last executing test programs:

4m9.016686059s ago: executing program 2 (id=1414):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf5e8d0b131c6a560)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x16d340, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r2 = socket(0x11, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r2, &(0x7f0000000180)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x40800, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r0, &(0x7f0000000400)="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", 0x1f000)

4m8.725324818s ago: executing program 2 (id=1418):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x4ac082, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x2b, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x10000005, 0x2, 0x1}) (async)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x2b, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x10000005, 0x2, 0x1})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
lseek(r0, 0x0, 0x1)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendto$packet(r5, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080)) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080))
getpeername$tipc(r4, &(0x7f0000000140)=@id, &(0x7f0000000240)=0x10)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x2, 0x3, 0x4, 0x4ec4ebf89cfdf620, 0x200}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x3, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x21], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r8 = userfaultfd(0x80001)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0xa, &(0x7f0000000280)=[{0x3, 0x4, 0x4, 0x2}, {0x7, 0x6, 0xfd, 0x3}, {0x4, 0x8, 0xf9, 0xbb7}, {0xd65, 0x7, 0xa0}, {0x9, 0x6, 0x8, 0xffff}, {0x845, 0x6, 0x8}, {0x1, 0x1, 0x3, 0xff}, {0x8, 0x72, 0x0, 0x2}, {0x0, 0x68, 0x6, 0x728}, {0x8f35, 0x3, 0xa9, 0x4}]})
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
dup3(r7, r8, 0x80000) (async)
dup3(r7, r8, 0x80000)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x8}}, 0x18)

4m8.681765411s ago: executing program 2 (id=1421):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async, rerun: 64)
mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max='])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async, rerun: 32)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32)
read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f)

4m8.631559895s ago: executing program 2 (id=1424):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x1000040, 0x4)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0xffffd000)
socket(0x25, 0x1, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write(r5, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
write$P9_RREADDIR(r3, &(0x7f0000000200)={0x2a, 0x29, 0x2, {0x7fffffff, [{{0x1, 0x2, 0x5}, 0x5, 0x7f, 0x7, './file1'}]}}, 0x2a)
sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000240)="0e467322486b39401fd0a7124e07df074eb9b8595051805c9a14a0648cf8055d5b27ba56d6233ac7f68816fcc30f0ffcac320d1854ff36139c7a0ee5de2eeb6abfd3ee768dc032d68b4bf547a3fb272c2d83a4556a099f041e17a7dd129642b1d21c0568fa1da52a5a28a89de92ce576f566946b2c5142f60649075e44fc653b46840e6accbff932a6d21dc29c4d82", 0x8f}], 0x1)
r7 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r7)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0)
syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
syz_open_dev$loop(0x0, 0xff, 0x428841)
r8 = socket(0x2, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000003c0)={0x2, r2})
close_range(r1, 0xffffffffffffffff, 0x0)

4m8.120404308s ago: executing program 2 (id=1433):
socket$netlink(0x10, 0x3, 0xa)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x4, 0x0, 0x3, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x2e2, 0x2, 0x0, 0x80000001}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000850)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x34})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x5)
r5 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000240))
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r3, 0x22e7c000)

4m7.918086581s ago: executing program 2 (id=1441):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "52deb3e900", "fd024bd75e458c6f2471d3e91a43ad86", "46ff2390", "0100"}, 0x28)
recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

4m7.874427304s ago: executing program 32 (id=1441):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "52deb3e900", "fd024bd75e458c6f2471d3e91a43ad86", "46ff2390", "0100"}, 0x28)
recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"])

3m28.750965833s ago: executing program 4 (id=2035):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async, rerun: 32)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (rerun: 32)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000027c0)=ANY=[@ANYBLOB="38010000fe00002b094b5626245e5f82390ebe6263639c49f0a5c6a850a4"], 0x138) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1200080, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) (rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async, rerun: 64)
write(r0, &(0x7f0000000400)="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", 0x1f000) (rerun: 64)

3m27.799663315s ago: executing program 4 (id=2039):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x10, r0, 0xcd09b000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x3, 0xd, 0x0, 0xffdffffc, 0x6, "0000648cd4295385e296000400"})
write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "0000ff1e1378d1000000000000000000000001"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3m27.009028968s ago: executing program 4 (id=2048):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0)
syz_clone(0x5802000, 0x0, 0x1b, 0x0, 0x0, 0x0)
capset(0x0, &(0x7f0000000080))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
r4 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCSCLOCKID(r4, 0x40084504, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002140))
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8)
ioctl$BLKSECTGET(r5, 0x1267, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103603, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000140)="b90200490f32260fc7a9ec2b5f5eb8010000000f01d9ea0d000000b50066b83b018ed0f30f1ef6c4c1835a3a0f20e4f2660f22c666b8d80097", 0x39}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="66b9200001c00f324f3066b9800000c00f326635008000000f300f01d72e363e0f01ca0fbb9d0e0066b9820000c00f32440f20c066350d000000440f22c03e3e0f01c4c1ef00", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

3m26.719509857s ago: executing program 4 (id=2051):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x577}, {0x40, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x800004, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)
r1 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e)
accept$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0)

3m26.685450289s ago: executing program 4 (id=2053):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7)
write(r0, &(0x7f00000000c0)="673aaa44fa73c2d18f929b3e9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513", 0x33)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000004c0)={0x2, 0x7fd, 0x6, 0x66, 0xa, "1d4ab836dcabbf07484c9700000100", 0x80000000, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x200004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}})
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r8, 0x0, 0x31, &(0x7f0000000000)=0xf62, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})

3m26.468554523s ago: executing program 4 (id=2054):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0xfffffffc}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008}, 0x10)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d550009050202000202000009058202000200000026"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x60, 0xc, 0x4, 'R6\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]]}, 0x24}}, 0x80)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "d0eadc052f6464d032d1ba222ca03be5ffaae7eabf983233b2b04ae0fb352df1a6352da366a4deaf858c57950779f95492e6bfd955f12ee9325d442f7394a968c02324e601d67d57c0002dd20f4920ca02f31e878bd0848169e575f727f4841faae8ba5068fb9fd035e2e0b74e8494361e947a6c3330ccf4f4"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000280)={0x40, 0x5, 0xe0, "f26f30c3d26c96e196dec8a65a480c1bae3a26b2b27e460d2edcec0b7d6d9f1ba8bd88f99bea19f1a0e95d3f39bf5d3ea2423948396ca9839e6386daddd0d7be11719b0687509dd70992dc5c55fc920b1c431deb00acbbf7a5cd3c73dc6a1ebcdd72b162f595f419d1e3c1e12420155793d73a0ec55f8904224cf272b2b17d0d94047d551c399ec6b23aafdbb34cd4bea8fc16df784c82070092172895c39f16cce146ab537775ff4ab5f42233694dea40afa73f1ba5f35aa27a9cb87ab16315de106b9a1352097749317e35f63134b07f4d945113e90ae1ff2e2621c6c52d34"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r3, &(0x7f0000000400)="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", 0x1f000)

3m26.422813246s ago: executing program 33 (id=2054):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0xfffffffc}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008}, 0x10)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d550009050202000202000009058202000200000026"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x60, 0xc, 0x4, 'R6\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]]}, 0x24}}, 0x80)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "d0eadc052f6464d032d1ba222ca03be5ffaae7eabf983233b2b04ae0fb352df1a6352da366a4deaf858c57950779f95492e6bfd955f12ee9325d442f7394a968c02324e601d67d57c0002dd20f4920ca02f31e878bd0848169e575f727f4841faae8ba5068fb9fd035e2e0b74e8494361e947a6c3330ccf4f4"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000280)={0x40, 0x5, 0xe0, "f26f30c3d26c96e196dec8a65a480c1bae3a26b2b27e460d2edcec0b7d6d9f1ba8bd88f99bea19f1a0e95d3f39bf5d3ea2423948396ca9839e6386daddd0d7be11719b0687509dd70992dc5c55fc920b1c431deb00acbbf7a5cd3c73dc6a1ebcdd72b162f595f419d1e3c1e12420155793d73a0ec55f8904224cf272b2b17d0d94047d551c399ec6b23aafdbb34cd4bea8fc16df784c82070092172895c39f16cce146ab537775ff4ab5f42233694dea40afa73f1ba5f35aa27a9cb87ab16315de106b9a1352097749317e35f63134b07f4d945113e90ae1ff2e2621c6c52d34"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r3, &(0x7f0000000400)="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", 0x1f000)

1m11.63153696s ago: executing program 0 (id=4097):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1d, @broadcast}, 0xe)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2)
openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])

1m11.575599643s ago: executing program 0 (id=4098):
r0 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r2 = dup(r1)
sendmmsg$inet(r2, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aef", 0x99}], 0x1}}], 0x1, 0x95)
ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000))
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r4, 0x13)
tkill(r4, 0x12)
waitid(0x0, r4, 0x0, 0x8, &(0x7f0000000240))
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="0205490604002000000000000000000002000100ffffff7db04025046998fdf5"], 0x20}}, 0x84)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10001)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x2000)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d2c2600d, 0x13, r3, 0xd3c59000)

1m11.132613332s ago: executing program 0 (id=4104):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) (async)
unshare(0x62040200) (async)
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
r1 = fsmount(r0, 0x0, 0x0)
setreuid(0x0, 0xee01)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x723})
statx(r1, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x8, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, r4, 0x0)
setresuid(0x0, 0x0, r4) (async)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x1}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000054000/0x2000)=nil, 0x2000}}) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000000a140), &(0x7f000000a180)=0xc) (async)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r6, 0x0, 0x0) (async)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f000000a1c0))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x7}, "80caed2bcfbbff22", "2566a6dda902e131766b199a3a9ca057", "bffc6c05", "cd5c8b87af78245f"}, 0x28) (async)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r8, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

1m10.954989814s ago: executing program 0 (id=4108):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000100)="9ea1d0081f", 0x5)
recvmmsg(r2, &(0x7f00000008c0), 0x10, 0x0, 0x0)
close(r1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000005c0)=0x19)
writev(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f00000008c0)="ac", 0x1}], 0x2)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

1m10.764279507s ago: executing program 0 (id=4111):
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x6422, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020)
accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000001c0)=0x1c)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$unix(0x1, 0x1, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa0a80, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
write(r0, &(0x7f0000000400)="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", 0x1f000)
r5 = dup3(r2, r3, 0x0)
faccessat(r5, &(0x7f00000000c0)='./file0\x00', 0x40)

1m10.672284473s ago: executing program 0 (id=4113):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x40, 0x6, 0x303, 0xfffd, 0xffffffffffffff54, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x2, 0x2, 0xc, 0x4, 0x4}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x280103, 0x102)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="201605030000d6dde69b1a"], 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1}, 0x0})
syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000540)={0x0, 0x14, 0x9e, "0000ab930000d0b1cba337398844de3fbc425a3bab34126d88f6b7d65aa12edf089ac8c871beccd8feb6bdcaf7665b7a304d79db88b6c045d72141a2829eae04c638f90358997fa441cf14d5b90819b259c1e281a76f3f867d524986a73ad66099eb7f94c45471a30c59b2b40b0eb6b9534c027b866a2acb3e7eef955c4a0193008dd783e7ca77b8babc02002559ef8b29fb38cf094d705c5414762a07e9"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0})

54.924729851s ago: executing program 34 (id=4113):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x40, 0x6, 0x303, 0xfffd, 0xffffffffffffff54, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x2, 0x2, 0xc, 0x4, 0x4}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x280103, 0x102)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="201605030000d6dde69b1a"], 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1}, 0x0})
syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000540)={0x0, 0x14, 0x9e, "0000ab930000d0b1cba337398844de3fbc425a3bab34126d88f6b7d65aa12edf089ac8c871beccd8feb6bdcaf7665b7a304d79db88b6c045d72141a2829eae04c638f90358997fa441cf14d5b90819b259c1e281a76f3f867d524986a73ad66099eb7f94c45471a30c59b2b40b0eb6b9534c027b866a2acb3e7eef955c4a0193008dd783e7ca77b8babc02002559ef8b29fb38cf094d705c5414762a07e9"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0})

2.716717502s ago: executing program 6 (id=4906):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x482400, 0x2)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xf976fd8bbca43329, 0x1b9)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20000, 0x144)
ioctl$KVM_CREATE_VCPU(r1, 0x81007702, 0x2)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080))

2.709494682s ago: executing program 6 (id=4908):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4b, &(0x7f0000000740)="88"}) (async)
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000000000002410c0000000013"], 0x34}}, 0x0) (async)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000002140)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@favordynmods}]}) (async, rerun: 32)
bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x81, @any, 0x0, 0x1}, 0xe) (rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)

2.651091226s ago: executing program 6 (id=4909):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@remote, 0x0, 0x4000, 0x10, 0x8004}, {@in6=@private0, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x80000000000000}, {0x8f, 0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x100000}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})

