last executing test programs: 9m16.950581591s ago: executing program 32 (id=47): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x20}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 9m10.960918954s ago: executing program 3 (id=130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmsg$inet6(r1, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, 0x0}, 0x80090) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xfffffffe, "00207d2000000000201b147023aafa164f000000001200000000000900"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x40101288, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r6, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000680), 0x97) read$FUSE(r3, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), 0x1010, &(0x7f0000000240)={[{@noprefix}, {@name}, {@cpuset_v2_mode}], [{@euid_gt={'euid>', r8}}]}) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xe, 0x0, &(0x7f000001b8c0)) r10 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0x800}, @dead_binder_done], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x7) 9m10.829815706s ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40383, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380)=""/82, 0x52}, {&(0x7f0000001400)=""/175, 0xaf}, {&(0x7f00000014c0)}], 0x3, &(0x7f0000001540)=""/181, 0xb5}, 0x4}], 0x2, 0x40030002, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ff0000/0x2000)=nil, 0x2000}, 0x1}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x4a000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a507b64ae115bbe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005d07350002000000"], 0xc4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x6) writev(r8, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/38, 0x26}], 0x1, 0xde, 0x4) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="66470f01b926ffffffc744240268000000c7442406000000000f011424450f2286c0f9c9660f217466baf80cb8f44d7d86ef66bafc0cedc4021947c966baf80cb8776c048def66bafc0cec460f01d634950000001c56400f06", 0x59}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m10.818848566s ago: executing program 33 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40383, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001600)=[{{&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380)=""/82, 0x52}, {&(0x7f0000001400)=""/175, 0xaf}, {&(0x7f00000014c0)}], 0x3, &(0x7f0000001540)=""/181, 0xb5}, 0x4}], 0x2, 0x40030002, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ff0000/0x2000)=nil, 0x2000}, 0x1}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x4a000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a507b64ae115bbe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005d07350002000000"], 0xc4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x6) writev(r8, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/38, 0x26}], 0x1, 0xde, 0x4) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="66470f01b926ffffffc744240268000000c7442406000000000f011424450f2286c0f9c9660f217466baf80cb8f44d7d86ef66bafc0cedc4021947c966baf80cb8776c048def66bafc0cec460f01d634950000001c56400f06", 0x59}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m52.223702118s ago: executing program 34 (id=2698): keyctl$update(0x2, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/141, 0x8d) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) lsm_set_self_attr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x20, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff001000000800398765f6ade4191339717df6b4668950323030302e759a1fcbff0f000000000009871952283cf6b325006da5dcdec89d"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRESHEX, @ANYRES32=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0xffc2, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="4104794a54d16e"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000000)={0x3, 0x100, 0x200, 0x5, 0x590f}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x2, 0x1, 0x10000, 0x4}) write$FUSE_BMAP(r5, &(0x7f0000000440)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7475616e733d66642c727ed08766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,k']) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x38, 0x100, 0x70bd25, 0x0, {0xd}}, 0x14}}, 0x400c000) close(0xffffffffffffffff) 6m36.715883891s ago: executing program 35 (id=2939): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x20}}, 0x40816) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x400042, 0x1, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000540)={{0xdddd0000, 0x5000, 0xe, 0x10, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x2, 0x7, 0x6}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x13, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xdddd0000, 0xe6e50002, 0x9, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x7, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x3, 0x44, 0x2, 0xd, 0x3, 0x4, 0xfc, 0x1}, {0x4, 0x100000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x5}, {0x2, 0x2, 0xc, 0x7, 0x4, 0x6e, 0x1, 0xff, 0x8, 0x80, 0x0, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0xd6, 0x0, 0xf8}, {0xffff1000, 0x0, 0x3, 0x5, 0x3, 0x3, 0xa, 0x49, 0x54, 0x6, 0x2, 0x8}, {0x80a0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x1, 0x0, 0xeeee0000, [0x2, 0x401, 0x7, 0x4]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0) 4m27.839373508s ago: executing program 5 (id=5254): setpgid(0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.76053161s ago: executing program 5 (id=5255): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bad07e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_ts_info}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) msync(&(0x7f0000701000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth1\x00', 0x0}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 4m27.76026168s ago: executing program 5 (id=5256): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "adb6c5b29ca2b8382d00", "7e609086", "bb10000000000001"}, 0x28) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000300)={{}, {0x5}, 0x90, 0x0, 0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)="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", 0x1a2, 0x0, &(0x7f00000006c0)={0x2, 0xd9, {0x1, 0xc, 0x58, "ae694099b416f9580bed6dddde91c7a07558a74754aa7f87ebfbd32a478b7e681b28ad30c550fda1883af204683899b6b8e60f0d5a8448be506a07f1f996514a5770aff5472f1225a0039a60ebcebb5f21dda2546fdeecc7", 0x74, "913ce17be98c0d688824b63e09d0039f2c9ae960981661af02a1d35e86119d4d4af90c7e3de943734869f7a66dc1ffa951e587d05803a1c9818587bbffae96833c4a4a22c1203341b671c5d87ef78e6a68c6efd4c4aaf6d33b59d4f25bb58771485519d35c6fc52c0ceef24edf0e456b2005aacd"}, 0x50, "5f36496161b826db5cb4110cafe7a9d0f7afcb7ab29f650d9fc8976afa439e1eea7f62bcf0f0718c389c89d89f5cb757c5dc874152bbb8287779b2e8bf0772a673befc21448b3d68b4194bc068072bce"}, 0x135}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba00000000650f32660fc775022e0fba600c980f320f3566b857000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2d) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_INPUT(r6, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={[{@rlog_wakeup_cnt}, {@rlog_pages={'rlog_pages', 0x3d, 0x5}}]}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/44, 0x2c) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 4m27.519120354s ago: executing program 5 (id=5257): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB=',\b']) ioprio_set$pid(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat(0xffffffffffffffff, &(0x7f00000006c0)='./bus\x00', 0x10000, 0x1c) ptrace$getregs(0xc, r0, 0x7fffffff, &(0x7f0000000300)=""/138) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4000801}, 0xd0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r4 = syz_clone(0x80, &(0x7f00000004c0)="ff37d2a515031dda67e60b7c23a9c78f6972a93c3489eb14781ad3e0dd7b8b7f5e4691a4b377142aa19e8b5ba011b9fc242d1a1d96705d4fca5eb64c75db7bfdd7f4ceb95e7a9a2b0ba2804c028727fa9faee8844d9e7945bb1fceeebfe8caeec88face053", 0x65, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000600)="3f8e693b5a5bb5d28713b30445468016bef9d4768b516bf4f0a80cf230c54e307c3f25869cfe2c4e837ccc54adaa4149ad29040a5875c75ca08993550e82d8640466e4a336d0a20c73ebc6d8a7d3dce2f6b8e1bc1fb7") sched_setscheduler(r4, 0x0, &(0x7f0000000680)=0x6) sendfile(r3, r3, 0x0, 0x7f03) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x25, 0xe460e1aa11cd5623]}}, {@huge_advise}], [{@obj_role={'obj_role', 0x3d, '^]\x87'}}]}) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2400, &(0x7f0000000a40)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xe97}}, {@timeout={'timeout', 0x3d, 0x64}}, {@sq={'sq', 0x3d, 0x6624}}, {@rq={'rq', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x8}}], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'seclabel'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r5}}, {@euid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x32, 0x38, 0x34, 0x36, 0x41cdf60332357ad6, 0x33], 0x2d, [0x62, 0x64, 0x63, 0x31], 0x2d, [0x35, 0x65, 0x34, 0x62], 0x2d, [0x62, 0x30, 0x38, 0x36], 0x2d, [0x30, 0x64, 0x64, 0x34, 0x30, 0x31, 0x66, 0x55]}}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '\b\x00\x00\x00\x00\x00\x00<\x10\xcf\xb3\xbe\']\xdb5z,\xd6\x89J\x0e\x9f\x02QLr\x99\n\x00\x00\x00\x00\x00\x00\xed\xec\xcad\xe7yQ=eN\f\xf6\xc8\xd4\x12\xaf'}}]}}) 4m27.487932145s ago: executing program 5 (id=5258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000020201e789520fd70400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x8090) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f00000000c0)=0xe8) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/keys\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) read$char_usb(r12, &(0x7f0000008140)=""/4101, 0x1005) ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, &(0x7f0000000000)={0x4, 0xce7}) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) 4m27.344393498s ago: executing program 5 (id=5259): r0 = syz_io_uring_complete(0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000100)={0x2a84, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x2a70, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_SERVICE_INFO={0xfa, 0xb, "f04caa2195bdbcc9428517456ae93053c3f71e3106cc876eed5ef34efb06116dcd9da176d01fc6eeba28f304bf927b876c9541343d5e4c4c33dd2bef3df404bd13c70413002e51b20a44fb6619b348fba0dc5b8839a6f2133ed51db860d6f16d7bb37af1910e4b7830f1c6d0b1ccaf8055de1a566e7ddfc2364cb351d80ce2297437d177a2cd8005cfa2c1f8e7ef73bbb6fb0c7345f8c64c94e5685bc2a0c2e2e5a8a3ea487ee41240df20341589677a78a26364c283d4fb55d2a1d71cb4461d49e342635e969af1ec76444994963b1102927113b90c6e75f095bcd738cb30faa5e6fb9c53c9187b58a00b89164508120cba4ea1e305"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "fb82d56b33e6e45d7716eb6b767964d8ef267af82e5022b0b3d44484a42c1b9fe11bc8f7bb9b0d60edcd9b94fbcc34c6d9042ecae3a03b86692ff6104d280538bdf0695ea4282a9a5f3135ad4615638ffd1fa88f5153a6ada510473534bdb3121144729a7e02648ac304789bd04ea6fab1df4c672f13f81c3e7106e95b8e5d699beaa3be4eb3fc0e3abae8679cd4dffb21fa277f78e9aff7114285e6c72ecd3e2057aad4d7c2e231fc07a14a20f99598f518d4d18a31d1cf73ec3fcf6b736e4c4cad219aee81fbefecf17e1a814aa31eb5c132ef5ec216bd8291b6454033407861e2072a78c18ab1e74acc7e4d5985fe1319198e8d48cf3f099bf8365e113d"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x13c0, 0xe, 0x0, 0x1, [{0xe9, 0x0, "1404c2144779315a2443b6f02bf2a6d8cb34983c4c2afc987d40f95022e1c612ed7ae0497897ed6127fa4338b9ef886c6754ef5cb0679780496ee2f949f370531560bb21f5051afda73c9d52d8bca987091e5b33ce9b699b36034a7ee241404b6f29ab974b2146c6504190a0fd52cce920fe4b489b5d24211242a239ce401234c50e90e45a82e0f92a10bcae50d5bcb61899715d72e67c4625e5ad20445b31144c48ec4be7092f6a358e57b656f819198e59e382ca25ca08162208b69bec7985b9c6c13b7cebc58997adc6cc03bf15549055d5d947ef85b165f6712456b7e370e994645049"}, {0xdb, 0x0, "bf42012819f94708cd8e4bd3ae6cb599f5ec4f64e9cdf61252d75d6f656fa0fa2ed811613008408daa309733af15b6915270bab175f954117166332e17c4809ee8d49a25820f5b90bd93e36b5d06d49c1179f3b5725ed79b3bd4b9287e82ecbfe747d13819eb4b43b1ded1a8da5f824c69b9f2bad7727fc4b96894bc68042f32cf7e45bc456f1653cae71eb5503dd79d6a95d8ba423648c42776e2fb8e59ce595705c9cb60bbc317623692ff93272f5fcd70c1611a2f50969cd5e836ebf5e2f633531af53a7d7b7b5be568257a3553911db420f2e2bdd8"}, {0x9, 0x0, "dfb270b3f7"}, {0xa5, 0x0, "0431b070328e2d4b6f5fdb940a2317c0286718b80b44f627fb85f007bd4bd0b74174c5351fbc63c5e1254a2e8e4dd53a94368ac97e37c42c8636e3980a05261cbd54d46994df001bb5e12e6f5073433732b84f34e27f7d7b9303ead86ecdca8e88e25a41a53cc910fadfaf266cbb60ef899ed8e7421ab2ed37c26bcaba39c73a3c54dcdb06b8849a42ee468325f51d2ef00d57f8570303fea2393c95ab9993a3a6"}, {0x95, 0x0, "54e6442983f1600bce32e9f79d427e0b1777371ad624856026aa8b3821d7de7a7cd7c7b152a1f93a1f751b7f38573cacfd3b64ccb1a62c6ae8234dabca6b7051d121f82d7515955a41a9a62713a706afecca76e4311a06ecdb03bb2325a83cb526f2f512edc529c4f0acb095150bf31287585b2c0e2c69c7d92f599ac58a9e878b1c0da8a63462ee5f1cff2ec0ad3f4e26"}, {0xa4, 0x0, "26a867639377b855ee4940db4f8fec7e85838adfe37e8f51545a6997c97bad312e65c7d38d089197236830e2720528418f513eb422ec32a3b82b4f84e7ba21b14e85b5a8f8572d23baf08767862daebb2ea406bd4c8f2c3a4b6c27249571c758e455fe5dbc9a3eef2b0718b98ff4a9f6462093e7b5177e3334ab55d4852dfd1d16e31a29c2a78a81aedc11eb144993cad9f8befe46c60cdaff5cfd6896aff923"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1338, 0xe, 0x0, 0x1, [{0x9a, 0x0, "af433dcc103743ab55986ce33ec27b3b33c7669696ee5b4150fd7722f11e16622b0d209592e821b69c6f410c0b580b0717e2cb2d4687aa47a7790190874f2d9d0a587a0a5179ddc9499664a7bcb7a69ae55e22893e292d5793226dfb85ba1e29fe1ff97acd248821c3f05785a4901fdfe339a3c07997a4bdbb6eee73db63d36e116a4ee044aac735dca0e1f635f689d1f534fc98a63d"}, {0x37, 0x0, "93ffa69ec2c86120a2a832e37183f9509a27ffb92762512760cd2ef5febcf0d5420eeea75bb66a090078927a9b010981a2150a"}, {0x1d, 0x0, "dc9eb6a85510e6172676052d647e927845ffc73d0d547914c8"}, {0x17, 0x0, "d1e9b2e85d390def576e0d93524165fce6a7df"}, {0x7, 0x0, "7cc398"}, {0x19, 0x0, "ff4ce64f958b98f69fcb9bc9dd8a059cdeb51ea621"}, {0xfc, 0x0, "6088e78533e2b434255b35ba6c4058ec9cc58e509e0712dad1995a13d08995dcef7011ab5d1a775023048d32439d3105144f23fc43f5ebda538e658c85307140d957e8a83d017f0baca3d41c0ab8041c95aa056b64c2eb960ca72f560f428576eca679a2434c3137ec1b1af8c05156b9501ea7c60cab4cc50da04db223a50e6167ed8d20db8e10b6b18d3df8da37647eda153a5da5d6219eb78e5e359caa45f800abc2cea1a19f5de7c8cbc9b76bce20848273eb28a60bb58621fd846a123276f540559a7e1c5ac6f0e16d1694e34ad0e7f8f314557079a6a53d5653184e97b979fdf8ec2394a26bed63aa08c0e59905f807b4d26b800a8e"}, {0x18, 0x0, "8968ff1e9a38437e9315bc766f3d983abc4cab80"}, {0xea, 0x0, "3f1b920c566f43add9d7e5932e9d7088b2b6b366b16383c25c4b78b43ba85ba15743605b483887dc0a1444d7cb5f2f0a5b817142e9a6dc82a79331f86d4ad34b21149e94c58ab979fa1127edb60c83468d19dc935277fe884315fd3bd316ac9bc73c8966f9e34257b5fd7608c541ab6bcdd50437cea44545130ae6220cb71efa888a83d5155fbbca8ee9236a351940de7ae2184e331bf00a99b8d3647f31df0cf080a2928f01a6574cc5567a0b44e05da2a35bc35f36389b46c6759cdf1762e03cfc6e22c4df998e34e5f7e6b11b77a698d974d43254100924d9c767a453a28e9ea2e480dd46"}, {0x1004, 0x0, "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"}]}]}]}, 0x2a84}, 0x1, 0x0, 0x0, 0x8090}, 0x80) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) close(r0) (async) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000002c40)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000}) (async) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x20010, r0, 0x180000000) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002cc0), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044880}, 0x20000000) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x20, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x51}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000008}, 0x20000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002f00), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x68, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x846}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8d5f}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x999}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) r4 = dup(r0) r5 = openat$cgroup_subtree(r0, &(0x7f0000003040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000003080)={[{0x2b, 'rdma'}, {0x2d, 'freezer'}, {0x2d, 'blkio'}, {0x2d, 'hugetlb'}]}, 0x1f) (async) execve(&(0x7f00000030c0)='./file0\x00', &(0x7f00000031c0)={[&(0x7f0000003100)='\x00', &(0x7f0000003140)='gtp\x00', &(0x7f0000003180)='freezer']}, &(0x7f0000003240)={[&(0x7f0000003200)='freezer']}) (async) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000003280)={0x73, 0x7fffffff, 0xc20b, 0x10, 0x6, "0e56e64558bdb22e696cbb49e41f0852dbabd5"}) (async) sendmsg$AUDIT_SET(r4, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x3c, 0x3e9, 0x400, 0x70bd29, 0x25dfdbfb, {0x20, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x20000000, 0x4, 0x5, 0x0, 0x200, 0x465}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sync() (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000033c0)={0x77}, 0x8) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000003400)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x10) (async) write$binfmt_script(r4, &(0x7f0000003540)={'#! ', './file0', [{0x20, 'rdma'}, {0x20, '{%)'}, {0x20, ':'}, {}, {0x20, 'nl80211\x00'}, {0x20, 'IPVS\x00'}, {0x20, ':'}], 0xa, "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"}, 0x1028) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24008081) 4m27.329524697s ago: executing program 36 (id=5259): r0 = syz_io_uring_complete(0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000100)={0x2a84, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x2a70, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_SERVICE_INFO={0xfa, 0xb, "f04caa2195bdbcc9428517456ae93053c3f71e3106cc876eed5ef34efb06116dcd9da176d01fc6eeba28f304bf927b876c9541343d5e4c4c33dd2bef3df404bd13c70413002e51b20a44fb6619b348fba0dc5b8839a6f2133ed51db860d6f16d7bb37af1910e4b7830f1c6d0b1ccaf8055de1a566e7ddfc2364cb351d80ce2297437d177a2cd8005cfa2c1f8e7ef73bbb6fb0c7345f8c64c94e5685bc2a0c2e2e5a8a3ea487ee41240df20341589677a78a26364c283d4fb55d2a1d71cb4461d49e342635e969af1ec76444994963b1102927113b90c6e75f095bcd738cb30faa5e6fb9c53c9187b58a00b89164508120cba4ea1e305"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x13c0, 0xe, 0x0, 0x1, [{0xe9, 0x0, "1404c2144779315a2443b6f02bf2a6d8cb34983c4c2afc987d40f95022e1c612ed7ae0497897ed6127fa4338b9ef886c6754ef5cb0679780496ee2f949f370531560bb21f5051afda73c9d52d8bca987091e5b33ce9b699b36034a7ee241404b6f29ab974b2146c6504190a0fd52cce920fe4b489b5d24211242a239ce401234c50e90e45a82e0f92a10bcae50d5bcb61899715d72e67c4625e5ad20445b31144c48ec4be7092f6a358e57b656f819198e59e382ca25ca08162208b69bec7985b9c6c13b7cebc58997adc6cc03bf15549055d5d947ef85b165f6712456b7e370e994645049"}, {0xdb, 0x0, "bf42012819f94708cd8e4bd3ae6cb599f5ec4f64e9cdf61252d75d6f656fa0fa2ed811613008408daa309733af15b6915270bab175f954117166332e17c4809ee8d49a25820f5b90bd93e36b5d06d49c1179f3b5725ed79b3bd4b9287e82ecbfe747d13819eb4b43b1ded1a8da5f824c69b9f2bad7727fc4b96894bc68042f32cf7e45bc456f1653cae71eb5503dd79d6a95d8ba423648c42776e2fb8e59ce595705c9cb60bbc317623692ff93272f5fcd70c1611a2f50969cd5e836ebf5e2f633531af53a7d7b7b5be568257a3553911db420f2e2bdd8"}, {0x9, 0x0, "dfb270b3f7"}, {0xa5, 0x0, "0431b070328e2d4b6f5fdb940a2317c0286718b80b44f627fb85f007bd4bd0b74174c5351fbc63c5e1254a2e8e4dd53a94368ac97e37c42c8636e3980a05261cbd54d46994df001bb5e12e6f5073433732b84f34e27f7d7b9303ead86ecdca8e88e25a41a53cc910fadfaf266cbb60ef899ed8e7421ab2ed37c26bcaba39c73a3c54dcdb06b8849a42ee468325f51d2ef00d57f8570303fea2393c95ab9993a3a6"}, {0x95, 0x0, "54e6442983f1600bce32e9f79d427e0b1777371ad624856026aa8b3821d7de7a7cd7c7b152a1f93a1f751b7f38573cacfd3b64ccb1a62c6ae8234dabca6b7051d121f82d7515955a41a9a62713a706afecca76e4311a06ecdb03bb2325a83cb526f2f512edc529c4f0acb095150bf31287585b2c0e2c69c7d92f599ac58a9e878b1c0da8a63462ee5f1cff2ec0ad3f4e26"}, {0xa4, 