46] bridge_slave_1: left allmulticast mode [ 142.710480][ T46] bridge_slave_1: left promiscuous mode [ 142.716212][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.723902][ T46] bridge_slave_0: left allmulticast mode [ 142.729667][ T46] bridge_slave_0: left promiscuous mode [ 142.735452][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.827992][ T5040] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1461'. [ 142.866065][ T46] tipc: Left network mode [ 142.881808][ T46] veth1_macvtap: left promiscuous mode [ 142.887662][ T46] veth0_vlan: left promiscuous mode [ 142.893264][ T5051] 9pnet: Could not find request transport: [ 142.989066][ T5062] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 142.994624][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.003606][ T5026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.010897][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.018080][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.047549][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.055530][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.070515][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.077713][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.088984][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.096106][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.135054][ T5026] veth0_vlan: entered promiscuous mode [ 143.146179][ T5026] veth1_macvtap: entered promiscuous mode [ 143.179334][ T5068] cgroup: none used incorrectly [ 143.209432][ T5072] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 143.209454][ T5072] rust_binder: Error while translating object. [ 143.221887][ T5072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.228092][ T5072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 143.238322][ T5073] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.302617][ T5086] cgroup: Unknown subsys name 'mask' [ 143.346767][ T5092] /dev/sg0: Can't lookup blockdev [ 143.399635][ T5096] cgroup: none used incorrectly [ 143.428143][ T5101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.524967][ T5109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.701079][ T308] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 143.789355][ T5113] overlay: ./file0 is not a directory [ 143.841077][ T308] usb 8-1: device descriptor read/64, error -71 [ 143.942303][ T5120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.942325][ T5121] rust_binder: Error in use_page_slow: ESRCH [ 143.948826][ T5121] rust_binder: use_range failure ESRCH [ 143.954932][ T5121] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 143.960412][ T5121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 143.968272][ T5121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:583 [ 144.003036][ T5125] cgroup: none used incorrectly [ 144.044494][ T5130] binder: Bad value for 'stats' [ 144.081134][ T308] usb 8-1: device descriptor read/64, error -71 [ 144.321132][ T308] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 144.371115][ T5142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.393480][ T36] audit: type=1400 audit(2000000007.480:517): avc: denied { getopt } for pid=5143 comm="syz.3.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 144.451108][ T308] usb 8-1: device descriptor read/64, error -71 [ 144.584051][ T36] audit: type=1326 audit(2000000007.670:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.5.1499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff0178e929 code=0x0 [ 144.701098][ T308] usb 8-1: device descriptor read/64, error -71 [ 144.811183][ T308] usb usb8-port1: attempt power cycle [ 145.151142][ T308] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 145.172275][ T308] usb 8-1: device descriptor read/8, error -71 [ 145.302135][ T308] usb 8-1: device descriptor read/8, error -71 [ 145.422842][ T36] audit: type=1400 audit(2000000008.510:519): avc: denied { nlmsg_read } for pid=5154 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.448624][ T5158] cgroup: none used incorrectly [ 145.522895][ T5166] FAT-fs (rnullb0): bogus number of reserved sectors [ 145.529727][ T5166] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 145.541078][ T308] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 145.582747][ T308] usb 8-1: device descriptor read/8, error -71 [ 145.621846][ T5172] overlayfs: failed to clone upperpath [ 145.654955][ T5176] tipc: Started in network mode [ 145.660156][ T5176] tipc: Node identity 82928a6ed30e, cluster identity 4711 [ 145.667895][ T5176] tipc: Enabled bearer , priority 0 [ 145.675360][ T5175] tipc: Enabling of bearer rejected, already enabled [ 145.684380][ T5177] netlink: 'syz.5.1509': attribute type 12 has an invalid length. [ 145.694659][ T5173] tipc: Disabling bearer [ 145.712150][ T308] usb 8-1: device descriptor read/8, error -71 [ 145.826191][ T308] usb usb8-port1: unable to enumerate USB device [ 145.835028][ T5180] syzkaller0: entered promiscuous mode [ 145.840559][ T5180] syzkaller0: entered allmulticast mode [ 145.962007][ T5184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.965454][ T5184] syz.3.1511: attempt to access beyond end of device [ 145.965454][ T5184] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 146.497493][ T5207] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1518'. [ 146.544294][ T5212] fuse: Unknown parameter 'f!s4 hFKHPUOH?W _l D' [ 146.856605][ T36] audit: type=1400 audit(2000000009.950:520): avc: denied { connect } for pid=5249 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.082595][ T5256] tmpfs: Bad value for 'huge' [ 148.171102][ T750] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 148.303625][ T5303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.356197][ T5308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5308 comm=syz.4.1548 [ 148.375535][ T750] usb 4-1: Using ep0 maxpacket: 32 [ 148.391236][ T750] usb 4-1: config 0 has an invalid interface number: 82 but max is 0 [ 148.399659][ T5308] rust_binder: Error in use_page_slow: ESRCH [ 148.399684][ T5308] rust_binder: use_range failure ESRCH [ 148.405805][ T5308] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 148.411356][ T5308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 148.412612][ T750] usb 4-1: config 0 has no interface number 0 [ 148.421089][ T5308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:602 [ 148.451079][ T750] usb 4-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 148.469581][ T750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.484674][ T750] usb 4-1: config 0 descriptor?? [ 148.497941][ T750] ums-sddr09 4-1:0.82: USB Mass Storage device detected [ 148.791140][ T308] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 148.952644][ T308] usb 8-1: unable to get BOS descriptor or descriptor too short [ 148.960747][ T308] usb 8-1: not running at top speed; connect to a high speed hub [ 148.969345][ T308] usb 8-1: config 1 has an invalid interface number: 138 but max is 0 [ 148.978040][ T308] usb 8-1: config 1 has no interface number 0 [ 148.984252][ T308] usb 8-1: config 1 interface 138 has no altsetting 0 [ 148.992543][ T308] usb 8-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 149.001789][ T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.009881][ T308] usb 8-1: Product: syz [ 149.014236][ T308] usb 8-1: Manufacturer: syz [ 149.018920][ T308] usb 8-1: SerialNumber: syz [ 149.072322][ T5349] fuseblk: Unknown parameter 'group_d' [ 149.078927][ T5349] fuseblk: Unknown parameter 'group_d' [ 149.226765][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.235407][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.243553][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.252107][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.260207][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.268936][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.277249][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.285807][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.294117][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.303434][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.320720][ T308] usb 8-1: USB disconnect, device number 6 [ 149.332732][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.519575][ T750] usb 4-1: USB disconnect, device number 52 [ 149.534416][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 149.561630][ T36] audit: type=1326 audit(2000000012.650:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.3.