2.599442239s ago: executing program 5 (id=4910):
r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5a4, 0x2000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xb0, 0x3c, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x6, 0x10, 0x1, {0x22, 0x735}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7a, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x3, 0xff, 0xff, 0x3}, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x97, 0xd9, 0x6, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x0, 0x6, 0x7982, 0x7}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0x81, 0xf00f, 0x4, [0xc0]}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x455}}, {0xc1, &(0x7f0000000100)=@string={0xc1, 0x3, "ff2139e6fc4fd699f7ade552d99911006863aecaead3b772fa246cf67f52a8c67fb48a5d563c533bc9801a3e254914583354efb2ecd49ef6c8c50fe788d485f87caf38cf1b725ccf77df37cb725cd7c388396a69136dd948e3ea6d746245d4c81f7078214cb48831a6bffa61e4e3a56e37c567e501d120ac6d3bb6c9326425c550df62d65eb5300171a3489e4ad5268ce9085c9dc500ef558d8ca1cefcad9b742d3a33bd64b3c53cd9fbb50c9b9e881c8fb0a1d3afd5647e51fbdaac316fe8"}}, {0x5a, &(0x7f0000000200)=@string={0x5a, 0x3, "d9f4870a6962d54d318fdea6a0fd5cda04bc9890cf3506f26fb4235c9d01e4a3cfc932bb55d87616f646dd2aea29e8cf72971ee1a04e642975aacd459f0b60257891aae55e9149b5dab0217560cffcf220a785cfe83e0082"}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f00000002c0)={0x40, 0x9, 0x2b, {0x2b, 0x2, "42056fdd3bfc8442a231fd3f292ea4b8c33064bc855b36268d6492a0f30c35c65d129dfff67ca22122"}}, &(0x7f0000000300)={0x0, 0x3, 0x74, @string={0x74, 0x3, "ece61bd1f7703515e742dad9da39ce1ebe175c754ae8f82b8589f73452a6b8d26438922fad389ba05549f2a9d9c9ee3b200e2902b945739217b72fe7cd8f4e7070417b7a62b0a746788ae9b0876d33d2c5654dc6cff864bd40a9e415490627f4fef5cf2fc6119261eb0fedd1faa88968d6ab"}}, &(0x7f0000000380)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0xa, "f986eb06"}, @main=@item_4={0x3, 0x0, 0xc, "91097d92"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xfd, 0x1, {0x22, 0x1e6}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x40, 0xd, 0x33, "2790f9fec9d44a7b8d1e2acf3411382d741b7ef8b3dae6aff5998d93c5974ed6530fdfe6c42fde5d67e39d242c5f01366015d7"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x1, 0x83, "76941e4611be38dd78f1f7bbfb50603d3d86f71c395b1e0000baf94cd4fea5c49e10c022f5ff725582c2dc32fed2c1f7f7ae4deb6301284e8d29e8e9729ed9d5c4f593227f697e42ad8914ff5eacc719e3cc193f039b1a105ae664329471daa7350a3915e64071850af53115bb080189d9e29b3d678b787763bc2f9a3e365f529a3bd1"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x70}})
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = syz_open_pts(r1, 0x40)
syz_usb_connect(0x4, 0xa46, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x72, 0x74, 0x32, 0x8, 0xf11, 0x2050, 0xdbba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa34, 0x2, 0xd, 0x1, 0xe0, 0x6, [{{0x9, 0x4, 0x14, 0x8, 0xb, 0xbe, 0xe7, 0x2c, 0xe, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x1, 0x81}, {0x6, 0x24, 0x1a, 0x9, 0x4}}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xf, 0x8, 0x6e, [@generic={0x86, 0x7, "2064d08cb77a490fb300ff9e10af39b1015234bf3e6b629099bf917f84fdde6cf60e012a84bb74db66c26b124876022ccec1556608642d717f61c43d8aa41a2bf91f3b64274b6c40b266b1565dde9233d11ccb9e8353c9dcf90152e7bc74fd8cc953d4eae174d3a4d91d97598e543662d64481badb3cfca8cdf9038ae75843e6b85be0c2"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3, 0x81, 0xd, [@generic={0x50, 0x30, "4063692a4cd24b64521df1d24ed1a8ce19a3c533db4d65161ef2009c2daa2de1850b3438808e9736ee541579cca78d324efc16eb55fe52858f6bd15f7175f0bf7497e3ce2024f7252a3a87ff80d8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xc8b}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x1, 0xd8, 0x46, [@generic={0xf7, 0x9, "023575f4e7bdf4225dd883343bc3d41286237e7ff05af8f8a38db880fd32f52e7111043b68cdfde58396bf85eaa5ea755c7dbbb8d5c01acdadc693731bf9119b4f4208ca62317f3babf236b69ce05920e732579059ca41cccdd6422c5e074da8d740fbc9b62273557f0e8fd2f543e6ec6b421d0d907d414e9fbe35b3dfd793143f3b81ff81805194f659f1ab4b533067c2260a1aa2295c72581fe95478a422bca0ace8b80419e2957f421b7f3facdcd4d78535640bc6bace3a036232f875c4c41381cc90ee8d812724282c40ab688a227067b9ac387d28a0b4d85cd23c8582dccf3998d9ff98352d06f5e876644313c8c2e90fc0ae"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x6, 0x81, 0xeb, [@generic={0xae, 0x24, "0fecb50ce4c586231c909f93aafaf5c277be699585c831a384bf66ab69dc9297e90aa51ac5db1fe9ce014cc3469b6e1cf97c7f26831bb0074655074caa35ca2e9bdee74d9ad34ee3aeed385d749eeaa2e1b0b2d129a1d993e2862a20ff1fd3e379b369168bc688da779be5b3a424e440f08e1cd33be1393e0be6dac3384d523ab3352a162de35851e96f146550c788985a97ecdf5e977de6715cd1ee014fb9cab3b551ef56c81cd30ea46f30"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x1, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}]}}, {{0x9, 0x5, 0xa15e67393ac019f, 0x0, 0x400, 0x0, 0xd, 0x1, [@generic={0xd, 0xe, "fc6ccd5cb741430bfb7abd"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x81, 0x75, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa3, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0xf3, 0x5}}, {{0x9, 0x5, 0x8c, 0xc, 0x400, 0x9, 0x5, 0x5, [@generic={0x2, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x81}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x3, 0xa, 0x0, [@generic={0x96, 0x6, "3ca8912fcce409922e639e83871be2a3ecf96f9ce595ef14d37702bfbaad9bc341d2a54c0a39f4c34cc6c49b5138f73bc8b32d9a923cbeb5185e95285aba1ad061ccc9d87ed72a2a72c2452da6871fc43ca6c3335f0c9fc23fa96b42437263ba05a126e3f03ea1f3eadad7193d24107608c7100dc9f737236d6b2cc8eb1f6a97bf5ae06f5e739c912bf6c5ce2909a92aa974de2a"}]}}]}}, {{0x9, 0x4, 0x43, 0x7, 0x10, 0x5e, 0x47, 0x89, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "fc"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x5, 0x1}}], [{{0x9, 0x5, 0x1, 0x10, 0x400, 0x7f, 0xff, 0xde, [@generic={0xc2, 0x21, "540ade10a0cb86de33749c49a85303adbce9849e42a44b29df7f9319652ed41743e5ba8f038c9dd30be1e72d5139d90a396b09cc7e4054c5d42fe0c6c845cf1432d626fd41f69c8ca9c6be5307faf0a11e8be347c8ccd6ee1fd65bce28eaec551679d99394007b864bad770ab333759c92fe74819168a5a51362cc6ba41a43a0b493c0bdd3578c663e8b4580a687567c5ceaf620cfa3dd5bbe5bc2896060dfb1fdc8bfd91f645ae06aede23808da258366de1c24362418383a4582b4f9dbc596"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x6, 0x3, 0xb, [@generic={0x24, 0x9, "1228d58769ff0b8b7749dca62e2652d85865259bc177dd098130862524957bfba0f5"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x3, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x100}]}}, {{0x9, 0x5, 0xf, 0xc, 0x861ef4a18ba212b8, 0x3, 0x5, 0xe, [@generic={0xe7, 0x22, "7e8b5a8df8a0e1f3b660ce3992bf0b085f78090db4ae4bfb92ce1619888b6e10662657ba798a648b2552b507e287380dc80d4c4fb2054fe1d2de7f9145101791b30c6292731df0ebe41a7ab012c9919758f68e85532c320fde90f9e9c00da24f8443c3db77e4b1c4f86c3f7f9b61228fb2703583d3ead5fb2606946da100ed72416b6bc7409ec0cc23e3e8337911c7df798b8e4e3f08eea3b072a83535eb27077b8f8140c48f93eefe34b041c41423d76821917848707b4ce01b3a12d66858243d5a6743e886b7178ee01f0b6cf8600c452e087cab79cf74aebafc219f5f15eed0f54b2c0b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5b}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x7, 0x7, 0x79, [@generic={0xb3, 0xc, "77121f4c4f0e95fd4c14ef9cdc9d346bd94f859158ed50bbec2ce95a512dd1f466e7dd08847a036599f516715857dcc2809d1d2858df5e89fb8269cfeb19d5d070912aeb5d2598d47dd932ca37e643532c8ce8348e33b829e9d63d435055df3b0df4125c1ef5e63fd7740e196a7c827c83f1589821bd151fc629230328212d0394e5fb38ebe743d36bf83c2141f77dd6f50f1452105e2b94c7bc8646438dc9c4ca6f3d6fd6556bf70aa1762a595dd0d8b4"}, @generic={0xa4, 0x1, "9ad8ecbe7b942a9ad6f2dc1279fe03421ba581013874b946736a7b06431422cda391311fd08f9021d72da36d6b457573eaa58f569bebdf416d84f77bc6e808cb88842f1822a1127ef76303bf531e13f6113f95d5ca0f34f346f5974e7ca6f1c28e30b00fcae609833e21d7c587f776cd81a46afb45942fed1feb48132dd7f6286fadd24d85f666b94d080241d66bb816f4224bc2a17aa30a035035f4bc9ea1e13188"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x7, 0x3, [@generic={0x2f, 0x5, "795efa3d5b020ec9016f2ad4ca78b23a4614ee0d3ca7b3a7af8dd044ddd259be256f311f8777bfb51db7a194a1"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0xfe, 0xb6}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x80, 0x4, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x440, 0xc, 0xc4, 0x1e}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x0, 0x40, 0x80, [@generic={0x87, 0x11, "1cf9348fa8f246704396b0463ccebcb2cfa06a0d7c21f800c66d4c9c28a6fbd2b6d7ffdb9f2bf1594f885dc5fa1c09312ec3deac38dd930cb368185bab8b895d557473b303a7eaabea59be8bc5ad82f08dea7806fd56c2ef56e5c89d1589f7f7c8a8fce7559eee949ac241feedcd7062bae6e4f262594cd3a1ff5f70858ea4658aa388a02c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x77, 0xc5, 0x1, [@generic={0xad, 0x22, "ea24a0ccb8dbd19e9810c8023d0e08c44335248b477e3dca7fc00eac4f99413e95b0ff310f585304143343f5d3cb33732bcc51229d17cbc6da67e733c63bf2289ba190fad2d88f3439119b5e664811973132b955a6a3181f38abc19e1dea7b7c79e681dd2e0203b8cecac90bf83b0d7dc8e138b7f863d0572d68690b2e9d63750cd6784958ac3eb828a82d3230ba4174b91c67cbd3a867e8b0891387c9520afa8c34094e260bcee0681cfe"}, @generic={0x5c, 0xf, "5166347fbbf679a22cd7591858278fe8f23424aa0ab0570e1868643af43833e15e70f78e989a12e61d177fd1b82fabfdd584111a475649bb6f03929c85d9f220e3b3acf226348170554b6c87487504af0b33e30f56c20bbdfed8"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xa, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0xb}]}}, {{0x9, 0x5, 0xb, 0x0, 0x600, 0x27, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x13, 0x70, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x42, 0x1, 0x4, [@generic={0x73, 0x31, "a670a9da1ff2d042fbdcee7a689923f541fe22619ec934ff4936a2b15da1c62a341041650f224ea3c6762d1e998630da7d44b808534af8c51eef41f5a6c9c11d62335be2adcd2bb3ef7cf770c73b14099cd26cfb78b330cb65f5b19f57c11ade25112c8778409309bb88fe546d84eeb321"}, @generic={0x2e, 0xf, "32144c433f45bd818da83e880832e2493640c22aa599f71a84173b6cd769c1d69c3065ed78873576637d7796"}]}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x200, 0xb, 0x4, 0xe0, 0x20, 0x5}, 0x5, &(0x7f0000001100)={0x5, 0xf, 0x5}, 0x3, [{0x6d, &(0x7f0000001140)=@string={0x6d, 0x3, "2165e85988564328feed2521a043690b665190a09ec820d3c9d39e46428c01b6a84d38c7284c1368419bb9847cd4ce5487a861d283c2286f6446f9a905fd980118776bba4b07ec27f264d5e218e23ae451780d39b88936535089b4e8eb902a67b14e072e5e18d82d3aed71"}}, {0xa5, &(0x7f00000011c0)=@string={0xa5, 0x3, "8983ac49e24ce7a9691e234720546d312cbb5e309c5e3b7bbd04ca08bcfb0e1759f28bf770ce2ba3cd6e1b6bed56a7e2cce6c05265070dea12ed8450d6dcca9674ae8bf234fa5817caa7960e962ce26d1e34226f4fe7c083e15a2f3dceb0cbf19a22d625ac0aa126b38a6cbb5755c6f31ba0a7847cdf453c0c8352ba2810a49d391f6a0c483d1a0054c25b1667be1e9c2feebd10d4b82b225a5e330616832891f5ff3c"}}, {0xc0, &(0x7f0000001280)=@string={0xc0, 0x3, "51d499890911e5a4c7a8166acb4d37d2b27f1a5cd51f254c42ce98d9d868566bbe73eb837df9090de96a0c045054757054cc02ef35b57d6eef9e2632c939f33eefadbb06b4f316d21e4b73bc3953a7495379e1c66c2852f6c24a744f8af88faadbc62f39e677dad4b463a29e192448c497e387bd6b16966b548e5a27649ba7711e6e626bcee6301e58bf02ad451494a1d0eb07a29cc8d3ec9bd4390b4a2a26fc2b07944e11f43efef1575b591de7ead40e3b6ed123a0c9b4d91aacd69f1a"}}]})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001380))
r3 = syz_usb_connect$cdc_ecm(0x0, 0x5d, &(0x7f00000013c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0xfc, 0x40, 0x1a, [{{0x9, 0x4, 0x0, 0x96, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "4b7ee953"}, {0x5, 0x24, 0x0, 0xc8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x9cb}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0xc1, 0x1, 0x6, 0x6, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe5, 0xc, 0x6}}}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x300, 0x1f, 0xb, 0xb5, 0x20, 0x3}, 0xc9, &(0x7f0000001480)={0x5, 0xf, 0xc9, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa5, 0x5, 0x9, 0x75e, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x76, 0x3, 0x6d7d, 0xf0f, 0x7fff, [0xc0, 0x0, 0xc0]}, @generic={0x9e, 0x10, 0x2, "832c91ccf6d6d6daaa7c3b19702282fd195b593d93ade59242f99dca084db73a40a9bba9e05daa93ae38c7fe89eae6f8ae0c0041ca8e020c4c79e8ef1057631fe1c59e86d2f95bb1be3f9eb759edd374127d007bf69f106127d18c6fb3c6c59ed76d2ec2c6253a19b760bc2cd8f0384e964378ba21c8dbd4ea04f2091f443118c8a617c2b6cc8919877ad6b3e9790c81c1423871084d09f211df22"}]}, 0x1, [{0x7c, &(0x7f0000001580)=@string={0x7c, 0x3, "6d65dceace0a22320edfc5bb5e0d4b411b84bcf2cfaef28d8fb4cd332719d684f75c4bb32c243dba62eec928377aefeea6bbfb2583ca60aee4dd4cb4791d6958541d841cefd1565e1f7a862a7e9fe20eac1a3e8818cdaa8684c25425c2f924bb92adc86d5e3c2a88c3586b508c67a84923f646a51182ad79c5c9"}}]})
syz_usb_control_io(r3, &(0x7f0000001800)={0x2c, &(0x7f0000001640)={0x40, 0x23, 0xf, {0xf, 0x22, "206a87ca513fddbfe03f50e3b1"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100e}}, &(0x7f00000016c0)={0x0, 0xf, 0xba, {0x5, 0xf, 0xba, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "8c8a6235ff5dcb264fba32af19938d32"}, @generic={0x83, 0x10, 0xa, "23c0167634aa39d4e85221cb17a2d9c0881128bf3998b248226157b6118d1c79665357760759ac43d746e045b87a1e4113bcc715ed44236ce20099b91da78c344fe3ae1f329eaffb7f00ede14b8e2bf08514c973c6e439c4bec8c8634a9efcf79bd3bac307aaf2be6adee5cc6f8fffa87721a8ca97b8621fa01b82e78d8edb87"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "a0792a1b65cfa9dc223ec36079a73191"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0xe1, 0x8d}]}}, &(0x7f0000001780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x3, 0x4d, "0fa61358", "e2ba5032"}}, &(0x7f00000017c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x8, 0x10, 0x0, 0x200, 0xefde}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001840)={0x40, 0x16, 0xf5, "76542d18908ac9d1df7447a0ff36381b1cbd0975502bd3d25326cb88855a27397756426c89078df4d98266ed5a73e533073bb2717d63b80d401bfcb576176a1c47dcc1cc50813410c946e13b6cfcfc7b8a52e2ebc575afe015e03b854ae264c7b7e7d7dd4eb18f5abeb3a2cf051d3e096e25a41a9b6da142bec0fc95ae9a92ce70271da9f58377104a5899e471037c45a26e49b8ddbf577de3da72fe9c8ad51a6f803e0aafc0a0114dcab6d4967d3fa751d75a2e735db77cd1fd1291d60a74bf7bccd18d2f9d89df5e9e4b48e2948b7c04508336d43a4e0bdd99b097eb86a6b2a69abf91c53759bb2f5cfe6a190c92f7c0836d4170"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000019c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001a00)={0x20, 0x0, 0x8, {0x1, 0x20, [0xff]}}, &(0x7f0000001a40)={0x40, 0x7, 0x2, 0x8e}, &(0x7f0000001a80)={0x40, 0x9, 0x1}, &(0x7f0000001ac0)={0x40, 0xb, 0x2, "1109"}, &(0x7f0000001b00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001b40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001b80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001bc0)={0x40, 0x19, 0x2, "318d"}, &(0x7f0000001c00)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000001c40)={0x40, 0x1c, 0x1, 0x52}, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0xde}})
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001dc0)={0x5, 0x10000, 0x8, 0xc93e, 0x12, "f0cd0a5837c1b918616e36b51d5a2a3964e909"})
r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001e00)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000)
r5 = accept4(r4, &(0x7f0000001e40)=@alg, &(0x7f0000001ec0)=0x80, 0x80000)
syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000001f00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x50, 0xed, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1b9d38"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xfe63, 0x5}, {0x6, 0x24, 0x1a, 0xfff7, 0x3}, [@acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x9, 0x3}, @dmm={0x7, 0x24, 0x14, 0x6, 0xd7}, @obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x38, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0xc, 0xfe}}}}}}}]}}, &(0x7f0000002240)={0xa, &(0x7f0000001fc0)={0xa, 0x6, 0x201, 0xe4, 0x1, 0x1, 0x40}, 0x37, &(0x7f0000002000)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xb0, 0x2, 0x3, 0xf, 0x0, [0x3f, 0xff00f0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x5, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6d, "3452f7f38c78676bf98abc7cc6a490d2"}]}, 0x4, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x3009}}, {0xbd, &(0x7f0000002080)=@string={0xbd, 0x3, "7d41cab82b49542a0a573f3992712e6ccc22d9e5bb15b268dd0d92970b1c289928acc91280d22eb7fcbccdd1fc68d60c63de5789a2d9afd2ac2869823c89b983ad674aa4841a37d701b3ef9483b5b16a047463e1c4d5364f2e5b5134e73f9b78858dfc5ff8bd3a67ecfbf3085ebabafecaaa3c2915cf43e6d5cb1643dbd88bb462b4c31bf9d0132f2e591ec3ffe7dd8b3d6c89b3150d2c3af7c93fbbc2c0b83cc6b4febb717e6d46de706b1cda88fffbf91cce9b186d9946ec7232"}}, {0xbe, &(0x7f0000002140)=@string={0xbe, 0x3, "76f7d340c7446a936c03adf0b795beea1b5ab755a781e9cd0266fe2c9966a62bcc8f0c328abbcd58e4aa203252b7607b2fda8fe5e6565efefb3816c6919ef85378567be14457167a07dce0e06d2589ba5361865534ab939c18e167460359f81fc75cdf854205f6a96a25f9fb0ef84eb71d991be5b0b82f4920fd9c4bfb806ff72ff502a82370b7a38d40a1c8cbed29609e1fcde655e6dbcdf7348e80e5ee9f277b709fe8d033b81f0baf85d0e50d0fd7946244b0fbd3ce6a90f00f60"}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x810}}]})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r6, &(0x7f00000022c0)={0xa, 0x4e20, 0x5, @local}, 0x1c)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000002300)="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")
unshare(0x40040000)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000003300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x40, 0xe, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0x1}}}}}]}}]}}, &(0x7f0000003480)={0xa, &(0x7f0000003340)={0xa, 0x6, 0x100, 0x81, 0x6, 0x1, 0x20, 0x5}, 0x5, &(0x7f0000003380)={0x5, 0xf, 0x5}, 0x3, [{0x24, &(0x7f00000033c0)=@string={0x24, 0x3, "a8fab726a26dca2d07b236b315ca3e9d08d94f7d31424abc88ea24c6bc4e47c684e7"}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x445}}, {0x1f, &(0x7f0000003440)=@string={0x1f, 0x3, "44385e41ff1375d58fe6aa9cdbeef4cf4a2f4b88f7ac11368a822c2ea8"}}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003500), r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x20, r8, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x800)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000036c0)={0x14, &(0x7f0000003640)={0x20, 0x22, 0x30, {0x30, 0x5, "a58c553a1249babe226d007bbcf9e3f3934631371fc031ed9aa3963cffca9861856f0a4961e7836b2afc9eb0c48d"}}, &(0x7f0000003680)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "20b20e10f9d8bac8c6d6f1171c7fd27cdb39b90ff6f9d903df4e29633e23c09aa537e4014378f814c9824a5f86513a49cf51416f7353cb35"}}}, &(0x7f0000003a00)={0x34, &(0x7f0000003700)={0x0, 0x14, 0xc3, "9b0e424f69dbdad9c2052d582f156ad43d70b2609380ba6d58782cf6bb6a71e125abc6c7cb1527e5100d8f48d2932970b23ef6d414bb701603e47385d2829ebc4eda0e5ddfdc696be98e5e5292aa5a36d44a673f760e95d25a5883304b8e0c16e437fbb417a93741aef4efacdefb96be0d1f224b1d7c6936267693ace079cb11a3a56f93fdda2f3740c841903c51bb4d7388e8ec70f783dd4b57e11852bae5c437a5b53b02c1098aeb29d29b0532ef8f47dc3104606a7415da748636368f17d6ebc36f"}, &(0x7f0000003800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000003840)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003880)={0x20, 0x0, 0xf2, {0xf0, "0b3ec28059ef79a724bff08475a2644e89109843b687a89640f5a2f71db3a64b09aa189e9ba5f1c6285b04f54fd1ac87b5293fb152305743dcd3a74f1cf54408fa750c49a406cab7640c44dfa972464a01dec4c30429e16250bd78b8b9a7a9938609118edefc466bcab945d762cff33e0a49e94a56c0a0bf6179a1cccd07d7d1ba6f1666eb971736fc140da2f03837152c825eda77f34ca68092eb45d8b755b25593f237e75b16b73d21bcd2f397f42b294fe47f4665af425f8f6f14289548bcd9fb0393196c972798b3eb455f4793401c93d812726af2abd2595a88e5cac3cebcaaf4f7bdf0ff40275fc5b96f71eeb9"}}, &(0x7f0000003980)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000039c0)={0x20, 0x0, 0x1, 0x6}})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003b00)={0xc, 0x0, &(0x7f0000003a40)=[@acquire={0x40046305, 0x2}, @enter_looper], 0x7a, 0x0, &(0x7f0000003a80)="afa7e3a2e00b83f38cd7fcb8dfb501268f92c04ae24bd34279240bb03b280fde6f1f4b6f5c4b431011309f2377f5eae4a028d6bd0bdfeb8d28c87782a6f01d1c3bd9827525982b4203e6c5c4869934bebb31b2bc7215d16897e0194516bd0b28b82a2d04a363f07f0c0f629efe9953345868dc4a263b964aef29"})
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000003b40)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}})
close_range(0xffffffffffffffff, r4, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48034}, 0x90)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000003c80)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=""/159})
rt_sigqueueinfo(0x0, 0x1, &(0x7f0000004100)={0x12})

2.58837755s ago: executing program 3 (id=4911):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x33}, 0x0, @in=@empty, 0x3506, 0x4, 0x2, 0xb7, 0x2, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800)
recvmmsg(r3, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x10140, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x3000000)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x300)
r6 = dup3(r2, r2, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000040)={{0x33, @rand_addr=0x64010102, 0x4e20, 0x4, 'sh\x00', 0x14, 0x8, 0x11}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e22, 0x0, 0x5, 0x3, 0xa}}, 0x44)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)