0x0, "26a867639377b855ee4940db4f8fec7e85838adfe37e8f51545a6997c97bad312e65c7d38d089197236830e2720528418f513eb422ec32a3b82b4f84e7ba21b14e85b5a8f8572d23baf08767862daebb2ea406bd4c8f2c3a4b6c27249571c758e455fe5dbc9a3eef2b0718b98ff4a9f6462093e7b5177e3334ab55d4852dfd1d16e31a29c2a78a81aedc11eb144993cad9f8befe46c60cdaff5cfd6896aff923"}, {0x1004, 0x0, "cc5d0a00160c7f87cd86a46003dd68e707145e27d9550154c7abbad2daca57fd700e325c57ecc368e17a09d4492323c8e29908a4cb0ff54c4d18b691897fb3c312cba70a873ab7b7299ccf8d83f62ac5f56fadc18a7c6d1240fcc0299c6cdb985b1328d3b9847a2971eefc9208653f40a057495bcefcb08e46789f3b6c248f1093efc2df82a5d8f6a50fb7554626f03ba5c09cdb1a8f2c68620ce58d5f098028e82252601cf031aa31e8affe23bf49de8221ab5b7f1d0d9d6ac5b8c054c0c41221f9c11a4b87dd06c4e017cb288c30160bcf206ea983acbc7acd18c411af1bca0f582470fdbb50b4345369d877d2a4c79b8ecd9c60ca49ad80134e03a132fb5322a2139283f73f57dd321e19f74216780fc5b50d0315aeb8c362313df3a78381e70da7ef7bc09a2bd7b90cc5a00db34e9bb38d3d73cf24de3e05006afbf3af5be9ba788220a2d7a79eee11f1b0fe9b32fc6a075408c29f8469cfc83a76a644d69060e0fe92ab749b8756911b6a461202ac021ad7bf84fb5f5b8bf5e96e0c2062664994fe81c1f1c37c0ca1632b19d424259fe2d567da000405d1787f2e757f8a002f5f2366369cd40e976ed4ec7c09afe89661a187b4456a86d20e58668753c197d810f59c5a6d9d8ae94b3c4b33a342a2724d1b83e35058b3f50f7d93fb1939a8a2f2889e8cf5b1e4bc5c6a02c5d108fcb3114fbf82a20ad5e5a1ee8e20cafcf4bf48bd23c751765b3b41f20a5e7f8a7f5ced7fbaa88db11f3517731754feb1b6fff1bc26bca4a362baa952d0db5c9bff1b4152445045c728f4d0efe0c9d05ad91c626a4f5fe46d7209dff828f93a7567c3b9d47f893986a0c2c825181ab66790066a1e60884a6c0a0d30cc17de8d4beaee88ba5494003c4742286ce5c2438310de5e72c483eddcda64603e0d91d403fc6eed5f0d770d3fdc339d2ae3dfdde7f0cdaa6a0f1e912aa1d45efc75593b75faaef1e9a0d449ddd1cfc00b40c81465c311691b2501deb658836517bda5c8f418e133dff14de9b3152924b861da4437316451cfc15bdaf6686b4b55a38437bffa447e0d18caf558beca49bb7483edba2b4f132d40f02cd4f385e4c5aed7ff4d1da01bc7db3165bb3c14fc96b2ce71a1834077390797ae519136013f00486b0a80d76d9b3fd3791f707a7eba02eca56cf3248b3e0e9504791a92cd47c185916ce8a6b8c234990c6480c00c802b234c5c187b563dccbfe116b8bfdcbf672e92c62d45146e330f400ecf3c4b23749a5f755892de047aeebfd7f55308c87a9811de379e1cd241e9612ce2dace5b32bcedbdbd74f10e02e41eac2eee244d287e12da51f822b22daea2faf9690ed4a2b92fccd6dbad83951470d13463ea2b5152cac167dde928a0206139424d6dd323de082e3eaddfb5a0e31065c0b78d4fd236ff6ad61439b8aac260dfc7e0ea7acb230f38ee5968e543b59f04ef2d9e36387e32d6508cf09ae2855bb3a701dd4a4c029996252e95b82248cef0a4885048ca56111413d15bfa1d58f06247a0b4953b1a8213ac73600b2735855edbcde5817fd3f4a21f05734bc1b09fda5fbc815c688b82862c3164dc8a851068a0c2b217dfabaecbb906fa11e65970004cd033f41466df49c51e013b2bd8b2a3c8788f1cffd0355f9199e42254c0b5e8ccc642e8924af3eafb99086c312556d435c1d2f7556c325581774970973b6bbf6ff6133c68dfe6a2e0bc16823a771bac082a3625b3300519ba5e9601189551b7135ccfcfee95d6db9fc64fadab8efc3b9ea28c7a65f7e1059d2c0ded2cae22ec985de1702faf1def37807f49d63bec01b425dc60d3079809e7df4209b98c9270d3b038defe4ce3f5e7b9a8159cc03cb3370c199bf015f6b277590d87050cfce41ac940b1230e8d437864a01c55f84e58cd92f6571972d97c582b8078d61d8e4328248859056d8e1ff23332b43bed85925f4481303367d89f2747f93f0df0414d7c9d5964e5504c320c303f02a994aa01374e0f343d8070602133b9410ea4f7231d47339108a53c29841cd8f2b85939cf7a990d036e24b7dc91b45c3c053e8ad6944241fe1ba1c94ad0d8b515307852247f4cb67b6bfba613e8f52a4a927b86ebe9534daac012a65dab986210efd86c460a1b254a68ff730e79bc9991960dbadf166dfdbe3752b59f7a8e3a0fd24b5a50dbbdaa0aef41896fe85a33acf87936e56bc2f97f1a02d36fe59463d71d295dc7d4bedc8a31c90e4bd3d0e24936fdfa7e01a4df3d79f943355f570ead6a1571bc9ba71912e722786458b21c4bdeb6d71539b80cc27a28abc8d5c110c42d75217d71c65ac0d73744deace2cd143a97a02c943d8fce32cdfefdcebcff1b88dce0e5d5cce623bbf7645f03672b5d5a99f7f1a2ebe44a4ebf931dd3813ee1779302d2f003c9b365fc475c2ef76799a35833998cfcf5768ef0aae30df590e6c116a72b99475920a9c96d8350cbea9b6fa0789ff4b240cbe14a446c32e9305522451e4f64786f4d7bf57237f790bbb7d0a4c0390c4c04b8945cea6fa78128cbb7ede1f0a0e965522b69a83616c3ffd14b3d0aca46eef913ead5e46a2bfedd6e2414263f0fa2e8acaf1f1b8ece7b957c6d6ee17123a38eca1f08a4ae11237e8ed7333999208d1f45355bfee1616d453b5c8c020a197d1848c20512b0e5d7fcf386cab78c3b1618dfc9133292a818caca50c0e6f42eaaa5590dba2d2b9855f86ad5764ad739aed87fe4297f7657db44042784c0faaf167d0932493addc4a4848155a9f2c4849942febd283ceb4854f915fe05d72bf7795cce20f31c398f61aca38729ea93dd0e2c29dd6790d12b06359dd6026323c9f2ac3f71f5fb79b490cd93301aa2afee03e67d4b51ab659fec2b3efa19683c97970978f2b81ff653cf8373110a743bd31a4f72dc4c387b2303be2e0942c37632e1e780f4f4b3780fccd92f4a9e628916fd69650e91e8cc6056486fe9ab000f935d4ca8bf567cc727318b8554dab5eb8c49eef6ca93161e6aaab4159b92124f071d4b5697eafa786f9b7d1886b7ddddc7c48808894c74fb0a1884f46cbdb0234e349532e19d8317260cf0e8f4ae87bab30a34d6221c0501fc7a9e2f68d0f44b7c18eb5178275edfce6589ae1a99405ca2c828652cabad938fe0ef63372dbe2b7d905bbd2769f011ac5818278a1f8348f2523a340665d2c91c5c75e63a27567fd16ddd5ff7dc645e8e2b22bd79b6e839f0af156736d555ffe1dfed282d270c459bd24e353dde6f7ee6decda2d2fdec593f604b6e753a144eeebb6926cb45a40137c991de62872f4571b3ea7f45b06d5cbd8b02904961770444f96749d0c23d563c56c84bb052fd1bb690ac6bb408fa648703aac89e328d7457e2e85c2a1513c23791018353b402bda093756c027d82b2386c6f76bf3f21113c6e6dc856918124ccc1d773dd6db7a0f9e787a90992fdc0c536e14551fd2c5192bc885d56d51fab5e41d554dec7ca17247b087662a16914d89b5e20ac7708c04c13a1e53b1da35adabb10eb6a3f5b936a8cd4762eefb9f942957025d159fc992a772268e77014b1f297ab48ef34916a1e15c74b5c85ff8f2da9ecc1887652bc39d3304a423ab1984f6eb848b071b319a3666042d120ec90deded00c5d79cab7d2e0f3cca8a928e4d39c2f6b629174a3af9b5ff050b6d8820f64f36e45f2595b4ca651c082a8d4374e69ca738645db2b94128c986372722c5a23d4139d5bb89d07e1cfa6851d4591fc917b9d80be28e143da56f9679e50e6dd8703decf8b2f25c15ec27faec6f3b4941fec646b73b830dd169eb766b81b97213626e504c63a17f64256715409a2901e12dfa19bcec553821e41dd370cc0acf44c389fe7f4e634c2d890a40874f0713124f1f50aa7ef785cc92b289c18fa6b1f62c39a37de3a66acef804134df12072ed7c852c3547122a51a5f16176f2bc7bc276ecd64f4358de5bd442f1b50d17ca818fb65e9e7562022c3814ae38296536078d3e4f35d0443fa92c9976f904b6920399bf7764e8b770feb077eeb2cf21a360dd036d0345a900025819a18a636a9efecc3ea4baa51e8866f64ca776be2c4e664d00149db44bd0a823ababf6fb70dfea95812f10cd99f7bd584a2a3717685f247fff0d7940c179cad01223f0ba088af6e666666ffd1a1d9abde07301c23b04096b036c5e277fc29455f6e7aa40e58eee981d63802e1f0a8a3ae0b794f6e2993c9da7dd328431c366b7b6bf24acff83df6cf8b53e9b286c8384492218b2729dda19bb0352bb82ce6c99281b91e3cc72cf6d5a008ee7e334d339889d4319fd73e101d1a4fefa604df2e77b6eb361b8909917b4d942e0c5908ee33a6d08565aa170639a8dcf1a7a334c3a8bc6887dd700f71633d234ef16fcfce09f88629898eff915e6d5172e7b5ee3254efef00dee5b2e156bf6b619f78a6c770de1f18356353dbae4b619d668abbb6b9a604280332329fac8072fcf5e8236bc40bdaacff96ebcfb5b58bbcc3ac7f6fa12d4bcc56492122b362814b37bcb2fc9d51d9188dafeca2ddac59c05a1e472a6c61af0453721a0a0a377ca10e0c0eb5ddc3e0edd0687bc2fd1e31f09fe8d178493328bfe06aba0e665a3bfc0987f78d64e20a4331ac8040d59e16830f73e58ab8f359153fbb48c9050624ee5c96428581f939d5b55dfd52dcd96642067576a4a4ed9376c1bde91eb1b9e915422823200bafc2ace20fd6413163417a63ce3299923c1bc1f697ce08fc444fcb6a036d60eb45d563f2fcd3d20b9b1c5eb49d5f50103dd79931b866c8e321c2c2958ccf4d486b5f1ac89a0c20afbab4a1ef8536eaf68c2ff094dd7c4e409733b7be884e3d019d289b7c64aa05849fde773fef7bed02349c261620cf87c72c041733d39887ed8d593ee78c57f2598496dcdc37e23496b6f70fc27d9cb08c2856aaa8e08dabf5e3cd92c939d6ea0b5313c15f198e49709d3298facf11d3d5ee2a0b901bbd561aeda59f44d3b2bafe3eef4814a634f8afa4eeaacbe01ae6a73b9de824e91fc391e80f7cc67f51f900cbe89ceb85dba2f3fb9e482da3477e2915dc4832ae1824b01e3c01a05486c49b84e22c3179939e8cfdfa91a41f06a5cc854df4012c07772bb4c742ead33869b9317008f851cdffe2a463112a1ef3a973148a9b9202d0f8d9e46e76706fc883e3331168c774ba470334a27aa4d12c886d44e9c1faf8736a91c711949babe3b6f61c88da5af34cf7fa6924060c8bd50e43a8eecfe60ebe84e5895e25b416b12ef5189eebcc2105ec76dc8d3723996eadb1c4e6365582ff5212b6ce2c7315584afcedc6bd3564974752fa0cd0c4fbd9836b7e4f08a9828453554b49322fe69ec78961abedb80f8a5f8366bafbe866f5661c80892605c6a3d24a89bc7c5ab882f79200fbf8066c138b2541ed62eee08a5c307c6df7a8f93bb865d3e86fb0a866449c5a067b3104266258d8dd1d6c5b63ed1ed781ecb32906f88197402b3d2560db44e3085c68e6b6bf6a85ca07fd339d3e6fde1fcc9e3ad64ef81b7a196f2771d082d956901108a774e56c5b30345a8e793ccc485490ea95c5f6c5e0848a7a125eebafbf4d902d9106a6ac88072b69b4dffa46e8f3ddc753373ccfcc1702e05ee0aa6006a36c455ecec2bc228fde1ade9550b7db33779c6e4e57d6f656d230b91e676665d5bb8b6df5de41a7620af06499e12fa5854683a198e47b9589346f015d234af58ff724708788f1716053fe6e65f48d78dec1509777ecdda4a18840584eeab35c665ee7fa398841997ef9f7690f20e9aaa4d894"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1338, 0xe, 0x0, 0x1, [{0x9a, 0x0, "af433dcc103743ab55986ce33ec27b3b33c7669696ee5b4150fd7722f11e16622b0d209592e821b69c6f410c0b580b0717e2cb2d4687aa47a7790190874f2d9d0a587a0a5179ddc9499664a7bcb7a69ae55e22893e292d5793226dfb85ba1e29fe1ff97acd248821c3f05785a4901fdfe339a3c07997a4bdbb6eee73db63d36e116a4ee044aac735dca0e1f635f689d1f534fc98a63d"}, {0x37, 0x0, "93ffa69ec2c86120a2a832e37183f9509a27ffb92762512760cd2ef5febcf0d5420eeea75bb66a090078927a9b010981a2150a"}, {0x1d, 0x0, "dc9eb6a85510e6172676052d647e927845ffc73d0d547914c8"}, {0x17, 0x0, "d1e9b2e85d390def576e0d93524165fce6a7df"}, {0x7, 0x0, "7cc398"}, {0x19, 0x0, "ff4ce64f958b98f69fcb9bc9dd8a059cdeb51ea621"}, {0xfc, 0x0, "6088e78533e2b434255b35ba6c4058ec9cc58e509e0712dad1995a13d08995dcef7011ab5d1a775023048d32439d3105144f23fc43f5ebda538e658c85307140d957e8a83d017f0baca3d41c0ab8041c95aa056b64c2eb960ca72f560f428576eca679a2434c3137ec1b1af8c05156b9501ea7c60cab4cc50da04db223a50e6167ed8d20db8e10b6b18d3df8da37647eda153a5da5d6219eb78e5e359caa45f800abc2cea1a19f5de7c8cbc9b76bce20848273eb28a60bb58621fd846a123276f540559a7e1c5ac6f0e16d1694e34ad0e7f8f314557079a6a53d5653184e97b979fdf8ec2394a26bed63aa08c0e59905f807b4d26b800a8e"}, {0x18, 0x0, "8968ff1e9a38437e9315bc766f3d983abc4cab80"}, {0xea, 0x0, "3f1b920c566f43add9d7e5932e9d7088b2b6b366b16383c25c4b78b43ba85ba15743605b483887dc0a1444d7cb5f2f0a5b817142e9a6dc82a79331f86d4ad34b21149e94c58ab979fa1127edb60c83468d19dc935277fe884315fd3bd316ac9bc73c8966f9e34257b5fd7608c541ab6bcdd50437cea44545130ae6220cb71efa888a83d5155fbbca8ee9236a351940de7ae2184e331bf00a99b8d3647f31df0cf080a2928f01a6574cc5567a0b44e05da2a35bc35f36389b46c6759cdf1762e03cfc6e22c4df998e34e5f7e6b11b77a698d974d43254100924d9c767a453a28e9ea2e480dd46"}, {0x1004, 