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35cad8e929 code=0x0 [ 149.831465][ T5367] binder: Unknown parameter 'ٙSI ' [ 149.842170][ T5367] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 149.919553][ T5371] fuse: Bad value for 'user_id' [ 149.924521][ T5371] fuse: Bad value for 'user_id' [ 149.954900][ T5379] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 150.110209][ T5393] binder: Unknown parameter 'permit_directio' [ 150.261249][ T5409] fuse: blksize only supported for fuseblk [ 150.291136][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.658840][ T5441] rust_binder: Write failure EFAULT in pid:1202 [ 150.691974][ T5448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.698599][ T5448] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 150.713634][ T5448] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 150.722427][ T5448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1209 [ 150.876705][ T5460] overlayfs: failed to clone upperpath [ 151.091069][ T750] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 151.165147][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.172330][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.179443][ T5464] bridge_slave_0: entered allmulticast mode [ 151.185887][ T5464] bridge_slave_0: entered promiscuous mode [ 151.192594][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.200090][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.207584][ T5464] bridge_slave_1: entered allmulticast mode [ 151.214014][ T5464] bridge_slave_1: entered promiscuous mode [ 151.252582][ T750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.260666][ T750] usb 4-1: not running at top speed; connect to a high speed hub [ 151.271451][ T750] usb 4-1: config 1 has an invalid interface number: 121 but max is 0 [ 151.277355][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.279696][ T750] usb 4-1: config 1 has no interface number 0 [ 151.286706][ T5464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.292846][ T750] usb 4-1: config 1 interface 121 has no altsetting 0 [ 151.300095][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.313007][ T750] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 151.313841][ T5464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.330230][ T750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.338680][ T750] usb 4-1: Product: syz [ 151.343065][ T750] usb 4-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 151.361550][ T750] usb 4-1: SerialNumber: syz [ 151.361556][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.373337][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.383225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.390293][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.400664][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.407739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.436094][ T5464] veth0_vlan: entered promiscuous mode [ 151.448625][ T5464] veth1_macvtap: entered promiscuous mode [ 151.740010][ T750] usb_ehset_test 4-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 151.741297][ T308] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 151.751311][ T750] usb 4-1: USB disconnect, device number 53 [ 151.911072][ T308] usb 9-1: Using ep0 maxpacket: 8 [ 151.918102][ T308] usb 9-1: config 0 has an invalid interface number: 85 but max is 2 [ 151.926301][ T308] usb 9-1: config 0 has an invalid interface number: 12 but max is 2 [ 151.934611][ T308] usb 9-1: config 0 has an invalid interface number: 135 but max is 2 [ 151.942993][ T308] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 151.951755][ T308] usb 9-1: config 0 has no interface number 0 [ 151.957843][ T308] usb 9-1: config 0 has no interface number 1 [ 151.963973][ T308] usb 9-1: config 0 has no interface number 2 [ 151.970114][ T308] usb 9-1: config 0 interface 85 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.980993][ T308] usb 9-1: config 0 interface 85 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 151.992303][ T308] usb 9-1: config 0 interface 85 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 152.003003][ T308] usb 9-1: config 0 interface 85 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.014023][ T308] usb 9-1: config 0 interface 85 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 152.024027][ T308] usb 9-1: config 0 interface 85 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 152.035089][ T308] usb 9-1: config 0 interface 85 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.045982][ T308] usb 9-1: config 0 interface 85 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 152.056925][ T308] usb 9-1: config 0 interface 85 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 152.067615][ T308] usb 9-1: config 0 interface 85 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 152.078640][ T308] usb 9-1: config 0 interface 12 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 152.089316][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 152.100134][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 152.110874][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 152.122300][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 152.133218][ T308] usb 9-1: config 0 interface 135 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 152.144308][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 152.155808][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 152.166992][ T36] audit: type=1400 audit(2000000015.260:522): avc: denied { create } for pid=5477 comm="syz.4.1605" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.208962][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 152.219734][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 152.230519][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 152.243614][ T308] usb 9-1: config 0 interface 135 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 152.251701][ T5480] kvm: pic: non byte write [ 152.254607][ T36] audit: type=1400 audit(2000000015.260:523): avc: denied { link } for pid=5477 comm="syz.4.1605" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.302164][ T308] usb 9-1: config 0 interface 12 has no altsetting 0 [ 152.302663][ T36] audit: type=1400 audit(2000000015.260:524): avc: denied { rename } for pid=5477 comm="syz.4.1605" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.308905][ T308] usb 9-1: config 0 interface 135 has no altsetting 0 [ 152.353290][ T1472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.360367][ T1475] Bluetooth: hci0: command 0x1003 tx timeout [ 152.374048][ T308] usb 9-1: New USB device found, idVendor=079b, idProduct=004b, bcdDevice=1c.d4 [ 152.391132][ T308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.399472][ T5483] rust_binder: Error in use_page_slow: ESRCH [ 152.399499][ T5483] rust_binder: use_range failure ESRCH [ 152.399518][ T308] usb 9-1: Product: 蜡 [ 152.408147][ T5483] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 152.413269][ T308] usb 9-1: Manufacturer: င [ 152.421679][ T5485] overlayfs: cannot append lower layer [ 152.423130][ T308] usb 9-1: SerialNumber: ц [ 152.431917][ T5483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 152.437824][ T5483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:80 [ 152.447503][ T308] usb 9-1: config 0 descriptor?? [ 152.447804][ T5486] FAT-fs (rnullb0): bogus number of reserved sectors [ 152.462014][ T5473] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 152.468940][ T5486] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 152.507044][ T36] audit: type=1400 audit(2000000015.590:525): avc: denied { append } for pid=5489 comm="syz.4.1609" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.548197][ T5493] rust_binder: Write failure EFAULT in pid:84 [ 152.577943][ T5498] rust_binder: Error while translating object. [ 152.584218][ T5498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.590510][ T5498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 152.603706][ T5500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.646388][ T5507] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 152.731153][ T308] usb 9-1: USB disconnect, device number 2 [ 152.851112][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 152.981140][ T31] usb 4-1: device descriptor read/64, error -71 [ 153.084164][ T36] audit: type=1400 audit(2000000016.170:526): avc: denied { mounton } for pid=5515 comm="syz.4.1619" path="/file0" dev="ramfs" ino=42437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 153.238916][ T306] hid (null): unknown global tag 0xc [ 153.241109][ T31] usb 4-1: device descriptor read/64, error -71 [ 153.244410][ T306] hid (null): unknown global tag 0xc9 [ 153.256324][ T306] hid (null): global environment stack underflow [ 153.262834][ T5525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.262866][ T5525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 153.272621][ T306] hid (null): unknown global tag 0xd [ 153.287382][ T306] hid (null): global environment stack underflow [ 153.293871][ T306] hid (null): invalid report_count 64202 [ 153.299693][ T306] hid (null): invalid report_count 55889 [ 153.305381][ T306] hid (null): unknown global tag 0xd [ 153.310681][ T306] hid (null): unknown global tag 0xd [ 153.316027][ T306] hid (null): unknown global tag 0xd [ 153.321393][ T306] hid (null): report_id 0 is invalid [ 153.326706][ T306] hid (null): report_id 432704449 is invalid [ 153.332776][ T306] hid (null): unknown global tag 0xc [ 153.338139][ T306] hid (null): unknown global tag 0xc [ 153.343574][ T306] hid (null): unknown global tag 0xe [ 153.350527][ T306] hid (null): unknown global tag 0xd [ 153.356198][ T306] hid (null): unknown global tag 0xc [ 153.361623][ T306] hid (null): invalid report_size 1610063429 [ 153.370281][ T306] hid (null): unknown global tag 0xc [ 153.375603][ T306] hid (null): unknown global tag 0xc [ 153.380947][ T306] hid (null): unknown global tag 0x55 [ 153.386396][ T306] hid (null): unknown global tag 0x95 [ 153.391883][ T306] hid (null): unknown global tag 0xd [ 153.397190][ T306] hid (null): report_id 2669312539 is invalid [ 153.403324][ T306] hid (null): unknown global tag 0xd [ 153.408640][ T306] hid (null): report_id 47138 