2.576962081s ago: executing program 6 (id=4912):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0x11})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000005380)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f00000053c0)=0x20)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000118000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b9ec0900000f32e600670fc730d9ff67660fd324ec262e640f01d10f3801db66b98a09000066b80b00000066ba000000000f300fc7330fc75bd8", 0x3b}], 0x1, 0x41, &(0x7f0000000080), 0x0)
clock_gettime(0x0, &(0x7f0000005300)={<r7=>0x0, <r8=>0x0})
recvmmsg(r4, &(0x7f00000051c0)=[{{&(0x7f0000000480)=@caif=@dgm, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/23, 0x17}], 0x3, &(0x7f0000001500)=""/21, 0x15}, 0x7}, {{&(0x7f0000001540)=@xdp, 0x80, &(0x7f0000003840)=[{&(0x7f00000015c0)=""/186, 0xba}, {&(0x7f0000001680)=""/7, 0x7}, {&(0x7f00000016c0)=""/241, 0xf1}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x6, &(0x7f00000038c0)=""/68, 0x44}, 0x400}, {{&(0x7f0000003940)=@generic, 0x80, &(0x7f0000003a40)=[{&(0x7f00000039c0)=""/115, 0x73}], 0x1}, 0x7}, {{&(0x7f0000003a80)=@nl=@proc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003b00)=""/193, 0xc1}, {&(0x7f0000003c00)=""/213, 0xd5}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/169, 0xa9}], 0x4}, 0x2}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004e00)=""/254, 0xfe}, {&(0x7f0000004f00)=""/75, 0x4b}, {&(0x7f0000004f80)=""/193, 0xc1}], 0x3, &(0x7f00000050c0)=""/208, 0xd0}, 0x7fff}], 0x5, 0x10002, &(0x7f0000005340)={r7, r8+60000000})
connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c90}}}, 0x3a)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000005400)={<r9=>0x0, 0x7, 0x9, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000005800)={r9, "4692a21d4ee8443da099d211db04ea43"})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x200000000000000e}, @fda={0x66646185, 0x1, 0x0, 0x100000039}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x40}, @request_death], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"})

2.456698209s ago: executing program 6 (id=4913):
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xf0, 0x97, 0x60, 0x8, 0x452e, 0xa3be, 0xd48d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xe8, 0x8, 0x0, 0x8, 0x4, 0x50, 0x5}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x10}]}]}, 0x24}}, 0x0)
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)

1.948047642s ago: executing program 6 (id=4917):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0xffffd000)
socket(0x25, 0x1, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458})
readv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000006, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000922000/0x2000)=nil, 0x2000}})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write(r3, &(0x7f0000000400)="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", 0x1f000)

1.662113451s ago: executing program 3 (id=4918):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom1\x00', 0x800, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400802, 0x0)
write$9p(r2, &(0x7f0000000080)="d2f29b9e43dbe5db2f674af037df6a6b27f2927227a91dbb790040776e3ff85eb1b41582393afd4f82aa5c3efbf5c02d1d1debb85bb6e7c5db7b8a3e4b548ca60cddf36790d1c4d00c5a03b568d18009c44d0b48bbe7ffb2fb54b902391ba4ce460a35c27609f624610c92dcf08ce1f1ae699e5aeb4f2a8a9e3f5725576cfe86a5efbe887c1fcf6785381e0610784d1bb7f2e3142698cf3ac5ec17bc0b17c4265ce42369c6e613b9ab0fed713ec71ccfdca28793822d660fa559b1c07eba50debfe6f7abe9883ef8803348b5b3a3f7305bb7c7dbb0e6", 0xd6)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0)

1.128539656s ago: executing program 5 (id=4924):
timerfd_create(0x6, 0x80800)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0) (async)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000), 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
splice(r2, 0x0, r3, 0x0, 0x100000004, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
write(r0, &(0x7f0000000400)="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", 0x1f000)

1.059574741s ago: executing program 5 (id=4925):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x400280, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

952.690408ms ago: executing program 5 (id=4926):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x400000e, 0x8010, r0, 0x88b9b000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0xfffffffffffffffc, 0x20)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

943.090218ms ago: executing program 5 (id=4927):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x6})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1000, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x8, 0x7fffffff, 0x3, 0x400}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001940)='./binderfs/custom1\x00', 0x802, 0x0)
sendmsg$netlink(r0, &(0x7f00000019c0)={&(0x7f0000001300)=@proc={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="09745653e1d9ff7cc8e67dff24d0cca7d23398367cb81b47dc00fccda04481"], 0x274}, {&(0x7f0000001600)={0x48, 0x38, 0x200, 0x70bd27, 0x25dfdbff, "", [@nested={0x28, 0xe2, 0x0, 0x1, [@typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x147}, @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0xbc}, @typed={0xc, 0x152, 0x0, 0x0, @u64=0x1}]}, @typed={0x8, 0xdb, 0x0, 0x0, @fd=r5}, @typed={0x4, 0xb}, @typed={0x4, 0x37}]}, 0x48}, {&(0x7f00000016c0)=ANY=[@ANYBLOB="d40100003c0020002bbd7000fcdbdf250800f800", @ANYRES32=0x0, @ANYBLOB="bc0127800400088066a4451bb2c03425d20597d92a3ee54d200ee21db8308a1ffa6e0c9f1d54cd679470803cc4f6b59e894c6504001980530bef100aa2661909a82fdf2dc027a94d181bd27cf935e5e0b41d20fd621d2c652ffe61b72318699ec1d4a912c3c80ccb4d6281eaae93336da9d5ddba7022bb8236aedd390d0e04f53b68586c504fdaf3bf356b351d430fb0abd7d335e8e9da11f4874acc90eb50a6e2bf5829646fe7d416b904fc6b6a8ec83ec8e7da395b6a40be10f60c78fca968a021047e013154e5b83544f8ce3dbafede0786f82bfce14e40aba3f72ed3b89a967215439b223208d9381a3af60ef5881d6b73251e9416703c0554f90e27a8badc1ca08c0a21351f7d6a9a2b304fb824cd1cf90a01f6aa9f0dab9d0400258008002300", @ANYRES32=0x0, @ANYBLOB="04000b800c00ce0015940000000000000400fd800500000000000000d7467766802e890aa78ecd90f72c8c0d58fab61d95deca68fea94887475bbd2c032ac5934142b37c5c1ef7ac0f995561322814c5e1d77014fbb9702c190e01cc7fb7fcd31dbe931754566e8fc8da00e72ee6677809000000ccda26278d9000edca77a87d37490700000000000000cebfcef3ee000000000000"], 0x1d4}], 0x3, &(0x7f0000001980)=[@rights={{0x34, 0x1, 0x1, [r1, r5, r5, 0xffffffffffffffff, r1, r3, r3, r6, r4]}}], 0x38, 0x4800}, 0x40005)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)=""/197, 0xc5}], 0x1}, 0x2003)
recvmmsg(r4, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40000000, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = socket(0x10, 0x3, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0xa, 0x9, 0x40d6, 0xfe5b, 0x4, 0x6, 0x800, 0x10001, 0x6, 0x401, 0x9, 0x434f99e5, 0x0, 0xfffffffd, 0x2, 0x5, 0x86d7, 0xa, 0x3ff, 0x6, 0x1000, 0x7, 0x3, 0x1, 0x8, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1, 0x7, 0xd27e, 0x80, 0xff, 0x6, 0x7ff, 0x1, 0x8, 0x0, 0x1, 0x400, 0x96, 0x8, 0x5f34, 0x10000, 0x80, 0x2, 0x7fffffff, 0x9, 0x3, 0x37, 0xfffffff9, 0x9, 0x8, 0x6, 0xfffffff9, 0xfffffffb, 0xaba1, 0xd, 0xfffffff3, 0x3, 0x85a0, 0x5, 0xa8, 0x1000, 0xfffffffb, 0x7, 0x800, 0x8000, 0x2, 0x4, 0x1, 0x9, 0x9, 0x3, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x2, 0xc, 0x190c, 0x6, 0xa, 0x1, 0x4, 0x9, 0x9a, 0x3, 0x100, 0xfa, 0x7, 0xe5eb, 0x5, 0x8, 0x2, 0x4, 0x0, 0x9, 0xffff7fff, 0x7, 0x7, 0xffff5988, 0x4, 0xfffffff7, 0x98, 0x3782, 0x9, 0x4, 0x5, 0x5, 0x3, 0x2, 0x7ff, 0x1000, 0x2, 0x2, 0x8, 0xfffffffe, 0x6, 0x9, 0x40, 0x7, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x1, 0x200, 0x3b4, 0x10, 0x6, 0xd2f3, 0x3, 0xe46, 0x6, 0x9, 0x101, 0x4606, 0x9968, 0x9, 0x6, 0x5, 0x400, 0x4, 0x3, 0x4, 0x2, 0x1, 0x4, 0x2, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4, 0x0, 0x51f8c8fa, 0x8, 0x1ff, 0x1, 0x2, 0x81, 0x2f8, 0x0, 0xfffffe00, 0xd, 0x6, 0x7, 0x7, 0x2, 0x4, 0x4, 0x5, 0x9, 0xfffffc01, 0x7, 0x6, 0x8, 0x401, 0x1, 0x9, 0x1000, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x8, 0x88, 0x8001, 0xffff, 0x7, 0x97d, 0x8, 0x461, 0x7, 0x80000000, 0x6, 0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0x2, 0x7, 0x2, 0x6, 0x7, 0x12000000, 0x400, 0x40, 0x1, 0x7, 0x7, 0xfffffffc, 0xa110, 0x4, 0x10001, 0x4, 0x8d, 0x9, 0x8000, 0x8, 0x3, 0xd2, 0x9, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0x818, 0x5, 0x7, 0x4, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x4, 0x3, 0x79f7, 0x9, 0x28, 0x2, 0x8, 0x401, 0xe4, 0x6, 0x133, 0xc, 0x80000000, 0x9, 0x4, 0x7, 0x9, 0x4, 0x4, 0xd, 0x20000000, 0x0, 0xc1a, 0x2, 0x9, 0x7, 0xfff, 0x2, 0x5, 0x93, 0xc32, 0x80000000, 0x6, 0x9, 0xfffffffa, 0x8, 0x8, 0x8, 0x6, 0x9a, 0xb0c4, 0x40, 0x0, 0x8, 0x3, 0x3, 0x170, 0x80000000, 0x9, 0x7fffffff, 0x5, 0x1000, 0x8, 0xff, 0x6, 0x2, 0xfef2, 0x7, 0xdd, 0xe, 0xe000, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6884, 0x1ff, 0x400, 0x6, 0x2, 0x8000, 0x6, 0x5, 0x6, 0x800, 0xfffffff9, 0x8, 0x3, 0x8001, 0x80000000, 0xfffffff8, 0x3, 0x8, 0xfffffffc, 0x5, 0x2, 0x4, 0x1, 0x180, 0x3, 0x6, 0x4, 0x1, 0x80000000, 0x58, 0x200, 0x3, 0x7, 0x4, 0x8, 0x3, 0x1, 0x5, 0x3, 0xf17, 0x6, 0x2, 0x223f049, 0x5, 0x10, 0xbd16, 0x7, 0x6, 0x200, 0x3, 0x5, 0x8, 0x7, 0x9, 0xd, 0x6, 0x4, 0x839, 0x2e1a, 0x101, 0x1f, 0x6, 0x8, 0x3, 0x8919, 0x7, 0x7, 0x8, 0x6, 0x101, 0x401, 0x400, 0x26, 0x2, 0x781, 0x2, 0x2, 0x7, 0x1, 0x51ca, 0xa25, 0x1, 0xc, 0x0, 0x636, 0xfffffff7, 0x2, 0x4000000, 0xc631, 0x85ef, 0x5, 0x9, 0x0, 0xd8d, 0x96ef, 0xf, 0x7ff, 0x3, 0x2, 0x4, 0x0, 0xffffffbe, 0x59, 0xffffffff, 0x6, 0x1, 0xe6b, 0x5, 0xa, 0x9, 0x0, 0xd36, 0x6, 0xffff, 0xff, 0x9, 0x485a, 0x80, 0x8, 0x5, 0x6, 0x10000, 0xc764, 0x401, 0xfffffff2, 0x4, 0x401, 0x3, 0x10000, 0x9, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x101, 0x7, 0x3, 0x7, 0x7, 0x4, 0x8, 0x80, 0x5, 0x1, 0x3, 0x9, 0xffffffc0, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x8, 0xee, 0xe52, 0xfffffff9, 0xc, 0x1, 0x1, 0x0, 0x6, 0x2, 0x10, 0x40, 0x7, 0xfffffffb, 0x9, 0x0, 0x2, 0x7, 0x1ff, 0xfffffeff, 0x7f, 0xc, 0xa, 0x3ff, 0xa, 0x2, 0x5, 0x4, 0x3, 0x5, 0x1, 0x7, 0x5, 0x8062, 0x1, 0x3, 0x10, 0xe, 0x8001, 0x5, 0x401, 0xa, 0xfffffff9, 0x8, 0x3, 0x0, 0x80000001, 0x7, 0xd4, 0xf, 0x2, 0xcb, 0x401, 0x10, 0x2, 0x259, 0x7fff, 0x3, 0x68, 0x8, 0x8000, 0x2, 0x9, 0x5dbd2e38, 0xdbb, 0x7, 0x204, 0xbe7, 0x1, 0x9, 0x401, 0x5, 0x4, 0x9, 0x200, 0x0, 0x1216, 0x5, 0x9b, 0xfffffffc, 0x7f, 0x1, 0xffffffff, 0x2, 0x0, 0x400, 0xf1c, 0xd2f, 0x2, 0x10000, 0xb, 0x4, 0x4, 0x7, 0x8, 0x1, 0xfff, 0xf, 0x9, 0x80000000, 0x5, 0x5f, 0x7, 0x8000, 0x800, 0x4, 0xfffffffb, 0xaa3d, 0x4, 0x99, 0x6, 0x1, 0x3, 0x59, 0x8, 0x4e, 0x1, 0x2, 0xffff, 0xfffffffb, 0x31, 0xd0, 0x2d, 0x8001, 0x1, 0x11a, 0x34, 0x4, 0xffffffff, 0x3, 0x0, 0x5ef, 0x7, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0x8000, 0x100, 0x0, 0x3, 0x5, 0x800, 0xfffffff9, 0x7, 0x2, 0x334d, 0x38e640, 0x1, 0x100, 0x1, 0xfffffffe, 0x1000, 0x9, 0x102308ed, 0x8, 0x4, 0x9, 0x9, 0x2, 0x4, 0x1, 0x708, 0x1c0, 0xd, 0x2, 0x3, 0x80, 0x298b, 0x2, 0x9, 0x7, 0x8, 0xfffffe00, 0x1ff, 0x7, 0x0, 0xed, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0xe, 0x80000001, 0x2, 0x1ff, 0x9, 0x2, 0x7, 0x8, 0x1, 0x8, 0x264, 0x10000, 0x8, 0x4, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0x9, 0x80, 0x7, 0x6, 0x5, 0x81, 0x47, 0x7e, 0x7, 0x3, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x1, 0x3, 0x1, 0xffffff00, 0x8, 0x2e, 0x3, 0x1, 0x80000001, 0xa45, 0x4, 0x8001, 0x0, 0x250, 0xfff, 0x2a7c, 0xffffffff, 0xc, 0x51b1070d, 0xfffffffd, 0xfff, 0x477b, 0x1ff, 0xffffbfdb, 0x9, 0x0, 0x5, 0xab68, 0x9, 0x8001, 0x40, 0x4, 0x1526, 0x10001, 0x2, 0x1, 0x4, 0x1000, 0x40, 0x1, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0xc, 0xca, 0xb6, 0x80000000, 0x5, 0x9, 0xd, 0xc, 0x8bb, 0x8, 0x2, 0x10001, 0x3, 0x9, 0x3, 0x9, 0x4, 0x9, 0xccde, 0xfffffff9, 0x800, 0x4, 0x7, 0x3ff, 0x8000000, 0x3, 0x4, 0x6, 0x0, 0x80000001, 0xff, 0x7, 0x5, 0x2, 0x9, 0x5, 0x2, 0x20000, 0xe, 0x8001, 0xfffffffb, 0x4, 0x1d18, 0x8, 0x7, 0x5, 0x5, 0x5, 0xf, 0x0, 0x0, 0x9, 0x4, 0x5, 0xff, 0x7, 0x702, 0x1ef, 0x65, 0x3, 0x6, 0x9, 0x9, 0x200, 0x2, 0x5, 0x370, 0xfffffffd, 0x8, 0x100, 0x7, 0x5, 0x100, 0x7, 0x0, 0x4, 0x6, 0x0, 0x7, 0x7, 0x10001, 0x7, 0x8, 0x80000000, 0xb, 0x237a, 0x99, 0x3, 0x800, 0x7, 0x84b8, 0x5, 0x5, 0x85, 0x6, 0xfff, 0x2, 0xd0, 0xfffffffd, 0x5, 0x5, 0x9, 0x5, 0x1, 0x6, 0x10000, 0x7ff, 0x9, 0x9, 0x5, 0x4, 0x4, 0x5, 0x2, 0xfffffffd, 0x2, 0xea2, 0x7ff, 0x6, 0x2, 0x0, 0x80000001, 0x2, 0x2, 0xaf, 0x9, 0x4, 0x8, 0x5af6, 0x22df4e, 0x8, 0x2, 0xe8, 0xe, 0x6, 0x8, 0x3ff, 0xd, 0x0, 0x3, 0x4, 0xf, 0x3, 0x9, 0x738101a9, 0x9, 0xa3, 0x6, 0x71d, 0x766a, 0xfffffffd, 0x7fffffff, 0x401, 0x5, 0x90, 0x5, 0x9, 0xffffffff, 0x2, 0x1, 0x7, 0x7, 0x1, 0x7, 0x9, 0x4, 0x5c, 0x3, 0x6, 0x166cba4, 0x200, 0x3b8a85c1, 0x10, 0x5, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x98e, 0x9, 0x30, 0x759, 0x8, 0x45, 0x200, 0x1, 0x9, 0x8, 0x9, 0x200, 0x721ca50d, 0x3, 0x0, 0xc, 0x4, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x5, 0xfffffe00, 0x4c3, 0x3, 0x6, 0xfffffff7, 0x4, 0xfffffffa, 0x200, 0x5, 0xd, 0xb7, 0x3800, 0x7, 0x5, 0x4, 0xbf, 0x3, 0x9, 0x10000, 0xb, 0x7a, 0x7, 0x2, 0x342b, 0x4, 0x400, 0x401, 0x5, 0x0, 0x4, 0x3, 0x1, 0x6, 0x20de988b, 0x7ff, 0x8, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xaf, 0x2, 0xfffffffc, 0x3, 0x6, 0xa, 0x6db, 0x10000, 0x4, 0x8, 0x3, 0x401, 0xffff8001, 0xfff, 0x6, 0xfffffffd, 0x300000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x5, 0x9, 0xfff, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x5, 0x10000, 0x0, 0x5, 0x10001, 0x9, 0x8000, 0xffff, 0x2, 0x2, 0x77a, 0x8, 0x4, 0xf, 0x2, 0x2]})
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, 0x0, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
fcntl$addseals(r9, 0x409, 0x6)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40081)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000012c0)={&(0x7f0000001100), 0xc, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$TCXONC(r8, 0x540a, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