0x0, "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"}]}]}]}, 0x2a84}, 0x1, 0x0, 0x0, 0x8090}, 0x80) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) (async) close(r0) (async) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000002c40)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000}) (async) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x20010, r0, 0x180000000) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002cc0), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044880}, 0x20000000) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x20, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x51}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000008}, 0x20000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002f00), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x68, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x846}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8d5f}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x999}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) r4 = dup(r0) r5 = openat$cgroup_subtree(r0, &(0x7f0000003040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000003080)={[{0x2b, 'rdma'}, {0x2d, 'freezer'}, {0x2d, 'blkio'}, {0x2d, 'hugetlb'}]}, 0x1f) (async) execve(&(0x7f00000030c0)='./file0\x00', &(0x7f00000031c0)={[&(0x7f0000003100)='\x00', &(0x7f0000003140)='gtp\x00', &(0x7f0000003180)='freezer']}, &(0x7f0000003240)={[&(0x7f0000003200)='freezer']}) (async) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000003280)={0x73, 0x7fffffff, 0xc20b, 0x10, 0x6, "0e56e64558bdb22e696cbb49e41f0852dbabd5"}) (async) sendmsg$AUDIT_SET(r4, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x3c, 0x3e9, 0x400, 0x70bd29, 0x25dfdbfb, {0x20, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x20000000, 0x4, 0x5, 0x0, 0x200, 0x465}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sync() (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000033c0)={0x77}, 0x8) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000003400)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x10) (async) write$binfmt_script(r4, &(0x7f0000003540)={'#! ', './file0', [{0x20, 'rdma'}, {0x20, '{%)'}, {0x20, ':'}, {}, {0x20, 'nl80211\x00'}, {0x20, 'IPVS\x00'}, {0x20, ':'}], 0xa, "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"}, 0x1028) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24008081) 4m0.21345988s ago: executing program 1 (id=5691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x1a, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 4m0.18918056s ago: executing program 1 (id=5692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x19, r1, 0xd, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.037008823s ago: executing program 1 (id=5694): keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/35, 0x23) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "620f26b059dc84cbfe2aab24d7464c95efa96c89fd03601f30e636ebe845d3c903764c57f44d248b45335b10ba9069ed0a40b96ccb3b30db93ee8b03d2ccf93d", 0x3a}, 0x48, 0x0) keyctl$revoke(0x3, r0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r1, 0x1) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) r4 = getegid() keyctl$chown(0x4, r2, r3, r4) keyctl$set_timeout(0xf, r2, 0x9) r5 = request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='*\x93,]O(],\x00', r2) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x0, 0x0, @b}, 0x48, r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/meminfo\x00', 0x0, 0x0) timer_create(0x4, &(0x7f0000000600)={0x0, 0x3f, 0x4, @thr={&(0x7f0000000480)="c70aacdd34a8cd739e8a134ad4e8e889b5da389b5bb1dd849529db982bf67af7ce2d063d550c9eb17337c399f09d7334cb4620c3789b48afb844815051fb52af8700d7669556b0df06ebc84e4ff30c85c01aa9e9e7f8cfcbadf257ca05fc93048b578ccf10574c1a839a96dfecd11c31a07deda260f54638b0aca4df57308ebcde94deb68a9d2ea002b50d6fcfd36f51a65503dcca09b2faf3d131d5b33b38c7893e60ea6f487b2ed90391b9d10cbd70c94025fec6a1face264346a60bfe20240a8d3894ae49752e189dadb1da8e89414672d5c5ebef3ae0b6c805f839c459df1d14eebdae61d9c3d543ef", &(0x7f0000000580)="c13c713daaea1c8b93348962a93a9f47ca8265ea377aaed5c4dbd9cba1b1b692c424c3b0d77a0069e0df00c3fdcc319bdf3a80e71c7a47a84b9fcb3432f24a08cbb8"}}, &(0x7f0000000640)=0x0) keyctl$read(0xb, r5, &(0x7f0000000680)=""/252, 0xfc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x4}, 0x68) r8 = request_key(&(0x7f0000000800)='cifs.spnego\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)='$${\x00', 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, &(0x7f0000000940)="37e66747607a45575a3c06621b1cacaf202c80c06e5a33471c76e9b5a11b1ceadf97b238d3b25eaa3c7e5a0a32d38a3afe7d2932fbbb9b68f758c0e0437c2915aac126f2e751bac04a6bd538166b2fb0d01ef61c5e72d9a74b950aadbfadef35170b49abe8c07cec74d1414b01fc9ca666e231773465717322126b97b83e64a424f26004bc12ddfe2f2adc1ab2056f6c27d3df39ecb1bd52d4ca2c62ebf5b90a758e996b2775995789f8caf552987a80743956a0eca8d2123e667ea32f42bdd69e65149bd2dc2cf4c3fba57c31bb90e321a1144c40ec492a", 0xd8, r0) keyctl$assume_authority(0x10, r9) r10 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, r8) r11 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$search(0xa, r10, &(0x7f0000000ac0)='user\x00', &(0x7f0000000b00)={'syz', 0x1}, r11) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r6) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r12, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xde39, 0x27}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xe8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfa5e}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x20040800) timer_gettime(r7, &(0x7f0000000d40)) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) keyctl$link(0x8, r10, r5) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000d80)=0x0) syz_open_procfs(r13, &(0x7f0000000dc0)='net/bnep\x00') request_key(&(0x7f0000000e00)='asymmetric\x00', &(0x7f0000000e40)={'syz', 0x1}, &(0x7f0000000e80)='!,\x00', 0x0) 3m59.952498325s ago: executing program 1 (id=5696): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x410, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e23}}) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feff", 0x49, 0x8044800, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x200, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='A', 0x1}], 0x1, 0x1, 0xc40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r4, &(0x7f00000001c0)='.log\x00', 0x0, 0x130) close_range(r0, 0xffffffffffffffff, 0x0) 3m58.120439519s ago: executing program 1 (id=5720): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2c}, 0x20008004) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6d61783d3030303030303030303030303137373737373737b737372c009d83044a6c81e26429da47760e56c323a9204a0d33970fe81adebf9ff91020f7abb5f6befac17eecc7769cf12208499d898062ada33c63eef5e13247c6634f3c8f7f1a5e8146ee7553110234324078bc880e8c4cb2b79bd0d14b005cdd084930e4939f76aec175a9530c8a59a7bb931f57c94091a4c20b1c8fad4f4b3ef3e5910162cd40511f5fa71a07cbd069ba452f9c83230b19e5acdca589beaba6114dc9cd04095de8f9590df0922e4a0c9d380607efc6a972bfebec7b84a751ea665eef50ce203b66f7a82dab4b6a7b4bbec4a71f46256c14dfa094df6f0db91c8714301746e70defbc8a3ef279d814afcd1b57019f06890c58f398278067cdf75066dfdd169c689b38cdfe7e761ef55827c5461376488bc010bade12003eb73be3443c806322d5f98eb449af464c45051dd10e7e46ba01504a25af8a74de"]) (async) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6d61783d3030303030303030303030303137373737373737b737372c009d83044a6c81e26429da47760e56c323a9204a0d33970fe81adebf9ff91020f7abb5f6befac17eecc7769cf12208499d898062ada33c63eef5e13247c6634f3c8f7f1a5e8146ee7553110234324078bc880e8c4cb2b79bd0d14b005cdd084930e4939f76aec175a9530c8a59a7bb931f57c94091a4c20b1c8fad4f4b3ef3e5910162cd40511f5fa71a07cbd069ba452f9c83230b19e5acdca589beaba6114dc9cd04095de8f9590df0922e4a0c9d380607efc6a972bfebec7b84a751ea665eef50ce203b66f7a82dab4b6a7b4bbec4a71f46256c14dfa094df6f0db91c8714301746e70defbc8a3ef279d814afcd1b57019f06890c58f398278067cdf75066dfdd169c689b38cdfe7e761ef55827c5461376488bc010bade12003eb73be3443c806322d5f98eb449af464c45051dd10e7e46ba01504a25af8a74de"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000002780)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000002780)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="4c3a237eeaf56762237a2bb2984667943cee01142879e6dd6db81ea37835994721eb8fa2ef7333d30dabf4ec46f4679103d7367e8fa6d159f1a76094eed484f7c8b9e1c25d4f9a90e9d682511bd1b69daad2ee610de79af7a0d85c175fdc097aa2da896e6893b6d8", 0x68}, {&(0x7f0000000180)="bfce13b1d84ce5b62b2a25a297102fb57f7696430a384609dacf120286a041bf3e2fe911dc72de18e89f3caba11cb2652c8ce5ba6d9292ec1a41e054a91ae2ee4bdf23ad07993fb2d28e27366b3a64230a3a1bd3e4979ac7", 0x58}], 0x2) 3m57.950134422s ago: executing program 1 (id=5723): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174903d47826f62616c2c00"]) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174903d47826f62616c2c00"]) (async) 3m57.836207144s ago: executing program 37 (id=5723): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174903d47826f62616c2c00"]) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174903d47826f62616c2c00"]) (async) 1m46.704365803s ago: executing program 6 (id=7405): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200a41) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet(0x2, 0x2, 0x1) listen(r1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m46.681236233s ago: executing program 6 (id=7406): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0xd2bd4000) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0xd2bd4000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x1ff) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400070dfeffffff00000000017c000004008e000c0001800600"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ec0)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ec0)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1m46.634729275s