last executing test programs: 43m59.348805613s ago: executing program 32 (id=2983): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 38m5.126415069s ago: executing program 33 (id=10188): ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) (async) r0 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x2, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) (async) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x81, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x87) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@loopback, 0x1d, r8}) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r9 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r7, 0x0, 0x0) (async) bind$inet6(r9, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 36m14.293013206s ago: executing program 34 (id=12943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "e3a1aab3ec4f20b89bacf892280348de1ccb3ed9ab23e68fcd8a75698d6c1c7a9a5f07f61792dfd5c63c61c65f15abfc42547e1fcda33a0f49b8b354df15be94e464276ebd69fc270c7d8aaded60c06ea4a15357904f5383aea8684d76b64598ca8cc41999f871826bd4381c49c0274c0f3a504204c84e33714ab83a4ab77b75bcda16cf91e84a914f637940d38322271c6a1d2bc848abb563504cfaa289beb12a89e85edded3a3b5d7c801166fc427f155c4f542cafdf4eb6fb5c1e4bbfc3548e75395932727aef4cbf93e4b29d0aa9f0b351e8c0492823181457b312d80c1fcf585c49bd48d00ec6a81db42d87ded10dcb5afe226daed6733457f374092f83d5465e501431e7b781c35249165189a035a1df732c99e4846b8144c98ab2569c903a3d3b0b85b94845e3b86aa7269086ee6054ee93ca5a1ed7f9a497ed2ae64f87f2d574c28c58ea8f545ab4af0000000000000000"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0xffff, 0x5, 0x8000000000000001, 0x1, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x4, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb000000004e2300010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r7, 0x0, 0x1000, 0x10, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 34m54.583204742s ago: executing program 35 (id=13996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, &(0x7f0000000180)) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x2, 0xb, 0x6109, 0xc2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x2c}}, 0x4014080) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x4}], 0x0, 0x0, 0x0}) 31m17.29879802s ago: executing program 36 (id=17386): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000500)) r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904"], 0x0) r5 = timerfd_create(0x0, 0x800) read(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000501, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x8) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000880400"]) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x234, 0x14, 0x4, 0x70bd2a, 0x25dfdbfc, {0xa, 0x7a}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "157bcade728318b8c2b1f18e2ec148b95c7d883cf9913100f3ce6e939ae7577b1510140acf40729fbb93573d625c7ed61dba0748424d3e22e8b9c50d241bcdf67024c6e2a0e6c2e31b0dc01bf57c8cff5d8346845347838f04c64f0192916c37ac800ba4bf5c5a6fad65942027ddb77b71be02025af01bc3c888789eab1348f4c2ca926cbcca6ac24d34eedbd28004117083314e74867863a9c83b6eaec2106912aff66e5bb18ce79ac9156641bc96f5af8fcc0570fb216f8e671c646d112d84ee801f2aa7da12831a65a3ddfa01a8475f41"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "a780f409a7eefd354d92b55270f7ce72d28898e709c8e6823087c9b365efaad6582f35eed2c630f767951a34902a7baa8c22e454c96f01439316d5404a855a84f42d72bdffe27e09ae1954721d7898dca7f7c653762e307054e212a55e61f1209e3915f57759b8420d90223397e87508fe23397b127c4372d08b4f3eebaa39773fd44728bf38d7536b27e30e62be42b12f0a4a9bd04fce3d674dc32d57dcf157f8dc72a95d4dc05b42984565a1d147b0f7aef12f4a23ae8e5655beecc38a8f42e9eed63d20b11b4fe74b2c09c29ffff1529b20b5ba1a2ccaf1a075e0d41923ade328eb2195a7ab1461847819a8b5450f9205a3e300e91c"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "2c4160e065c177c83044252a2432251679d6f897348123bf91bafd72343eabe24ac83be7e27f6b747529cbe32ede2134c7d17256735f474498494e2892b2ac7e4114b20966650571"}]}, 0x234}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) 23m49.150889656s ago: executing program 37 (id=25757): clock_getres(0x2, &(0x7f00000009c0)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000018010040"]) munmap(&(0x7f00003f9000/0xc00000)=nil, 0xc00000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x21c1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0xffffc000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000003c0)={0x20, 0x1, 0x1c, 0x0, 0x0, 0x40007, 0x0}) write$binfmt_script(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ustat(0x1, &(0x7f0000000000)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x3, 0x80a0000, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000080)=0x2, 0x12) 21m44.995832236s ago: executing program 38 (id=27915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000000)=0x10000, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="010000000326ece1e40aedbf46fbe0485f1220c7a36f1461ab0800d09b5d022ef7d047d3d7b5991312aceefdbb3d7fd46498b0523384e989991f90a4b00a7d3e08805feb71570bbe8e8f0a1f116cde58a5", @ANYRES32=r0, @ANYRES64, @ANYRESOCT=r4, @ANYRES16=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x5) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{}, {}, {}, {r5, 0x9008}], 0x4, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x12, 0x0, 0x1, [@typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}]}]}, 0x2c}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21m20.329157995s ago: executing program 39 (id=28376): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 18m40.699547674s ago: executing program 40 (id=31291): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100200000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 18m2.027366064s ago: executing program 41 (id=32028): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7c, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x8, 0x2, 0x8000000000000028}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/4096, 0x1000, 0x1, 0x34}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}], 0xf4, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d7f8aab8148a0e021b5cf4690a761ba221d9cad62f55b72d1cab58968c2622262686ff73fc360523550d5581e6a24ff82edccd904e73c7c5035897df6231f607bc72f6c44a939ccdde3838932c11f9204b5ab4c521fef3e563d7bee35d32b4ff89b01f43482f4763af54586a403ba254a0762fd67528e2799cda57a0ec142712a407a64511cca69ab02b23668beb1a6ddcc500587f785b2d2d7912f79df9f90d0d6a8d69d7e69b115643a923cd12734abab8a58836617e8d8e5e60000000000000000"}) 15m35.605359456s ago: executing program 42 (id=33515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000005c0), 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 13m3.487925092s ago: executing program 2 (id=35850): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x13, 0x6, @random="d85000a69b42"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "8000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000a80)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x0, 0x38, 0x22, {0x22, 0x10, "555ab19d5bbad3fdb1483debf60e3556b9a7dd87e7df8ecd2f9dcd2b6b32d590"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x11, 0x47, "2aa5e79c0abf304f81cf59d64f4baca0c513eb160791621a77bd08124fb8652dd9226965fe5fe4a730a34a328d5ead5c493b28d17c27720feb7ae47f19d57af2cbc9b4f8c92de0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380), &(0x7f00000003c0)={0x40, 0x5, 0x5, "b7cf03bf78"}}) 13m2.890468254s ago: executing program 2 (id=35860): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x32, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000015}, 0x200000b0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x91, 0x1}, {0x5, 0xe}, 0x5, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x8040, &(0x7f0000000000)=ANY=[]) 13m2.828969195s ago: executing program 2 (id=35861): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') r1 = socket(0x1f, 0x3, 0x2) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0xffff0001) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) lseek(r4, 0x49bf, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000200)=@md5={0x1, "948b43fab6bf586447be5dbd4213b817"}, 0x11, 0x0) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x39, 0xd, 0x1, 0xfffffffc}, {0xf, 0x9, 0x7, 0x1}, {0x0, 0x8, 0xf9, 0x1}]}, 0x10) 13m2.828262475s ago: executing program 2 (id=35862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x8000001a}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000000c0)={0x3, 0x0, [{0xb8b80fb146c2df6c, 0x5, 0x3, 0xc9d, 0x0, 0x10001, 0xa}, {0x0, 0x7, 0x6, 0xd, 0x10, 0x5bda, 0xd38}, {0x80000007, 0xc, 0x2, 0x4, 0x0, 0x6}]}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x0, [0x7, 0x7, 0xeaaa]}, &(0x7f0000000600)=0x44) close_range(r0, 0xffffffffffffffff, 0x0) 13m2.819521645s ago: executing program 2 (id=35863): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x400) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r1, 0xb05, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7c8, 0x69}}}}, [@NL80211_ATTR_IE={0x67, 0x2a, [@random={0xf0, 0x26, "e3bf99b8120adfe2411c06b48459485f5b27bda46228d983e852232542cdcc46ded154751972"}, @preq={0x82, 0x25, {{0x1, 0x1, 0x1}, 0x8, 0x1d, 0x1, @device_a, 0x9, @void, 0xfffffffd, 0xfffffff9, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x7f}]}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20000001) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc110}, 0xc0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x17c, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f259418ab48e9a78"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e04a73a60a7f4736327a62e0742cf0b3"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="04717daf7878283a580be7c924facd52"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="884c07f20449591c5f0c15db02e7bd199ef7272abe603e54"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d0c361a2493a5b2346c3c2ba8adc02befdc79b00c4015186"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3c8270d2269a210114eadf8253d21cb1f97e24ff1993bcfc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fc04d0a20657eb10ab5693c34280b14eef1ee282af2336c5491dc64a0f21b3dc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="34ba7c7d2953e71a71e433559d530faeeb884c573e702242"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a10037758de346cb1adc904053522752ec9d8bf3eb16762f92f0b6e061eeacdf"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2a950b6da7ada72ebf7f72c5a4fc2a2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3af2fb5d5b895b16b6927056b4a2bca7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3d254e2670fa268b"}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000004) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040c0}, 0x800) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x202, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}}, 0x64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r9, 0x709, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x71}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x8815}, 0x20040004) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) write$P9_RSYMLINK(r7, &(0x7f0000000e40)={0x14, 0x11, 0x1, {0x1, 0x1}}, 0x14) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r11 = socket(0x25, 0x4, 0x1) sendmsg(r3, &(0x7f0000002680)={&(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e23, @empty}, 0x1, 0x4, 0x1, 0x5}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001000)="561d2c109e3ee22f11fb520215d5df015ed19749b5cbc50ce2c3b48a6387664f6fc356f35f8deb78c2fb303814198a9ba055c47479ce8217bd560b259392a678c21ab4f87f9bb5d4695135ba2267bf9e067332b0811468c9534f57d7cabc14d0a4199e73271943f8295c0f254d6562e64e7e75c0c9c509cacc0b8d4e09dea1922ec4b96209d09be0e849ef9ed8c8b63f17e2aa601d880cd79fc3", 0x9a}, {&(0x7f00000010c0)="831d41ae55f299afd33bfeb3689bdf87be3481cbd4aad045529bda0bb27526d6d585e672fae703394879efb82858a252726ffccc2859d82f388533536d80b751b607ce023ed7a746dbf5757ced11f27585a1251662766f0bb460f532432a70d42b799e662b46819416a3b494e2597233a53ae7e5a59463f6f75906effa2065d4995d01144500c88fca0a6b1f877f5748b06cbc9da6a4aa7762e3cb6be02b71e4a92b3bb2a6e451e22421a081fec9c5b4358367dfd0932e5342d23afe2331d9b78101a4fd2fb4685028", 0xc9}, {&(0x7f00000011c0)="b9f0e1f36ef52f48a1591b48c79a9e28082f3e51be9cb311406266540b31a3fcc3ebdc14abf04534d3823a166cf02650a8430d", 0x33}, {&(0x7f0000001200)="bfaa5030b4113ce5ef072d94cf94fca5cfd437d481aed26c8880d43db892fb2937f3314fff9d38b1222f4aacb27a7c0148c4a6626962462f97fcc9c88cc1217890aa2cdb270e242febf5e6b05f3eb2aa27afa0c59dbf915a614430488a3f4af06ffc7bda9e8ec69288c05cf32dfc82f069af93160fe53479a20c0e8d9e285acb586ca1", 0x83}, {&(0x7f00000012c0)="e20d44b1b3089d314ccaa59b4ccc2236e58247d8daad5e0f66ba3957e7c3d7509b6e1e9e4926ab484be2340ed2077e759b6bfc1154dc9700dbcfd9840ce0326d3571e435512647af96835f75947869341534c148e74453685abe64f39e94b9a934405d9a59404458dc593c08d6b5dc34d722effa08e97f6fbb23b25fe8cc02d6cc415a788563667510fe8932dd00b1c87906383f5f055f8ba9cd4ae872aafc9bf2cb96e48ffa8b1ef4e278b668f219c5a6027d2ebd99b5901c0f2f0c7d096b39fd2617e0eb68a05478619073558df9af1bfcceaff0cb7ae35cf3587da13a74", 0xdf}, {&(0x7f00000013c0)="0dc9df0fd04973ccbc43a74c1ff029a19d3a3682ca038168626396974f585f2331cb64b0e01198569881c67969d9651560b2326b5954391acde472f312fe2b5afe34eacc22e4b18bd19cce57cf8cb091a061c8bafbd6c1e9495f54539b94194f00df6ac70f3c3bc2b57e186fd729c63c61de56b6fae00c9897a4755d07343e805448c73f8c04d5175b0a97480b1b8d", 0x8f}], 0x6, &(0x7f0000001500)=[{0x10, 0x101, 0x7fff}, {0x38, 0x101, 0x9, "0383f2161f44a906407da95f1ae776b5fbb8e64550d9a7fe39f23040f8ce80d816eb"}, {0xd0, 0x11, 0xfffff800, "a8f4b819cf4724f74aff41199aad61806143038fb81fd82a2477c024f9b9ffd8370be0a3099e36950b04fb43bf6077892bc7905223e846dd830fe20798a1cc73abc0ee92a7e958a24cd1e7e6e8fd4705ca2d09c5fff99687f620fb93f07202892801c45ded888d09500b466391a90cfe61c96da90fb3a3588d9f2e7d750b6dd520884c766ce5951e3852fc55f6b67dc62a98dc766338d00dbb5b0e6d09ef6a08942e56b8ba4fb9370bed15e6f4e847abb133e4719893edb68659"}, {0x1010, 0x112, 0x1, "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"}, {0x58, 0x88, 0x5, "b57a793d831ff27219c12034ac7ea9efa97dc896e7e11a61d2d1db429354c98bf918baacaf1130ea63afede47e18912ea4a1b1ae8985e5ce3524df6ad47131ee6ee68e"}], 0x1180}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f00000026c0), r8) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002740), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x40, r12, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x88811}, 0xc010) 13m2.774299426s ago: executing program 2 (id=35864): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x28}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x113802, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x27) ioctl$TCXONC(r2, 0x540a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13m2.745114397s ago: executing program 43 (id=35864): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x28}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x113802, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x27) ioctl$TCXONC(r2, 0x540a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11m59.553392302s ago: executing program 5 (id=36779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async, rerun: 32) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x11) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (rerun: 64) fstat(r3, 0x0) (async) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) cachestat(r1, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x2050, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async, rerun: 32) r4 = userfaultfd(0x1) (rerun: 32) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000000000/0x4000)=nil, 0x4000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 11m59.348958166s ago: executing program 5 (id=36780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) 11m59.307257867s ago: executing program 5 (id=36781): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r2, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x9}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x25a7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x458}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3ff}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x19c, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xbd, 0x61}}, @mesh_chsw={0x76, 0x6, {0xe0, 0x0, 0x3c, 0x3}}, @mic={0x8c, 0x10, {0x420, "d707fcfdd028", @short="b28eb891222e491b"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x5d}, 0xe, 0xc, @device_a, 0x6c, 0x69aa, 0x10001}}, @fast_bss_trans={0x37, 0x127, {0xff, 0x9, "1c02ca7a312fae916e8cb2c5a78c5e0e", "9627bf3a3370094051e054241ea6e0f3acd6843cf3b10f754965f9e493452025", "44356a9161bba7cedae6419adda477d94aa002efcef99619c6c9d8e985d60b0c", [{0x1, 0x26, "d03b5031876cee8cb77fd40b4d8cbe0bc1b01e970af1f83889a760dff4498ae35ec33fdcc8fb"}, {0x3, 0x10, "b161f844283fa3a637c680aa4acb1e93"}, {0x87, 0xf, "bda81575cd9c5cab70aacb40bbfe03"}, {0x3, 0x14, "e3f5e3f9368d98c0145208208dec8cf3167c3d62"}, {0x3, 0x1d, "ab4eb2805ad5cafc64b63ec470c9eedd2ba581fb32d87cf6870cc4b7a7"}, {0x1, 0xd, "a2a17006ab7a0bd9a36323f43c"}, {0x1, 0xc, "0deac84361d9714c1a569a5a"}, {0x1, 0x10, "f486b34f6657fdba4cbf75d5bb65d027"}, {0x3, 0x24, "4d0de3410b59591df132fe8ac911fef0e58620ca6ad2e9281a47f06dbeb9b6a2b2bce4d2"}]}}, @ibss={0x6, 0x2, 0x1000}, @mic={0x8c, 0x18, {0x9f6, "71458ab7f34a", @long="b254b9c5c587d5f5db01592103ab7a31"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x8, 0x4}}]}]}, 0x268}}, 0x24040801) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r2, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x9}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x25a7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x458}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3ff}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x19c, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xbd, 0x61}}, @mesh_chsw={0x76, 0x6, {0xe0, 0x0, 0x3c, 0x3}}, @mic={0x8c, 0x10, {0x420, "d707fcfdd028", @short="b28eb891222e491b"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x5d}, 0xe, 0xc, @device_a, 0x6c, 0x69aa, 0x10001}}, @fast_bss_trans={0x37, 0x127, {0xff, 0x9, "1c02ca7a312fae916e8cb2c5a78c5e0e", "9627bf3a3370094051e054241ea6e0f3acd6843cf3b10f754965f9e493452025", "44356a9161bba7cedae6419adda477d94aa002efcef99619c6c9d8e985d60b0c", [{0x1, 0x26, "d03b5031876cee8cb77fd40b4d8cbe0bc1b01e970af1f83889a760dff4498ae35ec33fdcc8fb"}, {0x3, 0x10, "b161f844283fa3a637c680aa4acb1e93"}, {0x87, 0xf, "bda81575cd9c5cab70aacb40bbfe03"}, {0x3, 0x14, "e3f5e3f9368d98c0145208208dec8cf3167c3d62"}, {0x3, 0x1d, "ab4eb2805ad5cafc64b63ec470c9eedd2ba581fb32d87cf6870cc4b7a7"}, {0x1, 0xd, "a2a17006ab7a0bd9a36323f43c"}, {0x1, 0xc, "0deac84361d9714c1a569a5a"}, {0x1, 0x10, "f486b34f6657fdba4cbf75d5bb65d027"}, {0x3, 0x24, "4d0de3410b59591df132fe8ac911fef0e58620ca6ad2e9281a47f06dbeb9b6a2b2bce4d2"}]}}, @ibss={0x6, 0x2, 0x1000}, @mic={0x8c, 0x18, {0x9f6, "71458ab7f34a", @long="b254b9c5c587d5f5db01592103ab7a31"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x8, 0x4}}]}]}, 0x268}}, 0x24040801) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f00000003c0)=""/68, 0x1220000, 0x1400, 0x4a}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f00000003c0)=""/68, 0x1220000, 0x1400, 0x4a}, 0x20) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000001480)={&(0x7f0000000480)=""/4096, 0x208000, 0x800, 0x5, 0x3}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x110, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0xe9f}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xca}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x24004844) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x110, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0xe9f}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0xca}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x24004844) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000001740)={0x2c, 0x8, r5, 0x35, r3}, 0x10) (async) bind$xdp(r3, &(0x7f0000001740)={0x2c, 0x8, r5, 0x35, r3}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000019c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001800)={0x16c, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8167}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff3ad}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x10008854) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000019c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001800)={0x16c, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8167}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff3ad}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x10008854) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001a00), 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000001a40)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000001a80)=0x100024, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000001a80)=0x100024, 0x4) r7 = open_tree(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x9000) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000001b00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, 0x4, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x9e798af1db94b449) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001c40)={0x1, 0x9, 0x1, 0x9, 0x9}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001c80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000001e80)={{}, r9, 0x1e, @unused=[0x6, 