897.842761ms ago: executing program 1 (id=4928):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, &(0x7f0000000040), 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x4981, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x40000000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r7, &(0x7f0000000000)='.\x00', 0x9000, &(0x7f0000000340)={0x0, 0x85, 0x20000, {r7}}, 0x20)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x12, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0x4, 0xfffffff9}, 0x14)
syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000003c0)="66b81116b3d00f23d86665f30f09baf80cb800008ee066efbafc0c36660f3a09be000051ee0f23f8660f38328db900660f1996f7ffe1938ef36f8ef36f66b874c9238866efbafc0c66b81a000000c4c3c5ced97ff3d8fa660f38806606b8000a8ee00f01d0", 0x65}], 0x1, 0x65, 0x0, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xa, 0x6, 0x20000000000004, 0x3, 0x3a8, 0x2000006, 0x30000, 0xb, 0x1, 0xd, 0x80000000, 0xfffffff9, 0xf5b, 0x10000000800000cf, 0x2000003ff, 0x1], 0x0, 0x10580})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'})

854.222124ms ago: executing program 1 (id=4929):
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x4, 0x8, 0x4, 0x9, 0x8, 0x8}) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x4, 0x8, 0x4, 0x9, 0x8, 0x8})
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'pim6reg\x00', {0x2, 0x0, @private}})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00')
fsetxattr$security_capability(r1, &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x40, 0x3}, {0x80000001, 0xa569}], 0xee01}, 0x18, 0x0) (async)
fsetxattr$security_capability(r1, &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x40, 0x3}, {0x80000001, 0xa569}], 0xee01}, 0x18, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0x9)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000240)) (async)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000240))
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000)
fstatfs(r1, &(0x7f0000000280)=""/13)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/218) (async)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/218)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct}})
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x1, 0x2, 0x201, 0x0, 0x0, {0x9a773ce184ecfb0a}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2404c085)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xd, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x24044080)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000009c0)=""/34)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r3, 0x100, 0x8, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x20000880) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r3, 0x100, 0x8, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x20000880)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000b40)={'\x00', 0xa49, 0xedb, 0xf0, 0x0, 0x5, 0x80a0000, 0x80a0000, '\x00', 0xfffffff4})
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000d00)=[0x315, 0x678]) (async)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000d00)=[0x315, 0x678])
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x40010, r2, 0x86b67000)
write$nbd(r0, &(0x7f0000000d40)={0x67446698, 0x0, 0x1, 0x2, 0x3, "f7f7e5484804a4b67a9ef952d434db4f4e0f65df0df674db0297a0bc08ec7bca71a7c16c36513809a82c7119ad9dcc5f3a71a861490f1239c67fac4fc0eac6f04eefc4ccd38f3eaeae2cc73abb6f14e0b41aeab2a7ed11b14cbaf28dde820db09c5860ffb98cfa7f47a3604d89a0defb6aabcf25903d0c0285b192d561deec2472c817"}, 0x93)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000e00)=""/220, &(0x7f0000000f00)=0xdc)
socket(0xa, 0x1, 0x0) (async)
r4 = socket(0xa, 0x1, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000f40)=0x2) (async)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000f40)=0x2)
setsockopt$inet6_buf(r4, 0x29, 0x1c, &(0x7f0000000f80)="edb45b4306885b962ffcef77be01f72d859b21ec33f70883d2c493b26d6f6e490b5b4371f6bfbbec32332d9ea5b3f8", 0x2f)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000001e40)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001040)={0xda0, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1f}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x9a0, 0x111, 0x0, 0x1, {0x99c, 0x5, 0x0, 0x1, [{0x640, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x41}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x328, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6b4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd7e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x3d4, 0x111, 0x0, 0x1, {0x3d0, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x218, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x48}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb0}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x180, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xda0}, 0x1, 0x0, 0x0, 0xa080}, 0xc8015)
write$P9_ROPEN(r1, &(0x7f0000001e80)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x2}, 0x2}}, 0x18)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10110408}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

772.5544ms ago: executing program 1 (id=4930):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000))
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000001c0)=0x1)
r2 = socket(0xa, 0x3, 0x38)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e23, 0xd, @remote}, {0xa, 0x4e22, 0x0, @private0}, 0x0, {[0x7b3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12e9be9b7635060b170f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240000000003db3fc8eabf26326da7728acc8ba7e76215df053dfc7569d13202104f08fa5b37a065b3cea13bdf1610925ed53f5b9e1e73de48b745c60e33a03"], 0x0)
bind$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10)
syz_usb_control_io$printer(r5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

336.160099ms ago: executing program 3 (id=4931):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r1, 0x0, 0x0)
recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/74, 0x4a}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

275.353642ms ago: executing program 1 (id=4932):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="de547e22badef7fe47218ac45e0cfab956549e362216b22c7fa1086cc46642478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf200000000000000"})
syz_clone(0x40002011, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4e90a761ba22fd7fca4f6c2d70eccab599fa4576db19479f79799d"})
dup3(r0, r0, 0x0)

188.700258ms ago: executing program 1 (id=4933):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})

188.260038ms ago: executing program 1 (id=4934):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x1000}, 0xffffffffffffff4f, 0xfffffffffffffffb)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x2, 0xf0, 0x78, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f3ecb487"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x9, 0x5, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffc0, 0x40, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0xcf, 0xdb, 0x20, 0x4}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x400, 0xf, 0x8, [0xf0, 0x30]}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x814}}, {0xb3, &(0x7f0000000480)=@string={0xb3, 0x3, "0ecd8404d92ec9c2ada3db28b3b80fa1eb9971f8671e34efc8ae2be48f4c90d0d3dab285ccf05b8387426f9a71df25add5cca8e8bd4aac7b66bb37e7b63cc8a9c97b96f309a4e56f1ffde6b8ffad3d869274fa71a64cad9d44a149efd86f24bd57d1c018715ba7e1e2b0a1acbba863ec7e816bbd7d5b525713184fcc8eac470686a17980c8a00f7cef6c13e27421ba422f211df5568ca5ff4a127a42a20d7ee2fa224740c85cc1dbce2dbdadda13fa6c4f"}}, {0xf8, &(0x7f0000000540)=@string={0xf8, 0x3, "c96f2ad9bc4e2dbcdc5e4c0ef105eb114488089146d9c5bac679a474565fc4250bfb54738048cf3906dba1e96ece1876fd97bc5b48133983a20e16766656bf40197ba2a779c5a16aae77e25d4dc787ce9f0cb8d0a5d712a4f63a59a219fb1409c45c6aedb0fd06a6086370498bf5f7a691f2ee1294faaf9edf49d08504be8b8ccf2d8bf235ad4c7b287a6d966eef7764ce5ad1cda903549e8b9883c50672d0f9bd1d5d09812bc70dbdad48d8402474712a96f322ae67360fe0c230bf8d68365ef4fad83e0cd571b03b00b8cc7633f8990b494644c89f187c0319718612d74748abe0941ecfb0af18099be70549c67ef873e81f81f3b7"}}]})
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000340)="93", 0x1, 0x4000014, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640", 0x1d}], 0x1}}], 0x1, 0x10)
sendto$inet(r2, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000700)={0x14, &(0x7f0000000680)={0x20, 0x1, 0x30, {0x30, 0x23, "68227a24787ec9c862bbf0471c575119b4cb466fd4e5c0a54cd876a338feb04244ee1bfe684d4e852c1023cac60b"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x40, 0xa, 0x53, "213e72bf1bfeceade64f110df56f452ecc67507db66d1ee4ae2794f02dd568fce4e35229b92b41b148ae8f73b15b1f8efffa292b07985360e2364ea5b4de019b1b50bacbb3c858f814040f4fcc3dcc211580c4"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x6, 0xc4, 0x7, 0x8, 0x4, 0x5, 0x1a4b, 0x6, 0x3, 0x5, 0x5c7f}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0xc4}, &(0x7f0000000940)={0x20, 0x89, 0x2, 0x1}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/212, 0xd4, 0x0, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

172.864209ms ago: executing program 3 (id=4935):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
setgid(0xee00)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11)
write$cgroup_int(r0, &(0x7f0000001500)=0xffffffffffffffff, 0x12)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d941, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r4)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4)
fstat(r3, &(0x7f0000000080))
ioctl$BLKRRPART(r2, 0x125f, 0x0)

112.902763ms ago: executing program 3 (id=4936):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x20, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffff7fffffffffe}, {}, 0x70bd2b, 0x2, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(cbc(des3_ede),sha256-generic)\x00'}}}]}, 0x184}}, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x2}, {0xfffffffffffffff7, 0x101}, 0x10, 0x6})
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000280))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000080))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
unshare(0x22020600)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf)
getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000100))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/47, 0x2f, 0x1, &(0x7f00000001c0)=""/123, 0x7b}, &(0x7f0000000400)=0x40)
fcntl$setlease(r0, 0x400, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000000000000ff0700000000000001000000080000000600000000000000050000000000000032070000000000000200000000000000000000000000000000000000000000000b1c00000000000000000000000000000a000000000000000000000000000000d7030000000000000000000000000000000000000000000080000000000000000000000000000000070000000000000002000000000000000000000000000000000000000000000000000000000000008200000000000000000000000000000005000000000000000000000000000000ffff0000000000000000000000000000000000000000000000010000000000000000000000000000ff010000000000000800000000000000030000000000000300000000000000000000000000000000040000000000000000000000000000009315887800000000ff0f000000000000b80700"/368])

571.63µs ago: executing program 5 (id=4937):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x6, 0x1ff, 0x2, 0x7, "ff00000000000000000000008000"})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd)
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xff)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async)
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x6, 0x1ff, 0x2, 0x7, "ff00000000000000000000008000"}) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) (async)
syz_open_pts(r2, 0x0) (async)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xff) (async)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) (async)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x4) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) (async)

0s ago: executing program 3 (id=4938):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_clone3(&(0x7f00000002c0)={0x100000, 0x0, &(0x7f0000000040), 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x4981, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x40000000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r7, &(0x7f0000000000)='.\x00', 0x9000, &(0x7f0000000340)={0x0, 0x85, 0x20000, {r7}}, 0x20)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x12, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0x4, 0xfffffff9}, 0x14)
syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000003c0)="66b81116b3d00f23d86665f30f09baf80cb800008ee066efbafc0c36660f3a09be000051ee0f23f8660f38328db900660f1996f7ffe1938ef36f8ef36f66b874c9238866efbafc0c66b81a000000c4c3c5ced97ff3d8fa660f38806606b8000a8ee00f01d0", 0x65}], 0x1, 0x65, 0x0, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xa, 0x6, 0x20000000000004, 0x3, 0x3a8, 0x2000006, 0x30000, 0xb, 0x1, 0xd, 0x80000000, 0xfffffff9, 0xf5b, 0x10000000800000cf, 0x2000003ff, 0x1], 0x0, 0x10580})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'})

kernel console output (not intermixed with test programs):