ago: executing program 6 (id=7407): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) (async) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) (async) syz_fuse_handle_req(r4, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) (async, rerun: 64) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) (rerun: 64) lseek(0xffffffffffffffff, 0x6, 0x3) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) (rerun: 64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x3fc, 0xffffffffffffffff}) (async, rerun: 64) r8 = dup(r1) (rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 1m45.723061332s ago: executing program 6 (id=7426): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x801, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/udp6\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) lseek(r1, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0xffdd) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x26020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 1m45.644061153s ago: executing program 6 (id=7427): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r3, 0x4, 0x42800) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x21}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x440}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1m45.464450776s ago: executing program 6 (id=7428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_usb_connect(0x7, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) (async, rerun: 64) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000380)={0x5, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="62e300000000000002004e22e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e216401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14141a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007400"/390], 0x190) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000440)=0x8) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000001280)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.452189056s ago: executing program 38 (id=7428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_usb_connect(0x7, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) (async, rerun: 64) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000380)={0x5, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="62e300000000000002004e22e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e216401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14141a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007400"/390], 0x190) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000440)=0x8) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000001280)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.263769443s ago: executing program 7 (id=7962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "834c89f63dcf2e4f", "8d465057ed6f967ad6602058ec111a8b", "b952ea6b", "59323488d74a52c4"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 'id1\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100)=0xffff, 0x4) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000540)) sendmsg$sock(r0, &(0x7f0000000740)={&(0x7f0000000580)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="c468c64ee0977f22c9c8931b338d9883040892c303df4802fb525a6e6d24a0398a6fe7b62c33cf83c3194daba41739b02403", 0x32}, {&(0x7f0000000640)="3f6bafc2a9483d1fe4402948aa46235a240e205e90bad5b2edb45843f8aa2512d2fcf9451f3773d5be5b5ad775842daaf7b4ba1dd2b039b5dcf4ec78ec283c4613a90a82a9ad625cd9165e1525066fffd1c9297d5149591938c2d7f21211477d66f101ed9bfd3c98c0baba17e11fb9d0d1ed6546e54061e748f82b67f5f473acf7a727e376f55386c0", 0x89}], 0x2}, 0x4005) r2 = openat(r1, &(0x7f0000000780)='./file0\x00', 0x10340, 0x30) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfb, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x245}}, {{{0x9, 0x5, 0x81, 0x3, 0x39f, 0xb, 0x80, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xfa, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x300, 0x5, 0xff, 0x5, 0x10, 0x9}, 0x44, &(0x7f0000000840)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x0, 0xe4, 0x2, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x0, 0x3f, 0x9, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "fffd5546f1990b390a42834ea572b1c2"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xff, 0x2, 0xff, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x3, 0x4}]}, 0x8, [{0x7f, &(0x7f00000008c0)=@string={0x7f, 0x3, "2b8cf8d945bfcbc13d28ce8a2c49820c6a86e1e79989c485290758d40e143ed333c658768368e63ca82e59674e3711953cb369615c90d55eb9db52cf268c0d9f36b7100088716cd83d57c3bbb89b2536bd90d217b1b49d4d671fada99d34d06076feb79754ff41bf4775451994768e3078fb280f57f40f6fc159e8519f"}}, {0x31, &(0x7f0000000940)=@string={0x31, 0x3, "3dfb262ea6c30ab07031f24177c23f22738cafa38a263d3694a7b27bd02cb09fa3413b5152b66ecc3523e5a197deba"}}, {0x2b, &(0x7f0000000980)=@string={0x2b, 0x3, "8e09c88c1d4b52c0ea40a7604dc0fde8d418d8c579c3fb7d874d4a4458919d8cae09f87a70da243fdb"}}, {0xd4, &(0x7f00000009c0)=@string={0xd4, 0x3, "36f8ce4b71ef1ff57c4286b491a89835208cd114574e0c7b4477b2d3a7fcea3451f3cc051dd398bfebee3e6f5e83bc9c298ce8cb2d078b9818e4a242e1312e83b96014cf08265fe692960cb61addbf8d5faf11067d6f94b47f26a2e6c8978270ad271d5113cc72f6a2bb76f57e920089f52b2cad29d8bf2eee3161afbf4c01ac355cb6543ca6245f65017d0454e2aa26b24c75aab1e7769b92a99078d0473c86581d29e5b8febc727ef5ccc74c013942435e327317dfb2df23597b457b0a278312c35b85d0ae5b3f38a8420c3affb6829dbb"}}, {0x33, &(0x7f0000000ac0)=@string={0x33, 0x3, "518c06f9357610f45a05147fa3f96f05a384e322c55e6b13a6a86598ad13868a104309038cee27ba463fcfdc6cb178f1a5"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x283d}}, {0xbb, &(0x7f0000000b40)=@string={0xbb, 0x3, "968b677d6a1f91584fff931d24846abd3948af117b9dc11645754bd33ce2afbf61023a5afb4613b71e7c03ce1cf87114a0913283bd9c6b863604c6e00c3e694dd59bc8eeadbc8580f22148b498d3d3f6001935fae070a62ec68a63aaa181766b4549c1ec6ad5f762ec78703dcb36a0339a35fae2e05c957b3374a4d4b1cbac592e8e98891dd90b4ec5d2a33ecd2c39a898162e7be2c10bcde3ff8c95027e5c01c2b4b03670cbdb9a6b7b489039d64e22d938b011c3a47d57f9"}}, {0x3f, &(0x7f0000000c00)=@string={0x3f, 0x3, "f2970a82de7ab6f5965ad0c71a3672319f204b4f148441fde2c0a43a8f727ee59c663ad44e29a35d83b87d52bbcb42af61b46ae9caf61aa2461fa42168"}}]}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r3, 0x90a, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x3, @l2={'eth', 0x3a, 'hsr0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) readv(r2, &(0x7f00000023c0)=[{&(0x7f0000000e00)=""/201, 0xc9}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000fc0)=""/202, 0xca}, {&(0x7f00000010c0)=""/239, 0xef}, {&(0x7f00000011c0)=""/58, 0x3a}, {&(0x7f0000001200)=""/159, 0x9f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/206, 0xce}], 0x8) readv(r0, &(0x7f0000004680)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/112, 0x70}, {&(0x7f00000034c0)=""/129, 0x81}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/237, 0xed}], 0x5) chroot(&(0x7f0000004700)='./file1\x00') setsockopt(r2, 0x8, 0x9, &(0x7f0000004740)="b6184957f7892c9d6c32ed79579306b96e25786878fa3c3fba543f9a0756be7f1edeaa9907c140820f63dcd6cd01474dd7e4c62e454fc6c8fe86584c63750d954db2832ce0d1dfb98ee23f505a89e79de3f013152dbd6ab6fde0608f32ae31309878d31fbac9db70cb27c81bc68a87443a81802cca1df5cb675b8482444f2385ae44f622a2e6da83117b1c934a06f89d5c6d29d6dfd8fcd85418ff", 0x9b) sendfile(r2, r2, &(0x7f0000004800)=0x5, 0x2) connect$inet6(r1, &(0x7f0000004840)={0xa, 0x4e20, 0xffff, @private0, 0xdc1}, 0x1c) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000004880), &(0x7f00000048c0)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000004900), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000004c40)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004c00)={&(0x7f0000004980)={0x27c, 0x26, 0x4, 0x70bd2c, 0x25dfdbfd, {0xf}, [@generic="1b81e1925ad0778d1c1d7ade256607d7956fb01c773f08f44420f8fb61551c80ff2c573562a797c776135ea95a86cdbb86bd2f3f28996eba4c77a11bf001b093cd97d24d21485e265e29497a84e70939e8f8a56b4a22e4c03bea0c7dec55dae6536b20b548b01a376b355adc7004d7f58dab5d1a424725cf39b5ff28e92b4c7d73f20c1a6dbeeea2ef5edb12d9fea585f0f9408cc6127fa3891b05dd64157fb0cf875d9d169d73b420b7906a0a501d426ff74bc1435e1348258dd2c9b433fda21ce2a3a1a8c6d2c7f99bf7ae54a7523c409c969762", @nested={0x10, 0x70, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x7e}, @typed={0x4, 0xc3}]}, @nested={0x4c, 0x34, 0x0, 0x1, [@typed={0x14, 0xf5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @nested={0x4, 0xfe}, @typed={0x2d, 0x94, 0x0, 0x0, @binary="ab3598b822d6ad75a1b63c2246bf30b2ac416b54e389e036c1051f48852e5610ccbfd3b09ae8adbfc1"}]}, @nested={0x4f, 0x68, 0x0, 0x1, [@generic="faeb74d97ebe734700b2dbcc19158e5a985c7c16ecc52cd436995f6e1727f6d86485eac0727a6c57e4084b0be5a08722b338045f137e80", @nested={0x4, 0x5f}, @typed={0x8, 0x124, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x33}, @typed={0x4, 0x5c}]}, @generic="d55887b797c9c5ec83805a640fe0c8716054170ec5192e8f93de74b031d7d3be887998e51bac43818416a7e7e9d55186e050cd9f193131aabfea886b8ea8a0f0624ca54722c118ffdadd7157ba733fc39149bcac1abf5890424f0b2265ae929026accde930e8db7c14de1eba13f4826d2c1cdab1943f9c3bcb70a5fdb1a02a864f5dc4c5c1e93713b88f2cceb7bca4aefee2639c8b3b52f42ee106e724f8ce3105b5723208bde60cb5baff526e34068f0a2b2a14e939e775325df888b791abdee19e6de365ddc58f3ba4433517628dddfc9a8b6f7fc9c7315934e22c207945288d05d666fcf7"]}, 0x27c}, 0x1, 0x0, 0x0, 0x8}, 0x80) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000005180)={0x0, &(0x7f0000004c80)=[@wrmsr={0x1e, 0x20, {0xafe, 0xf}}, @rdmsr={0x32, 0x18, {0x2c6}}, @cpuid={0x14, 0x18, {0x9, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @cpuid={0x14, 0x18, {0x2, 0x10}}, @cpuid={0x14, 0x18, {0xf, 0x401}}, @wrmsr={0x1e, 0x20, {0x287, 0x800}}, @code={0xa, 0x5d, {"b97a0a00000f320f01cbb9800000c00f3235000400000f30c441b573d3002e672e660f3882b50030000066b826018ed0c4a145ea250c000000f0810386b4ffff66400f3acfe70dc4e1796fdf"}}, @cpuid={0x14, 0x18, {0x5, 0xa01}}, @wr_crn={0x46, 0x20, {0x2, 0x3}}, @uexit={0x0, 0x18}, @code={0xa, 