0x7, 0x0, 0x10001], @name="c97280ff122d8c2790efbcad7af5acb3822bef3c67fa5b21a30f5707e2652f4b1eec6606beef1f813a4870d6dd528cf1b0384af22841dea33128d637d776b27870733466933e3a00564ea12c10fadd26ab0722ac0c25a735e79cdb21c14f5d3eb15b184167fbdd1bad5cd5f7507a6a9edcfee1542c613ee7e7ace1257b93481c691ffeab34612064948c8e89a52943516fb0e8a9cdf6b43304a54b55dd4aa416c479def4475989f330f7bdc6020c8c08ac8ff4233eaf9d1ff9f9d0debaefbe02d13977438c7f2ca7f1f72ea311e92d2980e174cd64e81d36bfe4c5c39229b4cd81b69ff646a95da8cfa6deed944fdc06be6ff440deba8397036d816f3cbf518744cd6da39fce701895a6c71f498efa0dc5bb16eafb8326c56aed5e0ac213e64032f3a0d51215f232dea9d7d1f01104659ea8ad2aa2cfd0601a991038c72f74bbcf0fd4dad530f913c22e1b19d1fe8e6de8e0e7dd45aecd9e4b4a0ed3329e9e6fbb66ceaf57fc6149dabba571a7aeacacdc0939785c500f9a22917aa2f80bd5885d872fb83283f828e65257937d7fd4390eea42975ee9b5ec261caa0c7b47e1f36c734be4644a779a7254fdfda8254f56e4bd9a30e243f9b0e655bb82523b249260774de58e4aaca7ca0e76cfd28072a1bb7ef48e16437651ebc2b8550329bf740a6ff5666d0c72e241ba947dda7263f5c0e6db33dd06da9cfa779b463b0862059326ad44d2a8f6ca96c743922636d6229c52d706078a199bacacf80c87f63bf87260a9f16fdc9d4eefb5cd038e38b0ca58eddc80938f6ec33d0a8f046de6b26359e5865af92801e864d6fd7f339e3c4cd643e8b1270debb1399561ac4eb3af57df69dffa0bd1d65e8d08f888c9de52209aaba336aab31d055932c388d7d6f9cb994310f7677cd249e2926857f584fd86c0a87957f910272951bd8a2e092ff845ac4251d6d598e90c3ac849bb07586e8cfb8e2058090c805e374e76be4c066401b1fdff012bc05ea60cbc4c0cfcbcda019142cb7946cc319454ab33f1631b9cdcc1b92a28f036a70add7a4b5e7f477a2e24f319c35c224076888c0f71c77e89276f9eda228c67f90b94b83e9e53c8100e958749ecf36fc7efc366a6fe82e539a75b1495638634320b93db4f0af6b420bcd9e72d0eda8d125c33b5785f2c43063180f8e3222af1373e691cf824544aed71d24d2664147cc00455e5453a3f8425811a43e6877f9826815800b5aa3b49c07513f654db7e3196404beb12bb9bb01f85143a81b54b9ce6fcae3004b399db3b9774466db2c738dcece3f2cb2f86693fcc9695834f87f224e9586cd65b2d989ce12594209685a2363556489b7b59a5c72af3ca3e78546a555a1addbf1e6df9b3400aeb755b523b5a8038865f4517d2453788c0fafefd3ef518e6ab3eb0713855aac704508812a522ce278786c7a6613be7a270d77e0ed4bcb2cb868ab89717d46de509cfbd668517e0604f3a90d9775b7086e26cd736a01791fe3936797ef586f4254fa2aca7fc851ecd4b305333b5292a2bcf4e9b1a4c6f5316c73253d28f38c6185b2bc028048e32b50463332cb64f80977f91f80c0a4756cc99786c7115a6c2d3f14aee129933d22d510d3ca1764233d5bce8c3b71b8086f618eea0f34c7a7872f0bb1544b96023073e35719a4b3e957cfaa066dbc82140c2e171fecdc3b6160f7e46aa5c73a45d7fb918250fddf07c4a058e2b685b01c43d4fd16459acc662d59600e82b7270ae8dde6596f566c54c841be3ddd824853c13a0dd54ca155806e00117f40e246847d671da48e06a7d01ed18da2621fbb15d9670438d2014ee3775c2c8e08a8e32f3004244d7befb19866be40afa7dc42c239dac5b364db379ecb2525cb3a468346c3d312b9a951bd148ad507893e24e07629818aab09baee44e1d4592aabd5ac3f8e02639fad15bb7a865f27db727220f22eaf3a3b6fc3cc5e508e16c8568d4fa0abd7397fa51aabc02d66955d02245a4c6ad7d5b04f1c1321c1b03cbc250ca77b33b6f781be4fa7efa705513e5067bf7c940ff6289bc87bd11e2a25eb4e39bcd7625081bb083f344d05af606c54383f4fc5e3464546ecf5203739ee00c5dff9c4caf4f0a6d147931da9d564b4b85116e1fdf9192fe7130fe3992f1ceaa16b411682eded064bd09e1ee9b63519fe6320ec1b3accd07e07d4ba2950daf60c9573108a631eb9c33e73ee101b43a1d4be0e94dd0c060b2d1723c2472e0405d36d74564aafcf2730992eb01acad5059f29a801b177be19dd2eac6984cfed88a39051c2eea1fdf5012d79586bff4c3a07e7a0d8f7e6bded011a6c99db134afe33d3f026f7225837c2e58ad4bc774b8a2258065f844f4ed16f0d89ee2517915fccda7647112ded18fb91beb5eec699fe50fc01d8e7b6ec24aab1cc196569b163cea94adaccea4338e400c085491749b6bbe2af29a0f9e758cc529b618c2a4e5195f7755224d6c7105cab10327c05b629827de8592659ef0feb98ef2a3cb596b8f04e535765d15022c4ab0c67a333258a97337f4d44a9fdc9d27731ff16ce10eae128a908e7accd2dce4d0fa96a8233817bbca1b6e5877964549f94a1477019d668fbb8e762b3556551896bec03f55bd1881bb1359058850bc896199cb03c4a15e7e5ae1568cf1c4c20750ecb3b12724f986eb63b39f2dad0065000e0b4887d44e2fb16e0ed1c3429dcc2a2d3481bc2f2ca86963a01cce5bd12fa7445f9e24285d0b59eca32a708e8231c1214b32ca0cf84ad40afd8abc8f6d3d9e6a09a47f145c3fd3b9feb5b56894a562c42688d4533e5ef9b798a0715a2fcb06f11035fdfa043fb935b00ea799c636812b8d811775085e033d039fa87063c7fdcd1e2b8b1eb3629f92c101ddb9d4f9378962f9de3e720bfcaf7675c09fbfb407c2a91d92e73c4541ad1adc655060916b447ae872a752310787eec3df2041ac36d36d35883096165716cbbd62e4aabf7ad3e86ac24c2277feda6e07bd34c88616cf51b20d00d3cc92244237d5ec0ec56a4f342f546388918d1c950359f9a43f52f381c06087ed51b7f309e58acae0e7a4e10fbf83a4202e19fe3ece3175130f094e9f14c2196604eecd0d9c0e4264641ba9f10cee7e1af88b75041f0c0e616df75a6d4a0a5445fe6702f41c6a0da144d32429fd672093d74c6237699386793a6e00765b38b8907d616929bd24ee89887851b985eea01f84a5b17aa4fbbd899ed4637d06971342b0c27550e271382a7eb35cb987ca702d73802e0d2fc32865f1bacddffe101b2806b9a97e1aa94edfcbbc5b531db9fda66738dcbcb951f2158a4784061ecd8b06c98729d45b34e5ebf2af5e94c9972058749bea7b6aad619d39b11e9f41d6525108ad7438830aea7e794c9103830bb7740ac1676ee214731382e55cbc153e027613211b9761d636dd743ae99ba5f87743b76d254b807bd013da32b858115ce934dcbd8f297425868daacec98ef5d2da9a211847d295edcacbc6fde7acb5ae4dfd75d9e202f5e3ce15b159aa0b956e04db30611ba222ca6a72a153de6db0d2b64f44455a33fbac3152a468a382328b6560f9e10186f819f51e31ccd7f0ddad4bab797148dceb337eee4abf20954813905e17bac0ff0c72de75c8e8bc00389b27af002c7ee3c39758cec8b6e156b3514f7922be5149ef75d81ae5bccc915018be3d5f9de8ea6352182897b6d4051e94d5ea09068bc87dcb97ace9c0ce8a1fe74a82f7065ceb5924815ad5c214187e80485e4eb824eaf822c99e853bf5af956a47fdb5b8dc43d43274057fc65f452fbc90347d9a10de768217e21448a71e24d68f8d9bce39e3ae65268f8eae1b231b5d7f6132b62c97e6a8ed0da4791f7c9bf5a5a72d465a7fa881fb9036153117011936df8a916fe65bef870e68a4db6b6b1d5b5693246a002cedab521683629df055f2e5684384286570c0415bf307b7444bf1694fc7ee9e953a7e5939dabde4de5cc74437ee7567e8f994ebe6a52d6aa09d598ec619afdc6919142249ed11ba68582efefc6264e8774911923cc82c3c8f6be1cddb8ce80e6edeff61923775527ff03743e211178de621dbb7fdfb34db9d31d785ad7f566e39b5f51660457a56549014be0225148caf81897314a3a2122899a94f17f8363e934702955be18e13699210af3691759595c648fe4c03cd7e13bbc359bba66e6b135b6d099273dc70b5442e03298549a39110036041ad4d5dfa6eaf880ea7efafa1d1276759357ca2875369b06894b53c931b957e7692d24655048f4900a628d0bc92ccfc48513f8064e36013c4b870eb7cfd008584cfdc73fad989cea3f86cf94eecfe6a0f2581fc891ee61382979a848b5f054456208773922c593c1e1af16b4ab60f464591b0c3d8a5788aefe1bbd2a7d48bb575275bc28c1fa8734456966095a89cb6fae04a5fc7f4ccdbaedd12e02863fc302d6a2753ffcb9cb1b42bed02c0640f26771d907cef2d90ee406d7e63e0182bbefe1c46b3f17c3f15eb8108d723074f5129f5fa55647813cc0d694126b46c61e8512873df2b27d0704c1e7cd9e7aeefdfb42109eb13e8a5cc60466feb37ab0857ca60fdfc5800c725098671a3c7126ad82256c5cbdd43cdfe403391e8d26b6fada24fe4110dcf501e6844d88a6f08201444d6d80103e6380ce311859e53d374e145f0706356f370fce1fd9c1f51a28d8f33a0f2f8d1793abb85cf8f53a13bf9a2e42ea21df22fc5145adc17420587f03b5a8837898cc80be4cd8d004c5ad2c477ea20fc1ce034fc0baf5ae2e8bf5226a239d8c54c177f0411b6c87ffcd056e9f7a902978eaab95e1ca29c7ba71aa6bd350beb4f06b0c60fd3a02a92d5fc5550f6cba488311948bc5708ef4ae87cf43a74ac10d6ae0b207a3c78506a7f21359a8c19553289c14645ee58f678b004b3cdf420c77af2d0636ab28163ac62fac265ecdae8fda71deb6e534cb7b4a9a02cc1699c44b6518c6cbeca4b1e12212451867f7cc569ee658792e5f67672252fd500cb8f31624da41e7e86b0ddd96e50b7066d181255ebbcc640f4b3527d98fac1dd0654226125a884f699812ba12d2f5403ce3c81fded6781014963757f3025c9a353d860d12a705be02ea90f19aa5e9b0566ce2ccf8d8d1b120c8bf65ebddf27cf0dc92aa060ff4147c0c41f465ee6c0d8ab71154cbf26a04ea70923c1cde8cfc0f91d2bff21ad91cce1b43c20070720ea1456935ee13209032ded9195dd8c0b9b95877b6861d792d3ac39c4c2f1bc08aab09b07d263cdb494bf930fb0ff28bdeb956c63b4fa7e8d21f3cb6bd6a01300e4fb5e481b79be6c141fde6e666dc60ae9dc0a6b65ecd4add9afc0ca1a95c1ccebc085e3f7a8cdcc82aa4c54f5362974a2af75761acd667853a04e389c269191be51f402108d75758ecaa52cb6c11c4097bb8f21fd68d46193a03a223db4440318a866511eb92670aa0020f3ce68409a2d2525024ddb30347f417df45d529b947645a2bc72dff9c17a4973829a88b27eb04a3da62dd274c528f51d1094b191530814fd398ef753703d29bd603f9701734f0c4b640d1e39605cd47798776309e272a527c049f15172a627bdcb7e268ef85c449c8e1ceaaa3eeed0bbeedeefb0518285b583984995d39d82071bad8144e2abe3896053e9e3d2c54b87120b815512b5959804f25fb3ddaac3904713f046d136efe6ad4fcb40ce40b449714462"}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000002e80), &(0x7f0000002ec0), 0x2, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000002f00), r7) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002f40)={r8, 0x200}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002f40)={r8, 0x200}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003f80), r1) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x24, r10, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4cb0}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) fstat(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000004080)='./file0\x00', &(0x7f00000040c0), 0x2010040, &(0x7f0000004180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r11}}, {@fscache}, {@cache_loose}, {@access_any}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000004080)='./file0\x00', &(0x7f00000040c0), 0x2010040, &(0x7f0000004180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r11}}, {@fscache}, {@cache_loose}, {@access_any}], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) 11m59.262059968s ago: executing program 5 (id=36782): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x20000844) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11m58.074697402s ago: executing program 5 (id=36791): unshare(0x28000600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 11m58.024549513s ago: executing program 5 (id=36794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) rt_sigqueueinfo(0x0, 0x8, &(0x7f0000001340)={0x41, 0x1, 0xc02}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1a81}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000580)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000013c0)=""/4096, 0x1000, 0x4, 0x8, 0x6, 0xfc4, 0xaf6}}, 0x120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x50, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 11m41.972770292s ago: executing program 44 (id=36794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) rt_sigqueueinfo(0x0, 0x8, &(0x7f0000001340)={0x41, 0x1, 0xc02}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1a81}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000580)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000013c0)=""/4096, 0x1000, 0x4, 0x8, 0x6, 0xfc4, 0xaf6}}, 0x120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x50, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 10m33.068790691s ago: executing program 4 (id=37882): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0, 0x0}) r3 = syz_open_procfs$userns(r2, &(0x7f00000003c0)) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r6, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r6, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r4, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xc0, 0xd) (async) r9 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc0, 0xd) statx(r8, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000002980)={0x2020}, 0x2020) (async) read$FUSE(r11, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) r15 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_ENTRY(r15, &(0x7f00000002c0)={0x90, 0x0, r12, {0x6, 0x1, 0x6, 0xfffffffffffffffa, 0x1, 0x8, {0x2, 0xfffffffffffffff6, 0xfffffffffffffffa, 0xdf23, 0x406, 0xffffffffffffffc0, 0x3, 0x8, 0x3, 0x6000, 0x6, r13, r14, 0xffffff05, 0x4}}}, 0x90) fchownat(r9, &(0x7f0000000040)='.\x00', r10, r14, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000600)=[@enter_looper, @decrefs], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f7cf44d476fa4d69887ad7b73ec4b8475b312ee27f07411c59fbffc81"}) 10m33.056384061s ago: executing program 4 (id=37883): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x83, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x101, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x8, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0x0, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffe, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x120001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x20000844) getegid() r5 = creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) socket$unix(0x1, 0x1, 0x0) setresgid(0x0, 0x0, 0xee01) stat(&(0x7f0000000a00)='./file0\x00', 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x0, 0x3, 0x6, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xa0a, 0xfff, 0x0, 0x180, 0x62, 0x14, 0x9, 0x0, 0x7ffffffffffde, 0x5, 0x5, 0x6, 0x800, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) 10m32.980421873s ago: executing program 4 (id=37884): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000021009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) 10m32.837039505s ago: executing program 4 (id=37885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) getgroups(0x2, &(0x7f0000000180)=[0xee01, 0xee01]) lchown(&(0x7f0000000100)='./file0\x00', r1, r2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) (async) setresuid(r1, r1, 0x0) (async) getgroups(0x2, &(0x7f0000000180)=[0xee01, 0xee01]) (async) lchown(&(0x7f0000000100)='./file0\x00', r1, r2) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) (async) 10m32.836604685s ago: executing program 4 (id=37886): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0xc, &(0x7f0000000200)=""/210, &(0x7f0000000180)=0xd2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = pidfd_getfd(r1, r1, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000080)={0xfffffff9, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x34}}}, 0x88) getpid() (async) syz_pidfd_open(r0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) getsockopt$netlink(r2, 0x10e, 0xc, &(0x7f0000000200)=""/210, &(0x7f0000000180)=0xd2) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) pidfd_getfd(r1, r1, 0x0) (async) setns(r3, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000080)={0xfffffff9, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x34}}}, 0x88) (async) 10m32.759724667s ago: executing program 4 (id=37887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x25) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x400000, &(0x7f00000002c0)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100000000090400000103000000092100000001220700090581030000000000d49641480cecfdaddb0533478f9281d26255d72c68a5a7ae7f6726c51a69af11ae4b1842bb34b7144ae1b6410ca1c3e3575af72ac483ce0ead5236eedbe34074599e3bea984d48bcc83a298eb40656f0aa3fc72cdf7d21f056c34e8a302ba753acd4f3d4783f463c475942c8ade7f91322dfe674c513ee21de7499e260d052a5a7c1236b77bdb8cd3c59d6f6ec82996b847f8e8232342ba3c3ce833e37446a2126438f"], 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) mlockall(0x7) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.log\x00', 0x400000, 0x1b0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000580)) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3}) (async) io_setup(0x101, &(0x7f0000000a00)) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (rerun: 32) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) listen(0xffffffffffffffff, 0x3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) (async, rerun: 32) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (rerun: 32) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0x7, 0x6, 0x8, 0x0, 0x6}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xf, 0x2}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, '_X'}, 0x0, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xa}}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 10m32.732543708s ago: executing program 45 (id=37887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x25) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x400000, &(0x7f00000002c0)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100000000090400000103000000092100000001220700090581030000000000d49641480cecfdaddb0533478f9281d26255d72c68a5a7ae7f6726c51a69af11ae4b1842bb34b7144ae1b6410ca1c3e3575af72ac483ce0ead5236eedbe34074599e3bea984d48bcc83a298eb40656f0aa3fc72cdf7d21f056c34e8a302ba753acd4f3d4783f463c475942c8ade7f91322dfe674c513ee21de7499e260d052a5a7c1236b77bdb8cd3c59d6f6ec82996b847f8e8232342ba3c3ce833e37446a2126438f"], 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) mlockall(0x7) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.log\x00', 0x400000, 0x1b0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000580)) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3}) (async) io_setup(0x101, &(0x7f0000000a00)) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (rerun: 32) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) listen(0xffffffffffffffff, 0x3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) (async, rerun: 32) connect$bt_l2cap(r4, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (rerun: 32) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0x7, 0x6, 0x8, 0x0, 0x6}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xf, 0x2}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, '_X'}, 0x0, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xa}}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 8m5.761718007s ago: executing program 6 (id=40281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$snapshot(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f20c06635000000200f22c0660f388113ba4000ed640f01c1baa100ec670f3566b95d08000066b8def0000066ba000000000f30660f3a627d10180f01dc0f187e00", 0x42}], 0x1, 0x18, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m5.726560468s ago: executing program 6 (id=40282): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r1, 0xffffffffffffffff, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000000c0)={0x0, 0x100000001}) pidfd_getfd(r4, r0, 0x0) 8m5.62901247s ago: executing program 6 (id=40285): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000002400070dfeffffff0000000001545f"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x12a3, 0x1c1902) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0xffffffffffff45a7, 0x2, 0x3, 0xfff}) rt_sigqueueinfo(0xffffffffffffffff, 0x3b, &(0x7f00000000c0)={0x5, 0x9, 0xfffffff8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x400, @local}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 8m5.62813758s ago: executing program 6 (id=40287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0xff) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000001880)="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", 0x337}], 0x1}}], 0x1, 0x4004050) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x7, 0x1fbf, 0x0, 0x8, 0xb, "2b6abdd68f6757129a56a1cb970e1732e181e9"}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)='\b', 0x48, 0x800, &(0x7f0000000200)={0x11, 0xd, r5, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x3}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x518) 8m5.496436033s ago: executing program 6 (id=40291): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="a25e517a0ba797cd49921a2bf3c4d9fbff027d4d71ae80d99867b3740698be4b94d3b5", 0x23}], 0x1, 0x0, 0x0, 0x44000}}], 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) socket$key(0xf, 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 8m5.330157946s ago: executing program 6 (id=40292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x10ffd, 0x80000) capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) r5 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x1, r5}) unlink(&(0x7f0000000000)='./file0\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="143d9edffc4fa1e6c759f69583cdb524000000", @ANYRES16=r4, @ANYBLOB="01072cbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) dup2(r1, r2) close_range(r0, 0xffffffffffffffff, 0x0) 8m5.296532587s ago: executing program 46 (id=40292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x10ffd, 0x80000) capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) r5 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x1, r5}) unlink(&(0x7f0000000000)='./file0\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="143d9edffc4fa1e6c759f69583cdb524000000", @ANYRES16=r4, @ANYBLOB="01072cbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) dup2(r1, r2) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.242875917s ago: executing program 9 (id=43397): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@multicast2, 0x1, 0x0, 0x60, 0x0, [{@private}, {@initdev}, {@loopback}, {@remote}, {@initdev}, {@initdev}]}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x464, 0x400, 0x70bd2a, 0x25dfdbff, "077e280d3b5140b9d9d80e8a5a492c795ce50036d97633207911d8e086e39ce2bef4cde0c9331a12b36aaca0d82a15b4c28c33f5fa5700e9db5d478a1292adcc7512c318af", ["", "", "", "", "", "", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x400d0) ioctl$FIONCLEX(r1, 0x5450) (async) ioctl$FIONCLEX(r1, 0x5450) socketpair(0x27, 0x1, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x48000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088}, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7af}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x20004004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'geneve1\x00', 0x1000}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x3, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000840), 0x400000, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000880)={0xe07, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000880)={0xe07, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r8 = accept(r1, &(0x7f0000015940)=@hci, &(0x7f00000159c0)=0x80) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000015a00)=@fragment={0x5c, 0x0, 0x3, 0x1, 0x0, 0x0, 0x65}, 0x8) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000015a40)) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000015ac0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000015ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000015b00)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000015b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000015bc0)={&(0x7f0000015a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000015b80)={&(0x7f0000015b40)={0x28, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x5f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x1) (async) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000015bc0)={&(0x7f0000015a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000015b80)={&(0x7f0000015b40)={0x28, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x5f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffffffff6) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000015c40), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000015c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000015c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000015d80)={&(0x7f0000015c00)={0x10, 0x0, 0x0, 0x80610008}, 0xc, &(0x7f0000015d40)={&(0x7f0000015cc0)={0x50, r12, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xd94}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7715630b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4001f) 4m27.237161977s ago: executing program 9 (id=43399): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet(0x2, 0x2, 0x1) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/125, 0x7d}], 0x1) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) ftruncate(r6, 0x2000009) (async) sendfile(r5, r6, 0x0, 0xa26) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x16, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000}, 0x10) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000000000)=0x5, 0x4) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x8001, 0x9, 0xfffffffffffff572, 0xf, 0x432, 0x24000, 0xa2cf, 0x9441, 0x2b, 0x5d25, 0x0, 0x7, 0x0, 0xffffffffffffffff], 0xffff1000, 0x10000}) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) (async) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172c801b0fb99c189c40b54508934a914fc837355d7d86b5c9660c42034c90001180349f0984086644cc9b69b4f10813e01b35346b2f08400416a6167ec3b577ae3fca5fa2e21bdcdd57a56a7f3ec43ecc2d9638bc2913008fd266d3cba6da35dcb5010e352b29ec1b50b41c29b2cbea62d3caee292fb62b267e02922d2412a63c9"], 0xf0, 0x1}}], 0x1, 0x44015) (async, rerun: 32) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) 4m27.202440107s ago: executing program 9 (id=43400): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r2, &(0x7f0000000040)="9daa3de1b1c00bceab43eaba112d8410b9f4ad13ec1904c71b71f4de", 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f40f09440f8cc066ba4267663e66460fe789bf2643188f49509b6b00c4a2fd252f440f01caf30fc730343966b88a008ed01a442453060000005dd9660fd2f14e48c2c971", 0x44}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r6, 0x0, 0x2, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x10f, 0x15, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r9, 0x6, 0x13, 0x0, &(0x7f0000000040)) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_proto_private(r10, 0x89e0, &(0x7f0000000140)="b40b1f49cd6dd28d8e63ab56d2477e704624ead2dced591b38ef3e806a074815c49d2769f2512c62f360ddfab589c5bd77514da5f3fe9b867767b1cca57015326e7aae89cf69e7cd5114293e8c7cd3d41051c86eb0f568723f82c7424046b2a52f36f51da0babbab390cbc788a6f678a860059a571d100aed7dd52ef387d809095fe63864f8c7c809b267f5214462ca417821842ce98819e6c0d208fb7e9aecb195ceb1de4f6381fca5ee98fb2d61e5e6d9e4df61fa2320000000000000000") sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0xca639000) 4m27.128531799s ago: executing program 9 (id=43403): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x3}) r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x48, 0x0, &(0x7f0000000280)=[@register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder, @fda={0x66646185, 0x8, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 4m27.125713299s ago: executing program 9 (id=43405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000800000c0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000ffdbdf255e0300000800a1008005000008009f00070000000800a000090000000800260094090000"], 0x34}}, 0x801) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 4m27.015342861s ago: executing program 9 (id=43407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) restart_syscall() r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) restart_syscall() sendfile(r1, r1, 0x0, 0x7ffff000) fcntl$setsig(r0, 0xa, 0x3d) 4m26.974543372s ago: executing program 47 (id=43407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) restart_syscall() r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) restart_syscall() sendfile(r1, r1, 0x0, 0x7ffff000) fcntl$setsig(r0, 0xa, 0x3d) 2m5.083847815s ago: executing program 1 (id=45427): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, r0, 0x8fe67000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r1, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x22, 0x0, 0xad) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x10001}) clock_gettime(0x6, &(0x7f0000000040)) 2m5.056884185s ago: executing program 1 (id=45428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"]) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) 2m4.981024957s ago: executing program 1 (id=45429): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506180a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000500000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 2m4.980710887s ago: executing program 1 (id=45430): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000480)={"d61ca9d784a9f907aff744e303260c8f", r1, 0x0, {0x7, 0xfffffff8}, {0x3, 0x5}, 0xfff, [0x8, 0x1, 0xcc7, 0x2, 0x5, 0x7f, 0x8, 0x4, 0x3b, 0x7, 0x1, 0x2, 0x6, 0x5, 0x5, 0x1000]}) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 2m4.923827138s ago: executing program 1 (id=45432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b0, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 2m4.83429306s ago: executing program 1 (id=45434): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$clear(0x3, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100001a0007000800000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff8000fffe0000cb7491b956a99e19706607b927238075904fa361dbf419d30638f7ed644b86d6b5b0bb8a644385310a477ddaa3d78fd8e2ae3f4c0bd95e36", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0a010101000000000000000000000000000004d32b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000005000000000000000000000000000000c061771a000000007f00000000000000000000000a00004f7000000000000000480003006c7a6a6800"/240], 0x138}}, 0x4000040) ioctl$TIOCSLCKTRMIOS(r0, 0x5433, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x1, {0x1, 0x73e, 0x5, 0x5, 0x8, 0x10}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 2m4.789815281s ago: executing program 48 (id=45434): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$clear(0x3, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100001a0007000800000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff8000fffe0000cb7491b956a99e19706607b927238075904fa361dbf419d30638f7ed644b86d6b5b0bb8a644385310a477ddaa3d78fd8e2ae3f4c0bd95e36", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0a010101000000000000000000000000000004d32b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000005000000000000000000000000000000c061771a000000007f00000000000000000000000a00004f7000000000000000480003006c7a6a6800"/240], 0x138}}, 0x4000040) ioctl$TIOCSLCKTRMIOS(r0, 0x5433, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x1, {0x1, 0x73e, 0x5, 0x5, 0x8, 0x10}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 7.394452014s ago: executing program 0 (id=46864): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0xa, 0x2, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904"], 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 4.411032213s ago: executing program 3 (id=46889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x1}, @clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x1, 0x28}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x15}}, &(0x7f00000000c0)}}], 0x0, 0x0, 0x0}) 4.332993834s ago: executing program 3 (id=46890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket(0x1d, 0x80804, 0x81) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000140)="06f3ed2d81f7ccf81fd576a41608db69cb650700000054f7f38f17ec9f35fb2e3836b82c52339956e57eb198ecacce2052c8af34a49dc83390b34101306587169d0996f4021ee0db387ce1bf", 0x4c, 0x48001, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r4, 0x1) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.197211746s ago: executing program 3 (id=46891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580"], 0x5c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4072, 0xfe8}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000001400)=""/177, 0xb1}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0x1000000d}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}], 0x3, 0x40000100, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) r8 = dup(r7) openat(r8, &(0x7f0000000000)='./file0\x00', 0x86140, 0x110) 4.087301459s ago: executing program 0 (id=46892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, &(0x7f0000000000)={0x0, 0x9, 0x10, {0x10, 0xbcfd5ea04c22d6fa, "8294d4fb1cf6423220914eb85103"}}, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc3}}) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d6") ptrace$setregset(0x4205, r4, 0x1, 0x0) r5 = getpgrp(r4) r6 = syz_pidfd_open(r5, 0x0) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000280)={0x40000002}) r8 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r8, 0x7, r6, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x3}) fchmodat(r2, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400010025bd7000000000000b00"], 0x14}}, 0x24004084) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) 3.996983111s ago: executing program 3 (id=46893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f55", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x62, 0x6, @link_local}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.919865682s ago: executing program 3 (id=46894): pipe2$9p(&(0x7f00000001c0), 0x80000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket(0x11, 0x2, 0x0) (async) syz_clone3(&(0x7f0000000040)={0x5200c100, 0x0, 0x0, 0x0, {0x86c}, 0x0, 0xff7c, 0x0, 0x0, 0xc3}, 0x58) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r0, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) fcntl$addseals(r0, 0x409, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000000)={0x0, 0x0}) (async) syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, 0x0}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xffff1000, 0x8, 0x3, 0xfffff889, 0x0, [{0x40, 0x3, 0x4, '\x00', 0x6e}, {0x1, 0x0, 0x3, '\x00', 0xf1}, {0x0, 0x6, 0x0, '\x00', 0x6}, {0xeb, 0x9, 0x3, '\x00', 0x4}, {0xf4, 0x6, 0x10, '\x00', 0x1}, {0x0, 0x4, 0x7, '\x00', 0x9c}, {0x10, 0x85, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0xfb}, {0x40, 0x65, 0x4, '\x00', 0x3}, {0x11, 0xfe, 0x4, '\x00', 0x7}, {0x2, 0x5, 0x42, '\x00', 0xff}, {0x0, 0x3, 0x6, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xff}, {0x10, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0x1, 0x0, '\x00', 0x15}, {0xa2, 0x9, 0xa7, '\x00', 0x1}, {0x80, 0x7, 0x1, '\x00', 0xa}, {0xa5, 0x7, 0x24, '\x00', 0x6}, {0xfa, 0xa0, 0x8, '\x00', 0x4}, {0x1, 0x1, 0x11, '\x00', 0x50}, {0x8, 0x3, 0x9, '\x00', 0x8}, {0x4, 0x2, 0x0, '\x00', 0x2}, {0x6, 0x0, 0x5, '\x00', 0x89}, {0x4, 0x4, 0x1, '\x00', 0x4}]}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 3.400709283s ago: executing program 0 (id=46905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsmount(r1, 0x1, 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0xfffff4f7, 0x1, 0x2, 0x2}, 0x10) 3.358762773s ago: executing program 0 (id=46906): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) unshare(0x62040200) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000300000010700c11f04000010203010902240001017f500709040009020301000809210f0070b5af3d0a51bebb3328b70404f9060122c902090581030002040e08"], &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="040f190001140000ff00"]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) setreuid(0x0, 0xee01) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) (async) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 2.708450997s ago: executing program 8 (id=46911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0xdc, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@handle={0x73682a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/114, 0x72, 0x0, 0x1b}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @enter_looper, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x2}, @acquire_done, @increfs_done, @increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/250, 0xfa, 0x1, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/162, 0xa2, 0x0, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/189, 0xbd, 0x2, 0x27}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}, 0x400}], 0x1a, 0x0, &(0x7f0000000540)="e54a287e9bccd060de419658cb5ebed49776c71d1ad180793db2"}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2.641064938s ago: executing program 8 (id=46912): io_setup(0x197, &(0x7f0000000440)=0x0) (async) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x8402, 0x33) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x0, r1, 0x0}]) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r2, 0xffffb000) 2.612733588s ago: executing program 8 (id=46913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000001000/0x4000)=nil, 0x4000}, 0x3}) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'pimreg\x00', &(0x7f00000000c0)=@ethtool_cmd={0x49, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x84, 0x0, 0xff, 0x401, 0x5, 0x5, 0x108, [0x5, 0x9]}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000000300)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="00063400000087bfa28a1a48a4b7d513d1a915839391d06fa32940916cbb645091f8408e944dd60197e47cb4da4ac870ca88442cf558054f63c60d073de1da39f81077fc7548d5307e1b"], 0x0, 0x0}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x4f}}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1002, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x1000000, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast}) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) socket$can_raw(0x1d, 0x3, 0x1) 2.04242762s ago: executing program 8 (id=46918): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x3f, 0x0, 0x101}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3fffffffe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de9b000040"]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$key(0xf, 0x3, 0x2) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0xc01038, &(0x7f0000006240)) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2, 0x0, 0x7f, 0x2, 0x1b, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, {0x6, 0x2b, 0x1, 0x80, 0x0, 0x1, 0x0, @in=@local, @in=@rand_addr=0x64010102}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x11, 0x14, 0x10}, @sadb_key={0x3, 0x8, 0x78, 0x0, "9725cc405a98fc48d3a5c035eb8422"}, @sadb_lifetime={0x4, 0x3, 0x7, 0x3}]}, 0xd8}}, 0x8080) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r8, &(0x7f00000002c0), 0x15) splice(r7, 0x0, r9, 0x0, 0x19404, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0002a9007365636f6eff6e616d6500"/30], 0x14}, 0x1, 0x0, 0x0, 0x240488d5}, 0x1) 1.811595484s ago: executing program 7 (id=46921): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400000000002c) r3 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000003c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "cc3998151fc425"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000013c0)={{r5, 0x7f, 0x4000, 0x3, 0x3, 0xffffffffffff38e1, 0x6, 0x5, 0xfffffffd, 0x1ff, 0x1, 0xd93, 0x4, 0x8, 0x1}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) fchmod(r3, 0x1b0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) close_range(r0, r0, 0x0) 1.732837736s ago: executing program 7 (id=46922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast2, 0x3}, 0x1c) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) (async, rerun: 64) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x6, 0x5, 0x9, 0x6, 0x401, 0x0}) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000600)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x178, 0x3f, 0x4, 0x70bd2a, 0x25dfdbff, {0x1b}, [@nested={0xf2, 0x72, 0x0, 0x1, [@generic="73cf6f16f13268d135bb59966fca51d6244662a7c6e3", @typed={0x8, 0xd1, 0x0, 0x0, @fd=r2}, @typed={0xcd, 0x127, 0x0, 0x0, @binary="35bf351e0ad02f150eea6b7cdbdd58925e9bb7848e95426f647f9bf4304b58a299161288e84f242554abb5bac8387a2ab4bd7410bab6b618aed8b13ce11fecab48f21a61688d6216311363dded6eef2ea0047a8a3cca9779d4bfacdb02cd572dd9d86e9f834f247b179e56e67db5ec36e32971683071b3a7b165082bd7f0e9af37e5b6d30ccd2421a63cc9cb23bd543c8aab52172cb4eeab36af002b044e7024e03e02a4d70c9d928ebf2623b33a82201348883a07e2d91a304526ae174ef25fc4556adb64c56bbff3"}]}, @typed={0x4, 0x55}, @nested={0x60, 0x2e, 0x0, 0x1, [@generic="fa29052aeaeafa868d07a0ca61f2abfa2ccc1a45271df56c84a87d7cc8e90acadeb3791f628d658ada9c9a3cc8e3414d3268d1216637a2550023123ee990015b375a76be6a2c796a5cdb4193", @typed={0x8, 0xb8, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x73, 0x0, 0x0, @uid=r6}]}, @typed={0xb, 0x97, 0x0, 0x0, @str='(}\xc4/\'*\x00'}]}, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x4880) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async, rerun: 64) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64) pipe(&(0x7f00000005c0)) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/241, 0xf1, 0x0, &(0x7f00000000c0)=""/105, 0x69}, &(0x7f0000000280)=0x40) setsockopt$inet6_tcp_buf(r7, 0x6, 0x5, &(0x7f0000000080)="00de8de9", 0x4) (async, rerun: 32) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) (async, rerun: 32) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1.655372088s ago: executing program 7 (id=46923): getpid() sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x1) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_stats={0x1d, 0x2, [0xef78, 0x2]}}) 1.616212028s ago: executing program 7 (id=46924): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r1, 0x0, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) 1.53186881s ago: executing program 7 (id=46925): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r2, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x5, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xfffd, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xff, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x9, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2504000000200001800d000100"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e1d, 0x620e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000370000002e0000000000000024000000000000002900000032000000ff0200000000000000000000000000017d"], 0x40}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000000580)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5"}) 1.416594642s ago: executing program 8 (id=46926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = socket(0xa, 0x3, 0x2) tkill(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x37) sendmsg$netlink(r2, 0x0, 0x4015) sendmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x362, @loopback, 0x9, 0x1000000}, 0x80, 0x0}}, {{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000290000000b0000008960896f"], 0x18}}], 0x2, 0x2c04c884) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x0, 0x0, &(0x7f0000000580)}) 1.390597693s ago: executing program 8 (id=46927): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80041) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') read(r1, &(0x7f0000000000)=""/74, 0x4a) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000007000/0x3000)=nil, 0x3000}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000959000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) read(r0, &(0x7f0000000340)=""/116, 0x74) 632.956738ms ago: executing program 3 (id=46928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af6604"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) r5 = syz_open_dev$evdev(&(0x7f000001fa80), 0x8000000000000001, 0x10100) ioctl$EVIOCSCLOCKID(r5, 0x40084504, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af6604"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) (async) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) (async) syz_open_dev$evdev(&(0x7f000001fa80), 0x8000000000000001, 0x10100) (async) ioctl$EVIOCSCLOCKID(r5, 0x40084504, 0x0) (async) 632.439558ms ago: executing program 7 (id=46929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8a, 0x0, 0x2, 0x40, @remote, @empty, 0x40, 0x700, 0x5, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updsa={0xfc, 0x1a, 