bitrate = 8, frame size=5
[  308.395943][  T517] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  308.437795][  T517] usb 2-1: USB disconnect, device number 23
[  308.587342][T11794] udevd[11794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  308.807737][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4103'.
[  309.063869][T13214] rust_binder: 96: no such ref 3
[  309.066134][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4109'.
[  310.057206][T13256] 9pnet_fd: Insufficient options for proto=fd
[  310.545499][  T517] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  310.695317][  T517] usb 2-1: Using ep0 maxpacket: 32
[  310.703199][  T517] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  310.711347][  T517] usb 2-1: config 0 has no interface number 0
[  310.720438][  T517] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  310.729579][  T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.737598][  T517] usb 2-1: Product: syz
[  310.741758][  T517] usb 2-1: Manufacturer: syz
[  310.746397][  T517] usb 2-1: SerialNumber: syz
[  310.752561][  T517] usb 2-1: config 0 descriptor??
[  310.760724][  T517] smsc95xx v2.0.0
[  311.091521][   T36] kauditd_printk_skb: 1028 callbacks suppressed
[  311.091541][   T36] audit: type=1400 audit(2000000076.898:60295): avc:  denied  { create } for  pid=13309 comm="syz.3.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  311.117766][   T36] audit: type=1400 audit(2000000076.908:60296): avc:  denied  { connect } for  pid=13309 comm="syz.3.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  311.138401][   T36] audit: type=1400 audit(2000000076.908:60297): avc:  denied  { write } for  pid=13309 comm="syz.3.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  311.175001][   T36] audit: type=1400 audit(2000000076.978:60298): avc:  denied  { mounton } for  pid=13272 comm="syz.1.4129" path="/38/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  311.219853][   T36] audit: type=1400 audit(2000000077.028:60299): avc:  denied  { execute } for  pid=13318 comm="syz.3.4144" name="file1" dev="tmpfs" ino=3182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  311.234024][T13319] overlayfs: failed to clone lowerpath
[  311.243151][   T36] audit: type=1400 audit(2000000077.028:60300): avc:  denied  { execute_no_trans } for  pid=13318 comm="syz.3.4144" path="/593/file1" dev="tmpfs" ino=3182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  311.274420][   T36] audit: type=1400 audit(2000000077.028:60301): avc:  denied  { name_bind } for  pid=13318 comm="syz.3.4144" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  311.297363][   T36] audit: type=1400 audit(2000000077.028:60302): avc:  denied  { node_bind } for  pid=13318 comm="syz.3.4144" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  311.320048][   T36] audit: type=1400 audit(2000000077.038:60303): avc:  denied  { create } for  pid=13318 comm="syz.3.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  311.340452][   T36] audit: type=1400 audit(2000000077.038:60304): avc:  denied  { write } for  pid=13318 comm="syz.3.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  311.676939][  T517] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  311.939506][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407
[  311.950767][T13327] netlink: 'syz.3.4147': attribute type 1 has an invalid length.
[  311.955576][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07
[  312.107774][T13274] kvm_intel: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf
[  312.141233][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf
[  312.164928][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae
[  312.188174][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b
[  312.221021][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a
[  312.244110][T13274] kvm: kvm [13272]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a
[  312.476053][T13339] netlink: 'syz.5.4149': attribute type 27 has an invalid length.
[  313.061915][  T517] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  313.107399][  T517] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  313.128632][  T517] usb 2-1: USB disconnect, device number 24
[  313.838340][T13393] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.845520][T13393] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.852735][T13393] bridge_slave_0: entered allmulticast mode
[  313.859217][T13393] bridge_slave_0: entered promiscuous mode
[  313.866589][T13393] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.873645][T13393] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.881567][T13393] bridge_slave_1: entered allmulticast mode
[  313.887997][T13393] bridge_slave_1: entered promiscuous mode
[  313.979371][T13393] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.986455][T13393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.993829][T13393] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.000894][T13393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.056078][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.063588][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.080429][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.087564][ T9068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.102810][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.109922][ T9068] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.220048][T13393] veth0_vlan: entered promiscuous mode
[  314.271968][T13393] veth1_macvtap: entered promiscuous mode
[  315.438824][T13443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  315.902981][T13450] rust_binder: Write failure EFAULT in pid:133
[  315.950594][T13452] rust_binder: Write failure EFAULT in pid:135
[  316.042502][T13459] binder: Bad value for 'stats'
[  316.116572][   T36] kauditd_printk_skb: 639 callbacks suppressed
[  316.116593][   T36] audit: type=1400 audit(2000000081.918:60944): avc:  denied  { create } for  pid=13460 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  316.148519][   T36] audit: type=1400 audit(2000000081.928:60945): avc:  denied  { write } for  pid=13460 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  316.183010][   T36] audit: type=1400 audit(2000000081.928:60946): avc:  denied  { read } for  pid=13460 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  316.216281][T13468] SELinux:  Context ϧ�-�)�:E�2�٭�ؾ�)āJu36���ޢ{�@�m�[ is not valid (left unmapped).
[  316.253264][   T36] audit: type=1400 audit(2000000081.928:60947): avc:  denied  { read } for  pid=13460 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  316.266937][T13468] rust_binder: validate_parent_fixup: new_min_offset=144115188075855932, sg_entry.length=0
[  316.275058][T13468] rust_binder: Error while translating object.
[  316.286257][T13468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  316.292471][T13468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149
[  316.314449][   T36] audit: type=1400 audit(2000000081.948:60948): avc:  denied  { read } for  pid=13460 comm="syz.1.4186" name="binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  316.361336][   T36] audit: type=1400 audit(2000000081.948:60949): avc:  denied  { read open } for  pid=13460 comm="syz.1.4186" path="/dev/binderfs/binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  316.387262][   T36] audit: type=1400 audit(2000000081.948:60950): avc:  denied  { ioctl } for  pid=13460 comm="syz.1.4186" path="/dev/binderfs/binder1" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  316.414444][   T36] audit: type=1400 audit(2000000081.948:60951): avc:  denied  { set_context_mgr } for  pid=13460 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  316.445205][   T36] audit: type=1400 audit(2000000081.958:60952): avc:  denied  { read write } for  pid=12413 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.471612][   T36] audit: type=1400 audit(2000000081.958:60953): avc:  denied  { read write open } for  pid=12413 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  316.565329][  T334] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  316.705336][  T334] usb 4-1: device descriptor read/64, error -71
[  316.753112][T13484] rust_binder: inc_ref_done called when no active inc_refs
[  316.975312][  T334] usb 4-1: device descriptor read/64, error -71
[  317.085322][   T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  317.225381][  T334] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  317.240625][   T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  317.249899][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.257971][   T31] usb 2-1: Product: syz
[  317.262211][   T31] usb 2-1: Manufacturer: syz
[  317.266850][   T31] usb 2-1: SerialNumber: syz
[  317.276843][   T31] r8152-cfgselector 2-1: Unknown version 0x0000
[  317.284121][   T31] r8152-cfgselector 2-1: config 0 descriptor??
[  317.365762][  T334] usb 4-1: device descriptor read/64, error -71
[  317.605299][  T334] usb 4-1: device descriptor read/64, error -71
[  317.699804][T13490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  317.699854][T13490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165
[  317.712277][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.716519][  T334] usb usb4-port1: attempt power cycle
[  317.728232][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.748468][  T517] r8152-cfgselector 2-1: USB disconnect, device number 25
[  318.075312][  T334] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  318.101285][  T334] usb 4-1: device descriptor read/8, error -71
[  318.248152][  T334] usb 4-1: device descriptor read/8, error -71
[  318.485296][  T334] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  318.520360][  T334] usb 4-1: device descriptor read/8, error -71
[  318.591130][T13549] fuse: Bad value for 'fd'
[  318.652716][T13553] cgroup: name respecified
[  318.658563][  T334] usb 4-1: device descriptor read/8, error -71
[  318.765362][  T334] usb usb4-port1: unable to enumerate USB device
[  319.196630][T13566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198
[  319.250911][T13570] rust_binder: Failed to allocate buffer. len:224, is_oneway:true
[  319.434792][T13576] overlay: Unknown parameter 'appraise_type'
[  319.449714][T13580] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  319.449740][T13580] rust_binder: Error while translating object.
[  319.476906][T13580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  319.483184][T13580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205
[  319.593419][T13585] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4229'.
[  319.618440][T13587] rust_binder: Read failure Err(EAGAIN) in pid:14
[  319.736847][T13595] rust_binder: Write failure EINVAL in pid:209
[  319.745677][T13592] tipc: Enabling of bearer <eth:ip6erspan0> rejected, failed to enable media
[  319.818426][T13598] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.054766][T13605] rust_binder: 19: no such ref 1
[  320.085334][T13605] rust_binder: Write failure EINVAL in pid:19
[  320.209832][T13606] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.223124][T13606] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.230283][T13606] bridge_slave_0: entered allmulticast mode
[  320.236713][T13606] bridge_slave_0: entered promiscuous mode
[  320.246024][T13606] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.253088][T13606] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.260512][T13606] bridge_slave_1: entered allmulticast mode
[  320.266827][T13606] bridge_slave_1: entered promiscuous mode
[  320.330111][ T9034] erspan0: left allmulticast mode
[  320.335324][ T9034] bridge0: port 3(erspan0) entered disabled state
[  320.342168][ T9034] bridge_slave_1: left allmulticast mode
[  320.347952][ T9034] bridge_slave_1: left promiscuous mode
[  320.353623][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.361282][ T9034] bridge_slave_0: left allmulticast mode
[  320.367066][ T9034] bridge_slave_0: left promiscuous mode
[  320.372814][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.468433][T13606] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.475514][T13606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.482808][T13606] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.489886][T13606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.499571][ T9034] tipc: Disabling bearer <udp:syz2>
[  320.504937][ T9034] tipc: Left network mode
[  320.510576][ T9034] veth1_macvtap: left promiscuous mode
[  320.516200][ T9034] veth0_vlan: left promiscuous mode
[  320.600665][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.608920][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.623317][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.630431][ T9068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.643289][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.650395][ T9035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.790177][T13606] veth0_vlan: entered promiscuous mode
[  320.827906][T13606] veth1_macvtap: entered promiscuous mode
[  321.081284][T13636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  321.090531][T13636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  321.125955][   T36] kauditd_printk_skb: 768 callbacks suppressed
[  321.125975][   T36] audit: type=1400 audit(2000000086.938:61704): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.186277][  T335] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  321.194553][   T36] audit: type=1400 audit(2000000086.998:61705): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.219769][   T36] audit: type=1400 audit(2000000086.998:61706): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.244966][   T36] audit: type=1400 audit(2000000087.008:61707): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.270166][   T36] audit: type=1400 audit(2000000087.008:61708): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.305292][   T36] audit: type=1400 audit(2000000087.008:61709): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.326552][  T335] usb 4-1: device descriptor read/64, error -71
[  321.341672][   T36] audit: type=1400 audit(2000000087.008:61710): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.369425][   T36] audit: type=1400 audit(2000000087.008:61711): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.395986][   T36] audit: type=1400 audit(2000000087.078:61712): avc:  denied  { ioctl } for  pid=13629 comm="syz.3.4241" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  321.429585][   T36] audit: type=1400 audit(2000000087.108:61713): avc:  denied  { read write } for  pid=13606 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  321.491660][T13641] rust_binder: Error while translating object.
[  321.491704][T13641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  321.503245][T13641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:221
[  321.571904][T13645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223
[  321.585546][  T335] usb 4-1: device descriptor read/64, error -71
[  321.603241][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.615960][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.671860][T13647] /dev/rnullb0: Can't open blockdev
[  321.721062][T13649] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  321.750368][T13649] rust_binder: Write failure EFAULT in pid:228
[  321.845579][  T335] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  321.933011][T13652] rust_binder: Error while translating object.
[  321.933058][T13652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  321.948672][T13652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230
[  322.005283][  T335] usb 4-1: device descriptor read/64, error -71
[  322.265301][  T335] usb 4-1: device descriptor read/64, error -71
[  322.338046][T13661] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4251'.
[  322.375423][  T335] usb usb4-port1: attempt power cycle
[  322.539024][T13673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  322.539063][T13673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:17
[  322.555302][  T517] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  322.715348][  T335] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  322.725190][  T517] usb 2-1: No LPM exit latency info found, disabling LPM.
[  322.734145][  T517] usb 2-1: config 64 has an invalid interface number: 174 but max is 2
[  322.742531][  T517] usb 2-1: config 64 has an invalid interface number: 252 but max is 2
[  322.751705][  T517] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping
[  322.760734][  T517] usb 2-1: config 64 has an invalid interface number: 140 but max is 2
[  322.769142][  T517] usb 2-1: config 64 has no interface number 0
[  322.775408][  T517] usb 2-1: config 64 has no interface number 1
[  322.782135][  T335] usb 4-1: device descriptor read/8, error -71
[  322.788383][  T517] usb 2-1: config 64 has no interface number 2
[  322.794552][  T517] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[  322.805742][  T517] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[  322.816833][  T517] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[  322.827122][  T517] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[  322.838316][  T517] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  322.849753][  T517] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  322.861570][  T517] usb 2-1: config 64 interface 174 has no altsetting 0
[  322.869828][  T517] usb 2-1: config 64 interface 252 has no altsetting 0
[  322.876875][  T517] usb 2-1: config 64 interface 140 has no altsetting 0
[  322.916611][T13676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  322.916647][T13676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19
[  322.938931][  T335] usb 4-1: device descriptor read/8, error -71
[  323.195316][  T335] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  323.217656][  T335] usb 4-1: device descriptor read/8, error -71
[  323.347788][  T335] usb 4-1: device descriptor read/8, error -71
[  323.455421][  T335] usb usb4-port1: unable to enumerate USB device
[  323.992654][T13688] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  323.999842][T13688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31
[  324.005324][  T444] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  324.187902][  T444] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  324.197039][  T444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.207161][  T444] usb 6-1: config 0 descriptor??
[  324.285281][   T65] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  324.417622][T13686] __vm_enough_memory: pid: 13686, comm: syz.5.4259, bytes: 18014402804453376 not enough memory for the allocation
[  324.435489][  T444] usb 6-1: string descriptor 0 read error: -71
[  324.447023][   T65] usb 4-1: Using ep0 maxpacket: 8
[  324.452924][  T444] usbhid 6-1:0.0: can't add hid device: -71
[  324.459827][  T444] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  324.469019][  T444] usb 6-1: USB disconnect, device number 15
[  324.476184][   T65] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.487289][   T65] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.498879][   T65] usb 4-1: config 0 interface 0 has no altsetting 0
[  324.506116][   T65] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  324.515181][   T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.525203][   T65] usb 4-1: config 0 descriptor??
[  324.940735][   T65] ntrig 0003:1B96:0004.0028: unknown main item tag 0x0
[  324.965849][   T65] ntrig 0003:1B96:0004.0028: unknown main item tag 0x0
[  324.974856][   T65] ntrig 0003:1B96:0004.0028: unknown main item tag 0x0
[  325.005321][   T65] ntrig 0003:1B96:0004.0028: unknown main item tag 0x0
[  325.012263][   T65] ntrig 0003:1B96:0004.0028: unknown main item tag 0x0
[  325.033893][   T65] ntrig 0003:1B96:0004.0028: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0
[  325.180365][   T65] usb 4-1: USB disconnect, device number 54
[  325.202096][  T517] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  325.244818][  T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.286846][  T517] usb 2-1: can't set config #64, error -71
[  325.304958][T13696] fido_id[13696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  325.327531][  T517] usb 2-1: USB disconnect, device number 26
[  325.627054][T13698] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.634139][T13698] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.665303][T13698] bridge_slave_0: entered allmulticast mode
[  325.671747][T13698] bridge_slave_0: entered promiscuous mode
[  325.678428][T13701] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  325.689017][T13698] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.696115][T13701] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  325.704581][T13701] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  325.712554][T13698] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.719687][T13698] bridge_slave_1: entered allmulticast mode
[  325.725639][T13701] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  325.731249][T13711] rust_binder: Error while translating object.
[  325.734024][T13711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  325.740693][T13698] bridge_slave_1: entered promiscuous mode
[  325.765612][T13711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:249
[  325.881538][T13713] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  325.932165][T13713] rust_binder: Read failure Err(EFAULT) in pid:35
[  326.128833][T13698] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.142356][T13698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.149684][T13698] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.156757][T13698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.215578][   T36] kauditd_printk_skb: 637 callbacks suppressed
[  326.215597][   T36] audit: type=1400 audit(2000000092.028:62351): avc:  denied  { read } for  pid=13735 comm="syz.5.4273" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.296090][T13738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:255
[  326.301426][T13738] rust_binder: Read failure Err(EFAULT) in pid:255
[  326.335385][   T36] audit: type=1400 audit(2000000092.028:62352): avc:  denied  { read write } for  pid=12413 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  326.346966][T13738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:255
[  326.402058][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.442547][   T36] audit: type=1400 audit(2000000092.028:62353): avc:  denied  { read write open } for  pid=12413 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  326.486037][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.493216][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.520775][T13745] incfs: Options parsing error. -22
[  326.531715][   T36] audit: type=1400 audit(2000000092.028:62354): avc:  denied  { ioctl } for  pid=12413 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  326.560610][T13745] incfs: mount failed -22
[  326.605911][   T36] audit: type=1400 audit(2000000092.068:62355): avc:  denied  { read open } for  pid=13735 comm="syz.5.4273" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  326.659061][   T36] audit: type=1400 audit(2000000092.088:62356): avc:  denied  { read } for  pid=13737 comm="syz.1.4274" name="binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  326.699902][T13751] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.706571][T13746] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.706595][T13746] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64
[  326.706612][T13746] audit: backlog limit exceeded
[  326.765350][   T65] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  326.776092][T13698] veth0_vlan: entered promiscuous mode
[  326.776393][T13751] SELinux:  policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c
[  326.799952][T13751] SELinux: failed to load policy
[  326.852068][T13698] veth1_macvtap: entered promiscuous mode
[  326.892830][T13744] overlayfs: failed to resolve 'fsname=-$-?,smackfstransmute=/dev/kvm': -2
[  326.945277][   T65] usb 6-1: Using ep0 maxpacket: 16
[  326.956203][   T65] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  326.966285][   T65] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.986141][   T65] usb 6-1: config 0 has no interface number 0
[  327.008400][   T65] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  327.033158][   T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.045624][  T444] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  327.064120][   T65] usb 6-1: Product: syz
[  327.074727][   T65] usb 6-1: Manufacturer: syz
[  327.085860][   T65] usb 6-1: SerialNumber: syz
[  327.104071][   T65] usb 6-1: config 0 descriptor??
[  327.138253][   T65] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  327.149672][   T65] usb 6-1: No valid video chain found.
[  327.215728][  T444] usb 2-1: Using ep0 maxpacket: 16
[  327.239148][  T444] usb 2-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config
[  327.260002][  T444] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  327.278020][  T444] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  327.309490][  T444] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  327.336426][  T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.355404][  T444] usb 2-1: Product: syz
[  327.359765][  T444] usb 2-1: Manufacturer: syz
[  327.364677][  T444] usb 2-1: SerialNumber: syz
[  327.437273][T13768] __vm_enough_memory: pid: 13768, comm: syz.5.4280, bytes: 18014402804453376 not enough memory for the allocation
[  327.534923][   T65] usb 6-1: USB disconnect, device number 16
[  327.603640][T13775] netlink: 'syz.5.4282': attribute type 12 has an invalid length.
[  327.621208][  T444] usb 2-1: USB disconnect, device number 27
[  327.769242][T11794] udevd[11794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  327.845078][T13781] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  328.086555][T13795] rust_binder: Error while translating object.
[  328.086601][T13795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  328.092898][T13795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49
[  328.320879][T13802] __vm_enough_memory: pid: 13802, comm: syz.1.4289, bytes: 18014402804453376 not enough memory for the allocation
[  328.342283][  T444] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  328.505339][  T444] usb 6-1: Using ep0 maxpacket: 8
[  328.507677][T13814] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  328.523920][  T444] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.550067][  T444] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  328.582610][  T444] usb 6-1: config 1 interface 0 has no altsetting 0