0x5f, {"660f3881690066b830008ed8c422791c0f0f9b1a66baf80cb8ce50b68fef66bafc0c66ed66b833018ee8f20f2145440f20c03503000000440f22c0b9800000c00f3235010000000f3066f30f1ef9"}}, @cpuid={0x14, 0x18, {0x7f, 0x5}}, @code={0xa, 0x49, {"67660f383c49f32e0fc79800d00000470f32660f3880251b000000360f01c5c4e27d1a20640f6b3666baa000ec0f72f452c463496d7eb79d"}}, @cpuid={0x14, 0x18, {0x0, 0x6}}, @code={0xa, 0x61, {"b9200b00000f32b92d0b00000f323e410fa067430f01b4d3ca000000f042114000440f20c0350c000000440f22c0400f07420fc7791ab940030000b85d6f0000ba000000000f3064670f01bf02000000"}}, @cpuid={0x14, 0x18, {0x2, 0x7fffffff}}, @code={0xa, 0x72, {"c4a1b8555c7a00360f01f48fc82895e89d470fc79c00da920000c744240000000000c744240200000000c7442406000000000f011c2465670f00dc45f4440f08c744240000000000c744240200000000c7442406000000000f011c24400f01784c"}}, @wr_crn={0x46, 0x20, {0x2, 0x7}}, @cpuid={0x14, 0x18, {0x1, 0xeb}}, @uexit={0x0, 0x18, 0x8000000000000000}, @cpuid={0x14, 0x18, {0x800, 0xdfe}}, @cpuid={0x14, 0x18, {0xfffffffe, 0x5}}, @uexit={0x0, 0x18, 0x3ff}, @wr_crn={0x46, 0x20, {0x8, 0x7be}}, @wrmsr={0x1e, 0x20, {0x865, 0x2}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x32, 0x18, {0x631}}, @code={0xa, 0x5e, {"9db805000000b9796800000f01c10f005142c4c179c5ded10f22620f01c2c4c1c3c22f00c7442400faffffffc744240280000000c7442406000000000f011c24660f79ca26646466400fc771e7"}}, @uexit={0x0, 0x18, 0x3ef}, @wr_crn={0x46, 0x20, {0x8, 0x7ff}}], 0x4ce}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000005200)={0xa3, 0x0, &(0x7f00000051c0)}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000005280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ppoll(&(0x7f0000005500)=[{r6, 0xc2}, {r4}, {r2, 0x8}, {r2, 0x10a2}, {r4, 0x3063}, {0xffffffffffffffff, 0x8}, {r0, 0xa0}], 0x7, &(0x7f0000005540)={0x0, 0x989680}, &(0x7f0000005580)={[0x5]}, 0x8) 1m10.013877663s ago: executing program 7 (id=8000): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xffefffff}, {0x6, 0x8, 0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000140)={0x18, 0x2e, 0x333, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000ffff0200a50f08003950323030300e7543ef3cc840"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x36, 0x7f) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x2b17eccd95471b8f, 0x0, {0x7, 0x21, 0xb, 0x4000000, 0x8000, 0x4, 0x3, 0x2, 0x0, 0x0, 0x1, 0xfffffffe}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x800004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '@\'}#!&*,-:(&'}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4054, 0xfd6, 0xd33) 1m10.012949313s ago: executing program 7 (id=8002): r0 = inotify_init1(0x800) sync_file_range(r0, 0x31d6afbf, 0x400010004, 0x5) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) pwritev(r1, &(0x7f0000000080), 0x1, 0xfffffff5, 0x8) 1m9.971497484s ago: executing program 7 (id=8005): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) symlink(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file1\x00') mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) unshare(0x22020600) r0 = socket$inet6(0xa, 0x80001, 0x0) getpriority(0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000400), 0x8000, &(0x7f0000002600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@version_L}, {@cache_fscache}, {@privport}, {@version_9p2000}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x66, 0x36, 0x65, 0x35, 0x61, 0x36, 0x66], 0x2d, [0x36, 0x31, 0x31, 0x39], 0x2d, [0x38, 0x33, 0x38, 0x36], 0x2d, [0x35, 0x0, 0x64, 0x32], 0x2d, [0x38, 0x61, 0x33, 0x37, 0x39, 0x31, 0x32, 0x66]}}}]}}) wait4(0x0, 0x0, 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m9.970634584s ago: executing program 7 (id=8007): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44, 0x100) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x16, r4}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r4}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0), 0x0) read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) 1m9.827737936s ago: executing program 7 (id=8011): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000600)=0x1801, 0x4) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) listen(r3, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, &(0x7f0000001640)) 1m9.806749787s ago: executing program 39 (id=8011): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000600)=0x1801, 0x4) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) listen(r3, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, &(0x7f0000001640)) 1m9.300052566s ago: executing program 3 (id=8012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cpuset\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xdffffffc, &(0x7f0000000300)=""/206, 0xce, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffff29, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1m9.256192427s ago: executing program 3 (id=8020): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) truncate(&(0x7f0000000e40)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) lgetxattr(0x0, &(0x7f0000004200)=@known='security.selinux\x00', 0x0, 0x0) (async) lgetxattr(0x0, &(0x7f0000004200)=@known='security.selinux\x00', 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r5, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) (async) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) getdents64(r4, 0x0, 0x0) (async) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000004000000001b000001000000020000000052307c1099b20a207f7156e8574c00"/68], 0x2a) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b000000000000055a652c7aba375365d89d500000000000000000004000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff09000000ffffff00000000000000000000000000000000000000000000100002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002000000000000000000000000000000000000004000000000000000100"/44], 0x0, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_eeprom={0x43, 0x3, 0x1}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1m9.061643931s ago: executing program 3 (id=8025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000002000040"]) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x1, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x6, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x9, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa6, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x6}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0x78, 0x8, 0x2, '\x00', 0x7}, {0x6, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TIOCCONS(r6, 0x541d) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1m8.900886834s ago: executing program 3 (id=8027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) memfd_create(0x0, 0x5) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r3 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f0000000200)=[@register_looper, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m8.854012194s ago: executing program 40 (id=8027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) memfd_create(0x0, 0x5) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r3 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f0000000200)=[@register_looper, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 15.165420109s ago: executing program 4 (id=8657): userfaultfd(0x80001) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) userfaultfd(0x801) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) syz_io_uring_setup(0x214a, &(0x7f0000000440)={0x0, 0x28cc, 0x2, 0x2, 0x23d}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) userfaultfd(0x80001) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) userfaultfd(0x801) (async) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) (async) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) (async) syz_io_uring_setup(0x214a, &(0x7f0000000440)={0x0, 0x28cc, 0x2, 0x2, 0x23d}, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) (async) 15.013242462s ago: executing program 4 (id=8659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0xfffffffe}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 15.010725972s ago: executing program 4 (id=8660): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x100) fsync(r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) fsmount(r1, 0x0, 0x89) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108"], 0x1f0}}, 0x0) (async, rerun: 64) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) (async, rerun: 64) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x668b0000) 15.008403762s ago: executing program 4 (id=8661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75783fc13e7f51bc8be9211240c6173b1628efaf66a51961737103896346eb302a00001d782cc95ac69468da7cc02e2d3d3926282d21786239a729cf91c7238885d472ee"], 0x20) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b901a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa487, 0x28081) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000100), 0x20000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, 0x0, 0x4000014) memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 14.001776071s ago: executing program 4 (id=8673): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) sendto$unix(r0, 0x0, 0x803e, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r1, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x40000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 14.001427181s ago: executing program 4 (id=8674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f000038f000/0x2000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x49, 0x6, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x40, 0x25, 0x4, 0x1cfbf09af5fd9869}]}, 0x20}}, 0x84) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x125b02, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 14.001047891s ago: executing program 41 (id=8674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f000038f000/0x2000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x49, 0x6, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x40, 0x25, 0x4, 