is invalid [ 153.414312][ T306] hid (null): unknown global tag 0x92 [ 153.419756][ T306] hid (null): unknown global tag 0x70 [ 153.425196][ T306] hid (null): unknown global tag 0x60 [ 153.430597][ T306] hid (null): unknown global tag 0xc [ 153.438215][ T306] hid (null): report_id 1769560862 is invalid [ 153.444361][ T306] hid (null): unknown global tag 0xc [ 153.449684][ T306] hid (null): invalid report_size 52524 [ 153.455307][ T306] hid (null): unknown global tag 0x2a [ 153.460719][ T306] hid (null): unknown global tag 0xd [ 153.466269][ T306] hid (null): unknown global tag 0xef [ 153.471863][ T306] hid (null): invalid report_count 1127735744 [ 153.478058][ T306] hid (null): unknown global tag 0xf4 [ 153.491165][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 153.517630][ T306] hid-generic 072B:0001:0DF2.0016: unknown main item tag 0x4 [ 153.525231][ T306] hid-generic 072B:0001:0DF2.0016: unknown global tag 0xc [ 153.532431][ T306] hid-generic 072B:0001:0DF2.0016: item 0 4 1 12 parsing failed [ 153.540486][ T306] hid-generic 072B:0001:0DF2.0016: probe with driver hid-generic failed with error -22 [ 153.587976][ T5533] binder: Unknown parameter 'context ' [ 153.607036][ T5538] input: syz1 as /devices/virtual/input/input22 [ 153.614610][ T5538] netlink: 'syz.7.1627': attribute type 11 has an invalid length. [ 153.622587][ T31] usb 4-1: device descriptor read/64, error -71 [ 153.629188][ T5538] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1627'. [ 153.644706][ T5538] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 153.871122][ T31] usb 4-1: device descriptor read/64, error -71 [ 153.931106][ T306] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 153.981156][ T31] usb usb4-port1: attempt power cycle [ 154.081066][ T306] usb 8-1: Using ep0 maxpacket: 8 [ 154.087276][ T306] usb 8-1: config 0 interface 0 has no altsetting 0 [ 154.094020][ T306] usb 8-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 154.103112][ T306] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.111921][ T306] usb 8-1: config 0 descriptor?? [ 154.321097][ T31] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 154.342230][ T31] usb 4-1: device descriptor read/8, error -71 [ 154.472194][ T31] usb 4-1: device descriptor read/8, error -71 [ 154.583628][ T306] usbhid 8-1:0.0: can't add hid device: -71 [ 154.589632][ T306] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 154.598731][ T306] usb 8-1: USB disconnect, device number 7 [ 154.691099][ T308] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 154.711076][ T31] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 154.732151][ T31] usb 4-1: device descriptor read/8, error -71 [ 154.841066][ T308] usb 9-1: Using ep0 maxpacket: 8 [ 154.847168][ T308] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.860036][ T308] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.866716][ T308] usb 9-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 154.875853][ T308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.884590][ T31] usb 4-1: device descriptor read/8, error -71 [ 154.891043][ T308] usb 9-1: config 0 descriptor?? [ 154.991207][ T31] usb usb4-port1: unable to enumerate USB device [ 155.071098][ T306] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 155.221087][ T306] usb 8-1: Using ep0 maxpacket: 16 [ 155.227391][ T306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.238473][ T306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.248266][ T306] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.261157][ T306] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.270215][ T306] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.279319][ T306] usb 8-1: config 0 descriptor?? [ 155.300441][ T308] uclogic 0003:5543:0042.0017: unbalanced delimiter at end of report description [ 155.309824][ T308] uclogic 0003:5543:0042.0017: parse failed [ 155.315868][ T308] uclogic 0003:5543:0042.0017: probe with driver uclogic failed with error -22 [ 155.501147][ T5546] netlink: 288 bytes leftover after parsing attributes in process `syz.8.1630'. [ 155.626107][ T5554] netlink: 'syz.3.1632': attribute type 11 has an invalid length. [ 155.634049][ T5554] netlink: 'syz.3.1632': attribute type 1 has an invalid length. [ 155.641889][ T5554] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.1632'. [ 155.651802][ T5555] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1632'. [ 155.676032][ T5557] tipc: Enabled bearer , priority 0 [ 155.688049][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.697528][ T5557] tipc: Disabling bearer [ 155.697600][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.715320][ T306] usbhid 8-1:0.0: can't add hid device: -71 [ 155.721571][ T306] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 155.730807][ T306] usb 8-1: USB disconnect, device number 8 [ 156.020796][ T306] usb 9-1: USB disconnect, device number 3 [ 156.100720][ T5579] random: crng reseeded on system resumption [ 156.130009][ T5579] rust_binder: Error in use_page_slow: ESRCH [ 156.130037][ T5579] rust_binder: use_range failure ESRCH [ 156.136408][ T5580] rust_binder: Error in use_page_slow: ESRCH [ 156.149101][ T5580] rust_binder: use_range failure ESRCH [ 156.165457][ T5579] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 156.171570][ T36] audit: type=1400 audit(2000000019.180:527): avc: denied { write } for pid=5578 comm="syz.8.1640" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.202779][ T5579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 156.202819][ T5579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:28 [ 156.215406][ T5580] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 156.261917][ T5580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 156.277302][ T5580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:28 [ 156.287852][ T36] audit: type=1400 audit(2000000019.180:528): avc: denied { open } for pid=5578 comm="syz.8.1640" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.438126][ T36] audit: type=1400 audit(2000000019.520:529): avc: denied { mount } for pid=5586 comm="syz.8.1643" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 156.667892][ T36] audit: type=1326 audit(2000000019.750:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5583 comm="syz.4.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f185a12ab19 code=0x0 [ 156.701060][ T306] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 156.756857][ T5584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 156.756897][ T5584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:649 [ 156.777098][ T5584] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 156.786494][ T5595] binder: Bad value for 'stats' [ 156.800175][ T5584] rust_binder: Read failure Err(EFAULT) in pid:649 [ 156.862542][ T306] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 156.880582][ T306] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 156.889770][ T306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.900287][ T306] usb 9-1: config 0 descriptor?? [ 156.906685][ T306] rndis_host 9-1:0.0: skipping garbage [ 156.921209][ T306] usb 9-1: bad CDC descriptors [ 156.934542][ T750] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 157.102370][ T750] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 157.115624][ T750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.125588][ T5613] binder: Unknown parameter '18446744073709551615' [ 157.132377][ T750] usb 4-1: Product: syz [ 157.136981][ T750] usb 4-1: Manufacturer: syz [ 157.141850][ T750] usb 4-1: SerialNumber: syz [ 157.184434][ T5615] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.236245][ T36] audit: type=1400 audit(2000000020.320:531): avc: denied { create } for pid=5618 comm="syz.4.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.255855][ T36] audit: type=1400 audit(2000000020.320:532): avc: denied { map } for pid=5618 comm="syz.4.1653" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.279114][ T36] audit: type=1400 audit(2000000020.320:533): avc: denied { read } for pid=5618 comm="syz.4.1653" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.297871][ T5623] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 157.302530][ T36] audit: type=1400 audit(2000000020.320:534): avc: denied { ioctl } for pid=5618 comm="syz.4.1653" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x770b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.314623][ T5623] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 157.339033][ T308] usb 9-1: USB disconnect, device number 4 [ 157.347924][ T36] audit: type=1400 audit(2000000020.370:535): avc: denied { write } for pid=5620 comm="syz.4.1654" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.374128][ T36] audit: type=1400 audit(2000000020.370:536): avc: denied { open } for pid=5620 comm="syz.4.1654" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.451090][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 157.603736][ T31] usb 8-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 157.613162][ T31] usb 8-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 157.621330][ T31] usb 8-1: Product: syz [ 157.625515][ T31] usb 8-1: Manufacturer: syz [ 157.630105][ T31] usb 8-1: SerialNumber: syz [ 157.635501][ T31] usb 8-1: config 0 descriptor?? [ 158.242856][ T31] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 158.261221][ T750] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 158.412180][ T750] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 158.420408][ T750] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.430583][ T750] usb 9-1: config 0 has no interface number 0 [ 158.438161][ T750] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 158.447296][ T750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.455515][ T750] usb 9-1: Product: syz [ 158.459707][ T750] usb 9-1: Manufacturer: syz [ 158.464346][ T750] usb 9-1: SerialNumber: syz [ 158.469828][ T750] usb 9-1: config 0 descriptor?? [ 158.724007][ T308] usb 9-1: USB disconnect, device number 5 [ 158.844590][ T31] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.854727][ T31] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 158.881103][ T31] asix 8-1:0.0: probe with driver asix failed with error -71 [ 158.889879][ T31] usb 8-1: USB disconnect, device number 9 [ 159.381170][ T5679] 9pnet_fd: p9_fd_create_unix (5679): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.661111][ T10] usb 4-1: USB disconnect, device number 58 [ 159.676498][ T5685] binder: Bad value for 'stats' [ 159.691162][ T750] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 159.711084][ T306] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 159.851070][ T750] usb 9-1: Using ep0 maxpacket: 32 [ 159.857597][ T750] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 159.865908][ T750] usb 9-1: config 0 has no interface number 0 [ 159.873005][ T306] usb 8-1: config index 0 descriptor too short (expected 5668, got 36) [ 159.881409][ T306] usb 8-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 159.890159][ T306] usb 8-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 159.899287][ T306] usb 8-1: config 3 has no interface number 0 [ 159.905445][ T306] usb 8-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 159.916448][ T750] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 159.926184][ T306] usb 8-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.936094][ T750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.944311][ T750] usb 9-1: Product: syz [ 159.948482][ T750] usb 9-1: Manufacturer: syz [ 159.953160][ T750] usb 9-1: SerialNumber: syz [ 159.958871][ T750] usb 9-1: config 0 descriptor?? [ 159.963939][ T306] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 159.973278][ T306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.981348][ T306] usb 8-1: Product: syz [ 159.985957][ T750] smsc95xx v2.0.0 [ 159.989657][ T306] usb 8-1: Manufacturer: syz [ 159.994307][ T306] usb 8-1: SerialNumber: syz [ 159.999943][ T5683] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 160.001124][ T10] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 160.162163][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.173309][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 160.183997][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.191163][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 160.200254][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.209245][ T10] usb 4-1: config 0 descriptor?? [ 160.214580][ T5687] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 160.217557][ T5683] rust_binder: Write failure EINVAL in pid:144 [ 160.225394][ T306] usb-storage 8-1:3.20: USB Mass Storage device detected [ 160.240359][ T306] usb-storage 8-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 160.248358][ T306] scsi host1: usb-storage 8-1:3.20 [ 160.258797][ T306] usb 8-1: USB disconnect, device number 10 [ 160.390961][ T750] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 160.401820][ T750] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.611819][ T750] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 160.622662][ T750] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 160.634242][ T10] logitech 0003:046D:C286.0018: unknown main item tag 0x6 [ 160.642111][ T10] logitech 0003:046D:C286.0018: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 160.653484][ T10] logitech 0003:046D:C286.0018: no inputs found [ 160.834259][ T31] usb 4-1: USB disconnect, device number 59 [ 160.880982][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1682'. [ 161.364253][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.370720][ T2188] Bluetooth: hci1: sending frame failed (-49) [ 161.376909][ T1475] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 161.725683][ T5717] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 161.775844][ T5724] kvm: pic: non byte write [ 161.855718][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 161.855740][ T36] audit: type=1400 audit(2000000024.940:538): avc: denied { create } for pid=5729 comm="syz.7.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.882391][ T5730] rust_binder: Error while translating object. [ 161.882422][ T5730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 161.888704][ T5730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:166 [ 161.912750][ T36] audit: type=1400 audit(2000000025.000:539): avc: denied { execute } for pid=5731 comm="syz.7.1688" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.929082][ T5737] binder: Bad value for 'max' [ 161.958985][ T5737] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1689'. [ 162.450137][ T31] usb 9-1: USB disconnect, device number 6 [ 162.499629][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.506087][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 162.524727][ T5741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1691'. [ 162.525168][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1691'. [ 162.543070][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1691'. [ 162.552094][ T5741] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1691'. [ 162.831117][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 162.981080][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 162.987308][ T10] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.995705][ T10] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.004350][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.013340][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.023014][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.032712][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.046337][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.055406][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.064364][ T10] usb 8-1: config 0 descriptor?? [ 163.270896][ T10] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.431073][ T2188] Bluetooth: hci0: command 0x1003 tx timeout [ 163.431070][ T1472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.457982][ T5753] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 163.472235][ T5753] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 163.473158][ T36] audit: type=1400 audit(2000000026.560:540): avc: denied { read write } for pid=5747 comm="syz.7.1693" name="lp0" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 163.509897][ T36] audit: type=1400 audit(2000000026.560:541): avc: denied { open } for pid=5747 comm="syz.7.1693" path="/dev/usb/lp0" dev="devtmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 163.510227][ T10] usb 8-1: USB disconnect, device number 11 [ 163.541148][ T10] usblp0: removed [ 164.291295][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 164.442123][ T10] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.453810][ T10] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.464860][ T10] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.476184][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 164.485288][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.494404][ T5756] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 164.551134][ T1475] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 164.551157][ T1472] Bluetooth: hci1: command 0x1003 tx timeout [ 164.606447][ T36] audit: type=1400 audit(2000000027.690:542): avc: denied { watch } for pid=5767 comm="syz.8.1700" path="/21/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.703665][ T5756] rust_binder: Error in use_page_slow: ESRCH [ 164.703691][ T5756] rust_binder: use_range failure ESRCH [ 164.709751][ T5756] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 164.715284][ T5756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.723328][ T5756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:184 [ 164.733249][ T10] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 164.749972][ T10] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input23 [ 164.761982][ T10] usb 8-1: USB disconnect, device number 12 [ 164.768012][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 164.861086][ T751] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 165.012047][ T751] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 165.020354][ T751] usb 9-1: config 0 has no interface number 1 [ 165.026532][ T751] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 165.036448][ T751] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.047940][ T751] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 165.057102][ T751] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.065121][ T751] usb 9-1: SerialNumber: syz [ 165.070313][ T751] usb 9-1: config 0 descriptor?? [ 165.076316][ T751] usb 9-1: Found UVC 0.00 device (0002:0000) [ 165.083233][ T751] usb 9-1: No valid video chain found. [ 165.471075][ T751] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 165.494183][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1712'. [ 165.503766][ T36] audit: type=1404 audit(2000000000.130:543): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 165.519622][ T36] audit: type=1400 audit(2000000000.140:544): avc: denied { read write } for pid=5802 comm="syz.7.1712" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 165.542935][ T36] audit: type=1400 audit(2000000000.140:545): avc: denied { create } for pid=5802 comm="syz.7.