[  328.604896][  T444] usb 6-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40
[  328.626280][  T444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.635359][  T444] usb 6-1: Product: syz
[  328.639567][  T444] usb 6-1: Manufacturer: Ч
[  328.644100][  T444] usb 6-1: SerialNumber: syz
[  328.937501][T13836] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.4300'.
[  328.946915][T13837] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.4300'.
[  328.960757][T13836] vcan0: entered allmulticast mode
[  328.968258][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4300'.
[  329.066375][  T444] usbhid 6-1:1.0: can't add hid device: -71
[  329.085316][  T444] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  329.106199][  T444] usb 6-1: USB disconnect, device number 17
[  329.155966][T13849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.165312][T13849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.225271][   T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  329.385300][   T31] usb 4-1: Using ep0 maxpacket: 8
[  329.392750][   T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  329.401096][   T31] usb 4-1: config 179 has no interface number 0
[  329.407403][   T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  329.418658][   T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  329.430256][   T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  329.445273][   T31] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  329.475281][   T31] usb 4-1: config 179 interface 65 has no altsetting 0
[  329.482221][   T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  329.491967][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.705305][  T517] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  329.845313][  T517] usb 6-1: device descriptor read/64, error -71
[  330.095306][  T517] usb 6-1: device descriptor read/64, error -71
[  330.127343][  T334] usb 4-1: USB disconnect, device number 55
[  330.305811][  T335] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  330.345268][  T517] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  330.464498][  T335] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  330.477225][  T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.487495][  T517] usb 6-1: device descriptor read/64, error -71
[  330.494968][  T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  330.510456][  T335] usb 2-1: config 1 has no interface number 0
[  330.517396][  T335] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  330.530717][  T335] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  330.548325][  T335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  330.564612][  T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.576860][  T335] usb 2-1: Product: syz
[  330.581088][  T335] usb 2-1: Manufacturer: syz
[  330.587922][  T335] usb 2-1: SerialNumber: syz
[  330.632852][T13877] virtiofs: Unknown parameter 'always'
[  330.735321][  T517] usb 6-1: device descriptor read/64, error -71
[  330.836343][T13882] KVM: debugfs: duplicate directory 13882-4
[  330.845372][  T517] usb usb6-port1: attempt power cycle
[  331.019158][   T65] usb 2-1: USB disconnect, device number 28
[  331.195301][  T517] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  331.225911][   T36] kauditd_printk_skb: 654 callbacks suppressed
[  331.225931][   T36] audit: type=1400 audit(2000000097.038:62994): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.229421][  T517] usb 6-1: device descriptor read/8, error -71
[  331.232203][   T36] audit: type=1400 audit(2000000097.038:62995): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.288669][   T36] audit: type=1400 audit(2000000097.038:62996): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.313918][   T36] audit: type=1400 audit(2000000097.038:62997): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.338992][   T36] audit: type=1400 audit(2000000097.038:62998): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.364253][   T36] audit: type=1400 audit(2000000097.068:62999): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.415963][   T36] audit: type=1400 audit(2000000097.228:63000): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.420631][  T517] usb 6-1: device descriptor read/8, error -71
[  331.442195][   T36] audit: type=1400 audit(2000000097.228:63001): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.472915][   T36] audit: type=1400 audit(2000000097.228:63002): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.498132][   T36] audit: type=1400 audit(2000000097.228:63003): avc:  denied  { ioctl } for  pid=13852 comm="syz.5.4306" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  331.582721][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4321'.
[  331.685564][  T517] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  331.708113][  T517] usb 6-1: device descriptor read/8, error -71
[  331.835856][   T31] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  331.838490][  T517] usb 6-1: device descriptor read/8, error -71
[  331.955756][  T517] usb usb6-port1: unable to enumerate USB device
[  331.995300][   T31] usb 2-1: Invalid ep0 maxpacket: 32
[  332.082947][T13907] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  332.084906][T13907] rust_binder: Error while translating object.
[  332.101584][T13907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  332.111708][T13907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87
[  332.135293][   T31] usb 2-1: new low-speed USB device number 30 using dummy_hcd
[  332.305601][   T31] usb 2-1: Invalid ep0 maxpacket: 32
[  332.311093][   T31] usb usb2-port1: attempt power cycle
[  332.661432][   T31] usb 2-1: new low-speed USB device number 31 using dummy_hcd
[  332.706041][   T31] usb 2-1: Invalid ep0 maxpacket: 32
[  332.855290][   T31] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  332.886031][   T31] usb 2-1: Invalid ep0 maxpacket: 32
[  332.896807][   T31] usb usb2-port1: unable to enumerate USB device
[  332.935311][   T65] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  333.025377][  T444] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  333.088355][   T65] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  333.097153][   T65] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  333.108676][   T65] usb 4-1: config 8 has no interface number 0
[  333.114804][   T65] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  333.131196][   T65] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  333.140913][   T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.149027][   T65] usb 4-1: Product: syz
[  333.153303][   T65] usb 4-1: Manufacturer: syz
[  333.157970][   T65] usb 4-1: SerialNumber: syz
[  333.195275][  T444] usb 6-1: Using ep0 maxpacket: 8
[  333.202755][  T444] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  333.211910][  T444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.221519][  T444] usb 6-1: config 0 descriptor??
[  333.375450][   T65] usb 4-1: USB disconnect, device number 56
[  333.439291][  T444] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  334.511491][T13967] 9p: Unknown uid 00000000004294967295
[  334.668013][  T444] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  334.690264][  T444] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  334.709816][  T444] asix 6-1:0.0: probe with driver asix failed with error -71
[  334.728966][  T444] usb 6-1: USB disconnect, device number 22
[  334.859094][T13982] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.910248][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4354'.
[  335.084614][T13988] binder: Bad value for 'max'
[  335.280384][  T335] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  335.319332][T13999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:297
[  335.342540][T14000] kvm: pic: non byte write
[  335.402667][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4361'.
[  335.449500][  T335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.462269][T14004] FAT-fs (rnullb0): bogus number of reserved sectors
[  335.473397][  T335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  335.482401][  T335] usb 4-1: config 1 has no interface number 0
[  335.488608][  T335] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  335.497552][T14004] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  335.513520][  T335] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  335.523722][  T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.533764][  T335] usb 4-1: Product: syz
[  335.538581][  T335] usb 4-1: Manufacturer: syz
[  335.550853][  T335] usb 4-1: SerialNumber: syz
[  335.568632][  T335] usb 4-1: selecting invalid altsetting 1
[  335.690776][T14018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303
[  335.789173][T14025] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  335.806608][  T335] cdc_ncm 4-1:1.1: bind() failure
[  335.829838][  T335] usb 4-1: USB disconnect, device number 57
[  335.844737][T14025] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  335.870371][T14025] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  335.901575][T14025] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  336.010938][T14035] rust_binder: Error while translating object.
[  336.010988][T14035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  336.025260][T14035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88
[  336.138608][T14040] binder: Bad value for 'max'
[  336.215643][T14042] rust_binder: Write failure EFAULT in pid:90
[  336.285739][   T36] kauditd_printk_skb: 1527 callbacks suppressed
[  336.285759][   T36] audit: type=1400 audit(2000000102.098:64531): avc:  denied  { create } for  pid=14049 comm="syz.1.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  336.318783][   T36] audit: type=1400 audit(2000000102.128:64532): avc:  denied  { setopt } for  pid=14049 comm="syz.1.4377" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  336.355652][T14050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314
[  336.377307][   T36] audit: type=1400 audit(2000000102.138:64533): avc:  denied  { read write } for  pid=13393 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.412933][   T36] audit: type=1400 audit(2000000102.138:64534): avc:  denied  { read write open } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.439538][   T36] audit: type=1400 audit(2000000102.138:64535): avc:  denied  { ioctl } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  336.485302][   T36] audit: type=1400 audit(2000000102.158:64536): avc:  denied  { read } for  pid=14049 comm="syz.1.4377" name="binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  336.542662][T14061] audit: audit_backlog=65 > audit_backlog_limit=64
[  336.545510][T14060] audit: audit_backlog=65 > audit_backlog_limit=64
[  336.560203][   T36] audit: type=1400 audit(2000000102.158:64537): avc:  denied  { read open } for  pid=14049 comm="syz.1.4377" path="/dev/binderfs/binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  336.583462][T14061] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64
[  336.727504][T14073] 9pnet: p9_errstr2errno: server reported unknown error 1844
[  336.824867][T14080] rust_binder: Error while translating object.
[  336.824911][T14080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  336.831932][T14080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:103
[  336.957628][T14091] rust_binder: Write failure EINVAL in pid:107
[  336.970911][T14091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107
[  336.985271][   T65] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  337.146244][T14099] rust_binder: Write failure EFAULT in pid:113
[  337.155280][   T65] usb 4-1: Using ep0 maxpacket: 32
[  337.178939][   T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.207094][   T65] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  337.235272][   T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.243322][   T65] usb 4-1: Product: syz
[  337.268896][   T65] usb 4-1: Manufacturer: syz
[  337.269012][T14104] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  337.285266][   T65] usb 4-1: SerialNumber: syz
[  337.302232][   T65] usb 4-1: config 0 descriptor??
[  337.315264][   T65] smsc75xx v1.0.0
[  337.320321][   T65] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  337.340658][   T65] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22
[  337.346652][T14106] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.461540][T14114] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4400'.
[  337.482774][T14114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329
[  337.571076][T14118] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  337.646841][  T517] usb 4-1: USB disconnect, device number 58
[  337.742878][T14133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:335
[  337.743995][T14133] rust_binder: Read failure Err(EFAULT) in pid:335
[  337.867264][T14144] /dev/rnullb0: Can't open blockdev
[  337.931166][T14146] incfs_lookup_dentry err:-13
[  337.935949][T14146] incfs: Can't find or create .index dir in ./bus
[  337.942515][T14146] incfs: mount failed -13
[  337.989266][T14148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140
[  338.024019][T14150] SELinux:  Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped).
[  338.164325][T14156] incfs: Options parsing error. -22
[  338.169716][T14156] incfs: mount failed -22
[  338.170809][T14157] netlink: 'syz.5.4414': attribute type 64 has an invalid length.
[  338.174882][T14156] incfs: Options parsing error. -22
[  338.190071][T14156] incfs: mount failed -22
[  338.198283][T14156] incfs: Options parsing error. -22
[  338.203556][T14156] incfs: mount failed -22
[  338.224273][T14156] incfs: Options parsing error. -22
[  338.236974][T14156] incfs: mount failed -22
[  338.242237][T14156] incfs: Options parsing error. -22
[  338.265428][T14156] incfs: mount failed -22
[  338.490155][T14183] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  338.491176][T14183] rust_binder: Failed copying into alloc: EFAULT
[  338.497762][T14183] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  338.504384][T14183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  338.512982][T14183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112
[  338.543134][T14185] 9pnet_fd: Insufficient options for proto=fd
[  338.608498][T14187] rust_binder: Write failure EINVAL in pid:114
[  338.857670][T14211] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  339.485289][   T65] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  339.635268][   T65] usb 6-1: Using ep0 maxpacket: 8
[  339.643379][   T65] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  339.652230][   T65] usb 6-1: config 179 has no interface number 0
[  339.658546][   T65] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  339.670730][   T65] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  339.688471][T14238] binder: Unknown parameter 'fowner>00000000000000000000'
[  339.703601][   T65] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  339.784605][T14244] 9pnet_fd: Insufficient options for proto=fd
[  339.912731][T14250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349
[  340.655064][   T65] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  340.677817][   T65] usb 6-1: config 179 interface 65 has no altsetting 0
[  340.684684][   T65] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  340.693795][   T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.932996][  T335] usb 6-1: USB disconnect, device number 23
[  340.986530][T14277] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  341.015274][T14277] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  341.023802][T14277] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  341.048975][T14277] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  341.306271][   T36] kauditd_printk_skb: 753 callbacks suppressed
[  341.306293][   T36] audit: type=1400 audit(2000000107.118:65204): avc:  denied  { read write } for  pid=14290 comm="syz.1.4460" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.373546][T14293] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[  341.395140][   T36] audit: type=1400 audit(2000000107.118:65205): avc:  denied  { read write open } for  pid=14290 comm="syz.1.4460" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.420677][   T36] audit: type=1400 audit(2000000107.118:65206): avc:  denied  { ioctl } for  pid=14290 comm="syz.1.4460" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.452674][   T36] audit: type=1400 audit(2000000107.118:65207): avc:  denied  { map } for  pid=14290 comm="syz.1.4460" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.476519][   T36] audit: type=1400 audit(2000000107.118:65208): avc:  denied  { read } for  pid=14290 comm="syz.1.4460" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.503681][   T36] audit: type=1400 audit(2000000107.118:65209): avc:  denied  { read } for  pid=14290 comm="syz.1.4460" name="binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  341.538878][T14304] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  341.557686][   T65] usb 2-1: new low-speed USB device number 33 using dummy_hcd
[  341.573255][   T36] audit: type=1400 audit(2000000107.118:65210): avc:  denied  { read open } for  pid=14290 comm="syz.1.4460" path="/dev/binderfs/binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  341.598896][T14304] rust_binder: Error while translating object.
[  341.598928][T14304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  341.605129][T14304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[  341.607489][   T36] audit: type=1400 audit(2000000107.118:65211): avc:  denied  { ioctl } for  pid=14290 comm="syz.1.4460" path="/dev/binderfs/binder1" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  341.651708][   T36] audit: type=1400 audit(2000000107.118:65212): avc:  denied  { read write } for  pid=14290 comm="syz.1.4460" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.676075][   T36] audit: type=1400 audit(2000000107.118:65213): avc:  denied  { read write open } for  pid=14290 comm="syz.1.4460" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  341.794083][   T65] usb 2-1: No LPM exit latency info found, disabling LPM.
[  341.816056][   T65] usb 2-1: config 64 has an invalid interface number: 174 but max is 2
[  341.835253][   T65] usb 2-1: config 64 has an invalid interface number: 252 but max is 2
[  341.853703][   T65] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping
[  341.875258][   T65] usb 2-1: config 64 has an invalid interface number: 140 but max is 2
[  341.896554][   T65] usb 2-1: config 64 has no interface number 0
[  341.902770][   T65] usb 2-1: config 64 has no interface number 1
[  341.929987][   T65] usb 2-1: config 64 has no interface number 2
[  341.955319][   T65] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[  341.978231][   T65] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[  341.996181][T14317] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  342.005270][   T65] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[  342.016110][   T65] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[  342.045263][   T65] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  342.066420][   T65] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  342.080671][  T329] bridge_slave_1: left allmulticast mode
[  342.088375][  T329] bridge_slave_1: left promiscuous mode
[  342.102600][   T65] usb 2-1: config 64 interface 174 has no altsetting 0
[  342.116082][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.126902][   T65] usb 2-1: config 64 interface 252 has no altsetting 0
[  342.133806][   T65] usb 2-1: config 64 interface 140 has no altsetting 0
[  342.141730][  T329] bridge_slave_0: left allmulticast mode
[  342.152698][  T329] bridge_slave_0: left promiscuous mode
[  342.159445][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.173819][   T65] usb 2-1: string descriptor 0 read error: -22
[  342.185435][   T65] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  342.195340][   T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.232150][   T65] usb-storage 2-1:64.174: USB Mass Storage device detected
[  342.280089][   T65] usb-storage 2-1:64.252: USB Mass Storage device detected
[  342.350853][T14342] fuse: Bad value for 'fd'
[  342.383383][   T65] usb-storage 2-1:64.140: USB Mass Storage device detected
[  342.422832][  T329] veth1_macvtap: left promiscuous mode
[  342.428458][  T329] >: left promiscuous mode
[  342.462352][   T65] usb 2-1: USB disconnect, device number 33
[  342.706407][T14361] Invalid ELF header magic: != ELF
[  342.758285][T14363] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.774710][T14363] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  342.792718][T14363] SELinux: failed to load policy
[  342.802016][T14363] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true
[  342.802048][T14363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  342.811594][T14363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:159
[  343.331706][T14380] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  343.425357][T14380] rust_binder: Error in use_page_slow: ESRCH
[  343.425384][T14380] rust_binder: use_range failure ESRCH
[  343.451880][T14380] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  343.462725][T14380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  343.490306][T14380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:177
[  343.534477][T14388] netlink: 'syz.3.4488': attribute type 6 has an invalid length.
[  343.574913][T14388] IPv6: NLM_F_CREATE should be specified when creating new route
[  343.604000][T14388] rust_binder: Write failure EFAULT in pid:173
[  343.789240][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4491'.
[  343.849460][T14396] rust_binder: Error while translating object.
[  343.849507][T14396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  343.879498][T14396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:377
[  344.195269][  T335] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  344.344403][T14419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379
[  344.415261][  T335] usb 4-1: Using ep0 maxpacket: 8
[  344.432553][  T335] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  344.442825][  T335] usb 4-1: config 179 has an invalid descriptor of length 225, skipping remainder of the config
[  344.454277][  T335] usb 4-1: config 179 has no interface number 0
[  344.461433][  T335] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  344.477780][  T335] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  344.488388][  T335] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  344.497298][  T335] usb 4-1: Manufacturer: syz
[  344.661074][T14397] vcan0 (unregistering): left allmulticast mode
[  344.770331][  T335] usb 4-1: USB disconnect, device number 59
[  344.835990][T14426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4500'.
[  344.948823][T14430] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[  344.948848][T14430] rust_binder: Error while translating object.
[  344.961567][T14430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  344.969639][T14430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183
[  345.076344][T14441] rust_binder: Write failure EFAULT in pid:394
[  345.198592][T14443] rust_binder: Failed copying remainder into alloc: EFAULT
[  345.204858][T14443] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  345.212728][T14443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  345.221222][T14443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:396
[  345.306491][T14450] syz.1.4508 (14450): /proc/14449/oom_adj is deprecated, please use /proc/14449/oom_score_adj instead.
[  345.406860][T14454] can: request_module (can-proto-6) failed.
[  345.425260][T14454] can: request_module (can-proto-6) failed.
[  345.434906][T14454] can: request_module (can-proto-6) failed.
[  345.449838][T14454] can: request_module (can-proto-6) failed.
[  345.458310][T14454] can: request_module (can-proto-6) failed.
[  345.565431][ T1004] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  345.723346][T14475] binder: Bad value for 'max'
[  345.725346][ T1004] usb 2-1: Using ep0 maxpacket: 8
[  345.753775][ T1004] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  345.780352][ T1004] usb 2-1: config 179 has no interface number 0
[  345.788698][ T1004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  345.811635][ T1004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  345.846005][ T1004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  345.873485][ T1004] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  345.905887][ T1004] usb 2-1: config 179 interface 65 has no altsetting 0
[  345.916024][ T1004] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  345.935592][ T1004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.103550][T14497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197
[  346.175598][T14502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:199
[  346.193856][  T517] usb 2-1: USB disconnect, device number 34
[  346.219516][T14506] netlink: 'syz.5.4524': attribute type 4 has an invalid length.
[  346.235261][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4524'.
[  346.316586][   T36] kauditd_printk_skb: 716 callbacks suppressed
[  346.316614][   T36] audit: type=1400 audit(2000000113.121:65930): avc:  denied  { read open } for  pid=14508 comm="syz.3.4526" path="/dev/binderfs/binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  346.412888][   T36] audit: type=1400 audit(2000000113.151:65931): avc:  denied  { read } for  pid=14508 comm="syz.3.4526" dev="nsfs" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  346.472080][   T36] audit: type=1400 audit(2000000113.151:65932): avc:  denied  { read open } for  pid=14508 comm="syz.3.4526" path="net:[4026532914]" dev="nsfs" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  346.506212][  T335] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  346.520927][   T36] audit: type=1400 audit(2000000113.151:65933): avc:  denied  { create } for  pid=14508 comm="syz.3.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  346.574331][   T36] audit: type=1400 audit(2000000113.181:65934): avc:  denied  { read write } for  pid=13393 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  346.599609][   T36] audit: type=1400 audit(2000000113.181:65935): avc:  denied  { read write open } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  346.625524][   T36] audit: type=1400 audit(2000000113.181:65936): avc:  denied  { ioctl } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  346.651462][   T36] audit: type=1400 audit(2000000113.191:65937): avc:  denied  { ioctl } for  pid=14503 comm="syz.5.4524" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.677342][   T36] audit: type=1400 audit(2000000113.251:65938): avc:  denied  { ioctl } for  pid=14503 comm="syz.5.4524" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  346.702485][  T335] usb 6-1: device descriptor read/64, error -71