0x300, 0x70bd26, 0x25dfdbfb, {{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0x10, 0xa0, 0x29, r2, r3}, {@in=@private=0xa010101, 0x4d5, 0x33}, @in=@loopback, {0x2, 0x4b6, 0x4, 0x5, 0x6, 0x800, 0x1, 0xfffffffffffffffc}, {0xffffffffffffafeb, 0x3, 0x3, 0x2}, {0x7c61, 0x1ff, 0x6b}, 0x70bd2d, 0x3506, 0x2, 0x2, 0x3}, [@mark={0xc, 0x15, {0x350759, 0x7}}]}, 0xfc}}, 0x0) fdatasync(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 128.616718ms ago: executing program 0 (id=46930): r0 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x882) pipe(0x0) io_setup(0x3ff, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x786d) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000c501"]) 0s ago: executing program 0 (id=46931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x800) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) r7 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000380)={{0x0, 0xffff1000, 0x0, 0x1, 0x1, 0x1, 0x7, 0x1, 0x0, 0x9, 0x0, 0xa5}, {0xd000, 0x100000, 0x10, 0x8, 0x7c, 0x7, 0x4, 0x0, 0x1, 0x8, 0x0, 0xec}, {0x3000, 0x0, 0x8, 0x1, 0xd, 0x0, 0x3, 0xb, 0x5, 0x1, 0x4, 0x4}, {0x80a0000, 0x100000, 0x3, 0x2, 0x6, 0x4, 0x2, 0xf8, 0x5, 0x9d, 0x3, 0x5}, {0x4000, 0x6000, 0x4, 0x9, 0xd8, 0x6, 0x1c, 0x6c, 0x85, 0x8, 0x8, 0x45}, {0x8000000, 0x2000, 0x4, 0x2, 0xf1, 0x3, 0x40, 0x3, 0x80, 0x0, 0x80, 0x3}, {0x6000, 0xf000, 0x3, 0xa, 0x4, 0x2, 0x0, 0x6, 0xdf, 0x0, 0x4, 0x70}, {0x6000, 0xffff2000, 0xd, 0x5, 0x7f, 0xa, 0x2, 0xf, 0x5, 0x4, 0xff, 0x9}, {0x5000, 0xd0}, {0xd5d63000, 0x6}, 0x25, 0x0, 0x0, 0xc, 0xf, 0x400, 0xdddd1000, [0x8, 0x8, 0x1, 0xd5]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000240)={0xfa0, 0x2}) write$binfmt_register(r7, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup'}, 0x2e) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f0000000c00)={0x0, 0x0, 0x800bf, 0x3ffffffffffffe, 0x0, 0xf0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): nder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 2693.404224][ T7016] rust_binder: 30341: removing orphan mapping 0:24 [ 2693.432316][ T36] kauditd_printk_skb: 894 callbacks suppressed [ 2693.432334][ T36] audit: type=1400 audit(2000000080.709:147495): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2693.464866][ T36] audit: type=1400 audit(2000000080.709:147496): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2693.491475][ T36] audit: type=1400 audit(2000000080.709:147497): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2693.518645][ T36] audit: type=1400 audit(2000000080.756:147498): avc: denied { read } for pid=30354 comm="syz.8.45680" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2693.542941][ T36] audit: type=1400 audit(2000000080.756:147499): avc: denied { read open } for pid=30354 comm="syz.8.45680" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2693.567496][ T36] audit: type=1400 audit(2000000080.756:147500): avc: denied { ioctl } for pid=30354 comm="syz.8.45680" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2693.619457][ T36] audit: type=1400 audit(2000000080.897:147501): avc: denied { create } for pid=30357 comm="syz.3.45681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2693.639700][ T36] audit: type=1400 audit(2000000080.897:147502): avc: denied { create } for pid=30357 comm="syz.3.45681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2693.661679][ T36] audit: type=1400 audit(2000000080.897:147503): avc: denied { create } for pid=30357 comm="syz.3.45681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2693.688081][ T36] audit: type=1400 audit(2000000080.897:147504): avc: denied { read append } for pid=30354 comm="syz.8.45680" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2693.760913][T30377] tipc: New replicast peer: 255.255.255.255 [ 2693.769302][T30377] tipc: Enabled bearer , priority 10 [ 2694.190091][T30379] 9pnet_fd: Insufficient options for proto=fd [ 2694.427462][T30396] netlink: 'syz.0.45690': attribute type 1 has an invalid length. [ 2694.548782][T30407] binder: Bad value for 'max' [ 2694.625989][T30417] netlink: 'syz.0.45697': attribute type 1 has an invalid length. [ 2694.633895][T30417] netlink: 164 bytes leftover after parsing attributes in process `syz.0.45697'. [ 2694.666796][T30407] rust_binder: Error while translating object. [ 2694.666828][T30407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2694.673049][T30407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44 [ 2694.930697][T30424] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2694.940196][T30424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2694.948322][T30424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:62 [ 2694.957352][ T421] tipc: Node number set to 605675505 [ 2695.029195][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.039310][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.050229][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.060598][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.071035][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.081072][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.091496][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.101675][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.113426][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.123947][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.134396][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.144762][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.154832][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.164817][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.174997][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.185005][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.197055][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.207293][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.217449][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.228725][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.239236][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.249317][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.259590][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.270906][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.281099][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.291318][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.301457][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.313465][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.323650][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.334429][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.345053][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.354966][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.365257][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.375380][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.385645][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.395763][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.405968][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.416014][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.425988][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.436271][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.446421][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.456681][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.466746][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.477009][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.487332][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.498935][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.523511][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.538424][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.561465][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.566636][T30445] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 2695.585773][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.617060][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.630374][T30445] kvm: kvm [30444]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 2695.635375][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.640048][T30445] kvm: kvm [30444]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 2695.650212][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.666596][T30449] veth1: entered allmulticast mode [ 2695.668965][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.683513][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.705018][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.716938][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.734494][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.751106][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.761696][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.771960][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.782704][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.794626][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.806354][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.816801][T30432] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 2695.868694][T30454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 2695.981072][T30620] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2696.152050][T30620] usb 9-1: Using ep0 maxpacket: 32 [ 2696.159915][T30620] usb 9-1: config 0 has no interfaces? [ 2696.170758][T30620] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2696.179864][T30620] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.188003][T30620] usb 9-1: Product: syz [ 2696.192267][T30620] usb 9-1: Manufacturer: syz [ 2696.196897][T30620] usb 9-1: SerialNumber: syz [ 2696.211573][T30620] usb 9-1: config 0 descriptor?? [ 2696.227307][T30464] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 238) [ 2696.227332][T30464] rust_binder: Error while translating object. [ 2696.238025][T30464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2696.244209][T30464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 2696.436640][T30451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2696.454994][T30451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2696.522154][T30447] veth1: left allmulticast mode [ 2697.129979][T30490] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 2697.257903][T30497] tipc: Enabling of bearer rejected, failed to enable media [ 2697.410026][T30509] 9pnet_fd: Insufficient options for proto=fd [ 2697.477020][T30515] netlink: 'syz.3.45731': attribute type 1 has an invalid length. [ 2697.695307][T30535] netlink: 'syz.3.45733': attribute type 2 has an invalid length. [ 2698.480718][T30682] tipc: Enabled bearer , priority 10 [ 2698.569691][T30684] bridge0: left allmulticast mode [ 2698.612384][T30686] netlink: 'syz.0.45739': attribute type 3 has an invalid length. [ 2698.620238][T30686] netlink: 944 bytes leftover after parsing attributes in process `syz.0.45739'. [ 2698.631288][T30686] overlayfs: failed to clone lowerpath [ 2698.838998][ T36] kauditd_printk_skb: 557 callbacks suppressed [ 2698.839021][ T36] audit: type=1400 audit(2000000085.782:148062): avc: denied { create } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2698.856955][T30701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30701 comm=syz.0.45745 [ 2698.867369][ T36] audit: type=1400 audit(2000000085.801:148063): avc: denied { write } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2698.901646][ T36] audit: type=1400 audit(2000000085.801:148064): avc: denied { read } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2698.932471][ T4604] usb 9-1: USB disconnect, device number 125 [ 2698.961377][ T36] audit: type=1400 audit(2000000085.801:148065): avc: denied { create } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2699.007877][ T36] audit: type=1400 audit(2000000085.801:148066): avc: denied { create } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2699.033671][ T36] audit: type=1400 audit(2000000085.801:148067): avc: denied { create } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2699.066882][ T36] audit: type=1400 audit(2000000085.801:148068): avc: denied { write } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2699.082944][T30711] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2699.088502][ T36] audit: type=1400 audit(2000000085.801:148069): avc: denied { read } for pid=30700 comm="syz.0.45745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2699.095106][T30711] audit: audit_lost=76 audit_rate_limit=0 audit_backlog_limit=64 [ 2699.129956][T30715] bridge0: port 3(veth0_to_team) entered blocking state [ 2699.137048][T30715] bridge0: port 3(veth0_to_team) entered disabled state [ 2699.144976][T30715] veth0_to_team: entered allmulticast mode [ 2699.152391][T30715] veth0_to_team: entered promiscuous mode [ 2699.553654][ T421] tipc: Node number set to 147934425 [ 2699.929804][T30723] rust_binder: Write failure EINVAL in pid:60 [ 2700.151026][T30731] tipc: Started in network mode [ 2700.162155][T30731] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 2700.171346][T30731] tipc: Enabled bearer , priority 10 [ 2700.211932][T30733] rust_binder: Error while translating object. [ 2700.211965][T30733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2700.218955][T30733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 2700.296114][T30739] netlink: 'syz.3.45759': attribute type 1 has an invalid length. [ 2700.437385][T30749] netlink: 'syz.3.45761': attribute type 19 has an invalid length. [ 2700.445496][T30748] netlink: 'syz.3.45761': attribute type 19 has an invalid length. [ 2700.694323][T30768] netlink: 176 bytes leftover after parsing attributes in process `syz.8.45764'. [ 2701.349467][T30771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.45767'. [ 2701.366598][ T4604] tipc: Node number set to 4269801494 [ 2701.433306][T30773] SELinux: failed to load policy [ 2701.453880][T30773] input: syz0 as /devices/virtual/input/input173 [ 2701.505093][T30775] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2701.599748][T30776] rust_binder: Write failure EFAULT in pid:97 [ 2701.771854][ T421] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 2701.942496][ T421] usb 9-1: Using ep0 maxpacket: 8 [ 2701.949696][ T421] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 2701.958068][ T421] usb 9-1: config 250 has an invalid interface number: 0 but max is -1 [ 2701.966375][ T421] usb 9-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2701.976677][ T421] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2701.988432][ T421] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2701.997904][ T421] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2702.006176][ T421] usb 9-1: Product: syz [ 2702.010917][ T421] usb 9-1: SerialNumber: syz [ 2702.021005][ T421] hub 9-1:250.0: bad descriptor, ignoring hub [ 2702.027114][ T421] hub 9-1:250.0: probe with driver hub failed with error -5 [ 2702.177357][T30787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2702.185869][T30787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2702.220451][T30788] rust_binder: 30788 RLIMIT_NICE not set [ 2702.507887][ T4604] usb 9-1: reset high-speed USB device number 126 using dummy_hcd [ 2703.009022][ T421] usb 9-1: USB disconnect, device number 126 [ 2704.447504][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 2704.447522][ T36] audit: type=1400 audit(2000000091.043:148567): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2704.484915][ T36] audit: type=1400 audit(2000000091.043:148568): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2704.511479][ T36] audit: type=1400 audit(2000000091.043:148569): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2704.538795][ T36] audit: type=1400 audit(2000000091.136:148570): avc: denied { create } for pid=30834 comm="syz.3.45792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2704.560809][ T36] audit: type=1400 audit(2000000091.136:148571): avc: denied { create } for pid=30834 comm="syz.3.45792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2704.583248][ T36] audit: type=1400 audit(2000000091.136:148572): avc: denied { write } for pid=30834 comm="syz.3.45792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2704.604699][ T36] audit: type=1400 audit(2000000091.136:148573): avc: denied { read } for pid=30834 comm="syz.3.45792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2704.630984][ T36] audit: type=1400 audit(2000000091.136:148574): avc: denied { read } for pid=30834 comm="syz.3.45792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2704.657757][ T36] audit: type=1400 audit(2000000091.136:148575): avc: denied { write } for pid=30834 comm="syz.3.45792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2704.679648][ T36] audit: type=1400 audit(2000000091.164:148576): avc: denied { read } for pid=30831 comm="syz.8.45791" dev="nsfs" ino=4026532425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2704.696085][T30847] netlink: 'syz.3.45795': attribute type 19 has an invalid length. [ 2704.710018][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2704.710285][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2704.717305][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2704.724115][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2704.731328][T30847] netlink: 5 bytes leftover after parsing attributes in process `syz.3.45795'. [ 2704.747107][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2704.747443][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2704.754197][T30842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2705.152491][ T7016] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 2705.323071][ T7016] usb 9-1: Using ep0 maxpacket: 8 [ 2705.330873][ T7016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 2705.343532][ T7016] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2705.359197][ T7016] usb 9-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2705.370030][ T7016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.387574][ T7016] usb 9-1: config 0 descriptor?? [ 2705.387711][T26952] rust_binder: 30785: removing orphan mapping 0:1048 [ 2705.420560][ T7016] usbhid 9-1:0.0: can't add hid device: -22 [ 2705.442632][ T7016] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 2705.472416][T30887] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2705.472440][T30887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2705.491306][T30887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:106 [ 2705.622375][ T7016] usb 9-1: USB disconnect, device number 127 [ 2705.879938][T30911] netlink: 216 bytes leftover after parsing attributes in process `syz.0.45824'. [ 2706.528193][ T7016] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2706.701923][ T7016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2706.714663][ T7016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41041, setting to 1024 [ 2706.727089][ T7016] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2706.736309][ T7016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2706.748567][ T7016] usb 9-1: config 0 descriptor?? [ 2706.988235][T30920] bridge0: port 3(veth0_to_team) entered blocking state [ 2706.995395][T30920] bridge0: port 3(veth0_to_team) entered disabled state [ 2707.003162][T30920] veth0_to_team: entered allmulticast mode [ 2707.009471][T30920] veth0_to_team: entered promiscuous mode [ 2707.790699][T30972] overlayfs: failed to clone lowerpath [ 2707.819912][T30975] devpts: called with bogus options [ 2708.590429][T31020] overlayfs: failed to clone upperpath [ 2709.078305][T31036] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2709.085387][T31036] rust_binder: Write failure EFAULT in pid:118 [ 2709.453289][ T7016] usbhid 9-1:0.0: can't add hid device: -71 [ 2709.466062][ T7016] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2709.477807][ T7016] usb 9-1: USB disconnect, device number 2 [ 2709.824723][ T36] kauditd_printk_skb: 559 callbacks suppressed [ 2709.824741][ T36] audit: type=1400 audit(2000000096.097:149136): avc: denied { read } for pid=31078 comm="syz.8.45879" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2709.853444][T31071] netlink: 'syz.0.45875': attribute type 4 has an invalid length. [ 2709.862948][T31071] netlink: 17 bytes leftover after parsing attributes in process `syz.0.45875'. [ 2709.884485][ T36] audit: type=1400 audit(2000000096.097:149137): avc: denied { read open } for pid=31078 comm="syz.8.45879" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2709.921225][T31071] 9pnet_fd: Insufficient options for proto=fd [ 2709.930092][ T36] audit: type=1400 audit(2000000096.125:149138): avc: denied { ioctl } for pid=31078 comm="syz.8.45879" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x770a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2709.959612][ T36] audit: type=1400 audit(2000000096.125:149139): avc: denied { read write } for pid=31078 comm="syz.8.45879" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2709.983590][ T36] audit: type=1400 audit(2000000096.125:149140): avc: denied { read write open } for pid=31078 comm="syz.8.45879" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2710.009632][ T36] audit: type=1400 audit(2000000096.125:149141): avc: denied { ioctl } for pid=31078 comm="syz.8.45879" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2710.036228][ T36] audit: type=1400 