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 165.562445][ T36] audit: type=1400 audit(2000000000.170:546): avc: denied { ioctl } for pid=5785 comm="syz.3.1707" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 165.587319][ T36] audit: type=1400 audit(2000000000.170:547): avc: denied { mounton } for pid=5785 comm="syz.3.1707" path="/442/file0" dev="tmpfs" ino=2453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 166.031058][ T751] usb 4-1: device not accepting address 60, error -71 [ 166.992856][ T36] kauditd_printk_skb: 172 callbacks suppressed [ 166.992959][ T36] audit: type=1400 audit(2000000001.620:720): avc: denied { create } for pid=5868 comm="syz.3.1734" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 167.127855][ T36] audit: type=1400 audit(2000000001.750:721): avc: denied { remount } for pid=5868 comm="syz.3.1734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0 [ 167.355225][ T36] audit: type=1400 audit(2000000001.980:722): avc: denied { read write } for pid=1542 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.379883][ T36] audit: type=1400 audit(2000000001.990:723): avc: denied { read write } for pid=5874 comm="syz.4.1736" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 167.406200][ T36] audit: type=1400 audit(2000000001.990:724): avc: denied { read } for pid=5874 comm="syz.4.1736" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 167.427636][ T36] audit: type=1400 audit(2000000002.000:725): avc: denied { read write } for pid=1542 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.454320][ T36] audit: type=1400 audit(2000000002.010:726): avc: denied { create } for pid=5877 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 167.474246][ T36] audit: type=1400 audit(2000000002.010:727): avc: denied { read write } for pid=5877 comm="syz.4.1737" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 167.498909][ T36] audit: type=1400 audit(2000000002.010:728): avc: denied { create } for pid=5877 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 167.519746][ T36] audit: type=1400 audit(2000000002.010:729): avc: denied { create } for pid=5877 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 167.607530][ T750] usb 9-1: USB disconnect, device number 7 [ 168.309581][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 169.023601][ T6008] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 169.024316][ T6010] overlay: ./file1 is not a directory [ 169.067833][ T6019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 169.067873][ T6019] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.077662][ T6019] rust_binder: Read failure Err(EFAULT) in pid:97 [ 169.276195][ T6024] rust_binder: Error in use_page_slow: ESRCH [ 169.282744][ T6024] rust_binder: use_range failure ESRCH [ 169.288851][ T6024] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 169.302841][ T6024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.311810][ T6024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 169.381066][ T31] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 169.495734][ T6054] kvm: pic: non byte write [ 169.500531][ T6051] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 169.551065][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 169.557430][ T31] usb 4-1: config 0 has no interfaces? [ 169.564874][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.574260][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.582714][ T31] usb 4-1: Product: syz [ 169.586981][ T31] usb 4-1: Manufacturer: syz [ 169.595627][ T31] usb 4-1: SerialNumber: syz [ 169.606493][ T31] usb 4-1: config 0 descriptor?? [ 169.641051][ T486] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 169.676479][ T6068] netlink: 'syz.7.1806': attribute type 4 has an invalid length. [ 169.684351][ T6068] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1806'. [ 169.717073][ T6070] 9pnet_fd: Insufficient options for proto=fd [ 169.725183][ T6071] 9pnet_fd: Insufficient options for proto=fd [ 169.749878][ T6073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 169.749918][ T6073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:284 [ 169.803182][ T486] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 169.825686][ T486] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 169.834953][ T31] usb 4-1: USB disconnect, device number 62 [ 169.841429][ T486] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 169.855158][ T486] usb 9-1: config 220 has no interface number 2 [ 169.871062][ T486] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 169.885996][ T486] usb 9-1: config 220 interface 0 has no altsetting 0 [ 169.893230][ T486] usb 9-1: config 220 interface 76 has no altsetting 0 [ 169.900393][ T486] usb 9-1: config 220 interface 1 has no altsetting 0 [ 169.908980][ T6075] netlink: 'syz.7.1809': attribute type 63 has an invalid length. [ 169.909008][ T486] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 169.917457][ T6075] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1809'. [ 169.936125][ T486] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.953147][ T486] usb 9-1: Product: syz [ 169.961208][ T486] usb 9-1: Manufacturer: syz [ 169.965849][ T486] usb 9-1: SerialNumber: syz [ 170.176970][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.190403][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.322314][ T486] usb 9-1: selecting invalid altsetting 0 [ 170.340428][ T486] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 170.354294][ T486] usb 9-1: No valid video chain found. [ 170.361467][ T6089] sit0: entered promiscuous mode [ 170.373654][ T6089] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 170.380356][ T486] usb 9-1: USB disconnect, device number 8 [ 170.394627][ T6089] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1813'. [ 170.637158][ T6102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.501292][ T6149] incfs: Options parsing error. -22 [ 171.525497][ T6149] incfs: mount failed -22 [ 171.569029][ T10] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 171.722106][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.741042][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 171.761053][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.777911][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 171.798110][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.812302][ T10] usb 4-1: config 0 descriptor?? [ 171.818316][ T6137] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.095818][ T6173] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 172.095844][ T6173] rust_binder: Read failure Err(EFAULT) in pid:310 [ 172.220570][ T6176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.237997][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.248962][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.257281][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.265634][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.275168][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.283594][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.292097][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.293122][ T6176] overlayfs: missing 'lowerdir' [ 172.300206][ T10] logitech-djreceiver 0003:046D:C71F.0019: unknown main item tag 0x0 [ 172.322415][ T36] kauditd_printk_skb: 428 callbacks suppressed [ 172.322433][ T36] audit: type=1400 audit(2000000006.950:1158): avc: denied { create } for pid=6175 comm="syz.8.1840" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 172.431100][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1842'. [ 172.455142][ T36] audit: type=1400 audit(2000000007.050:1159): avc: denied { mount } for pid=6181 comm="syz.8.1842" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.478509][ T36] audit: type=1400 audit(2000000007.100:1160): avc: denied { unmount } for pid=6181 comm="syz.8.1842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.504188][ T36] audit: type=1400 audit(2000000007.130:1161): avc: denied { connect } for pid=6184 comm="syz.7.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.529836][ T486] usb 4-1: USB disconnect, device number 63 [ 172.540759][ T36] audit: type=1400 audit(2000000007.130:1162): avc: denied { accept } for pid=6184 comm="syz.7.1843" path=0000234E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 172.587513][ T36] audit: type=1400 audit(2000000007.150:1163): avc: denied { setopt } for pid=6184 comm="syz.7.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.609861][ T36] audit: type=1400 audit(2000000007.150:1164): avc: denied { ioctl } for pid=6184 comm="syz.7.1843" path="socket:[46888]" dev="sockfs" ino=46888 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.636454][ T36] audit: type=1400 audit(2000000007.150:1165): avc: denied { write } for pid=6184 comm="syz.7.