[  346.703736][   T36] audit: type=1400 audit(2000000113.271:65939): avc:  denied  { create } for  pid=14513 comm="syz.3.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  346.799281][T14530] fuse: Unknown parameter '-�U��7B���%�3�xw<ѭ��H����P�+>ʀ̐7�LG��y�]��g�0W�5:��)����T���������
@}��d��'
[  346.813380][T14532] fuse: Unknown parameter '-�U��7B���%�3�xw<ѭ��H����P�+>ʀ̐7�LG��y�]��g�0W�5:��)����T���������
@}��d��'
[  346.975267][  T335] usb 6-1: device descriptor read/64, error -71
[  347.105121][T14540] netlink: 8540 bytes leftover after parsing attributes in process `syz.1.4534'.
[  347.114438][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4534'.
[  347.132845][T14540] __vm_enough_memory: pid: 14540, comm: syz.1.4534, bytes: 18014402804453376 not enough memory for the allocation
[  347.215288][  T335] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  347.342662][  T517] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  347.365333][  T335] usb 6-1: device descriptor read/64, error -71
[  347.506809][  T517] usb 4-1: not running at top speed; connect to a high speed hub
[  347.516303][  T517] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  347.530084][  T517] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  347.539208][  T517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.547256][  T517] usb 4-1: Product: 樷䷛邬몂嬥瘿掻醒ㆤ䈫ꃩ佮㲍膞
[  347.554930][  T517] usb 4-1: Manufacturer: 猐蜗轼䀎谶欞쭻뮙횅숴讞켏ﬤᾳ㨕꩟謁矹䗼芞ᆦ⃎⯬剑㕜䷠䫺쥽迟뷅䉬㔀윪朁鵿邰䓊쌸緄頎럺룘Ӝ燠う崂ܷ벲ꄣ踘쟅ሹ嫞靰쁒㎝᠁闘ࠊ駍䑴˸鄮龳巿澅퟼᧋◐㬰径맲ꠕ묇詉ᫍ炀偱婥㫷᣼匭巘鄪劄↸囋
[  347.585320][ T1004] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  347.645276][  T335] usb 6-1: device descriptor read/64, error -71
[  347.745421][ T1004] usb 2-1: Using ep0 maxpacket: 16
[  347.755656][  T335] usb usb6-port1: attempt power cycle
[  347.762644][ T1004] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  347.771771][ T1004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.779864][ T1004] usb 2-1: Product: syz
[  347.784056][ T1004] usb 2-1: Manufacturer: syz
[  347.788726][ T1004] usb 2-1: SerialNumber: syz
[  347.795314][ T1004] usb 2-1: config 0 descriptor??
[  347.803726][ T1004] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  347.817439][ T1004] usb 2-1: Detected FT-X
[  348.008657][ T1004] ftdi_sio ttyUSB0: Unable to read latency timer: -121
[  348.090382][  T517] cdc_ncm 4-1:1.0: bind() failure
[  348.096703][  T517] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  348.103614][  T517] cdc_ncm 4-1:1.1: bind() failure
[  348.112292][  T335] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  348.126037][  T517] usb 4-1: USB disconnect, device number 60
[  348.169893][  T335] usb 6-1: device descriptor read/8, error -71
[  348.280784][ T1004] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  348.288139][ T1004] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  348.302759][ T1004] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  348.308409][  T335] usb 6-1: device descriptor read/8, error -71
[  348.314373][ T1004] usb 2-1: USB disconnect, device number 35
[  348.325105][ T1004] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  348.334792][ T1004] ftdi_sio 2-1:0.0: device disconnected
[  348.555279][  T335] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  348.578182][  T335] usb 6-1: device descriptor read/8, error -71
[  348.717217][  T335] usb 6-1: device descriptor read/8, error -71
[  348.826179][  T335] usb usb6-port1: unable to enumerate USB device
[  348.855078][T14562] rust_binder: Write failure EFAULT in pid:418
[  349.206507][T14590] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  349.206539][T14590] rust_binder: Error while translating object.
[  349.219936][T14590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  349.227475][T14590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430
[  349.403648][T14597] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  349.463199][T14596] rust_binder: Error in use_page_slow: ESRCH
[  349.554562][T14596] rust_binder: use_range failure ESRCH
[  349.560700][T14596] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  349.566548][T14596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  349.574842][T14596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:432
[  349.603007][   T31] rust_binder: 14558: removing orphan mapping 0:1048
[  350.350225][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4559'.
[  350.377880][T14621] rust_binder: Error while translating object.
[  350.377914][T14621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  350.394285][T14621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:204
[  350.487707][T14617] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  350.795144][T14644] rust_binder: Write failure EINVAL in pid:210
[  350.823872][T14631] 9pnet_fd: Insufficient options for proto=fd
[  351.350886][   T36] kauditd_printk_skb: 512 callbacks suppressed
[  351.350906][   T36] audit: type=1400 audit(2000000118.151:66452): avc:  denied  { read write } for  pid=14647 comm="syz.1.4569" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  351.451856][   T36] audit: type=1400 audit(2000000118.191:66453): avc:  denied  { read write open } for  pid=14647 comm="syz.1.4569" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  351.561866][   T36] audit: type=1400 audit(2000000118.211:66454): avc:  denied  { read write } for  pid=14650 comm="syz.5.4570" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  351.632928][   T36] audit: type=1400 audit(2000000118.211:66455): avc:  denied  { read write open } for  pid=14650 comm="syz.5.4570" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  351.657835][   T36] audit: type=1400 audit(2000000118.301:66456): avc:  denied  { read write } for  pid=13606 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  351.682557][   T36] audit: type=1400 audit(2000000118.301:66457): avc:  denied  { read write open } for  pid=13606 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  351.707770][   T36] audit: type=1400 audit(2000000118.301:66458): avc:  denied  { ioctl } for  pid=13606 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  351.736788][   T36] audit: type=1400 audit(2000000118.401:66459): avc:  denied  { read } for  pid=14654 comm="syz.5.4572" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  351.805256][   T36] audit: type=1400 audit(2000000118.401:66460): avc:  denied  { read open } for  pid=14654 comm="syz.5.4572" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  351.879985][   T36] audit: type=1400 audit(2000000118.401:66461): avc:  denied  { read } for  pid=14654 comm="syz.5.4572" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  352.045262][   T31] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  352.198136][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  352.209664][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  352.233084][   T31] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  352.248806][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.287367][   T31] usb 4-1: config 0 descriptor??
[  352.305973][T14664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  352.327883][   T31] usbhid 4-1:0.0: can't add hid device: -22
[  352.333893][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  352.362361][T14682] __vm_enough_memory: pid: 14682, comm: syz.1.4582, bytes: 18014402804453376 not enough memory for the allocation
[  352.439939][T14689] overlayfs: disabling nfs_export due to verity=require
[  352.457711][T14689] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  352.531267][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.539906][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.551097][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.559694][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.572225][  T334] usb 4-1: USB disconnect, device number 61
[  352.735303][   T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  352.885282][   T31] usb 2-1: Using ep0 maxpacket: 8
[  352.894290][   T31] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.905452][   T31] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  352.918546][   T31] usb 2-1: config 1 interface 0 has no altsetting 0
[  352.928238][   T31] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40
[  352.937668][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.946373][   T31] usb 2-1: Product: syz
[  352.950581][   T31] usb 2-1: Manufacturer: Ч
[  352.955089][   T31] usb 2-1: SerialNumber: syz
[  353.126072][T14700] netlink: 'syz.3.4588': attribute type 8 has an invalid length.
[  353.180338][   T31] usbhid 2-1:1.0: can't add hid device: -71
[  353.195386][   T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  353.213297][   T31] usb 2-1: USB disconnect, device number 36
[  353.391259][T14710] rust_binder: 250: no such ref 2
[  353.402819][T14710] rust_binder: Read failure Err(EAGAIN) in pid:250
[  353.486806][T14712] netlink: 182 bytes leftover after parsing attributes in process `syz.3.4594'.
[  353.516282][T14712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252
[  353.535286][  T335] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  353.715263][  T335] usb 6-1: Using ep0 maxpacket: 16
[  353.731748][  T335] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  353.747167][  T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.761164][T14723] 9pnet_fd: Insufficient options for proto=fd
[  353.769168][  T335] usb 6-1: config 0 descriptor??
[  353.783048][  T335] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  354.141017][  T335] usb 6-1: Detected FT232A
[  354.147402][  T335] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  354.156482][  T335] usb 6-1: USB disconnect, device number 28
[  354.164108][  T335] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  354.174511][  T335] ftdi_sio 6-1:0.0: device disconnected
[  354.180897][  T334] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  354.288922][T14734] x_tables: duplicate entry at hook 2
[  354.347501][  T334] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  354.355636][  T334] usb 2-1: config 0 has no interface number 0
[  354.361717][  T334] usb 2-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30
[  354.375592][  T334] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  354.389939][  T334] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  354.400202][  T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.410618][  T334] usb 2-1: config 0 descriptor??
[  354.486361][T14740] incfs: Options parsing error. -22
[  354.498136][T14740] incfs: mount failed -22
[  354.539981][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.540297][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.564881][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.565474][T14747] rust_binder: Error in use_page_slow: ESRCH
[  354.571939][T14747] rust_binder: use_range failure ESRCH
[  354.572918][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.586760][T14747] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  354.593218][T14747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  354.601810][T14747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:259
[  354.645281][  T334] usb 2-1: string descriptor 0 read error: -71
[  354.701090][  T334] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2
[  354.720951][  T334] usb 2-1: USB disconnect, device number 37
[  354.781010][T11794] udevd[11794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  354.865820][   T31] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  354.952500][T14764] rust_binder: 269: no such ref 0
[  354.958502][T14762] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  355.037922][   T31] usb 6-1: config 0 interface 0 has no altsetting 0
[  355.051984][   T31] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  355.061166][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.073244][   T31] usb 6-1: config 0 descriptor??
[  355.087776][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.104349][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.410668][T14781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  355.410696][T14781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:282
[  355.504154][   T31] cypress 0003:04B4:ED81.0029: hidraw0: USB HID v1.01 Device [HID 04b4:ed81] on usb-dummy_hcd.5-1/input0
[  355.703628][T14753] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  355.703654][T14753] rust_binder: Error while translating object.
[  355.712420][T14754] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[  355.726861][T14754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  355.736252][T14753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  355.751148][T14754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:233
[  355.765316][T14753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233
[  355.783958][  T334] usb 6-1: USB disconnect, device number 29
[  355.914905][T14807] ptm ptm37: ldisc open failed (-12), clearing slot 37
[  356.361369][   T36] kauditd_printk_skb: 647 callbacks suppressed
[  356.361390][   T36] audit: type=1400 audit(2000000123.161:67109): avc:  denied  { read write } for  pid=13606 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.541658][   T36] audit: type=1400 audit(2000000123.191:67110): avc:  denied  { read write open } for  pid=13606 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.745432][   T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  356.757073][   T36] audit: type=1400 audit(2000000123.191:67111): avc:  denied  { ioctl } for  pid=13606 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.935289][   T31] usb 2-1: Using ep0 maxpacket: 8
[  356.940845][   T36] audit: type=1400 audit(2000000123.301:67112): avc:  denied  { create } for  pid=14821 comm="syz.1.4627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  356.964544][   T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  356.975528][   T36] audit: type=1400 audit(2000000123.301:67113): avc:  denied  { setopt } for  pid=14821 comm="syz.1.4627" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  357.004232][   T31] usb 2-1: config 179 has no interface number 0
[  357.019627][   T31] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  357.022817][   T36] audit: type=1400 audit(2000000123.301:67114): avc:  denied  { ioctl } for  pid=14821 comm="syz.1.4627" path="socket:[67075]" dev="sockfs" ino=67075 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  357.045264][   T31] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  357.109301][   T31] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  357.115329][   T36] audit: type=1400 audit(2000000123.301:67115): avc:  denied  { create } for  pid=14821 comm="syz.1.4627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  357.125459][   T31] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  357.195274][   T31] usb 2-1: config 179 interface 65 has no altsetting 0
[  357.210035][   T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  357.228521][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.238027][   T36] audit: type=1400 audit(2000000123.311:67116): avc:  denied  { read } for  pid=14821 comm="syz.1.4627" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  357.259262][   T36] audit: type=1400 audit(2000000123.311:67117): avc:  denied  { ioctl } for  pid=14821 comm="syz.1.4627" path="socket:[67076]" dev="sockfs" ino=67076 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  357.285101][T14837] rust_binder: 294: no such ref 16777216
[  357.292411][   T36] audit: type=1400 audit(2000000123.311:67118): avc:  denied  { map } for  pid=14821 comm="syz.1.4627" path="/dev/binderfs/binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  357.675264][ T1004] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  357.856130][ T1004] usb 6-1: Using ep0 maxpacket: 16
[  357.864094][ T1004] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.897331][ T1004] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  357.921974][ T1004] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  357.940435][ T1004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.949673][ T1004] usb 6-1: Product: syz
[  357.956147][ T1004] usb 6-1: Manufacturer: syz
[  357.960891][ T1004] usb 6-1: SerialNumber: syz
[  358.025249][   T31] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  358.066997][T14855] fuse: Unknown parameter 'max_rWad'
[  358.074418][T14855] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  358.175271][   T31] usb 4-1: Using ep0 maxpacket: 32
[  358.195841][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.219151][   T31] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  358.239281][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.260040][   T31] usb 4-1: config 0 descriptor??
[  358.344596][T14868] netlink: 'syz.6.4641': attribute type 4 has an invalid length.
[  358.354963][T14868] netlink: 'syz.6.4641': attribute type 4 has an invalid length.
[  358.364131][T14869] netlink: 'syz.6.4641': attribute type 4 has an invalid length.
[  358.416156][T14872] bpf: Bad value for 'mode'
[  358.681096][   T31] elo 0003:04E7:0009.002A: unbalanced delimiter at end of report description
[  358.697809][T14841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.711626][   T31] elo 0003:04E7:0009.002A: parse failed
[  358.718174][T14841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.726066][   T31] elo 0003:04E7:0009.002A: probe with driver elo failed with error -22
[  358.748381][T14841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  358.748425][T14841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:243
[  358.764256][ T1004] usb 6-1: 0:2 : does not exist
[  358.785386][ T1004] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  358.813661][ T1004] usb 6-1: USB disconnect, device number 30
[  358.883505][T14844] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  358.887041][T11794] udevd[11794]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  359.133781][T14904] netlink: 'syz.6.4652': attribute type 3 has an invalid length.
[  359.141649][T14904] netlink: 944 bytes leftover after parsing attributes in process `syz.6.4652'.
[  359.234435][T14916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14916 comm=syz.6.4655
[  359.234448][T14915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14915 comm=syz.6.4655
[  359.260845][T14915] SELinux:  Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped).
[  359.349020][  T335] usb 2-1: USB disconnect, device number 38
[  359.445820][T14920] 9pnet_fd: Insufficient options for proto=fd
[  359.740272][T14941] rust_binder: 249: no such ref 1
[  359.748200][T14941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249
[  359.748206][T14942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249
[  360.005266][ T1004] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  360.115260][   T31] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  360.167674][ T1004] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 68, setting to 64
[  360.178678][ T1004] usb 2-1: config 0 interface 0 has no altsetting 0
[  360.186026][ T1004] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  360.195113][ T1004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.205063][ T1004] usb 2-1: config 0 descriptor??
[  360.211795][T14943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  360.267681][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  360.278709][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  360.291615][   T31] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  360.300735][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.310848][   T31] usb 6-1: config 0 descriptor??
[  360.317582][T14947] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  360.326296][   T31] usbhid 6-1:0.0: can't add hid device: -22
[  360.332301][   T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  360.446989][   T31] usb 4-1: USB disconnect, device number 62
[  360.627350][ T1004] cypress 0003:04B4:DE64.002B: hidraw0: USB HID v1.01 Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0
[  360.693805][T14962] rust_binder: 14961 RLIMIT_NICE not set
[  360.707223][  T335] rust_binder: 14960: removing orphan mapping 0:1144
[  360.755195][T14965] /dev/rnullb0: Can't open blockdev
[  360.777579][T14965] /dev/rnullb0: Can't open blockdev
[  360.832694][ T1004] usb 2-1: USB disconnect, device number 39
[  360.883417][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.910832][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.920109][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.928398][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.936709][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.944977][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.953433][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.961857][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.970092][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  360.978294][T14969] futex_wake_op: syz.3.4672 tries to shift op by -1; fix this program
[  361.138176][T14980] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  361.158726][T14980] rust_binder: Error while translating object.
[  361.158761][T14980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  361.164998][T14980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312
[  361.168950][T14983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61 sclass=netlink_xfrm_socket pid=14983 comm=syz.6.4677
[  361.184030][T14983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=14983 comm=syz.6.4677
[  361.197596][T14987] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.208619][T14983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=14983 comm=syz.6.4677
[  361.229639][T14983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=14983 comm=syz.6.4677
[  361.243226][T14983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=14983 comm=syz.6.4677
[  361.396804][   T36] kauditd_printk_skb: 513 callbacks suppressed
[  361.396823][   T36] audit: type=1400 audit(2000000128.201:67626): avc:  denied  { read write } for  pid=14997 comm="syz.1.4681" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.446368][   T36] audit: type=1400 audit(2000000128.201:67627): avc:  denied  { read write open } for  pid=14997 comm="syz.1.4681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.474499][   T36] audit: type=1400 audit(2000000128.201:67628): avc:  denied  { ioctl } for  pid=14997 comm="syz.1.4681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.524477][   T36] audit: type=1400 audit(2000000128.201:67629): avc:  denied  { ioctl } for  pid=14997 comm="syz.1.4681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.551464][   T36] audit: type=1400 audit(2000000128.201:67630): avc:  denied  { ioctl } for  pid=14997 comm="syz.1.4681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.553696][T15002] netlink: 25 bytes leftover after parsing attributes in process `syz.6.4684'.
[  361.578056][   T36] audit: type=1400 audit(2000000128.201:67631): avc:  denied  { ioctl } for  pid=14997 comm="syz.1.4681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.621118][   T36] audit: type=1400 audit(2000000128.251:67632): avc:  denied  { read write } for  pid=13393 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  361.646185][   T36] audit: type=1400 audit(2000000128.251:67633): avc:  denied  { read write open } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  361.655282][ T1004] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  361.672517][   T36] audit: type=1400 audit(2000000128.251:67634): avc:  denied  { ioctl } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  361.704766][   T36] audit: type=1400 audit(2000000128.311:67635): avc:  denied  { ioctl } for  pid=14997 comm="syz.1.4681" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  361.790057][T15009] netlink: 'syz.6.4686': attribute type 4 has an invalid length.
[  361.799761][T15009] netlink: 'syz.6.4686': attribute type 4 has an invalid length.
[  361.839253][ T1004] usb 2-1: unable to get BOS descriptor or descriptor too short
[  361.847541][   T31] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  361.856596][ T1004] usb 2-1: not running at top speed; connect to a high speed hub
[  361.866887][ T1004] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.877107][ T1004] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  361.886015][ T1004] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  361.898972][ T1004] usb 2-1: config 1 interface 0 has no altsetting 0
[  361.909915][ T1004] usb 2-1: string descriptor 0 read error: -22
[  361.916154][ T1004] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  361.925272][ T1004] usb 2-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11
[  361.995275][   T31] usb 4-1: device descriptor read/64, error -71
[  362.145174][ T1004] usb 2-1: USB disconnect, device number 40
[  362.235293][   T31] usb 4-1: device descriptor read/64, error -71
[  362.475272][   T31] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  362.530531][T15027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15027 comm=syz.6.4693
[  362.543528][T15027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15027 comm=syz.6.4693
[  362.557428][T15027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15027 comm=syz.6.4693
[  362.615253][   T31] usb 4-1: device descriptor read/64, error -71
[  362.729467][T15035] bridge0: port 3(erspan0) entered blocking state
[  362.743987][T15035] bridge0: port 3(erspan0) entered disabled state
[  362.750588][T15035] erspan0: entered allmulticast mode
[  362.756569][T15035] erspan0: entered promiscuous mode
[  362.762028][T15035] bridge0: port 3(erspan0) entered blocking state
[  362.768564][T15035] bridge0: port 3(erspan0) entered forwarding state
[  362.780828][T15035] /dev/rnullb0: Can't open blockdev
[  362.834165][T15037] rust_binder: Write failure EINVAL in pid:526
[  362.875270][   T31] usb 4-1: device descriptor read/64, error -71
[  362.890717][  T334] usb 6-1: USB disconnect, device number 31
[  363.009977][   T31] usb usb4-port1: attempt power cycle