0x1cfbf09af5fd9869}]}, 0x20}}, 0x84) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x125b02, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 6.345831583s ago: executing program 2 (id=8780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xad, 0x6f}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7800, 0x7, 0x7, 0x2, {{0x8, 0x4, 0x0, 0x2e, 0x20, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0xb, 0x3, [{0x7, 0x5, 'h;o'}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r3, 0x202, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r2) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, r6, 0x24, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x479}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0xfff7, 0x7, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x824}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x8000) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r9, 0x8008f511, &(0x7f0000000980)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000009c0)={'dummy0\x00'}) r11 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r11, &(0x7f0000000a00)=""/110, 0x6e, 0x1, &(0x7f0000000a80)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r10, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r1, 0x122, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x6, 0x7e67]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x3, 0x9, 0x2, 0xfff, 0x5, 0xffff, 0xd]}]}, 0x54}, 0x1, 0x0, 0x0, 0x25bf7db8bcf19895}, 0x80) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r11, 0xc34b4000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc8, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "287a277103a1cae58e9946c5fa4b798c9c095ac2f22837a7842b68294d1e9a658c6a382b7250f8a5957b7fc99437cae2d329d789c3aea2881a6a6d6981d2d9f8a68622eeca575567e7e297d53c6e"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "65ff34c9eff97af9ca867da4a277d8efc99b9285c0cb6b039c9a116ba79e51abd90e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20044004}, 0x40) r13 = socket(0x28, 0xa, 0x9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a80)={'gre0\x00', r4, 0x7800, 0x7800, 0x5, 0x4f, {{0x7, 0x4, 0x3, 0x7, 0x1c, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @ssrr={0x89, 0x7, 0xbe, [@empty]}]}}}}}) sendmmsg(r0, &(0x7f0000006540)=[{{&(0x7f0000000e40)=@caif=@rfm={0x25, 0x80000001, "7cf35f3d2d60b4ba17106828d1498b19"}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="b854d9a1f51ec45e617b20841c8d62001327f2972afe0326dde9a58693ab7bbd5257f984a0fa3a37cba317abca17a296e49d6ec4f1294bb5b1a20f41a304618de6ed105f33a311d64416d823af7c5d9f378eb1942c2c725f371319bdf384d1a8ef941df955c747fc97f3bdfe0d795a2f4223e1ee8e87477936844288833b4ef485dc03e4b96f9d04636c0c7b2a04cacd58ad7d147dd4db550bec6315d484b162fa6f82599f1e1257b72379cf8038aaed30bbe522d9a44b0b20ecb3653f693b65fb", 0xc1}], 0x1, &(0x7f0000001000)=[{0x78, 0x10b, 0xffff, "adb92bed79b5cd58ef81b5d9a82dfb2ad5cbd003b4814b0de8705d37f573bf2813116d628a5dcbdfb90de870a993bd1c6e61696781552138927c4c5314f27684223e3a4af0b0285cafe04c712f43e01e417a5e9a01b8413af36171ea9e89e98e208f03fc"}, {0x58, 0x109, 0x7, "ed3bfc30d82a17581e36fbc014652bc44087a7b58e492b938290dd2981962a1afe9f5df52361d8bf3c677b40684ca8adaa0775102bbb66a7e5e32bfe56964cdcae93c95372"}, {0x38, 0x102, 0x7, "ca014840ff689fee14318f2c9a1490a6922e18ebf3120a7eb6004da50392f89154"}], 0x108}}, {{&(0x7f0000001140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x0, 0x1, 0x0, 0x3, {0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000011c0)="671b539dce36d21941dfc3f4fb52df14340ec0d2456427ab2e0360befd43d8749a3e28aa8906dfb96ff573d2d228e40b6fd73dcd3d388c4b305a1a2608c9ad8ed5741d05276206f3216de6724defb748e9923f2968c115492d594186f8dc81578367eff1e30bfeae9d238d1b11c6508d4d60dce5195121c6fcf7236afd5f6f95ccb5a0deb08742a920aeee72923137176333b56baaec2a410ed48257e736505e9c4300ea76a605bec30d043265a69d873e36f1163761bfc1867d63", 0xbb}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="556413a429e5c9e1dc32e64b55f9196551e3165b2f9687042f8b1acae04e0a3173976bbb4f0cbb01e9ffea98abb00bf7ea379d2778539e8044fed0e76c4b644d127b2abc9bf848e87514d8c14e7a41cc2539c4f73b27ca320794cd27695b8e8c0ad35f79aca9b80a7131cc798290403e011ea3e430b07b96a816865eaed8e47402582a5f9a012777f10d3b89c640d149ff8060b1f05861863ebc472c80e72eda84dfe7a2226fed3eb664df975191935189df0342940c68d3246d3738fef2181c", 0xc0}, {&(0x7f0000002340)="d2dec5c9f5776b3148a95e98b383731d7db0fb109d9faafe7757dcdd66fa2aaca3a6b553339fa5c74cc07d3ff39b7340764c5ccdb99f65b5b275c2e2d97282ea8fb424e89d80881340204f2ee30ae418800121e1fa8317fb62f8567106b2aec2c38f3196544b1fd7abd66bf87d06f01605a46ea28193f497e728446a2ee41b6225218fff191a0982f2a5f6fdb3b46d79048812833fd01f45def745983358e58bd302ee4181b61c7d030f72d66d605f7bc17cbfe7e28daa1d3002afd0e7f42b5043be0490edd1", 0xc6}, {&(0x7f0000002440)="5d119a36e8cdcc6b88a70393e1bc7d672420a971df07522d4fc4a39ba7290155e4c24f0d90ed153e26bd92c13c9d5fe13c50ee17fd7253e0b6d330af97252355a16cbdc6104bb36977dec6bbde7bfe34ebde5b6c13aca7f67c507d0110ed2638b104466ba2760e43f2bf07dd215186a896a4fac1dc3f6df8358967e6f423c3614e42e58b1af426b2f48416bc2e718957db988ff54b4378e9bdc98447", 0x9c}], 0x5, &(0x7f0000002580)=[{0x40, 0x10e, 0x3, "b370013b07db9b5e9ac708b9173bcd2c6d390ba571ecb738bbff48f3c4017e1bffe59ce874e2e6c928b75317c8"}, {0xb0, 0x103, 0x3, "d710abe9166e41bb6989f2700cd0e65e5219a34904cc1acbcd38c1d1e27743c8e10ea7ba1e9152c8975d84d5eca15f9ce8c25facb2138a6764d19078a7b97ecbe165eccfaba4fe8e5419f6ab3074506bb1734e59e1ef66c1e8dec703f20816e1717c8ef035a0568390316ad9c51e83d12e85e0bf1e3baa4d6b9e56b8c81905c574bc285aec735e984eded7bcbd5819a71fe0deca4b8a1830b2e0"}, {0xa0, 0xc, 0xe, "532c5bc253675f7ef2e1c70478bd798e285fb932b5744b126968c029e5ce6624f214e05067c3c60b12364c6c4b80e70fa603539b199e8e627bf98d8729f927d9705b23627a1b9571cbde54b6a2039d6624fbb50336f70bc137304813c3cb4c76776d1863f148165d97d831d0ecffde3e90e47cbcca4b96a9391bd1bf396fb954c5795e6b0d4b3d8bd681b674"}, {0xf8, 0x10f, 0x3, "75131a2c171279e7106098ec9875117a9945b53777017d969aadc8ad785fdd87e0aeb95cb1e381cfc154ad0f3819904164831b86e41588211f3b50f6bbe1e3c9bbc98deaa733f56e323774468129e51e2e08623fa0ad5cf2797ee5beadfe6a6fee6eb860c83fed44a23a5ba1e226272941f3f6f3c038d6354df5b17782fc2f112d70caa64a3fe33f7957092793a51111e05ebf105f3d7963cf7711194c9154ad2f6981207a3f2c535d08612cabea40145f6ba2e9f1c21190e01bfd34bc72a45fa6af66f191483ab8bfcbd7ad53919bc5ed5705b01906dd481363df71f8ffc4022fa0065e6d5f"}, {0xa8, 0x0, 0x1, "534fc175e8fd2c737b5fc6b13197270c943150d7ffd2743e325f14c1555d2c4a398ddb2cce00646d47821703876f85bc63afb3f6f3e18b7006a77eae0bcb7881d0e57ad4287e1b43a1a4ccf0d8192838fc83146e4e7b730cf60bddaf92a3a442756edc17520b0586e7d9f1f211638fd2eddaac61cdf5c7539ea9f3352a5e71b8c8cf5e1f22b01eb5489442728253a2b619"}, {0x60, 0x118, 0x80000001, "b1810fd14cab74f4b6dd39f741710eec08623a6bccd21da9ae1b511f8ccf2ac16c7233787af39a512c1f2a119f094b04e6143698ff4a24ebf6606e1d344858f710d904dd99912df609"}, {0xe8, 0x7, 0xfffffff9, "436c0577bfc25fc38b0d42d752cbb9df6b6da71d99089a79e5f4cf494efd11f7544decbaea13abb3bc7d5f0fa48da2d511a4575bcac48b55380c71be234092ccb1e4bff0306778b89c1afb88e5c6dfe069ae978bfb6bd5160f2b0a004b9362eed598671d2b5ce56465c3d204cbe3a711e9acd57a71b326891a558f9af329ccf316e77fc6896822dd2817a31123624b8b620166576c9407e65266812c0f02a380df09f6a47a8c1395073935fd7862fe72897d5f08cf162c7a3dd95e3752a8e92510716c87f238d2269142ce0b73cb06a195d0044b"}, {0x88, 0x84, 0xe000000, "c1646c41ec712c0f562a8ff20b5dc22cad64ceabca5526220674a740dc6dda497f0b4f0fbf37f21ae54697671f035462a4bb7d1fc451170df2f48f625191f70c3d74cfd4c98348aed85097b83b110fa2d7704a20775cb80a5a6ce351a0ecc75a95dd7b04af5b6050428f1121d8291ddadf"}], 0x500}}, {{&(0x7f0000002b00)=@xdp={0x2c, 0x4, r14, 0x14}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b80)="55c7a5146bee2fd96892593f3ec33a76dc9be3a430004ffc6df7f3ba56a7dfc43f13e329cdbedc695cc7033bc07704f47bd736f352201c34924b1340c17c5efcc7992c86b219b410cd1fa581308ba8e031c44a856ce829b37eb1221ddd7d1ad9af977e47d79bbca431727dbf0cb8a3178835bde8f3fe1147aaf37ba17e080de5b8604828994fd7fbd7fe6146e58c84f348f2b6882a147325af", 0x99}, {&(0x7f0000002c40)="89a18e0ba64fa85c39a83b7cfa40142355ee482cfa76406f58a6b838a6736a899ba58a5c5a23187d346655fcfbc03e1efa892ee9c6b189f93d61b15fe4e6576a29957a80384d1db4c0382ce9b77cf27f89a1024362f8190f648e1988f305bfb73e0fcbc3c2fcd5c47e46a99e5651c4578cb0ecc7bc33f0bdb77d129124f4f45aa6952fcf7ec2ed49265d1052a0edd7fdb0fa216bd8d41b1c5ecb373f68ce51809bc9461b21f514105189", 0xaa}, {&(0x7f0000002d00)="b75b84ad496f96cfee2a6e54bd8c80166fb575867c08d10b0d25ecb647a5", 0x1e}, {&(0x7f0000002d40)="73878a1f698b05bfeda8d6caa719665e1fe18eb882f83eaa3b329034da7e21f37286f18ec744d7d3468fbf006edb4f39a21cc40450d60a56e4ab178d66051dbb6229795e6a11535428f9f3f2e34c8b9d18846e7665a4e505d0ad53aa47a40000094805a054e5bcaa66a78f553e7e19d69f53e22b715d15419ac71a9757f6a921c8da5f2da15043a0b77ca1402175a98de627dda1f0c5c755f1af220f93b7e0d84a0977d5de9aa333bf7df63aaf9e2c908d5d550efee5b59b74c9885181177fe087fed9bcf867dd0779252a7cb29e70880f5bd49877b51f2466a56b03172b157437e6dbaa64b9d690e4c0c6c613d1738e", 0xf0}, {&(0x7f0000002e40)}], 0x5, &(0x7f0000002f00)=[{0x80, 0x10b, 0x6, "aff338c0f2e46ceeb256ed064412fae6aac92e69e3a99fe8e8bb67b23303e16a99df5992adfdd0749d8e52ad686dc9353434034f8a8fde0459f8a874113cfbf5bbd3a76ce4829a55db51934041e5b73fd940a794371aa9d29c0095af9615be095d243c118eeedaa2eec4ab65f2f1987b"}, {0x110, 0x119, 0x3, "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"}, {0x68, 0x84, 0x4, "5de08d9592006542a1501f98e189303d29103577e1524294d9c37d8846b0e6fe8c9cc9e5efe3082849bace421fb27bcbb4f10cb518f59d7f48393592678603e8efe32464404923ca5181febe91b458e20e073206b04881"}], 0x1f8}}, {{&(0x7f0000003100)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003180)="7bdea34bd441115a74294b9eb60e92fab0953b5ff3ba893a6c18ba0c9586949c7006a51182d06d781f806355659bc86d102db9f43b05f3e0e460704b9ecb07100918c6df0d59845ed7a54ab52b96e616e969a2ee5f3844ce819ed0314d2a08995aa4a3034294abdf42162f98dd4c3e1a80f3f5cd42babe25c252e225fe3fa9680ebd457e8abdda4036a4272c61f2ad49193f06e2a1a8356139863d0611a23d960bf33f4e6eb2d77eec860b2293274b199cbd2fdae700a85e38c97b9f791de75217f37f31406aa557dfd1607de78e18c3dbbde37a0c102ef4b6245ba69b3947cc9e849ef8", 