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.664482][ T6190] rust_binder: Write failure EINVAL in pid:319 [ 172.664729][ T36] audit: type=1400 audit(2000000007.290:1166): avc: denied { write } for pid=6189 comm="syz.7.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.664792][ T6190] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1844'. [ 172.700955][ T6190] rust_binder: Read failure Err(EAGAIN) in pid:319 [ 172.907458][ T6201] binder: Unknown parameter 'sglobal' [ 172.907783][ T36] audit: type=1400 audit(2000000007.530:1167): avc: denied { remount } for pid=6200 comm="syz.7.1846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 173.561070][ T751] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 173.712228][ T751] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 173.723294][ T751] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 173.734793][ T751] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 173.744165][ T751] usb 9-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 173.752891][ T751] usb 9-1: Product: syz [ 173.757227][ T751] usb 9-1: Manufacturer: syz [ 173.762144][ T751] usb 9-1: SerialNumber: syz [ 173.767672][ T751] usb 9-1: config 0 descriptor?? [ 173.782444][ T6212] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 175.921097][ T751] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 176.082230][ T751] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.093415][ T751] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 176.104402][ T751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.111260][ T751] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 176.120439][ T751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.129526][ T751] usb 4-1: config 0 descriptor?? [ 176.138314][ T6225] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.209673][ T486] usb 9-1: USB disconnect, device number 9 [ 176.270165][ T6231] tipc: Started in network mode [ 176.275246][ T6231] tipc: Node identity 2eea20e2fd87, cluster identity 4711 [ 176.282709][ T6231] tipc: Enabled bearer , priority 0 [ 176.290579][ T6231] tipc: Disabling bearer [ 176.300150][ T6232] rust_binder: 6227 RLIMIT_NICE not set [ 176.549438][ T751] logitech 0003:046D:C286.001A: unknown main item tag 0x6 [ 176.563238][ T751] logitech 0003:046D:C286.001A: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 176.583255][ T751] logitech 0003:046D:C286.001A: no inputs found [ 176.661072][ T486] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 176.764477][ T751] usb 4-1: USB disconnect, device number 64 [ 176.821061][ T486] usb 9-1: Using ep0 maxpacket: 32 [ 176.827548][ T486] usb 9-1: config 11 has an invalid interface number: 29 but max is 3 [ 176.835969][ T486] usb 9-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 176.845106][ T486] usb 9-1: config 11 has an invalid interface number: 104 but max is 3 [ 176.853694][ T486] usb 9-1: config 11 has an invalid interface number: 243 but max is 3 [ 176.862251][ T486] usb 9-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 176.871329][ T486] usb 9-1: config 11 has an invalid interface number: 93 but max is 3 [ 176.879658][ T486] usb 9-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 176.888753][ T486] usb 9-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 176.897932][ T486] usb 9-1: config 11 has no interface number 0 [ 176.904354][ T486] usb 9-1: config 11 has no interface number 1 [ 176.910690][ T486] usb 9-1: config 11 has no interface number 2 [ 176.917193][ T486] usb 9-1: config 11 has no interface number 3 [ 176.923706][ T486] usb 9-1: config 11 interface 29 altsetting 2 endpoint 0xC has an invalid bInterval 53, changing to 9 [ 176.935353][ T486] usb 9-1: config 11 interface 29 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 176.946580][ T486] usb 9-1: config 11 interface 29 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.956824][ T486] usb 9-1: config 11 interface 29 altsetting 2 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 176.968128][ T486] usb 9-1: config 11 interface 104 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 176.989203][ T486] usb 9-1: config 11 interface 104 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 177.010497][ T486] usb 9-1: config 11 interface 104 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 177.023188][ T486] usb 9-1: config 11 interface 104 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 177.034289][ T486] usb 9-1: config 11 interface 104 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 177.045383][ T486] usb 9-1: config 11 interface 104 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 177.056619][ T486] usb 9-1: config 11 interface 104 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 177.067685][ T486] usb 9-1: config 11 interface 243 altsetting 127 bulk endpoint 0xE has invalid maxpacket 40 [ 177.078144][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 177.089435][ T486] usb 9-1: config 11 interface 243 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 177.100873][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 177.112167][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 177.123442][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 177.134712][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 177.145962][ T486] usb 9-1: config 11 interface 243 altsetting 127 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 177.157461][ T486] usb 9-1: config 11 interface 243 altsetting 127 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.167835][ T486] usb 9-1: config 11 interface 243 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 177.179303][ T486] usb 9-1: config 11 interface 243 altsetting 127 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 177.190864][ T486] usb 9-1: config 11 interface 243 altsetting 127 endpoint 0xA has invalid maxpacket 1088, setting to 64 [ 177.202593][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 177.213836][ T486] usb 9-1: config 11 interface 243 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 177.225261][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 177.254721][ T486] usb 9-1: config 11 interface 243 altsetting 127 has an endpoint descriptor with address 0x3F, changing to 0xF [ 177.267777][ T486] usb 9-1: config 11 interface 243 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 177.281137][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 177.316172][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 177.329655][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 177.340900][ T486] usb 9-1: config 11 interface 93 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 177.342574][ T6246] rust_binder: Error while translating object. [ 177.352072][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 177.361788][ T6246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 177.368948][ T6246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:347 [ 177.369245][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 177.398608][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0x89, skipping [ 177.409585][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 177.438402][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 177.449436][ T486] usb 9-1: config 11 interface 93 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.460623][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 177.471689][ T486] usb 9-1: config 11 interface 93 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 177.496800][ T486] usb 9-1: config 11 interface 93 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.507988][ T486] usb 9-1: config 11 interface 29 has no altsetting 0 [ 177.515019][ T486] usb 9-1: config 11 interface 104 has no altsetting 0 [ 177.522147][ T486] usb 9-1: config 11 interface 243 has no altsetting 0 [ 177.530738][ T486] usb 9-1: Dual-Role OTG device on HNP port [ 177.539497][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 177.539517][ T36] audit: type=1401 audit(2000000012.160:1178): op=setxattr invalid_context="system_u:object_r:iptables_exec_t:s0" [ 177.558034][ T486] usb 9-1: New USB device found, idVendor=12d1, idProduct=8576, bcdDevice=6c.07 [ 177.567201][ T486] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.575343][ T486] usb 9-1: Product: ࠝ [ 177.579535][ T486] usb 9-1: Manufacturer: ࿸ﰽ괺횱블鵆ꋖ沦 赓ឌ⫻큖ꋆ劜꥘蚡ﳸ팿䍥䲓ළ뭁鑫羒殂益늛뀽٬톁绍낻䜝苯할緑辀앐鲧马赃❙₺蚕묌報鵜띲﵊뜌幵᷑慻좞횓ɝ◫몕ਯ絮⩙柠擅도잎㶤⌆ᛈ⾆뗃ᄚ≾膡꯱嬼夲誠꣸㖋᎐䜻쉏㛓링䋪ſ㝎㻽珲쳚쩍ꫪ࿵ⳕꄈ穜￠팘䢕혘ᢊឪ㉽ [ 177.616978][ T486] usb 9-1: SerialNumber: 칇콝熙㉗煈췎䄎챈㌝툈Ꝏ⛆쀇ꔡꧩ⾺୓莮౥늟᭏閟☬꿑繳銸ﺓ悱퇗⡀턏揣욎켿ꖿ㰁ᢄ㓇탏藦蝳봗㺒ざ䖗⍮ᩞᱍ釒횞뽐憖㬅刾젚㨵탥궪ᑿ㡐ﹹ뙏榩鹒㦡け漣೔๪잠幑딓㽘ஸ㺲㾳沼❁ꭠ楌蘯ᵾ使꩟怼♰メ䟹䥧ߌɸז풳ꝼ援㢍濡♦︪雋谿裱☑ [ 177.882250][ T486] usb 9-1: USB disconnect, device number 10 [ 177.901060][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 178.071045][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 178.076628][ T36] audit: type=1400 audit(2000000012.700:1179): avc: denied { ioctl } for pid=6255 comm="syz.7.1865" path="socket:[47314]" dev="sockfs" ino=47314 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.079700][ T10] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 178.109812][ T10] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 178.120048][ T10] usb 4-1: config 8 has no interface number 0 [ 178.126193][ T10] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.153675][ T6257] bpf: Bad value for 'mode' [ 178.157850][ T10] usb 4-1: config 8 interface 39 has no altsetting 0 [ 178.166654][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 178.176232][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.191099][ T10] usb 4-1: Product: syz [ 178.195308][ T10] usb 4-1: Manufacturer: syz [ 178.200014][ T10] usb 4-1: SerialNumber: syz [ 178.421917][ T486] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 178.443494][ T6254] fuse: Bad value for 'user_id' [ 178.451049][ T6254] fuse: Bad value for 'user_id' [ 178.472782][ T36] audit: type=1400 audit(2000000013.100:1180): avc: denied { execute } for pid=6266 comm="syz.8.1869" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 178.546064][ T6273] rust_binder: inc_ref_done called when no active inc_refs [ 178.586546][ T10] ipheth 4-1:8.39: Unable to find endpoints [ 178.601045][ T486] usb 8-1: Using ep0 maxpacket: 16 [ 178.610234][ T10] usb 4-1: USB disconnect, device number 65 [ 178.618758][ T486] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 178.637141][ T36] audit: type=1400 audit(2000000013.250:1181): avc: denied { setopt } for pid=6274 comm="syz.8.