audit(2000000096.134:149142): avc: denied { create } for pid=31078 comm="syz.8.45879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2710.057596][ T36] audit: type=1400 audit(2000000096.134:149143): avc: denied { ioctl } for pid=31078 comm="syz.8.45879" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2710.128482][T31083] SELinux: syz.7.45881 (31083) set checkreqprot to 1. This is no longer supported. [ 2710.136399][ T36] audit: type=1400 audit(2000000096.134:149144): avc: denied { read write } for pid=31078 comm="syz.8.45879" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2710.154079][T26952] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2710.196795][ T36] audit: type=1400 audit(2000000096.134:149145): avc: denied { read write open } for pid=31078 comm="syz.8.45879" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2710.257928][T31089] overlayfs: failed to clone upperpath [ 2710.325263][T26952] usb 9-1: Using ep0 maxpacket: 8 [ 2710.332527][T26952] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2710.343312][T26952] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2710.354822][T26952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 2710.366551][T26952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 2710.378763][T26952] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2710.400280][T26952] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2710.409361][T26952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.418649][T26952] usb 9-1: Product: syz [ 2710.423367][T26952] usb 9-1: Manufacturer: syz [ 2710.427973][T26952] usb 9-1: SerialNumber: syz [ 2710.436142][T26952] usb 9-1: config 0 descriptor?? [ 2710.454585][T26952] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input174 [ 2710.524871][T31106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45890'. [ 2710.555593][T31106] veth0_to_team: left allmulticast mode [ 2710.574359][T31106] veth0_to_team: left promiscuous mode [ 2710.590114][T31106] bridge0: port 3(veth0_to_team) entered disabled state [ 2710.603168][T31106] bridge_slave_1: left allmulticast mode [ 2710.618146][T31106] bridge_slave_1: left promiscuous mode [ 2710.630203][T31106] bridge0: port 2(bridge_slave_1) entered disabled state [ 2710.646290][T31106] bridge_slave_0: left allmulticast mode [ 2710.656086][T31106] bridge_slave_0: left promiscuous mode [ 2710.661833][T31106] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.672218][T31079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2710.684755][T31079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2710.696386][T26952] usb 9-1: USB disconnect, device number 3 [ 2710.722403][T31107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45890'. [ 2710.856056][T31121] netlink: 'syz.0.45893': attribute type 12 has an invalid length. [ 2710.871726][T31121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=31121 comm=syz.0.45893 [ 2711.583101][ T7016] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2711.743279][ T7016] usb 9-1: Using ep0 maxpacket: 16 [ 2711.753967][ T7016] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2711.764608][ T7016] usb 9-1: config 1 has an invalid interface number: 255 but max is 2 [ 2711.772843][ T7016] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2711.783904][ T7016] usb 9-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 2711.793718][ T7016] usb 9-1: config 1 has no interface number 3 [ 2711.800615][ T7016] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2711.812532][ T7016] usb 9-1: config 1 interface 255 has no altsetting 0 [ 2711.823756][ T7016] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2711.833895][ T7016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.842653][ T7016] usb 9-1: Product: syz [ 2711.846845][ T7016] usb 9-1: Manufacturer: syz [ 2711.851493][ T7016] usb 9-1: SerialNumber: syz [ 2712.135266][ T7016] usb 9-1: USB disconnect, device number 4 [ 2712.254221][T22823] udevd[22823]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2712.563195][T31221] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 2712.962257][T31253] 9pnet_fd: Insufficient options for proto=fd [ 2713.004009][T31254] 9pnet_fd: Insufficient options for proto=fd [ 2713.246286][T31261] overlayfs: failed to clone upperpath [ 2713.261078][T31260] netlink: 'syz.3.45940': attribute type 16 has an invalid length. [ 2713.261078][T31261] netlink: 'syz.3.45940': attribute type 2 has an invalid length. [ 2713.261099][T31261] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.45940'. [ 2713.289395][ T421] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 2713.297024][T31260] netlink: 'syz.3.45940': attribute type 2 has an invalid length. [ 2713.326476][T31260] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.45940'. [ 2713.464936][ T421] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2713.485863][ T421] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2713.508436][ T421] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 2713.518110][ T421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.528166][ T421] usb 9-1: Product: syz [ 2713.532424][ T421] usb 9-1: Manufacturer: syz [ 2713.540017][ T421] usb 9-1: SerialNumber: syz [ 2713.547520][ T421] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 2713.556292][ T421] usb 9-1: no configuration chosen from 1 choice [ 2713.786596][T31283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.45947'. [ 2714.636654][T31288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63875 sclass=netlink_route_socket pid=31288 comm=syz.3.45949 [ 2714.650484][T31288] tipc: Enabling of bearer rejected, failed to enable media [ 2714.993572][T31304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.45955'. [ 2715.176230][ T36] kauditd_printk_skb: 413 callbacks suppressed [ 2715.176248][ T36] audit: type=1400 audit(2000000101.104:149559): avc: denied { create } for pid=31329 comm="syz.0.45965" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2715.204058][ T36] audit: type=1400 audit(2000000101.104:149560): avc: denied { map } for pid=31329 comm="syz.0.45965" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=483175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2715.228664][ T36] audit: type=1400 audit(2000000101.104:149561): avc: denied { read write } for pid=31329 comm="syz.0.45965" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=483175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2715.253872][ T36] audit: type=1400 audit(2000000101.113:149562): avc: denied { map } for pid=31329 comm="syz.0.45965" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=483175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2715.278693][ T36] audit: type=1400 audit(2000000101.113:149563): avc: denied { read write } for pid=31329 comm="syz.0.45965" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=483175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2715.320985][ T36] audit: type=1400 audit(2000000101.245:149564): avc: denied { read write } for pid=29523 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2715.374416][ T36] audit: type=1400 audit(2000000101.245:149565): avc: denied { read write open } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2715.401242][ T36] audit: type=1400 audit(2000000101.245:149566): avc: denied { ioctl } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2715.427258][ T36] audit: type=1400 audit(2000000101.264:149567): avc: denied { setcurrent } for pid=31331 comm="syz.7.45966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2715.448268][ T36] audit: type=1401 audit(2000000101.264:149568): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 2715.729327][T31349] 9pnet_fd: Insufficient options for proto=fd [ 2715.853810][T31356] SELinux: failed to load policy [ 2715.863850][T31356] input: syz0 as /devices/virtual/input/input176 [ 2715.996226][T31368] netlink: 'syz.0.45980': attribute type 16 has an invalid length. [ 2716.087422][T31371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 2716.090651][ T421] usb 9-1: USB disconnect, device number 5 [ 2716.150834][T31382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 2716.197778][T31385] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2716.211794][T31385] rust_binder: Read failure Err(EFAULT) in pid:134 [ 2716.414442][T31402] tmpfs: Unknown parameter 'ÿÿ' [ 2716.489018][T31407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2716.672291][T31419] netlink: 188 bytes leftover after parsing attributes in process `syz.3.45996'. [ 2716.690238][T31419] netlink: 'syz.3.45996': attribute type 12 has an invalid length. [ 2716.717556][T31421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.45997'. [ 2717.020395][T31431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2717.020425][T31431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150 [ 2717.050420][T31432] rust_binder: Write failure EINVAL in pid:161 [ 2717.095652][T31432] binder: Unknown parameter '' [ 2717.325092][T31440] rust_binder: 156: no such ref 1 [ 2717.345446][T31440] rust_binder: 156: no such ref 0 [ 2717.469837][ T421] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2717.506985][T31446] netlink: 'syz.7.46007': attribute type 16 has an invalid length. [ 2717.525798][T31446] netlink: 64122 bytes leftover after parsing attributes in process `syz.7.46007'. [ 2717.659918][ T421] usb 9-1: Using ep0 maxpacket: 8 [ 2717.695009][ T421] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2717.727675][ T421] usb 9-1: config 6 has an invalid interface number: 248 but max is 0 [ 2717.735892][ T421] usb 9-1: config 6 has no interface number 0 [ 2717.768422][ T421] usb 9-1: config 6 interface 248 has no altsetting 0 [ 2717.790575][ T421] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2717.803051][ T421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2717.812968][ T421] usb 9-1: Product: syz [ 2717.817287][ T421] usb 9-1: Manufacturer: syz [ 2717.823137][ T421] usb 9-1: SerialNumber: syz [ 2717.922130][T31460] netlink: 72 bytes leftover after parsing attributes in process `syz.3.46012'. [ 2718.048527][ T421] ums-karma 9-1:6.248: USB Mass Storage device detected [ 2718.124695][ T421] usb 9-1: USB disconnect, device number 6 [ 2718.622051][T31476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2718.746035][T31478] rust_binder: Error while translating object. [ 2718.770975][T31478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2718.777187][T31478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 2718.847027][T31490] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=31490 comm=syz.3.46023 [ 2718.971112][T31494] overlayfs: failed to clone upperpath [ 2719.087058][T31504] overlayfs: failed to resolve './file1': -2 [ 2719.311901][ T421] rust_binder: 31514: removing orphan mapping 0:24 [ 2719.491095][T31546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=31546 comm=syz.0.46040 [ 2719.588474][T31538] rust_binder: 186: no such ref 2 [ 2719.610774][T31554] rust_binder: Error while translating object. [ 2719.610812][T31554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2719.630748][T31554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 2719.715796][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2719.733905][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2719.740186][T31561] SELinux: failed to load policy [ 2719.757848][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2719.770783][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2719.784514][T31561] input: syz0 as /devices/virtual/input/input177 [ 2720.397997][T31600] overlayfs: failed to clone upperpath [ 2720.516409][ T36] kauditd_printk_skb: 1837 callbacks suppressed [ 2720.516426][ T36] audit: type=1400 audit(2000000106.121:151406): avc: denied { create } for pid=31605 comm="syz.0.46061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2720.523040][T31606] tmpfs: Unknown parameter '' [ 2720.549390][ T36] audit: type=1400 audit(2000000106.121:151407): avc: denied { write } for pid=31605 comm="syz.0.46061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2720.571123][ T36] audit: type=1400 audit(2000000106.121:151408): avc: denied { read } for pid=31605 comm="syz.0.46061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2720.592679][ T36] audit: type=1400 audit(2000000106.130:151409): avc: denied { read } for pid=31605 comm="syz.0.46061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2720.613480][ T36] audit: type=1400 audit(2000000106.130:151410): avc: denied { write } for pid=31605 comm="syz.0.46061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2720.634524][ T36] audit: type=1400 audit(2000000106.130:151411): avc: denied { read } for pid=31605 comm="syz.0.46061" name="ptp0" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 2720.661562][ T36] audit: type=1400 audit(2000000106.130:151412): avc: denied { read open } for pid=31605 comm="syz.0.46061" path="/dev/ptp0" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 2720.689574][ T36] audit: type=1400 audit(2000000106.130:151413): avc: denied { ioctl } for pid=31605 comm="syz.0.46061" path="/dev/ptp0" dev="tmpfs" ino=1684 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 2720.719360][ T36] audit: type=1400 audit(2000000106.130:151414): avc: denied { ioctl } for pid=31605 comm="syz.0.46061" path="/dev/ptp0" dev="tmpfs" ino=1684 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 2720.750719][ T36] audit: type=1400 audit(2000000106.130:151415): avc: denied { mounton } for pid=31605 comm="syz.0.46061" path="/546/file0" dev="tmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2720.999044][T31638] netlink: 100 bytes leftover after parsing attributes in process `syz.3.46071'. [ 2721.008877][T31637] netlink: 100 bytes leftover after parsing attributes in process `syz.3.46071'. [ 2721.725164][T24182] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 2721.884900][T24182] usb 9-1: device descriptor read/64, error -71 [ 2722.055449][T31673] netlink: 'syz.3.46083': attribute type 16 has an invalid length. [ 2722.063562][T31673] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.46083'. [ 2722.080612][T31673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31673 comm=syz.3.46083 [ 2722.093897][T31673] veth1: entered allmulticast mode [ 2722.140876][T24182] usb 9-1: device descriptor read/64, error -71 [ 2722.396827][T24182] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 2722.535420][T24182] usb 9-1: device descriptor read/64, error -71 [ 2722.791386][T24182] usb 9-1: device descriptor read/64, error -71 [ 2722.908766][T24182] usb usb9-port1: attempt power cycle [ 2722.973172][T31672] veth1: left allmulticast mode [ 2723.265623][T31694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46091'. [ 2723.274797][T24182] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 2723.309978][T24182] usb 9-1: device descriptor read/8, error -71 [ 2723.389552][T31704] netlink: 'syz.3.46095': attribute type 29 has an invalid length. [ 2723.397998][T31704] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.46095'. [ 2723.479766][T24182] usb 9-1: device descriptor read/8, error -71 [ 2723.751392][T24182] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 2723.778228][T24182] usb 9-1: device descriptor read/8, error -71 [ 2723.859721][T31730] netlink: 56 bytes leftover after parsing attributes in process `syz.3.46103'. [ 2723.923925][T24182] usb 9-1: device descriptor read/8, error -71 [ 2724.039463][T24182] usb usb9-port1: unable to enumerate USB device [ 2724.343390][T31741] netlink: 'syz.7.46108': attribute type 21 has an invalid length. [ 2724.352962][T31741] netlink: 388 bytes leftover after parsing attributes in process `syz.7.46108'. [ 2724.933642][T31777] netlink: 'syz.3.46119': attribute type 27 has an invalid length. [ 2725.159956][T31790] SELinux: failed to load policy [ 2725.168311][T31790] input: syz0 as /devices/virtual/input/input178 [ 2725.201511][T30620] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 2725.350830][T30620] usb 9-1: device descriptor read/64, error -71 [ 2725.606811][T30620] usb 9-1: device descriptor read/64, error -71 [ 2725.642790][T31810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46131'. [ 2725.862734][T30620] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 2725.871152][ T36] kauditd_printk_skb: 770 callbacks suppressed [ 2725.871171][ T36] audit: type=1400 audit(2000000111.137:152186): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2725.904849][ T36] audit: type=1400 audit(2000000111.137:152187): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2725.931957][ T36] audit: type=1400 audit(2000000111.175:152188): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2725.960744][ T36] audit: type=1400 audit(2000000111.175:152189): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2725.988470][ T36] audit: type=1400 audit(2000000111.175:152190): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2726.022055][ T36] audit: type=1400 audit(2000000111.175:152191): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2726.058016][T30620] usb 9-1: device descriptor read/64, error -71 [ 2726.062192][ T36] audit: type=1400 audit(2000000111.175:152192): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2726.092027][ T36] audit: type=1400 audit(2000000111.250:152193): avc: denied { ioctl } for pid=31761 comm="syz.8.46117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2726.145583][ T36] audit: type=1400 audit(2000000111.400:152194): avc: denied { name_bind } for pid=31817 comm="syz.0.46135" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2726.170514][ T36] audit: type=1400 audit(2000000111.400:152195): avc: denied { create } for pid=31817 comm="syz.0.46135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2726.198690][T31821] netlink: 'syz.0.46136': attribute type 1 has an invalid length. [ 2726.342616][T30620] usb 9-1: device descriptor read/64, error -71 [ 2726.460007][T30620] usb usb9-port1: attempt power cycle [ 2726.822516][T30620] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 2726.845732][T30620] usb 9-1: device descriptor read/8, error -71 [ 2726.984888][T30620] usb 9-1: device descriptor read/8, error -71 [ 2727.217767][T31857] fuse: Bad value for 'fd' [ 2727.238403][T30620] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 2727.261627][T30620] usb 9-1: device descriptor read/8, error -71 [ 2727.400919][T30620] usb 9-1: device descriptor read/8, error -71 [ 2727.515796][T30620] usb usb9-port1: unable to enumerate USB device [ 2727.557343][T31860] binder: Unknown parameter '00000000000000000000003' [ 2728.134950][T31881] input: syz0 as /devices/virtual/input/input179 [ 2728.406774][T31893] cgroup: noprefix used incorrectly [ 2728.563481][T31893] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 2728.652319][T31898] __vm_enough_memory: pid: 31898, comm: syz.8.46161, bytes: 18014402804453376 not enough memory for the allocation [ 2729.008790][T31915] input: syz0 as /devices/virtual/input/input180 [ 2729.751421][T31939] rust_binder: 255: no such ref 0 [ 2729.767603][T31940] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 2729.788949][T31940] rust_binder: Write failure EINVAL in pid:255 [ 2729.826968][T31944] input: syz0 as /devices/virtual/input/input181 [ 2729.872032][T31946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46176'. [ 2729.884950][T31946] fuse: Bad value for 'user_id' [ 2729.889872][T31946] fuse: Bad value for 'user_id' [ 2730.058130][T31952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2730.058160][T31952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:262 [ 2730.132362][T31956] rust_binder: Fixups oob 165 172 361 173 [ 2730.160716][T31956] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 2730.166520][T31956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2730.185373][T31956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 2730.255460][T31962] netlink: 36 bytes leftover after parsing attributes in process `syz.8.46182'. [ 2730.700676][T31980] netlink: 196 bytes leftover after parsing attributes in process `syz.0.46190'. [ 2730.854699][T31985] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 2730.994649][T31990] netlink: 'syz.0.46194': attribute type 11 has an invalid length. [ 2731.407880][ T36] kauditd_printk_skb: 549 callbacks suppressed [ 2731.407898][ T36] audit: type=1400 audit(2000000116.327:152745): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2731.430736][T31996] rust_binder: inc_ref_done called when no active inc_refs [ 2731.472070][ T36] audit: type=1400 audit(2000000116.327:152746): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2731.513256][ T36] audit: type=1400 audit(2000000116.337:152747): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2731.534045][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.8.46198'. [ 2731.543400][ T36] audit: type=1400 audit(2000000116.346:152748): avc: denied { read } for pid=31995 comm="syz.8.46197" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2731.573394][ T36] audit: type=1400 audit(2000000116.346:152749): avc: denied { read open } for pid=31995 comm="syz.8.46197" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2731.601381][ T36] audit: type=1400 audit(2000000116.355:152750): avc: denied { ioctl } for pid=31995 comm="syz.8.46197" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2731.652214][ T36] audit: type=1400 audit(2000000116.355:152751): avc: denied { set_context_mgr } for pid=31995 comm="syz.8.46197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2731.675091][ T36] audit: type=1400 audit(2000000116.355:152752): avc: denied { ioctl } for pid=31995 comm="syz.8.46197" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2731.701563][ T36] audit: type=1400 audit(2000000116.374:152753): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2731.711394][T32009] tipc: Enabling of bearer rejected, failed to enable media [ 2731.727014][ T36] audit: type=1400 audit(2000000116.374:152754): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2732.201373][T32042] netlink: 'syz.3.46215': attribute type 16 has an invalid length. [ 2732.209386][T32042] netlink: 'syz.3.46215': attribute type 2 has an invalid length. [ 2732.217223][T32042] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.46215'. [ 2732.282365][T32049] cannot load conntrack support for proto=3 [ 2732.780264][T32078] input: syz0 as /devices/virtual/input/input183 [ 2732.934020][T32085] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 2732.934044][T32085] rust_binder: Error while translating object. [ 2732.942791][T32085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2732.949779][T32085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 2735.245419][ T421] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2735.405905][T32189] netlink: 1351 bytes leftover after parsing attributes in process `syz.3.46263'. [ 2735.426573][ T421] usb 9-1: Using ep0 maxpacket: 16 [ 2735.433629][ T421] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2735.443836][ T421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2735.454763][ T421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2735.464515][ T421] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2735.473574][ T421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.483019][ T421] usb 9-1: config 0 descriptor?? [ 2735.920341][ T421] hid-picolcd 0003:04D8:F002.0082: report_id 0 is invalid [ 2735.927575][ T421] hid-picolcd 0003:04D8:F002.0082: item 0 4 1 8 parsing failed [ 2735.935485][ T421] hid-picolcd 0003:04D8:F002.0082: device report parse failed [ 2735.943094][ T421] hid-picolcd 0003:04D8:F002.0082: probe with driver hid-picolcd failed with error -22 [ 2736.135250][T26952] usb 9-1: USB disconnect, device number 15 [ 2736.737431][T26952] rust_binder: 32170: removing orphan mapping 0:24 [ 2736.745236][ T36] kauditd_printk_skb: 778 callbacks suppressed [ 2736.745255][ T36] audit: type=1400 audit(2000004473.336:153533): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2736.805962][ T36] audit: type=1400 audit(2000004473.336:153534): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2736.838444][ T36] audit: type=1400 audit(2000004473.336:153535): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2736.876031][ T36] audit: type=1400 audit(2000004473.392:153536): avc: denied { create } for pid=32219 comm="syz.0.46276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2736.907081][ T36] audit: type=1400 audit(2000004473.392:153537): avc: denied { write } for pid=32219 comm="syz.0.46276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2736.933608][ T36] audit: type=1400 audit(2000004473.392:153538): avc: denied { read } for pid=32219 comm="syz.0.46276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2736.954333][ T36] audit: type=1400 audit(2000004473.392:153539): avc: denied { read } for pid=32219 comm="syz.0.46276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2737.008027][T32233] devpts: called with bogus options [ 2737.014740][ T36] audit: type=1400 audit(2000004473.392:153540): avc: denied { read } for pid=32217 comm="syz.8.46275" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2737.052597][ T36] audit: type=1400 audit(2000004473.392:153541): avc: denied { read open } for pid=32217 comm="syz.8.46275" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2737.081160][ T36] audit: type=1400 audit(2000004473.429:153542): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2737.145097][T32240] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 2737.152819][T32240] SELinux: failed to load policy [ 2737.159936][T32240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2737.159967][T32240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:326 [ 2737.180205][T32241] __vm_enough_memory: pid: 32241, comm: syz.7.46282, bytes: 18014402804453376 not enough memory for the allocation [ 2737.396209][T32249] rust_binder: 32246 RLIMIT_NICE not set [ 2737.398895][T32249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 2737.626596][T32261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.46290'. [ 2737.767548][T32260] bridge0: port 1(bridge_slave_0) entered blocking state [ 2737.773479][T32264] netlink: 'syz.3.46291': attribute type 16 has an invalid length. [ 2737.776189][T32260] bridge0: port 1(bridge_slave_0) entered disabled state [ 2737.789892][T32260] bridge_slave_0: entered allmulticast mode [ 2737.796276][T32260] bridge_slave_0: entered promiscuous mode [ 2737.796465][T32268] input: syz0 as /devices/virtual/input/input184 [ 2737.803834][T32260] bridge0: port 2(bridge_slave_1) entered blocking state [ 2737.815442][T32260] bridge0: port 2(bridge_slave_1) entered disabled state [ 2737.822515][T32260] bridge_slave_1: entered allmulticast mode [ 2737.824966][T32264] netlink: 'syz.3.46291': attribute type 3 has an invalid length. [ 2737.828901][T32260] bridge_slave_1: entered promiscuous mode [ 2737.856778][T32264] netlink: 64054 bytes leftover after parsing attributes in process `syz.3.46291'. [ 2738.080811][T32288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:318 [ 2738.100149][T32260] bridge0: port 2(bridge_slave_1) entered blocking state [ 2738.116396][T32260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2738.123703][T32260] bridge0: port 1(bridge_slave_0) entered blocking state [ 2738.130742][T32260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2738.212278][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 2738.224688][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 2738.247317][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2738.254409][ T7687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2738.271989][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state [ 2738.279081][ T7352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2738.319147][T32303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:351 [ 2738.360328][T32260] veth0_vlan: entered promiscuous mode [ 2738.398557][T32260] veth1_macvtap: entered promiscuous mode [ 2738.641748][T32308] incfs: Options parsing error. -22 [ 2738.647079][T32308] incfs: mount failed -22 [ 2738.901093][T32314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.46304'. [ 2739.551937][T26952] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2739.603824][T32361] rust_binder: inc_ref_done called when no active inc_refs [ 2739.735924][T26952] usb 9-1: config 14 has an invalid interface number: 21 but max is 0 [ 2739.751398][T26952] usb 9-1: config 14 has no interface number 0 [ 2739.758905][T26952] usb 9-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 2739.785990][T26952] usb 9-1: config 14 interface 21 has no altsetting 0 [ 2739.804104][T26952] usb 9-1: string descriptor 0 read error: -22 [ 2739.812598][T26952] usb 9-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 2739.823450][T26952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.837178][T32337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2739.849023][T26952] usb 9-1: MIDIStreaming interface descriptor not found [ 2739.858939][T32371] rust_binder: Error while translating object. [ 2739.858985][T32371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2739.873839][T32371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:340 [ 2740.068193][T32377] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2740.098921][T32377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2740.122644][T32377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:354 [ 2740.147858][T26952] usb 9-1: USB disconnect, device number 16 [ 2740.648128][T32400] netlink: 'syz.0.46331': attribute type 4 has an invalid length. [ 2740.656274][T32400] netlink: 'syz.0.46331': attribute type 32 has an invalid length. [ 2740.674500][T32400] rust_binder: Write failure EFAULT in pid:25 [ 2740.771504][T32404] netlink: 'syz.8.46335': attribute type 27 has an invalid length. [ 2740.838114][T32407] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 2740.844503][T32407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2740.863467][T32406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2740.866898][ T7352] bridge0: port 3(veth0_to_team) entered blocking state [ 2740.885492][ T7352] bridge0: port 3(veth0_to_team) entered forwarding state [ 2740.931330][T32404] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 2741.264418][T32426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2741.264460][T32425] tc_dump_action: action bad kind [ 2741.284759][T32425] tc_dump_action: action bad kind [ 2741.292114][T32425] tc_dump_action: action bad kind [ 2741.294296][T32426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2741.297511][T32425] tc_dump_action: action bad kind [ 2741.304743][T32426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2741.310413][T32426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2741.310657][T32425] tc_dump_action: action bad kind [ 2741.322806][T32426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2741.536618][T32441] bridge0: entered allmulticast mode [ 2742.134491][ T36] kauditd_printk_skb: 3587 callbacks suppressed [ 2742.134508][ T36] audit: type=1400 audit(2000004478.393:157130): avc: denied { create } for pid=32457 comm="syz.3.46352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2742.165873][ T36] audit: type=1400 audit(2000004478.402:157131): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2742.198894][ T36] audit: type=1400 audit(2000004478.402:157132): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2742.224211][ T36] audit: type=1400 audit(2000004478.402:157133): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2742.250129][ T36] audit: type=1400 audit(2000004478.430:157134): avc: denied { create } for pid=32457 comm="syz.3.46352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2742.272292][ T36] audit: type=1400 audit(2000004478.430:157135): avc: denied { write } for pid=32457 comm="syz.3.46352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2742.318040][ T36] audit: type=1400 audit(2000004478.458:157136): avc: denied { create } for pid=32460 comm="syz.8.46353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2742.385272][ T36] audit: type=1400 audit(2000004478.458:157137): avc: denied { create } for pid=32460 comm="syz.8.46353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2742.419325][T32474] rust_binder: Failed copying remainder into alloc: EFAULT [ 2742.419347][T32474] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 2742.426595][T32474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2742.458348][T32474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:359 [ 2742.461946][ T36] audit: type=1400 audit(2000004478.505:157138): avc: denied { create } for pid=32465 comm="syz.3.46354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2742.523701][ T36] audit: type=1400 audit(2000004478.505:157139): avc: denied { bind } for pid=32465 comm="syz.3.46354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2742.552834][T32482] input: syz0 as /devices/virtual/input/input186 [ 2742.633415][T26952] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 2742.815694][T26952] usb 9-1: config 8 has an invalid interface number: 223 but max is 0 [ 2742.824297][T26952] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2742.834433][T26952] usb 9-1: config 8 has no interface number 0 [ 2742.840571][T26952] usb 9-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2742.850481][T26952] usb 9-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2742.866989][T26952] usb 9-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2742.876035][T26952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.884639][T26952] usb 9-1: Product: syz [ 2742.889138][T26952] usb 9-1: Manufacturer: syz [ 2742.893738][T26952] usb 9-1: SerialNumber: syz [ 2743.185660][T32510] netlink: 'syz.8.46356': attribute type 13 has an invalid length. [ 2743.198553][T26952] usb 9-1: USB disconnect, device number 17 [ 2743.616645][T32520] __vm_enough_memory: pid: 32520, comm: syz.7.46372, bytes: 18014402804453376 not enough memory for the allocation [ 2743.698824][T32522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 2743.825012][T32526] tipc: Trying to set illegal importance in message [ 2744.001042][T32532] input: syz0 as /devices/virtual/input/input187 [ 2744.188045][ T421] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2744.347936][ T421] usb 9-1: Using ep0 maxpacket: 8 [ 2744.355611][ T421] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2744.366597][ T421] usb 9-1: config 6 has an invalid interface number: 248 but max is 0 [ 2744.374914][ T421] usb 9-1: config 6 has no interface number 0 [ 2744.381025][ T421] usb 9-1: config 6 interface 248 has no altsetting 0 [ 2744.390369][ T421] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2744.399536][ T421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.415342][ T421] usb 9-1: Product: syz [ 2744.422978][ T421] usb 9-1: Manufacturer: syz [ 2744.433187][ T421] usb 9-1: SerialNumber: syz [ 2744.494915][T26952] rust_binder: 32534: removing orphan mapping 0:24 [ 2744.563464][T32542] rust_binder: 40: no such ref 2 [ 2744.568512][T32542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 2744.657421][ T421] ums-karma 9-1:6.248: USB Mass Storage device detected [ 2744.689810][T32547] rust_binder: 32546 RLIMIT_NICE not set [ 2744.690614][T32546] rust_binder: Error while translating object. [ 2744.696365][T32546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2744.702629][T32546] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 2744.712260][T32546] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:45 [ 2744.718720][ T421] usb 9-1: USB disconnect, device number 18 [ 2744.761386][T32546] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2744.929743][T32554] binder: Unknown parameter 'contextÌðÔð[7’' [ 2745.059621][T32565] netlink: 96 bytes leftover after parsing attributes in process `syz.7.46386'. [ 2745.115077][T32567] rust_binder: Error in use_page_slow: ESRCH [ 2745.115096][T32567] rust_binder: use_range failure ESRCH [ 2745.136703][T32567] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 2745.144709][T32567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2745.159608][T32567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:55 [ 2745.280975][T32577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2745.300763][T32577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:393 [ 2745.516933][T32583] netlink: 'syz.8.46394': attribute type 12 has an invalid length. [ 2745.542918][ T331] rust_binder: 32581: removing orphan mapping 0:24 [ 2745.968076][ T4625] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 2746.130505][ T4625] usb 9-1: config 1 has an invalid interface number: 146 but max is 0 [ 2746.138770][ T4625] usb 9-1: config 1 has no interface number 0 [ 2746.144892][ T4625] usb 9-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2746.158890][ T4625] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 2746.168038][ T4625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2746.176068][ T4625] usb 9-1: Product: syz [ 2746.180230][ T4625] usb 9-1: Manufacturer: syz [ 2746.184837][ T4625] usb 9-1: SerialNumber: syz [ 2746.198629][ T4625] usbserial_generic 9-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2746.210110][ T4625] usbserial_generic 9-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2746.221092][ T4625] usbserial_generic 9-1:1.146: generic converter detected [ 2746.230012][ T4625] usb 9-1: generic converter now attached to ttyUSB0 [ 2746.365532][T32597] veth1: entered allmulticast mode [ 2746.370767][T32595] veth1: left allmulticast mode [ 2746.409949][T30620] usb 9-1: USB disconnect, device number 19 [ 2746.417412][T30620] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2746.425632][T30620] usbserial_generic 9-1:1.146: device disconnected [ 2746.785003][T32628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.46410'. [ 2746.838978][T32630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46411'. [ 2748.420546][ T36] kauditd_printk_skb: 712 callbacks suppressed [ 2748.420563][ T36] audit: type=1400 audit(2000004484.294:157852): avc: denied { read write } for pid=32260 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2748.454871][ T36] audit: type=1400 audit(2000004484.294:157853): avc: denied { read write open } for pid=32260 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2748.480188][ T36] audit: type=1400 audit(2000004484.294:157854): avc: denied { ioctl } for pid=32260 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2748.780285][ T36] audit: type=1400 audit(2000004484.622:157855): avc: denied { read write } for pid=29523 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2748.804665][ T36] audit: type=1400 audit(2000004484.622:157856): avc: denied { read write open } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2748.830686][ T36] audit: type=1400 audit(2000004484.622:157857): avc: denied { ioctl } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2763.132490][ T36] audit: type=1400 audit(2000004498.095:157858): avc: denied { read } for pid=32636 comm="syz.7.46413" name="binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2763.197476][ T36] audit: type=1400 audit(2000004498.095:157859): avc: denied { read open } for pid=32636 comm="syz.7.46413" path="/dev/binderfs/binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2763.223901][ T36] audit: type=1400 audit(2000004498.095:157860): avc: denied { ioctl } for pid=32636 comm="syz.7.46413" path="/dev/binderfs/binder1" dev="binder" ino=44 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2763.292733][ T36] audit: type=1400 audit(2000004498.123:157861): avc: denied { read write } for pid=32641 comm="syz.0.46414" name="binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2763.372745][ T36] audit: type=1400 audit(2000004498.123:157862): avc: denied { read write open } for pid=32641 comm="syz.0.46414" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2763.451823][ T36] audit: type=1400 audit(2000004498.123:157863): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2763.516128][ T36] audit: type=1400 audit(2000004498.123:157864): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2763.546249][ T36] audit: type=1400 audit(2000004498.123:157865): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2763.565992][T32681] devtmpfs: Unknown parameter 'fuse' [ 2763.606732][ T36] audit: type=1400 audit(2000004498.123:157866): avc: denied { read write } for pid=29523 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2763.632945][ T36] audit: type=1400 audit(2000004498.123:157867): avc: denied { read write open } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2763.677916][T32679] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 2763.813646][T32694] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 2763.988983][T32704] rust_binder: Write failure EFAULT in pid:430 [ 2763.991420][T32704] binder: Unknown parameter 'stats¤’Ú°ŽŸ7PÂß&à¾' [ 2764.333052][T30620] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2764.433907][T32716] binder: Unknown parameter 'fscontext?