[  363.027295][T15045] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  363.037087][T15045] rust_binder: Write failure EINVAL in pid:530
[  363.150981][T15050] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  363.158622][T15050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534
[  363.355284][   T31] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  363.409486][   T31] usb 4-1: device descriptor read/8, error -71
[  363.500924][T15065] binder: Unknown parameter 's�d/bel'
[  363.560026][   T31] usb 4-1: device descriptor read/8, error -71
[  363.663086][T15075] netlink: 'syz.6.4714': attribute type 4 has an invalid length.
[  363.825648][   T31] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  363.849563][   T31] usb 4-1: device descriptor read/8, error -71
[  363.865331][  T334] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  363.987745][   T31] usb 4-1: device descriptor read/8, error -71
[  364.005292][  T334] usb 6-1: device descriptor read/64, error -71
[  364.095356][   T31] usb usb4-port1: unable to enumerate USB device
[  364.245356][  T334] usb 6-1: device descriptor read/64, error -71
[  364.488631][  T334] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  364.648043][  T334] usb 6-1: device descriptor read/64, error -71
[  364.915265][  T334] usb 6-1: device descriptor read/64, error -71
[  365.025796][  T334] usb usb6-port1: attempt power cycle
[  365.375254][  T334] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  365.408981][T15146] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4740'.
[  365.427843][  T334] usb 6-1: device descriptor read/8, error -71
[  365.568068][  T334] usb 6-1: device descriptor read/8, error -71
[  365.614832][T15151] SELinux:  Context K�N�Dd�5��Q3�Bkٔyb���ӭ��s�����~��;c3�po��ͺ�fP�Ҹ62��Ai�]�
[  365.614832][T15151]  is not valid (left unmapped).
[  365.637647][T15151] rust_binder: 332: no such ref 1
[  365.825263][  T334] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  365.858546][  T334] usb 6-1: device descriptor read/8, error -71
[  365.989380][  T334] usb 6-1: device descriptor read/8, error -71
[  366.105752][  T334] usb usb6-port1: unable to enumerate USB device
[  366.157959][T15172] can0: slcan on ptm0.
[  366.163427][T15172] rust_binder: 349: no such ref 0
[  366.172562][T15172] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  366.185280][T15172] rust_binder: 349: no such ref 2
[  366.190860][T15172] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  366.226338][T15171] can0 (unregistered): slcan off ptm0.
[  366.385986][T15177] rust_binder: 15174 RLIMIT_NICE not set
[  366.421346][   T36] kauditd_printk_skb: 576 callbacks suppressed
[  366.421368][   T36] audit: type=1400 audit(2000000133.221:68212): avc:  denied  { create } for  pid=15180 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  366.455536][   T36] audit: type=1400 audit(2000000133.221:68213): avc:  denied  { write } for  pid=15180 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  366.490742][   T36] audit: type=1400 audit(2000000133.221:68214): avc:  denied  { read } for  pid=15180 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  366.521588][  T334] rust_binder: 15173: removing orphan mapping 0:1136
[  366.541741][   T36] audit: type=1400 audit(2000000133.231:68215): avc:  denied  { create } for  pid=15180 comm="syz.1.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  366.570337][   T36] audit: type=1400 audit(2000000133.331:68216): avc:  denied  { read write } for  pid=13393 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  366.610086][   T36] audit: type=1400 audit(2000000133.341:68217): avc:  denied  { read write open } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  366.641449][T15186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354
[  366.651313][   T36] audit: type=1400 audit(2000000133.341:68218): avc:  denied  { ioctl } for  pid=13393 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  366.691236][   T36] audit: type=1400 audit(2000000133.411:68219): avc:  denied  { read append } for  pid=15185 comm="syz.3.4755" name="binder1" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  366.717732][T15187] rust_binder: 15186 RLIMIT_NICE not set
[  366.744756][   T36] audit: type=1400 audit(2000000133.411:68220): avc:  denied  { read append open } for  pid=15185 comm="syz.3.4755" path="/dev/binderfs/binder1" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  366.780891][   T36] audit: type=1400 audit(2000000133.441:68221): avc:  denied  { ioctl } for  pid=15185 comm="syz.3.4755" path="/dev/binderfs/binder1" dev="binder" ino=31 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  366.922507][T15196] 9pnet_fd: Insufficient options for proto=fd
[  367.085285][  T517] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  367.255246][  T517] usb 4-1: Using ep0 maxpacket: 16
[  367.264223][  T517] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  367.273766][  T517] usb 4-1: config 0 has no interface number 0
[  367.286553][  T517] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  367.300804][  T517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.310074][  T517] usb 4-1: Product: syz
[  367.314997][  T517] usb 4-1: Manufacturer: syz
[  367.320834][  T517] usb 4-1: SerialNumber: syz
[  367.340580][  T517] usb 4-1: config 0 descriptor??
[  367.564719][T15191] __vm_enough_memory: pid: 15191, comm: syz.3.4757, bytes: 18014402804453376 not enough memory for the allocation
[  367.565290][  T334] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  367.586589][  T517] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  367.600212][  T517] usb 4-1: No valid video chain found.
[  367.615728][  T517] usb 4-1: USB disconnect, device number 67
[  367.757776][  T334] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  367.766618][  T334] usb 6-1: config 0 has no interface number 0
[  367.778380][  T334] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  367.788388][  T334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.796979][  T334] usb 6-1: Product: syz
[  367.802557][  T334] usb 6-1: Manufacturer: syz
[  367.807953][  T334] usb 6-1: SerialNumber: syz
[  367.817460][  T334] usb 6-1: config 0 descriptor??
[  367.825820][T15218] selinux_netlink_send: 30 callbacks suppressed
[  367.825839][T15218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15218 comm=syz.6.4767
[  367.938278][T15225] netlink: 388 bytes leftover after parsing attributes in process `syz.6.4769'.
[  368.057047][T15214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.065645][T15214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.139172][  T334] usb 6-1: Found UVC 0.08 device syz (046d:0823)
[  368.157772][  T334] usb 6-1: No valid video chain found.
[  368.177651][  T334] usb 6-1: USB disconnect, device number 36
[  368.298997][T15234] rust_binder: Error while translating object.
[  368.299040][T15234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  368.315542][T15234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:359
[  368.875259][T15254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289
[  369.070890][T15267] netlink: 'syz.5.4782': attribute type 28 has an invalid length.
[  369.199613][T15281] binder: Unknown parameter 'fscontext?}'
[  369.206567][T15281] binder: Unknown parameter 'fscontext?}'
[  369.213335][T15281] binder: Unknown parameter 'fscontext?}'
[  369.220492][T15281] binder: Unknown parameter 'fscontext?}'
[  369.227299][T15281] binder: Unknown parameter 'fscontext?}'
[  369.234032][T15281] binder: Unknown parameter 'fscontext?}'
[  369.241083][T15281] binder: Unknown parameter 'fscontext?}'
[  369.248196][T15281] binder: Unknown parameter 'fscontext?}'
[  369.255957][T15281] binder: Unknown parameter 'fscontext?}'
[  369.263313][T15281] binder: Unknown parameter 'fscontext?}'
[  369.951485][T15328] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  369.958683][T15328] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  370.015294][   T31] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  370.061328][T15331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  370.061356][T15331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:298
[  370.175264][   T31] usb 4-1: Using ep0 maxpacket: 8
[  370.191954][   T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  370.200261][   T31] usb 4-1: config 179 has no interface number 0
[  370.206579][   T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  370.217870][   T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  370.229984][   T31] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  370.240109][   T31] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  370.253572][   T31] usb 4-1: config 179 interface 65 has no altsetting 0
[  370.260485][   T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  370.269886][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.484829][ T1004] usb 4-1: USB disconnect, device number 68
[  370.492424][T15338] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4806'.
[  370.572197][T15346] overlay: ./file1 is not a directory
[  370.638865][T15351] netlink: 'syz.6.4810': attribute type 4 has an invalid length.
[  370.646708][T15351] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4810'.
[  371.145298][  T517] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  371.275273][ T1004] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  371.295270][  T517] usb 6-1: Using ep0 maxpacket: 8
[  371.304129][  T517] usb 6-1: unable to get BOS descriptor or descriptor too short
[  371.315287][  T517] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.326439][  T517] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  371.340697][  T517] usb 6-1: config 1 interface 0 has no altsetting 0
[  371.357126][  T517] usb 6-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40
[  371.366336][  T517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.378570][  T517] usb 6-1: Product: syz
[  371.382946][  T517] usb 6-1: Manufacturer: Ч
[  371.387689][  T517] usb 6-1: SerialNumber: syz
[  371.435268][ T1004] usb 4-1: Using ep0 maxpacket: 8
[  371.441104][   T36] kauditd_printk_skb: 755 callbacks suppressed
[  371.441122][   T36] audit: type=1400 audit(2000000138.241:68977): avc:  denied  { ioctl } for  pid=15373 comm="syz.3.4818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  371.474217][   T36] audit: type=1400 audit(2000000138.241:68978): avc:  denied  { ioctl } for  pid=15373 comm="syz.3.4818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  371.475693][ T1004] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  371.500332][   T36] audit: type=1400 audit(2000000138.271:68979): avc:  denied  { ioctl } for  pid=15373 comm="syz.3.4818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  371.509603][ T1004] usb 4-1: config 179 has no interface number 0
[  371.536210][   T36] audit: type=1400 audit(2000000138.271:68980): avc:  denied  { ioctl } for  pid=15373 comm="syz.3.4818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  371.540949][ T1004] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  371.577598][ T1004] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  371.585614][   T36] audit: type=1400 audit(2000000138.281:68981): avc:  denied  { ioctl } for  pid=15373 comm="syz.3.4818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  371.590059][ T1004] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  371.623393][   T36] audit: type=1400 audit(2000000138.341:68982): avc:  denied  { ioctl } for  pid=15373 comm="syz.3.4818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  371.630121][ T1004] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  371.663498][ T1004] usb 4-1: config 179 interface 65 has no altsetting 0
[  371.671375][ T1004] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  371.686802][ T1004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.705244][   T36] audit: type=1400 audit(2000000138.471:68983): avc:  denied  { read write } for  pid=15369 comm="syz.5.4816" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  371.742433][   T36] audit: type=1400 audit(2000000138.471:68984): avc:  denied  { read write open } for  pid=15369 comm="syz.5.4816" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  371.767844][   T36] audit: type=1400 audit(2000000138.471:68985): avc:  denied  { mounton } for  pid=15369 comm="syz.5.4816" path="/100/file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  371.792548][   T36] audit: type=1400 audit(2000000138.471:68986): avc:  denied  { mount } for  pid=15369 comm="syz.5.4816" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  371.846054][T15417] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4816'.
[  371.856338][T15417] wg1: entered promiscuous mode
[  371.959984][ T1004] usb 4-1: USB disconnect, device number 69
[  372.002310][  T517] usb 6-1: USB disconnect, device number 37
[  372.026310][T11794] udevd[11794]: setting owner of /dev/bus/usb/006/037 to uid=0, gid=0 failed: No such file or directory
[  372.785535][  T517] usb 4-1: new low-speed USB device number 70 using dummy_hcd
[  372.794807][ T9020] bridge_slave_0: left allmulticast mode
[  372.803557][ T9020] bridge_slave_0: left promiscuous mode
[  372.834749][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.948906][  T517] usb 4-1: No LPM exit latency info found, disabling LPM.
[  372.957960][ T9020] tipc: Disabling bearer <udp:syz0>
[  372.964218][  T517] usb 4-1: config 64 has an invalid interface number: 174 but max is 2
[  372.974035][ T9020] tipc: Left network mode
[  372.978482][  T517] usb 4-1: config 64 has an invalid interface number: 252 but max is 2
[  372.987669][  T517] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping
[  372.997341][  T517] usb 4-1: config 64 has an invalid interface number: 140 but max is 2
[  373.006612][ T9020] veth1_macvtap: left promiscuous mode
[  373.012143][ T9020] veth0_vlan: left promiscuous mode
[  373.022807][  T517] usb 4-1: config 64 has no interface number 0
[  373.031051][  T517] usb 4-1: config 64 has no interface number 1
[  373.042157][  T517] usb 4-1: config 64 has no interface number 2
[  373.055915][  T517] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[  373.077012][  T517] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[  373.115303][  T517] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[  373.135289][  T517] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[  373.154195][  T517] usb 4-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  373.167968][  T517] usb 4-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  373.179886][  T517] usb 4-1: config 64 interface 174 has no altsetting 0
[  373.188052][  T517] usb 4-1: config 64 interface 252 has no altsetting 0
[  373.194963][  T517] usb 4-1: config 64 interface 140 has no altsetting 0
[  373.213408][  T517] usb 4-1: string descriptor 0 read error: -22
[  373.225065][  T517] usb 4-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  373.235631][  T517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.248884][  T517] usb-storage 4-1:64.174: USB Mass Storage device detected
[  373.356645][T15488] futex_atomic_op_inuser: 23 callbacks suppressed
[  373.356671][T15488] futex_wake_op: syz.6.4855 tries to shift op by 144; fix this program
[  373.358789][  T517] usb-storage 4-1:64.252: USB Mass Storage device detected
[  373.432611][  T517] usb-storage 4-1:64.140: USB Mass Storage device detected
[  373.536468][T15491] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4854'.
[  373.947187][T15506] rust_binder: 307: no such ref 1
[  373.952342][T15506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307
[  373.967077][  T517] usb 4-1: USB disconnect, device number 70
[  374.228840][T15521] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4863'.
[  374.275293][  T335] usb 6-1: new low-speed USB device number 38 using dummy_hcd
[  374.425268][  T335] usb 6-1: Invalid ep0 maxpacket: 16
[  374.535311][  T517] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  374.555271][  T335] usb 6-1: new low-speed USB device number 39 using dummy_hcd
[  374.675309][  T517] usb 4-1: device descriptor read/64, error -71
[  374.705600][  T335] usb 6-1: Invalid ep0 maxpacket: 16
[  374.711065][  T335] usb usb6-port1: attempt power cycle
[  374.915264][  T517] usb 4-1: device descriptor read/64, error -71
[  375.055352][  T335] usb 6-1: new low-speed USB device number 40 using dummy_hcd
[  375.076601][  T335] usb 6-1: Invalid ep0 maxpacket: 16
[  375.155269][  T517] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  375.215311][  T335] usb 6-1: new low-speed USB device number 41 using dummy_hcd
[  375.245883][  T335] usb 6-1: Invalid ep0 maxpacket: 16
[  375.265801][  T335] usb usb6-port1: unable to enumerate USB device
[  375.295293][  T517] usb 4-1: device descriptor read/64, error -71
[  375.358147][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4884'.
[  375.535266][  T517] usb 4-1: device descriptor read/64, error -71
[  375.645392][  T517] usb usb4-port1: attempt power cycle
[  375.740857][T15573] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  375.995385][  T517] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  376.014782][T15587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15587 comm=syz.1.4888
[  376.018468][  T517] usb 4-1: device descriptor read/8, error -71
[  376.028752][T15587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=15587 comm=syz.1.4888
[  376.158058][  T517] usb 4-1: device descriptor read/8, error -71
[  376.281780][T15605] overlay: Bad value for 'metacopy'
[  376.395298][  T517] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  376.403809][T15617] overlayfs: failed to resolve './file0': -2
[  376.417971][  T517] usb 4-1: device descriptor read/8, error -71
[  376.555929][   T36] kauditd_printk_skb: 408 callbacks suppressed
[  376.555948][   T36] audit: type=1400 audit(2000000143.361:69395): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.587341][   T36] audit: type=1400 audit(2000000143.361:69396): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.612887][   T36] audit: type=1400 audit(2000000143.421:69397): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.639574][   T36] audit: type=1400 audit(2000000143.441:69398): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.664769][  T517] usb 4-1: device descriptor read/8, error -71
[  376.666743][   T36] audit: type=1400 audit(2000000143.441:69399): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.696086][   T36] audit: type=1400 audit(2000000143.471:69400): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.775338][  T517] usb usb4-port1: unable to enumerate USB device
[  376.775755][   T36] audit: type=1400 audit(2000000143.581:69401): avc:  denied  { ioctl } for  pid=15522 comm="syz.3.4865" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  376.989969][   T36] audit: type=1400 audit(2000000143.791:69402): avc:  denied  { execmem } for  pid=15626 comm="syz.6.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  377.009537][   T36] audit: type=1400 audit(2000000143.791:69403): avc:  denied  { create } for  pid=15626 comm="syz.6.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  377.029841][   T36] audit: type=1400 audit(2000000143.791:69404): avc:  denied  { create } for  pid=15626 comm="syz.6.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  377.224498][T15639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316
[  377.523352][  T517] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  377.675265][  T517] usb 6-1: Using ep0 maxpacket: 16
[  377.683491][  T517] usb 6-1: config 1 interface 0 altsetting 150 bulk endpoint 0x82 has invalid maxpacket 32
[  377.695269][  T517] usb 6-1: config 1 interface 0 altsetting 150 bulk endpoint 0x3 has invalid maxpacket 8
[  377.705139][  T517] usb 6-1: config 1 interface 0 has no altsetting 0
[  377.716574][  T517] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  377.726126][  T517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.734157][  T517] usb 6-1: Product: syz
[  377.738385][  T517] usb 6-1: Manufacturer: syz
[  377.743013][  T517] usb 6-1: SerialNumber: syz
[  377.751344][T15647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  377.759291][T15647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  378.193217][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.208687][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.232174][  T517] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  378.257819][  T517] usb 6-1: USB disconnect, device number 42
[  378.413011][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4921'.
[  378.555276][   T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  378.705933][   T10] usb 4-1: Using ep0 maxpacket: 8
[  378.713656][   T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  378.722780][   T10] usb 4-1: config 179 has no interface number 0
[  378.729099][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  378.740428][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  378.754374][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  378.766041][   T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  378.782325][   T10] usb 4-1: config 179 interface 65 has no altsetting 0
[  378.797472][   T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  378.813218][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.970214][T15693] x_tables: duplicate entry at hook 1
[  379.031361][ T1004] usb 4-1: USB disconnect, device number 75
[  379.139050][T15706] netlink: 'syz.5.4927': attribute type 13 has an invalid length.
[  379.701093][   T10] rust_binder: 15707: removing orphan mapping 0:1048
[  379.746450][T15718] Falling back ldisc for ttyS3.
[  379.924871][T15724] ------------[ cut here ]------------
[  379.930466][T15724] WARNING: CPU: 0 PID: 15724 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  379.940016][T15724] Modules linked in:
[  379.943959][T15724] CPU: 0 UID: 0 PID: 15724 Comm: syz.5.4937 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8
[  379.955644][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  379.965773][T15724] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  379.971724][T15724] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1f ee 05 00 0f 85 be 00 00 00 c6 05 d5 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  379.991503][T15724] RSP: 0018:ffffc90004557540 EFLAGS: 00010246
[  379.997631][T15724] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[  380.005643][T15724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900045575f8
[  380.013643][T15724] RBP: ffffc90004557680 R08: ffffc900045575f7 R09: 0000000000000000
[  380.021785][T15724] R10: ffffc900045575e0 R11: fffff520008aaebf R12: ffffc90004557580
[  380.029808][T15724] R13: dffffc0000000000 R14: 1ffff920008aaeac R15: 0000000000000000
[  380.031466][T15727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  380.037839][T15724] FS:  00007f6491e086c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  380.047651][T15727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:334
[  380.056208][T15724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  380.071997][T15724] CR2: 00007f6491e07f98 CR3: 0000000115b6e000 CR4: 00000000003526b0
[  380.080042][T15724] Call Trace:
[  380.083340][T15724]  <TASK>
[  380.086323][T15724]  ? vfs_write+0x3c0/0xf30
[  380.090763][T15724]  ? ksys_write+0x141/0x250
[  380.095314][T15724]  ? x64_sys_call+0x271c/0x2ee0
[  380.100223][T15724]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  380.105995][T15724]  ? hashtab_init+0xdb/0x1f0
[  380.110597][T15724]  ___kmalloc_large_node+0x81/0x220
[  380.115920][T15724]  ? hashtab_init+0xdb/0x1f0
[  380.120530][T15724]  __kmalloc_large_node_noprof+0x1e/0xe0
[  380.126197][T15724]  ? hashtab_init+0xdb/0x1f0
[  380.130805][T15724]  __kmalloc_noprof+0x336/0x530
[  380.135693][T15724]  ? kasan_save_alloc_info+0x40/0x50
[  380.141010][T15724]  hashtab_init+0xdb/0x1f0
[  380.145465][T15724]  ? class_read+0x162/0x8a0
[  380.150028][T15724]  symtab_init+0x44/0x70
[  380.154279][T15724]  class_read+0x1df/0x8a0
[  380.158687][T15724]  ? hashtab_init+0xdb/0x1f0
[  380.163302][T15724]  ? __cfi_class_read+0x10/0x10
[  380.168213][T15724]  ? hashtab_init+0x105/0x1f0
[  380.172920][T15724]  policydb_read+0xaa8/0x28c0
[  380.177644][T15724]  ? __kasan_kmalloc+0x96/0xb0
[  380.182431][T15724]  ? __cfi_policydb_read+0x10/0x10
[  380.187590][T15724]  ? security_load_policy+0x128/0x12f0
[  380.193079][T15724]  security_load_policy+0x162/0x12f0
[  380.198422][T15724]  ? avc_has_perm_noaudit+0x21c/0x360
[  380.204010][T15724]  ? _raw_spin_unlock+0x45/0x60
[  380.208929][T15724]  ? __check_object_size+0x50a/0x810
[  380.214241][T15724]  ? __cfi_security_load_policy+0x10/0x10
[  380.220051][T15724]  ? __kasan_check_write+0x18/0x20
[  380.225257][T15724]  sel_write_load+0x298/0x5e0
[  380.229974][T15724]  ? __cfi_sel_write_load+0x10/0x10
[  380.235246][T15724]  ? bpf_lsm_file_permission+0xd/0x20
[  380.240746][T15724]  ? __cfi_sel_write_load+0x10/0x10
[  380.246080][T15724]  vfs_write+0x3c0/0xf30
[  380.250347][T15724]  ? __cfi_vfs_write+0x10/0x10
[  380.255127][T15724]  ? __kasan_check_write+0x18/0x20
[  380.260291][T15724]  ? mutex_lock+0x92/0x1c0
[  380.264862][T15724]  ? __cfi_mutex_lock+0x10/0x10
[  380.269769][T15724]  ? __fget_files+0x2c5/0x340
[  380.274472][T15724]  ksys_write+0x141/0x250
[  380.278830][T15724]  ? xfd_validate_state+0x68/0x150
[  380.283972][T15724]  ? __cfi_ksys_write+0x10/0x10
[  380.288864][T15724]  ? __kasan_check_write+0x18/0x20
[  380.294013][T15724]  ? fpregs_restore_userregs+0x11d/0x260
[  380.299696][T15724]  __x64_sys_write+0x7f/0x90
[  380.304310][T15724]  x64_sys_call+0x271c/0x2ee0
[  380.309036][T15724]  do_syscall_64+0x58/0xf0
[  380.313480][T15724]  ? clear_bhb_loop+0x50/0xa0
[  380.318199][T15724]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  380.324143][T15724] RIP: 0033:0x7f6490f8eec9
[  380.328590][T15724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.348254][T15724] RSP: 002b:00007f6491e08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  380.356720][T15724] RAX: ffffffffffffffda RBX: 00007f64911e5fa0 RCX: 00007f6490f8eec9
[  380.364724][T15724] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000007
[  380.372736][T15724] RBP: 00007f6491011f91 R08: 0000000000000000 R09: 0000000000000000
[  380.380767][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.388783][T15724] R13: 00007f64911e6038 R14: 00007f64911e5fa0 R15: 00007fffe178cfd8
[  380.396806][T15724]  </TASK>
[  380.399834][T15724] ---[ end trace 0000000000000000 ]---
[  380.405592][T15724] SELinux: failed to load policy