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.661856][ T486] usb 8-1: config 0 has no interface number 0 [ 178.668620][ T486] usb 8-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 178.684729][ T486] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.697824][ T486] usb 8-1: config 0 descriptor?? [ 178.756088][ T36] audit: type=1400 audit(2000000013.380:1182): avc: denied { ioctl } for pid=6284 comm="syz.8.1874" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 178.902037][ T36] audit: type=1400 audit(2000000013.530:1183): avc: denied { mounton } for pid=6286 comm="syz.8.1875" path="/63/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 178.921441][ T6259] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 178.931600][ T36] audit: type=1400 audit(2000000013.550:1184): avc: denied { mounton } for pid=6258 comm="syz.7.1866" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 178.959710][ T486] usb 8-1: USB disconnect, device number 13 [ 179.551067][ T486] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 179.722098][ T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 179.751037][ T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.760889][ T486] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 179.781063][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.801666][ T486] usb 4-1: config 0 descriptor?? [ 180.215981][ T486] elo 0003:04E7:0030.001B: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 180.361079][ T308] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 180.413262][ T36] audit: type=1400 audit(2000000015.040:1185): avc: denied { bind } for pid=6300 comm="syz.3.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.438437][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.448341][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.509750][ T36] audit: type=1400 audit(2000000015.130:1186): avc: denied { name_bind } for pid=6320 comm="syz.3.1883" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 180.511087][ T308] usb 8-1: Using ep0 maxpacket: 16 [ 180.546208][ T36] audit: type=1400 audit(2000000015.130:1187): avc: denied { node_bind } for pid=6320 comm="syz.3.1883" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 180.585378][ T6323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.586195][ T6323] rust_binder: Error while translating object. [ 180.586752][ T308] usb 8-1: config 0 has no interfaces? [ 180.601130][ T6323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.609699][ T6323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1424 [ 180.620631][ T308] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.620802][ T10] usb 4-1: USB disconnect, device number 66 [ 180.639053][ T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.667322][ T308] usb 8-1: Product: syz [ 180.681052][ T308] usb 8-1: Manufacturer: syz [ 180.685681][ T308] usb 8-1: SerialNumber: syz [ 180.699537][ T308] usb 8-1: config 0 descriptor?? [ 180.918339][ T308] usb 8-1: USB disconnect, device number 14 [ 181.081066][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 181.231062][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 181.238219][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 181.247231][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 181.257674][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.711061][ T61] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 181.862146][ T61] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 181.874531][ T61] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.884897][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 181.899574][ T61] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 181.908912][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.918236][ T61] usb 8-1: Product: syz [ 181.922672][ T61] usb 8-1: Manufacturer: syz [ 181.927340][ T61] usb 8-1: SerialNumber: syz [ 181.935343][ T61] usb 8-1: config 0 descriptor?? [ 181.944225][ T61] usb-storage 8-1:0.0: USB Mass Storage device detected [ 181.966295][ T61] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 181.995803][ T6349] binder: Bad value for 'max' [ 182.040309][ T6351] overlay: Unknown parameter 'obj_type' [ 182.123991][ T6355] tmpfs: Bad value for 'uid' [ 182.131030][ T6355] tmpfs: Bad value for 'uid' [ 182.168583][ T308] usb 8-1: USB disconnect, device number 15 [ 182.702265][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 182.702287][ T36] audit: type=1400 audit(2000000017.330:1199): avc: denied { bind } for pid=6360 comm="syz.7.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.730781][ T6361] bridge0: entered promiscuous mode [ 182.738056][ T6360] bridge0: left promiscuous mode [ 182.761043][ T36] audit: type=1400 audit(2000000017.350:1200): avc: denied { getopt } for pid=6360 comm="syz.7.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.811051][ T36] audit: type=1400 audit(2000000017.350:1201): avc: denied { ioctl } for pid=6360 comm="syz.7.1898" path="socket:[47651]" dev="sockfs" ino=47651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.836015][ T36] audit: type=1400 audit(2000000017.390:1202): avc: denied { getopt } for pid=6362 comm="syz.7.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.865854][ T36] audit: type=1400 audit(2000000017.490:1203): avc: denied { wake_alarm } for pid=6364 comm="syz.7.1900" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.102969][ T36] audit: type=1400 audit(2000000017.730:1204): avc: denied { read write } for pid=6367 comm="syz.7.1901" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 183.127190][ T36] audit: type=1400 audit(2000000017.760:1205): avc: denied { open } for pid=6367 comm="syz.7.1901" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 183.167989][ T6373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.169677][ T6373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.185495][ T6373] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 183.199465][ T6373] rust_binder: Write failure EINVAL in pid:378 [ 183.228522][ T36] audit: type=1400 audit(2000000017.850:1206): avc: denied { ioctl } for pid=6377 comm="syz.8.1904" path="socket:[48599]" dev="sockfs" ino=48599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.298504][ T36] audit: type=1400 audit(2000000017.920:1207): avc: denied { write } for pid=6382 comm="syz.8.1906" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.324721][ T36] audit: type=1400 audit(2000000017.950:1208): avc: denied { setopt } for pid=6382 comm="syz.8.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.526668][ T6385] rust_binder: Failed copying remainder into alloc: EFAULT [ 183.526697][ T6385] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 183.534425][ T6385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 183.543053][ T6385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:221 [ 183.643671][ T6389] bridge0: entered promiscuous mode [ 183.659199][ T6388] bridge0: left promiscuous mode [ 183.778898][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.795653][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.803849][ T10] usb 4-1: Manufacturer: ᠌ [ 183.815195][ T10] usb 4-1: can't set config #1, error -71 [ 183.835712][ T10] usb 4-1: USB disconnect, device number 67 [ 183.905474][ T6404] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 183.908229][ T6396] kvm: pic: non byte write [ 184.115172][ T6435] bridge0: entered promiscuous mode [ 184.121380][ T6434] bridge0: left promiscuous mode [ 184.233782][ T6444] netlink: 'syz.8.1921': attribute type 7 has an invalid length. [ 184.241848][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1921'. [ 184.251503][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1921'. [ 184.461640][ T6453] incfs: Options parsing error. -22 [ 184.467037][ T6453] incfs: mount failed -22 [ 184.486974][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 184.497890][ T6456] overlayfs: conflicting lowerdir path [ 184.522503][ T6457] tap0: tun_chr_ioctl cmd 1074025677 [ 184.527953][ T6457] tap0: linktype set to 776 [ 184.546781][ T6459] tap0: tun_chr_ioctl cmd 1074025677 [ 184.558891][ T6459] tap0: linktype set to 776 [ 184.593257][ T6456] tap0: tun_chr_ioctl cmd 35108 [ 184.668139][ T6463] exFAT-fs (rnullb0): invalid boot record signature [ 184.675375][ T6463] exFAT-fs (rnullb0): failed to read boot sector [ 184.681986][ T6463] exFAT-fs (rnullb0): failed to recognize exfat type [ 184.703513][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.710618][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.718099][ T6461] bridge_slave_0: entered allmulticast mode [ 184.725708][ T10] ================================================================== [ 184.733809][ T10] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 184.740617][ T10] Write of size 8 at addr 0000000000000098 by task kworker/0:1/10 [ 184.748455][ T10] [ 184.750807][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 184.750842][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.750860][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 184.750938][ T10] Call Trace: [ 184.750948][ T10] [ 184.750958][ T10] __dump_stack+0x21/0x30 [ 184.750989][ T10] dump_stack_lvl+0x10c/0x190 [ 184.751015][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.751046][ T10] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 184.751085][ T10] print_report+0x3d/0x70 [ 184.751109][ T10] kasan_report+0x163/0x1a0 [ 184.751146][ T10] ? down_write+0x83/0x2a0 [ 184.751178][ T10] ? down_write+0x83/0x2a0 [ 184.751210][ T10] kasan_check_range+0x299/0x2a0 [ 184.751248][ T10] __kasan_check_write+0x18/0x20 [ 184.751278][ T10] down_write+0x83/0x2a0 [ 184.751313][ T10] ? __cfi_down_write+0x10/0x10 [ 184.751344][ T10] ? _raw_spin_lock+0x8c/0x120 [ 184.751381][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 184.751418][ T10] ? mutex_unlock+0x8b/0x240 [ 184.751446][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 184.751476][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 184.751507][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 184.751554][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 184.751587][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 184.751617][ T10] ? update_curr+0x60d/0xc60 [ 184.751657][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 184.751703][ T10] ? update_load_avg+0x506/0x19a0 [ 184.751729][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 184.751766][ T10] ? dequeue_entity+0xa9c/0x1750 [ 184.751796][ T10] ? tg_unthrottle_up+0x980/0x980 [ 184.751821][ T10] ? kfree+0x156/0x400 [ 184.751850][ T10] ? vfree+0x471/0x580 [ 184.751874][ T10] ? delayed_vfree_work+0x59/0x80 [ 184.751904][ T10] ? process_scheduled_works+0x7d2/0x1020 [ 184.751937][ T10] ? worker_thread+0xc58/0x1250 [ 184.751969][ T10] ? ret_from_fork+0x64/0xa0 [ 184.751997][ T10] ? calibrate_delay_converge+0x2e0/0x2e0 [ 184.752031][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 184.752062][ T10] ? sched_clock_noinstr+0xd/0x30 [ 184.752089][ T10] ? sched_clock+0x44/0x60 [ 184.752114][ T10] ? sched_clock_cpu+0x75/0x400 [ 184.752141][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 184.752169][ T10] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 184.752203][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 184.752232][ T10] ? __kasan_check_write+0x18/0x20 [ 184.752261][ T10] ? __switch_to+0xc7b/0x1310 [ 184.752290][ T10] ? psi_group_change+0xb44/0x1130 [ 184.752317][ T10] ? __cfi___switch_to+0x10/0x10 [ 184.752347][ T10] ? _raw_spin_unlock+0x45/0x60 [ 184.752370][ T10] ? __switch_to_asm+0x3d/0x70 [ 184.752401][ T10] ? __schedule+0x1463/0x1f10 [ 184.752427][ T10] ? kick_pool+0xad/0x550 [ 184.752450][ T10] process_scheduled_works+0x7d2/0x1020 [ 184.752487][ T10] worker_thread+0xc58/0x1250 [ 184.752525][ T10] kthread+0x2ca/0x370 [ 184.752560][ T10] ? __cfi_worker_thread+0x10/0x10 [ 184.752604][ T10] ? __cfi_kthread+0x10/0x10 [ 184.752643][ T10] ret_from_fork+0x64/0xa0 [ 184.752689][ T10] ? __cfi_kthread+0x10/0x10 [ 184.752723][ T10] ret_from_fork_asm+0x1a/0x30 [ 184.752757][ T10] [ 184.752767][ T10] ================================================================== [ 184.761656][ T6461] bridge_slave_0: entered promiscuous mode [ 184.766200][ T10] Disabling lock debugging due to kernel taint [ 184.793510][ T6470] bridge0: entered promiscuous mode [ 184.796537][ T10] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 184.800772][ T6469] bridge0: left promiscuous mode [ 184.803806][ T10] #PF: supervisor write access in kernel mode [ 184.803822][ T10] #PF: error_code(0x0002) - not-present page [ 184.803836][ T10] PGD 8000000128ed6067 P4D 8000000128ed6067 PUD 0 [ 184.831978][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.832761][ T10] [ 184.832772][ T10] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 184.841897][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.846527][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 184.910283][ T6461] bridge_slave_1: entered allmulticast mode [ 184.914138][ T10] Tainted: [B]=BAD_PAGE [ 184.914149][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.914166][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 185.228035][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 185.233091][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 185.252712][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 185.258814][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 185.266810][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 185.274800][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 185.282789][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 185.290792][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 185.298783][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 185.307728][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.314319][ T10] CR2: 0000000000000098 CR3: 000000011ffb0000 CR4: 00000000003526b0 [ 185.322308][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000a330 [ 185.330287][ T10] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 185.338265][ T10] Call Trace: [ 185.341547][ T10] [ 185.344486][ T10] ? __cfi_down_write+0x10/0x10 [ 185.349353][ T10] ? _raw_spin_lock+0x8c/0x120 [ 185.354130][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 185.359343][ T10] ? mutex_unlock+0x8b/0x240 [ 185.363942][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 185.368971][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 185.374521][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 185.387290][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 185.392413][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 185.398489][ T10] ? update_curr+0x60d/0xc60 [ 185.403088][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 185.416292][ T10] ? update_load_avg+0x506/0x19a0 [ 185.421320][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 185.426881][ T10] ? dequeue_entity+0xa9c/0x1750 [ 185.431828][ T10] ? tg_unthrottle_up+0x980/0x980 [ 185.436854][ T10] ? kfree+0x156/0x400 [ 185.440927][ T10] ? vfree+0x471/0x580 [ 185.445001][ T10] ? delayed_vfree_work+0x59/0x80 [ 185.450033][ T10] ? process_scheduled_works+0x7d2/0x1020 [ 185.455762][ T10] ? worker_thread+0xc58/0x1250 [ 185.460639][ T10] ? ret_from_fork+0x64/0xa0 [ 185.465237][ T10] ? calibrate_delay_converge+0x2e0/0x2e0 [ 185.471065][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 185.476270][ T10] ? sched_clock_noinstr+0xd/0x30 [ 185.481298][ T10] ? sched_clock+0x44/0x60 [ 185.485720][ T10] ? sched_clock_cpu+0x75/0x400 [ 185.490579][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 185.496667][ T10] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 185.502575][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 185.507868][ T10] ? __kasan_check_write+0x18/0x20 [ 185.513077][ T10] ? __switch_to+0xc7b/0x1310 [ 185.517769][ T10] ? psi_group_change+0xb44/0x1130 [ 185.522896][ T10] ? __cfi___switch_to+0x10/0x10 [ 185.527847][ T10] ? _raw_spin_unlock+0x45/0x60 [ 185.532699][ T10] ? __switch_to_asm+0x3d/0x70 [ 185.537473][ T10] ? __schedule+0x1463/0x1f10 [ 185.542157][ T10] ? kick_pool+0xad/0x550 [ 185.546494][ T10] process_scheduled_works+0x7d2/0x1020 [ 185.552055][ T10] worker_thread+0xc58/0x1250 [ 185.556749][ T10] kthread+0x2ca/0x370 [ 185.560834][ T10] ? __cfi_worker_thread+0x10/0x10 [ 185.565955][ T10] ? __cfi_kthread+0x10/0x10 [ 185.570564][ T10] ret_from_fork+0x64/0xa0 [ 185.575001][ T10] ? __cfi_kthread+0x10/0x10 [ 185.579603][ T10] ret_from_fork_asm+0x1a/0x30 [ 185.584386][ T10] [ 185.587406][ T10] Modules linked in: [ 185.591320][ T10] CR2: 0000000000000098 [ 185.595475][ T10] ---[ end trace 0000000000000000 ]--- [ 185.600935][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 185.605974][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 185.625580][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 185.631663][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 185.639640][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 185.647620][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 185.655601][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 185.663581][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 185.671556][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 185.680489][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.687076][ T10] CR2: 0000000000000098 CR3: 000000011ffb0000 CR4: 00000000003526b0 [ 185.695052][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000a330 [ 185.703023][ T10] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 185.711012][ T10] Kernel panic - not syncing: Fatal exception [ 185.717335][ T10] Kernel Offset: disabled [ 185.721661][ T10] Rebooting in 86400 seconds..