}_stat' [ 2764.496423][T30620] usb 9-1: too many configurations: 21, using maximum allowed: 8 [ 2764.508860][T30620] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2764.516893][T30620] usb 9-1: can't read configurations, error -61 [ 2764.663422][T30620] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2764.710365][T32723] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2764.805396][T32730] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 2764.834464][T30620] usb 9-1: too many configurations: 21, using maximum allowed: 8 [ 2764.865029][T30620] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2764.873853][T30620] usb 9-1: can't read configurations, error -61 [ 2764.880932][T30620] usb usb9-port1: attempt power cycle [ 2764.964651][T32746] netlink: 'syz.3.46450': attribute type 13 has an invalid length. [ 2765.249675][T30620] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2765.272241][T30620] usb 9-1: too many configurations: 21, using maximum allowed: 8 [ 2765.282126][T30620] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2765.289732][T30620] usb 9-1: can't read configurations, error -61 [ 2765.430870][T30620] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2765.453474][T30620] usb 9-1: too many configurations: 21, using maximum allowed: 8 [ 2765.463793][T30620] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2765.471371][T30620] usb 9-1: can't read configurations, error -61 [ 2765.477879][T30620] usb usb9-port1: unable to enumerate USB device [ 2766.229733][ T302] fuse: Bad value for 'fd' [ 2766.592997][ T381] netlink: 680 bytes leftover after parsing attributes in process `syz.3.46460'. [ 2767.701149][ T421] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2767.861033][ T421] usb 9-1: Using ep0 maxpacket: 8 [ 2767.867959][ T421] usb 9-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 64 [ 2767.877854][ T421] usb 9-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2767.890879][ T421] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2767.904623][ T421] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2767.913713][ T421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.921787][ T421] usb 9-1: Product: syz [ 2767.925981][ T421] usb 9-1: SerialNumber: syz [ 2767.933169][ T407] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2767.940806][ T407] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2768.384928][ T408] syzkaller0: entered promiscuous mode [ 2768.390408][ T408] syzkaller0: entered allmulticast mode [ 2768.398665][T32752] usb 9-1: USB disconnect, device number 24 [ 2769.022469][ T36] kauditd_printk_skb: 573 callbacks suppressed [ 2769.022486][ T36] audit: type=1400 audit(2000004503.621:158441): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2769.086454][ T36] audit: type=1400 audit(2000004503.621:158442): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2769.117390][ T470] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 2769.120455][ T36] audit: type=1400 audit(2000004503.621:158443): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2769.139849][ T470] rust_binder: Write failure EINVAL in pid:449 [ 2769.153060][ T36] audit: type=1400 audit(2000004503.630:158444): avc: denied { read } for pid=467 comm="syz.8.46494" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2769.182919][ T36] audit: type=1400 audit(2000004503.630:158445): avc: denied { read open } for pid=467 comm="syz.8.46494" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2769.208056][ T36] audit: type=1400 audit(2000004503.630:158446): avc: denied { ioctl } for pid=467 comm="syz.8.46494" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2769.234156][ T36] audit: type=1400 audit(2000004503.630:158447): avc: denied { ioctl } for pid=467 comm="syz.8.46494" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2769.260449][ T36] audit: type=1400 audit(2000004503.658:158448): avc: denied { read write } for pid=30246 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2769.284890][ T36] audit: type=1400 audit(2000004503.658:158449): avc: denied { read write open } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2769.310841][ T36] audit: type=1400 audit(2000004503.658:158450): avc: denied { ioctl } for pid=30246 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2769.609089][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46502'. [ 2769.688795][ T493] netlink: 'syz.0.46504': attribute type 4 has an invalid length. [ 2769.697028][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46504'. [ 2770.041645][ T516] input: syz0 as /devices/virtual/input/input189 [ 2770.499599][ T543] netlink: 'syz.8.46522': attribute type 21 has an invalid length. [ 2770.519485][ T543] netlink: 388 bytes leftover after parsing attributes in process `syz.8.46522'. [ 2770.539750][ T543] rust_binder: Write failure EFAULT in pid:470 [ 2770.624087][ T551] rust_binder: Write failure EINVAL in pid:472 [ 2770.751985][ T561] overlayfs: lower data-only dirs require metacopy support. [ 2770.791046][ T566] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2770.945427][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2770.945681][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2770.958111][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2770.958792][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2770.974484][ T580] /dev/nbd7: Can't lookup blockdev [ 2770.984291][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2770.994565][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2770.994858][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.015067][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.015329][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.015490][ T580] input: syz0 as /devices/virtual/input/input190 [ 2771.029400][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.051788][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.052088][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.080197][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.080495][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.098014][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.098313][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.134602][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.134869][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.160618][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.160883][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.198237][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.198505][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.205280][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.231727][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.273361][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.273609][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.293832][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.294109][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.309911][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.323688][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.324038][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.330784][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.337605][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.358725][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.379075][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.412712][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.415303][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.441636][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.441883][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.457324][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.457587][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.466453][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.473199][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.481373][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.488106][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.494560][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.509764][ T597] netlink: 'syz.3.46543': attribute type 15 has an invalid length. [ 2771.525091][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.525355][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.534290][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.540897][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.577332][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.578104][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.594101][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.594406][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.604600][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.607562][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.615612][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.622445][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.630505][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.636250][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.643127][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.694925][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.695217][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2771.715242][ T574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2772.036928][ T616] binder: Bad value for 'defcontext' [ 2772.098652][ T620] overlay: Unknown parameter 'smackfstransmute' [ 2772.243043][ T628] input: syz0 as /devices/virtual/input/input192 [ 2772.475952][ T644] netlink: 'syz.8.46560': attribute type 28 has an invalid length. [ 2772.930896][ T693] rust_binder: Error while translating object. [ 2772.930942][ T693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2772.938286][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 2773.050992][ T700] netlink: 176 bytes leftover after parsing attributes in process `syz.3.46580'. [ 2773.055221][ T702] fuse: Bad value for 'user_id' [ 2773.075646][ T702] fuse: Bad value for 'user_id' [ 2773.969478][ T719] rust_binder: Error in use_page_slow: ESRCH [ 2773.969502][ T719] rust_binder: use_range failure ESRCH [ 2773.975590][ T719] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2773.981112][ T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2773.989192][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:523 [ 2774.121493][ T724] netlink: 'syz.8.46589': attribute type 5 has an invalid length. [ 2774.138805][ T724] netlink: 'syz.8.46589': attribute type 5 has an invalid length. [ 2774.147092][ T724] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.46589'. [ 2775.805175][ T36] kauditd_printk_skb: 1493 callbacks suppressed [ 2775.805193][ T36] audit: type=1400 audit(2000004509.991:159944): avc: denied { unmount } for pid=32260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2775.835811][ T36] audit: type=1400 audit(2000004510.019:159945): avc: denied { read write } for pid=32260 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2775.860262][ T36] audit: type=1400 audit(2000004510.019:159946): avc: denied { read write open } for pid=32260 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2775.886355][ T36] audit: type=1400 audit(2000004510.019:159947): avc: denied { ioctl } for pid=32260 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2775.912205][ T36] audit: type=1400 audit(2000004510.038:159948): avc: denied { mounton } for pid=730 comm="syz.0.46591" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2775.936212][ T36] audit: type=1400 audit(2000004510.038:159949): avc: denied { mount } for pid=730 comm="syz.0.46591" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2775.958800][ T36] audit: type=1400 audit(2000004510.038:159950): avc: denied { create } for pid=730 comm="syz.0.46591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2775.978529][ T36] audit: type=1400 audit(2000004510.038:159951): avc: denied { read write } for pid=730 comm="syz.0.46591" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2776.002198][ T36] audit: type=1400 audit(2000004510.038:159952): avc: denied { read write open } for pid=730 comm="syz.0.46591" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2776.026728][ T36] audit: type=1400 audit(2000004510.038:159953): avc: denied { ioctl } for pid=730 comm="syz.0.46591" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2777.098842][ T762] tipc: New replicast peer: 255.255.255.255 [ 2777.104998][ T762] tipc: Enabled bearer , priority 10 [ 2778.553923][ T802] 9pnet_fd: Insufficient options for proto=fd [ 2778.788076][ T822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2778.788107][ T822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567 [ 2778.799023][ T822] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 2778.808891][ T822] rust_binder: Error in use_page_slow: EBUSY [ 2778.819390][ T822] rust_binder: use_range failure EBUSY [ 2778.825376][ T822] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 2778.830942][ T822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 2778.838754][ T822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:567 [ 2779.178513][ T834] rust_binder: Write failure EINVAL in pid:141 [ 2779.412613][ T844] netlink: 12 bytes leftover after parsing attributes in process `syz.8.46633'. [ 2779.496625][ T846] binder: Bad value for 'max' [ 2779.831480][ T857] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 2779.831507][ T857] rust_binder: Error while translating object. [ 2779.842812][ T857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2779.849004][ T857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 2780.097684][ T7356] tipc: Subscription rejected, illegal request [ 2780.260244][ T881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=85 sclass=netlink_tcpdiag_socket pid=881 comm=syz.3.46646 [ 2780.459619][T32752] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 2780.622591][T32752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2780.633685][T32752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2780.643469][T32752] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 2780.652662][T32752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.662077][T32752] usb 9-1: config 0 descriptor?? [ 2780.800307][ T886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=886 comm=syz.7.46648 [ 2780.814179][ T886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=886 comm=syz.7.46648 [ 2780.828026][ T886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=886 comm=syz.7.46648 [ 2781.099991][ T900] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 2781.115203][T32752] logitech-djreceiver 0003:046D:C52F.0083: ignoring exceeding usage max [ 2781.131345][T32752] logitech-djreceiver 0003:046D:C52F.0083: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.8-1/input0 [ 2781.152682][ T36] kauditd_printk_skb: 527 callbacks suppressed [ 2781.152698][ T36] audit: type=1400 audit(2000004515.011:160481): avc: denied { mounton } for pid=899 comm="syz.7.46653" path="/172/file0" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2781.216404][ T36] audit: type=1400 audit(2000004515.057:160482): avc: denied { map } for pid=899 comm="syz.7.46653" path="/dev/binderfs/binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2781.242158][ T36] audit: type=1400 audit(2000004515.057:160483): avc: denied { read } for pid=899 comm="syz.7.46653" path="/dev/binderfs/binder1" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2781.266856][ T36] audit: type=1400 audit(2000004515.057:160484): avc: denied { create } for pid=899 comm="syz.7.46653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2781.287295][ T36] audit: type=1400 audit(2000004515.067:160485): avc: denied { create } for pid=903 comm="syz.3.46654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2781.307155][ T36] audit: type=1400 audit(2000004515.086:160486): avc: denied { create } for pid=903 comm="syz.3.46654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2781.329390][ T36] audit: type=1400 audit(2000004515.170:160487): avc: denied { read } for pid=858 comm="syz.8.46638" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2781.352350][ T36] audit: type=1400 audit(2000004515.170:160488): avc: denied { read open } for pid=858 comm="syz.8.46638" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2781.376191][ T36] audit: type=1400 audit(2000004515.170:160489): avc: denied { ioctl } for pid=858 comm="syz.8.46638" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2781.805167][ T36] audit: type=1400 audit(2000004515.620:160490): avc: denied { execmem } for pid=905 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2781.888014][T32752] usb 9-1: USB disconnect, device number 25 [ 2782.142554][ T906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2782.149661][ T906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2782.157269][ T906] bridge_slave_0: entered allmulticast mode [ 2782.163650][ T906] bridge_slave_0: entered promiscuous mode [ 2782.172608][ T906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2782.180446][ T906] bridge0: port 2(bridge_slave_1) entered disabled state [ 2782.188327][ T906] bridge_slave_1: entered allmulticast mode [ 2782.194673][ T906] bridge_slave_1: entered promiscuous mode [ 2782.302338][ T906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2782.309407][ T906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2782.316708][ T906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2782.323739][ T906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2782.365635][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 2782.372977][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 2782.387410][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state [ 2782.394499][ T7352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2782.405065][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2782.412134][ T7687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2782.481813][ T906] veth0_vlan: entered promiscuous mode [ 2782.533279][ T906] veth1_macvtap: entered promiscuous mode [ 2782.713708][ T930] rust_binder: Error while translating object. [ 2782.713745][ T930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2782.730091][ T930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:603 [ 2782.773029][ T934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 2782.810299][ T934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2782.820187][ T934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 2782.942444][ T945] binder: Bad value for 'max' [ 2783.094374][ T957] binder: Unknown parameter 'mAÇJ$;]µ"yÆbÔS¡¿x' [ 2783.133636][ T963] tmpfs: Bad value for 'nr_inodes' [ 2783.148282][ T963] tmpfs: Bad value for 'nr_inodes' [ 2783.189158][ T968] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2783.509768][ T994] bpf: Bad value for 'gid' [ 2783.662661][ T1004] overlayfs: lower data-only dirs require metacopy support. [ 2783.802381][ T1009] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 2783.802406][ T1009] rust_binder: Error while translating object. [ 2783.814862][ T1009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2783.821105][ T1009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 2784.122004][ T1021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2784.131690][ T1017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 2784.364811][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 2784.375153][ T1035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2784.384771][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:42 [ 2784.647945][ T1053] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2784.657992][ T1053] rust_binder: Error while translating object. [ 2784.669184][ T1053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2784.675438][ T1053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 2784.802268][ T1058] /dev/rnullb0: Can't lookup blockdev [ 2785.192110][T32752] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2785.351976][T32752] usb 4-1: Using ep0 maxpacket: 8 [ 2785.359021][T32752] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2785.369831][T32752] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2785.380293][T32752] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2785.390899][T32752] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2785.401056][T32752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.409706][T32752] usb 4-1: Product: syz [ 2785.413991][T32752] usb 4-1: Manufacturer: syz [ 2785.419412][T32752] usb 4-1: SerialNumber: syz [ 2785.427015][ T1068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2785.450151][ T1068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2785.555809][ T1075] rust_binder: 1074 RLIMIT_NICE not set [ 2785.556487][ T1074] rust_binder: Error while translating object. [ 2785.562123][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2785.568333][ T1074] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 2785.577703][ T1074] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:179 [ 2785.628438][ T1077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46715'. [ 2785.645776][ T1077] bridge_slave_1: left allmulticast mode [ 2785.652773][ T1077] bridge_slave_1: left promiscuous mode [ 2785.658482][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 2785.666529][ T1077] bridge_slave_0: left allmulticast mode [ 2785.672327][ T1077] bridge_slave_0: left promiscuous mode [ 2785.677951][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 2785.683596][T32752] usblp0: Disabling reads from problematic bidirectional printer [ 2785.697420][T32752] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 115 if 0 alt 1 proto 1 vid 0x03F0 pid 0x0004 [ 2785.704409][ T1078] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2785.715072][T32752] usb 4-1: USB disconnect, device number 115 [ 2785.731086][T32752] usblp0: removed [ 2785.896811][ T1086] 9pnet_fd: Insufficient options for proto=fd [ 2786.248694][ T1097] SELinux: failed to load policy [ 2786.571716][ T36] kauditd_printk_skb: 768 callbacks suppressed [ 2786.571733][ T36] audit: type=1400 audit(2000004520.086:161259): avc: denied { read write } for pid=906 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2786.603050][ T36] audit: type=1400 audit(2000004520.086:161260): avc: denied { read write open } for pid=906 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2786.629189][ T36] audit: type=1400 audit(2000004520.086:161261): avc: denied { ioctl } for pid=906 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2786.654879][ T36] audit: type=1400 audit(2000004520.105:161262): avc: denied { read write } for pid=1238 comm="syz.3.46727" name="binder1" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2786.678462][ T36] audit: type=1400 audit(2000004520.105:161263): avc: denied { read write open } for pid=1238 comm="syz.3.46727" path="/dev/binderfs/binder1" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2786.703683][ T36] audit: type=1400 audit(2000004520.105:161264): avc: denied { create } for pid=1238 comm="syz.3.46727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2786.724530][ T36] audit: type=1400 audit(2000004520.105:161265): avc: denied { read } for pid=1238 comm="syz.3.46727" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2786.747475][ T36] audit: type=1400 audit(2000004520.105:161266): avc: denied { read open } for pid=1238 comm="syz.3.46727" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2786.771889][ T36] audit: type=1400 audit(2000004520.105:161267): avc: denied { ioctl } for pid=1238 comm="syz.3.46727" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2786.797218][ T36] audit: type=1400 audit(2000004520.236:161268): avc: denied { read write } for pid=906 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2786.865817][ T1244] netlink: 4 bytes leftover after parsing attributes in process `syz.8.46729'. [ 2786.874914][ T1244] veth0_to_team: left allmulticast mode [ 2786.881364][ T1244] veth0_to_team: left promiscuous mode [ 2786.887146][ T1244] bridge0: port 3(veth0_to_team) entered disabled state [ 2786.894873][ T1244] bridge_slave_1: left allmulticast mode [ 2786.901403][ T1244] bridge_slave_1: left promiscuous mode [ 2786.907095][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 2786.916018][ T1244] bridge_slave_0: left allmulticast mode [ 2786.921808][ T1244] bridge_slave_0: left promiscuous mode [ 2786.927447][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 2787.289631][ T1262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46732'. [ 2787.302744][ T1262] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2787.302766][ T1262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2787.310688][ T1262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:216 [ 2787.938283][ T1279] overlayfs: failed to clone upperpath [ 2787.980965][ T1284] fuse: Bad value for 'group_id' [ 2787.985967][ T1284] fuse: Bad value for 'group_id' [ 2788.044275][ T1288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46746'. [ 2788.053380][ T1288] bridge_slave_1: left allmulticast mode [ 2788.059098][ T1288] bridge_slave_1: left promiscuous mode [ 2788.064965][ T1288] bridge0: port 2(bridge_slave_1) entered disabled state [ 2788.073505][ T1288] bridge_slave_0: left allmulticast mode [ 2788.079175][ T1288] bridge_slave_0: left promiscuous mode [ 2788.085057][ T1288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2788.148835][ T7356] Bluetooth: hci0: Frame reassembly failed (-84) [ 2789.028515][ T1315] netlink: 'syz.7.46755': attribute type 4 has an invalid length. [ 2789.038853][ T1315] IPv6: NLM_F_CREATE should be specified when creating new route [ 2789.048249][ T1315] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2789.265708][ T1323] binder: Unknown parameter '0x0000000000000000' [ 2789.285233][ T1323] binder: Unknown parameter '0x0000000000000000' [ 2789.625710][ T1347] rust_binder: Error while translating object. [ 2789.625747][ T1347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2789.632096][ T1347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:207 [ 2790.008799][ T1362] overlayfs: failed to clone upperpath [ 2790.076357][ T1363] rust_binder: Error in use_page_slow: ESRCH [ 2790.076380][ T1363] rust_binder: use_range failure ESRCH [ 2790.087061][ T1363] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 2790.092571][ T1363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2790.100627][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:218 [ 2790.242185][ T1383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:223 [ 2790.287146][T21935] Bluetooth: hci0: command 0x1003 tx timeout [ 2790.287623][ T5554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2790.408186][ T1386] netlink: 44 bytes leftover after parsing attributes in process `syz.0.46780'. [ 2790.419111][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46780'. [ 2790.441516][ T1386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46780'. [ 2790.598612][ T1394] rust_binder: Error in use_page_slow: ESRCH [ 2790.598629][ T1394] rust_binder: use_range failure ESRCH [ 2790.604702][ T1394] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2790.610234][ T1394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2790.618289][ T1394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:231 [ 2790.696528][ T1400] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2790.944711][ T1427] can0: slcan on ptm1. [ 2791.935418][ T36] kauditd_printk_skb: 667 callbacks suppressed [ 2791.935435][ T36] audit: type=1400 audit(2000004525.119:161936): avc: denied { read write } for pid=29523 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2791.967852][ T36] audit: type=1400 audit(2000004525.119:161937): avc: denied { read write open } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2792.038693][ T1495] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2792.045238][ T1495] audit: audit_lost=77 audit_rate_limit=0 audit_backlog_limit=64 [ 2792.053196][ T36] audit: type=1400 audit(2000004525.119:161938): avc: denied { ioctl } for pid=29523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2792.069285][ T1494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2792.079397][ T1495] audit: backlog limit exceeded [ 2792.088616][ T1497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2792.097202][ T1495] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2792.100769][ T1494] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 2792.439469][ T1511] FAULT_INJECTION: forcing a failure. [ 2792.439469][ T1511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2792.454445][ T1511] CPU: 1 UID: 0 PID: 1511 Comm: syz.3.46812 Not tainted syzkaller #0 5858c650b1a5817904c779681fc6b689ba617a84 [ 2792.454481][ T1511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2792.454495][ T1511] Call Trace: [ 2792.454502][ T1511] [ 2792.454511][ T1511] __dump_stack+0x21/0x30 [ 2792.454543][ T1511] dump_stack_lvl+0x10c/0x190 [ 2792.454569][ T1511] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2792.454596][ T1511] dump_stack+0x19/0x20 [ 2792.454621][ T1511] should_fail_ex+0x3d9/0x530 [ 2792.454641][ T1511] should_fail+0xf/0x20 [ 2792.454659][ T1511] should_fail_usercopy+0x1e/0x30 [ 2792.454680][ T1511] _copy_from_user+0x22/0xb0 [ 2792.454703][ T1511] kvm_arch_vcpu_ioctl+0x3d8/0x2e50 [ 2792.454724][ T1511] ? avc_has_perm+0x144/0x220 [ 2792.454750][ T1511] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 2792.454769][ T1511] ? avc_perm_nonode+0x101/0x1b0 [ 2792.454795][ T1511] ? avc_has_perm_noaudit+0x360/0x360 [ 2792.454822][ T1511] ? selinux_file_open+0x457/0x610 [ 2792.454844][ T1511] ? __cfi_selinux_file_open+0x10/0x10 [ 2792.454870][ T1511] ? is_bpf_text_address+0x17b/0x1a0 [ 2792.454892][ T1511] ? kernel_text_address+0xa9/0xe0 [ 2792.454917][ T1511] ? __kernel_text_address+0x11/0x40 [ 2792.454941][ T1511] ? do_vfs_ioctl+0xeda/0x1e30 [ 2792.454963][ T1511] ? arch_stack_walk+0x10b/0x170 [ 2792.454982][ T1511] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 2792.455004][ T1511] ? _parse_integer_limit+0x195/0x1e0 [ 2792.455034][ T1511] ? _parse_integer+0x2e/0x40 [ 2792.455061][ T1511] ? kstrtoull+0x13b/0x1e0 [ 2792.455090][ T1511] ? kstrtouint+0x78/0xf0 [ 2792.455117][ T1511] ? ioctl_has_perm+0x1aa/0x4d0 [ 2792.455145][ T1511] ? __asan_memcpy+0x5a/0x80 [ 2792.455174][ T1511] ? ioctl_has_perm+0x3e0/0x4d0 [ 2792.455196][ T1511] ? has_cap_mac_admin+0xd0/0xd0 [ 2792.455218][ T1511] ? __kasan_check_write+0x18/0x20 [ 2792.455246][ T1511] ? mutex_lock_killable+0x92/0x1c0 [ 2792.455274][ T1511] ? __cfi_mutex_lock_killable+0x10/0x10 [ 2792.455301][ T1511] ? proc_fail_nth_write+0x17e/0x210 [ 2792.455327][ T1511] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2792.455352][ T1511] kvm_vcpu_ioctl+0x77c/0xee0 [ 2792.455372][ T1511] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 2792.455402][ T1511] ? __cfi_vfs_write+0x10/0x10 [ 2792.455420][ T1511] ? __kasan_check_write+0x18/0x20 [ 2792.455448][ T1511] ? mutex_unlock+0x8b/0x240 [ 2792.455474][ T1511] ? __cfi_mutex_unlock+0x10/0x10 [ 2792.455497][ T1511] ? __fget_files+0x2c5/0x340 [ 2792.455513][ T1511] ? __fget_files+0x2c5/0x340 [ 2792.455529][ T1511] ? bpf_lsm_file_ioctl+0xd/0x20 [ 2792.455549][ T1511] ? security_file_ioctl+0x34/0xd0 [ 2792.455565][ T1511] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 2792.455587][ T1511] __se_sys_ioctl+0x132/0x1b0 [ 2792.455603][ T1511] __x64_sys_ioctl+0x7f/0xa0 [ 2792.455619][ T1511] x64_sys_call+0x1878/0x2ee0 [ 2792.455641][ T1511] do_syscall_64+0x58/0xf0 [ 2792.455659][ T1511] ? clear_bhb_loop+0x50/0xa0 [ 2792.455674][ T1511] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2792.455700][ T1511] RIP: 0033:0x7ffb6018eec9 [ 2792.455716][ T1511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2792.455729][ T1511] RSP: 002b:00007ffb610c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.455748][ T1511] RAX: ffffffffffffffda RBX: 00007ffb603e5fa0 RCX: 00007ffb6018eec9 [ 2792.455761][ T1511] RDX: 00002000000000c0 RSI: 000000004008ae89 RDI: 0000000000000009 [ 2792.455772][ T1511] RBP: 00007ffb610c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2792.455784][ T1511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2792.455795][ T1511] R13: 00007ffb603e6038 R14: 00007ffb603e5fa0 R15: 00007ffde110a018 [ 2792.455809][ T1511] [ 2793.311031][ T1554] netlink: 132 bytes leftover after parsing attributes in process `syz.8.46829'. [ 2793.761870][ T1572] rust_binder: Write failure EINVAL in pid:251 [ 2794.308859][ T1597] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2794.315056][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2794.323053][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:573 [ 2795.076527][ T1639] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2795.086717][ T1639] rust_binder: Read failure Err(EFAULT) in pid:278 [ 2795.245372][ T1643] rust_binder: Error while translating object. [ 2795.259731][ T1643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2795.296597][ T1643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:577 [ 2795.410202][ T1647] rust_binder: Write failure EINVAL in pid:284 [ 2795.424790][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2795.433046][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2795.440690][ T1654] rust_binder: 1654 RLIMIT_NICE not set [ 2795.447942][ T1647] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2795.468660][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2795.468932][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2795.480238][ T1651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2795.492077][ T1647] rust_binder: Write failure EINVAL in pid:284 [ 2795.617502][ T421] rust_binder: 0: removing orphan mapping 0:1048 [ 2795.720298][ T1663] overlayfs: failed to clone upperpath [ 2795.744385][ T1662] rust_binder: Write failure EFAULT in pid:287 [ 2795.744595][ T1665] input: syz0 as /devices/virtual/input/input196 [ 2795.753700][ T1662] __vm_enough_memory: pid: 1662, comm: syz.3.46869, bytes: 18014402804453376 not enough memory for the allocation [ 2796.028647][ T1677] netlink: 5 bytes leftover after parsing attributes in process `syz.3.46872'. [ 2796.056554][ T1677] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 2796.072586][ T1677] 0ªî{X¹¦: entered allmulticast mode [ 2796.084088][ T1677] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 2796.749008][ T1683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2796.749045][ T1683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:303 [ 2797.382913][ T36] kauditd_printk_skb: 755 callbacks suppressed [ 2797.382931][ T36] audit: type=1400 audit(2000004530.222:162689): avc: denied { unmount } for pid=906 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2797.432179][ T36] audit: type=1400 audit(2000004530.279:162690): avc: denied { read write } for pid=906 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2797.492234][ T36] audit: type=1400 audit(2000004530.279:162691): avc: denied { read write open } for pid=906 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2797.519331][ T36] audit: type=1400 audit(2000004530.279:162692): avc: denied { ioctl } for pid=906 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2797.553244][ T36] audit: type=1400 audit(2000004530.279:162693): avc: denied { read } for pid=1710 comm="syz.3.46883" dev="nsfs" ino=4026534293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2797.587402][ T36] audit: type=1400 audit(2000004530.279:162694): avc: denied { read open } for pid=1710 comm="syz.3.46883" path="net:[4026534293]" dev="nsfs" ino=4026534293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2797.612974][ T36] audit: type=1400 audit(2000004530.279:162695): avc: denied { create } for pid=1710 comm="syz.3.46883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2797.634196][ T36] audit: type=1400 audit(2000004530.279:162696): avc: denied { ioctl } for pid=1710 comm="syz.3.46883" path="socket:[498445]" dev="sockfs" ino=498445 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2797.661922][ T36] audit: type=1400 audit(2000004530.307:162697): avc: denied { setopt } for pid=1710 comm="syz.3.46883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2797.699757][ T36] audit: type=1400 audit(2000004530.307:162698): avc: denied { sys_module } for pid=1710 comm="syz.3.46883" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2798.015850][ T1729] binder: Unknown parameter '0xffffffffffffffffÎ9ÝÈ¥Ç+òy' [ 2798.285892][ T1733] rust_binder: Write failure EFAULT in pid:341 [ 2798.502159][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46891'. [ 2798.517385][ T1738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46891'. [ 2799.029289][ T421] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2799.197635][ T421] usb 4-1: device descriptor read/64, error -71 [ 2799.301663][ T1778] rust_binder: Write failure EFAULT in pid:255 [ 2799.474763][ T421] usb 4-1: device descriptor read/64, error -71 [ 2799.741239][ T421] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2799.879800][ T421] usb 4-1: device descriptor read/64, error -71 [ 2800.135629][ T421] usb 4-1: device descriptor read/64, error -71 [ 2800.252916][ T421] usb usb4-port1: attempt power cycle [ 2800.617315][ T421] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2800.649510][ T421] usb 4-1: device descriptor read/8, error -71 [ 2800.676795][ T1815] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2800.676819][ T1815] rust_binder: Read failure Err(EFAULT) in pid:613 [ 2800.788102][ T421] usb 4-1: device descriptor read/8, error -71 [ 2800.837567][ T1821] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2800.837590][ T1821] rust_binder: Read failure Err(EFAULT) in pid:616 [ 2801.062895][ T421] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2801.099624][ T421] usb 4-1: device descriptor read/8, error -71 [ 2801.234488][ T1838] rust_binder: Error while translating object. [ 2801.234518][ T1838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2801.240708][ T1838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:631 [ 2801.257911][ T421] usb 4-1: device descriptor read/8, error -71 [ 2801.382752][ T421] usb usb4-port1: unable to enumerate USB device [ 2802.395400][ T421] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2802.555122][ T421] usb 4-1: Using ep0 maxpacket: 8 [ 2802.569216][ T421] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 2802.586683][ T421] usb 4-1: config 0 has no interface number 0 [ 2802.599615][ T421] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 2802.617334][ T421] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2802.628435][ T421] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 2802.639688][ T421] usb 4-1: config 0 interface 200 has no altsetting 0 [ 2802.648963][ T421] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2802.658044][ T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.668123][ T421] usb 4-1: Product: syz [ 2802.672365][ T421] usb 4-1: Manufacturer: syz [ 2802.677106][ T421] usb 4-1: SerialNumber: syz [ 2802.684628][ T421] usb 4-1: config 0 descriptor?? [ 2802.690660][ T1845] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2802.738557][ T36] kauditd_printk_skb: 599 callbacks suppressed [ 2802.738575][ T36] audit: type=1400 audit(2000004535.261:163298): avc: denied { read } for pid=1856 comm="syz.0.46931" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2802.745560][ T1857] rust_binder: Failed copying into alloc: EFAULT [ 2802.768939][ T36] audit: type=1400 audit(2000004535.261:163299): avc: denied { read open } for pid=1856 comm="syz.0.46931" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2802.771096][ T1857] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 2802.775374][ T36] audit: type=1400 audit(2000004535.261:163300): avc: denied { read } for pid=1856 comm="syz.0.46931" name="binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2802.799105][ T1857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2802.807408][ T36] audit: type=1400 audit(2000004535.261:163301): avc: denied { read open } for pid=1856 comm="syz.0.46931" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2802.833894][ T1857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:261 [ 2802.841385][ T36] audit: type=1400 audit(2000004535.261:163302): avc: denied { map } for pid=1856 comm="syz.0.46931" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2802.898642][ T36] audit: type=1400 audit(2000004535.261:163303): avc: denied { read } for pid=1856 comm="syz.0.46931" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2802.924698][ T36] audit: type=1400 audit(2000004535.261:163304): avc: denied { ioctl } for pid=1856 comm="syz.0.46931" path="/dev/binderfs/binder1" dev="binder" ino=46 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2802.951831][ T36] audit: type=1400 audit(2000004535.261:163305): avc: denied { set_context_mgr } for pid=1856 comm="syz.0.46931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2802.973366][ T36] audit: type=1400 audit(2000004535.261:163306): avc: denied { ioctl } for pid=1856 comm="syz.0.46931" path="/dev/binderfs/binder1" dev="binder" ino=46 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2802.999260][ T36] audit: type=1400 audit(2000004535.261:163307): avc: denied { call } for pid=1856 comm="syz.0.46931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2803.038119][ T421] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input197 [ 2803.051613][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 2803.052148][ T421] usb 4-1: USB disconnect, device number 120 [ 2803.058761][ C0] usb 4-1: hanwang_irq - usb_submit_urb failed with result -19 [ 2803.371697][ T1878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 2803.373216][ T1877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2803.383234][ T1877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:362 [ 2803.430181][ T1883] rust_binder: 365: no such ref 0 [ 2803.448315][ T1884] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2803.457054][ T1883] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2803.465066][ T1884] rust_binder: Write failure EINVAL in pid:365 [ 2803.465164][ T1883] rust_binder: Write failure EINVAL in pid:365 [ 2803.594284][ T1897] tmpfs: Invalid uid '0x00000000ffffffff' [ 2803.654422][ T1897] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 2821.496830][ T7352] ip6gretap0: left allmulticast mode [ 2821.509967][ T7352] ip6gretap0: left promiscuous mode [ 2821.515202][ T7352] bridge0: port 1(ip6gretap0) entered disabled state [ 2821.522292][ T7352] bridge_slave_1: left allmulticast mode [ 2821.527960][ T7352] bridge_slave_1: left promiscuous mode [ 2821.533538][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2821.794830][ T7352] veth1_macvtap: left promiscuous mode [ 2821.800330][ T7352] veth0_vlan: left promiscuous mode [ 2837.995647][T22167] tipc: Disabling bearer [ 2838.001816][T22167] tipc: Left network mode [ 2838.113269][T22167] veth0_vlan: left promiscuous mode [ 2946.992205][T22167] bridge_slave_1: left allmulticast mode [ 2946.997871][T22167] bridge_slave_1: left promiscuous mode [ 2947.003543][T22167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2947.010852][T22167] bridge_slave_0: left allmulticast mode [ 2947.016884][T22167] bridge_slave_0: left promiscuous mode [ 2947.022476][T22167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2947.237277][T22167] veth1_macvtap: left promiscuous mode [ 2947.242773][T22167] veth0_vlan: left promiscuous mode [ 3078.030717][ T7352] bridge_slave_1: left allmulticast mode [ 3078.036388][ T7352] bridge_slave_1: left promiscuous mode [ 3078.042084][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 3078.049476][ T7352] bridge_slave_0: left allmulticast mode [ 3078.055171][ T7352] bridge_slave_0: left promiscuous mode [ 3078.060761][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 3078.083402][ T7352] bridge0 (unregistering): left allmulticast mode [ 3078.210884][ T7352] tipc: Disabling bearer [ 3078.216187][ T7352] tipc: Disabling bearer [ 3078.221516][ T7352] tipc: Left network mode [ 3078.350068][ T7352] veth1_macvtap: left promiscuous mode [ 3078.355573][ T7352] veth0_vlan: left promiscuous mode