0xe4}, {&(0x7f0000003280)="dad1f7e23e05884cba54172c97167c456dcd5e9b39379d83cda83da00b09d9d7acf4eb3e31220168b646618da67d0dffcd0b680d96d6616dfea9387bc058b852c9cf1e42f4befb846be7219af94eb38567345adebbbbcfb62b74a92a8fd016b42c13b094f5d6a9fcdd3c7f0e6d4c350f2fb33bacbb1b95b81efc3a5e76c3fe3093003cb23f4709141064b02d0c93b33b05181ac92cf1c24c11ffdcb745a1fe38792a0ad981179b11dc534366e62c58b0bfc525bcec9fe917d204fbbc79c8fb263ed4e73c72fb3a4dee014d43f08c5f4297c07e1f4466c7fd76df001d41fa24da3fd8ab94b7677791c53e03d03e3b0d02bb2c5ec9e660fc7423c66ed4fcd269f1bc894824c0e93c896664800ece36fc226751b34924d3de4bca439bc71396a2190e53bd41a3618157510fc8f01cd6becae4610ce0dcb16a3a9e49aee7918e6cf023314cb1306027e26cbc3becd3a267bf84cf7f67c4251983491c92ffcf9ecf84f2de91d45e88cac6b7b659e4182b744654156a8b5c32428e78bcdfcbe2af5e908459ffda62c9ae8f69b4389a51304d389dabbb4947c6dba685170ac2afdc002b5b857c702ec8b92f5d3fb8d0f34a95de1dd99a55774c1fab1bf51a22743fb0b7876410dbe88285ff013ca6ea1bb10ccaa8dda5198a9d03d3a892a4508685373e84aeef16fc90a5e17e69d4cd5ffbb8499c92bad093f711dfa08384825afb164e3860538a2bd80e458e62cc5175a508cb2b42c74f366327d3955aa4ce7c810d7b0eee5cd6dc4c1ff7e8887376af133f0051d8ce5cbbc148d46f458ef930867b15aab5c289c76ac92e165c2d29f4a2bd61a7488df34c6aa7f481f05b34bfe5d541917bb1be6c4d72d3d861492a164ce33c525079ca0cfb0b986ff45664eef203203a3f549bad5d9bf9d5d9498549efae2b9bec6696b0c437ac39a12ff9f30a821607bcedb007424a468ea7b103116361685fb564372bfe7ee5a4066948a00afec1f1cd6d902b2149fce79a03886faa4fe06bc311cbf77d3ba4fc3c9a1dae19e29fcae48fe56094b1133859c0b0e43ac03d579f771c07bfddb7e15a211a6f5e343174a66b3ce82e09ee33e3ea6aafb3abd5135e1d3f2914f0e14a8a1e451970cc46a0127f394a70b115d4e39d945bdcc4a53b8d0ea13da34995d7e8a5b470d4ed7ed9fc6c85c433530e127315cc353e883741087fa8eac3dfecf585302afc5d9379ebf06c4edc89f30e5801fe296abc083d9244c5d6914b993c1774295cc1b865f28f0f921c2b8d535da737e4723aacbde882471f304d1898394384c1db14b6e0d25de79d97f6d7a7a369748e039b5aca07e58623b1d620c6946221a680a2e0e75446f18ac3bff6c4369bfdeb8273145053d75c58cac26eb0c1b8c765e637cd3ad3396a9d7495a50ca45835d6ec4efb527f4a862ed6ab3c3a362a421c708ce4661cc3d30fa6e4c1ef3af6992a1564043c510b0efbe38807d924e34d055faa5f6a333a243905c1af14f21df1753af6253a7424452c09d64d4459a779342319931b49542ba30b31e285c7ffacb605af291d891193cd007dd612f39197f670c84b8cc1989493aa81f9096d4fc1d6a5d00429bebbb23fa2b1035c8968fdd07bab7838172bef1aa122b04381c58aead86f00b9b7ca5d6c4edd7461c3a2353115f8b6c1679d44d0e79b1647af9570aeb67dd117881aeadaea019ecb2893c4a94ee9709b5c8397458ffe48f49ef6ac4bbdcd851d3aa5bfbb96bfca8e342bf162d97577358b922bf706285d67859b024daed5e6f9d6bfa0004e38cc524546882ec9f7d111593c38363519f682c9dddc462dd3ee4dc6d2280a3ba462a6934160e2cb1f63c62e1f799e2705d104c1bee7d57509f940d5f64bef3082fc54112eb80e2353d9c40558b32a8d9e88617cb3682a185ddad072e9cb47abca0f9a672121c62563e35b91307dd0b52e86c445d67c01a5237321a01fb5d3bcbe72da54f76d07f0169c4bc9d13aec89136219316c06922b57701e73a4399058456b461a6a6a3e5aac5d7f92b437e3308131837436b802665481ee03701cedbbab7a033c35c59baa13104a02788739b773f5ad242a91ee130bf2ae2da0486dd6da97850b121f080d753278ac4937dce6241328366b10649d85325fb7d2b15b441fc096aa095ddd6164b6b857be5d37f726df6fbbbad58cca23c2d8f7e05fe90c55df8be5ea845de80dbb4394b75debc931699842912de355e070b69d8a78436195b593bd8924cd0c4243cd793f94bf85d68fa1ad4605a55c1fa6580f8c868ad6c9d9be8bbfcfd8b7fdc3f79445f8722b6cba4a90014c362b2a9f3566a02c6058bd08aaa892dcdbab048da75bc459bb956cd264f8456ca7fe155010700efd44c3d758bcc0aaa029abbe72b9729f4845c23bcb3345c7206fed84cae79126813760079324140b2c29cab2e143869703c76fb4b5e752fe0c6b6baf3ccf05b5b72aeabad07e1621fa0c9a8c4309d91dbbe98f871e194a95fcf8780d2ee9420ab685ba5b85d6cb6b9c265c53479afdfca399f65b66702c1bb8135b327c3ed34298473996f20802806323753bbf1e5b8e25efe8554a7d819136412a6e2af5e85372f3ab94c09dc434f40658cd15fb49c9827f6bbefd3b2ec0d6d2a3f23c198c1a40e2f85128d5e73575ce9d2d31ff9547c2bca3cd4ca29c6805fcaba54a89cabc5033168e134d8cf0e318558ff0ce54df3f53662ac2ca688f6851e4a545639ea7b4893d91c0e493b05490fbd7da566924398ae24b38d56f28d4b887868fe4a23ee6f30fd1d53254668e46d2d1df5c170ef63765e6cbd9fa900cd14d3ed381633c6bbf85e18f09dfbf06fc8107fb06a040a1413d4cd401eb1cb326640aaab7ae13ad142ffbce3883b5d357a5d58dc09d79eee707ebdefa0c836e037ade424a0a19ea5e44715ea3a5f2b662276c7c7fb75a7b50ba2e441633946f772f67e9edbfa3fcfcca80da5590a09a43b75ce6d73f20305918bebdf609d498918c8b2ccdcdfb24c69e2c55a7448b9e383759ab93d7ea523809d8c1e48fbcc140f25f0628e0f431cf128258328c21c5ee0a66e8de4127a71a65802755dfb9d338f8c5468e58cd23a0e91bbd7f538c5c75942872bea332673960cd336d2b9856b0afa130e9e2efae0f53bb0ac4943e018bb54b7e232a9bb0125fc91b6533a19dba70720646fd446e4ff46e91746cd66cb8d6dbe52f46bcf7002c5846874f4b670411d2176b159e846418960895ac8b465fe5d6c41c56f6586f4ffb2e1300a424c1dc6fbd1ee71fb04fee9a0ff30539ad39b55b21c8e10de05913f958b1a2b15d2212643b82346e84650b8aad5a382ea009037271c30a7b8d8b84e89925eb8d981251e54629e2f5a6eab49e948862a6faf5e5d32529ca71941b22059c81c3fc9ff96ab3987fd570318bcefbe0c365f3e0377bb17e61b706e419255c00dac4c262ef5c355cd132b31b53af251eeb89d3c02c050ec18f57db4c8f5ee656ec40295f0067d042ffd9e315608b88a21aa3a067f3dee0a1c531a5ac52dca05da72c9a3bac3100d548e07acfc7a07217a85616b9f34961405b263c97d479b738f903d428515d1b3e83d7fa463492ec3cd938a3dc62dcec2980904e2866b0506b77be8144cee675bb665a3de96841242d837a8eebf793bcccd52cdd561636ba740a84120afa7788dc84044dcd663ba2033871a8addf290e6adcc2d6b0c2b1df8c9877ec540413ad2a1fd6b78fbd8652211ddabfe53ee8dea6e4a2d0dcadd69398a10cd0a974d3271d2f43b4d0d98d80a841737a5fc666e7334fd950c1ecba12111358d46a0f9e659e3d05b302ae9900b2907a5e061a4c430c9bf1620c33116c1b27bf22654cb732dc8f8b7ca1eabbb48e9b78de61965a13631ae92b1b1e384c6d32d765e15953e40981ba6275bed535d2eac8f18945131adf166f88943447c7c8f7612a4fb2b890ef992949dc80f037378b866049bc79d0dae1b63e34a602c55a67728e538b040cd60c703e5e7c21bb1400b6bf0dfa196499e5020a4f49325d8a612417495b699a03c9199b2c4b84c72ee1e1f0cbe1d55db82340fb4ef9bf81295283d8adbfb2417a7f7a463bc858ba743823bd4c3adbd7ca81152f27deb8b56621c2ff80c1ada6fd8e03531fca48e5879ddab9095ed0f4efff3c240ee3d3e5324bf3d19c722aa16967be5eb6cc77676d4a42f9dd6d820f28a8b9923f879633259d1e13715700926cef91974dc1d1a6f47dcdb9174a20dc5ba7002098c3ef5835519817d8cc4af292398b1ab7ea191910d226b79c5d0bd146c0879e7b9a1ad50f96ad2be1e67b70eb11c98adb435a65b252ca225655c17a1f477475d93b66462377b5e560b18cbccfb3c5cc9ebf2fa5e0fe08d982326ca5d207b11c913b1c7f62419af26c3efaefad7960d1d2f0bc4905e078de0a92bcaaf62905b070a602bdc132b5094129fc13e18f1e8730e1e6fc5b62f55f3b8aacdbc20acea3adeb19c33232ba678c32af963e24beff986903e638e1b0adf6137e7a7b2a6b596a5585bcf00cb0e4b481e7ad78f44d0a8b4985d71da3f4a0b1c680947d2c3e6e2068ab0400e43696fef11bad2fff604850c5dab750005c03515a35a6770fbf6d4423546947014e762eea713e0c9f5bd0f92544989aa9ccf7dd3eb47d426c8a4c0771fd2b2d68a690c73bc2aa0f4b74894c159acd668af4b3452d29870bdc74d6beedaf768c7274306e0d879d09abc3166095eff4e29c55177cbac5f0d6b8dfe1ebd70b9cd8b763ea33d51675268c6a27db6670ef6a2a3224387f59da051d01f40619b78441670bc891c322ac441f73e23160de39484792ffc5bbf9d6f598cd522d33a74064cdf149eb3f9682e832492c20cfa62ec3e8f1c762a697497c402f0e49cac68d475cf9f90960ae814394c598a4ef1db39dd1fc7bc589df9fd0b9ef9b034acaaf29a17ca2606307fa14f87379377922203d24a282d1d9c9e52e452f8827087b40d913ffddc5ff0033357a63df388d09dc0721bb58d5ffde613d49c369b4cd0b77e48d7a686a08df1ee500ca41187ed96a766f6184fe4a4bea53c8deb311e348bf6b849d660a45c096779d74c2978f93a4f35a2c8b7a8eeae34409cb5bda4fed25467ab32de3c7ad572a61d396cb05f01b6efe6f00473ea75c36ad2ae6c1f63b7f851756140ab3f044eccfa7dd38607f6ad60c89611d523d42f3b8944c1e98a702b0fe2df2b15277c88aba646c125dd8873e6ca7737c57e4688a9a4fda673d4e096f5edb5d065c9544c2dc1201fe0514cb6ec03b038cc50ba4aa4945363fa6acdee553db3ea4c29dc12fee40207ce94626121f01b72c0c3fca04e29b2065503c5452f78b2eb581700709ed45c7f12beeb3228ac0f6f1437a7b5da1d4cd35be49f9e8b7066fdabdac57558a534eb339a4291bd82e2b2fea9c5d4a236feba9c483d94eac065f7619f77ae9b3112e79eb9a99c0c888efc040ec38a5370bb9e6ecf9daa642d15b75eccdf682a0dac5811fe887ce1272916b9744efc4b4aedb07c8311e84158e373c09e9b6a8aa3777fb5bc3a20979ca9c42343bfb2160a565cae8d60cdd4b3cf76fa5f046edb6cff4e10d8d899e0615a9ad76434e81699b50441df9b03fa257da4993cc0bf5f5c12a40d82cb834a28213dd5f369b61c4d1181bb68a55327988ccc7af714fc31d2c77961ee0f5257853a1fa9d99935afc416e53232aaaf40369edf7c28e27fd4d0fbbf00b7f003d44bfeed44ccaec4839fb8e92b7b836101b83c9569fc4bd10233978bd5371e7cbe533ccf9b95d7c104526", 0x1000}], 0x2, &(0x7f00000042c0)=[{0xc8, 0x10f, 0x2, "55be9ca764cbe4c0fdf12fd7393ffe26bf183c3937f42c74adbfa54defc07421b209164446efc800fb619aa75a544d0a3f450a8e928c96cc15497bdc994bb62af08ef6c65ae032a78de59a8d8287f33c7e865d485a441b2e27a7dfd5e103cab29996233df55d8dca6609d7b68659883550b912a944cf33d3045233f9705ace6db055ff6755353968aeaea29e19f0ef03b820db82207b58b1d08ab68cc6cda4226b09a10a799b216162bcdba51e05f16408"}, {0x80, 0x10e, 0x6, "04f37266234ebf6953cb2cab68179b77e544dc2b19c14c2777f83f15ee5e18a2c54a6a918cc95b3bfa93a78327f74b1f108f61436f075659791f6931573aa624d78e977b8c6b5166a340dfa4fbedcc4fa69ace01e993f1df01f7a12037b78920e458a947081304e02d6425"}], 0x148}}, {{&(0x7f0000004440)=@ll={0x11, 0x15, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000005a40)=[{&(0x7f00000044c0)="c636a8004d607a9f8bddb98154934410a67a02ddf08fb4d734f5dedbf6af97a016ce3b70e9a44f0929ee37330c38644da253500bd52b7e94c82d5701e676e39f91b54a92225e30072f8653bd7e3de6dea702a698adf097d7dee41e612b9b26f8c001c9c683106f6bf34fa7ffac9eb34a4b0e4cdf1bd74c4b589dc7bf9608fc187b36c1e88dea0fae71c5dcea0b6e76c07811e7210e8277674f24f84991e12c7f258105f2519b7357b11e", 0xaa}, {&(0x7f0000004580)="7f17e6bf01b1068c33cdf097ff5f57cf8e471e75282ad589acc0bac66a8a98fe57b9476929f5fe36a3accf0d77a25e7b7677f531229690410e9372e51d5cb76982370c3655274df5fcff949f7477b596ebcdca2ec283bce8bce92d3bb104804920d203e1abe7febeea07df6b6f9db773836b7e50a4a0c1f62cc8eccb61698b9b9cfd86608af0ed7900e895f9f2ef3295a7dfbea1f05e9051e0b910205ff96c4a61", 0xa1}, {&(0x7f0000004640)="47e03a2118258ae7622de0a318ca68669b3e251e0b39f11cfa1245090a7108fb8bb3625ca74e65c8801a0e0883543aa4d3449d982e81911a8b70cc11ca026d7349a3713e8d5164e3aa2d8b99ad0d90b16814a041e90598e3a7d5c8d4476ef24dcaa470fcf2a6edf2d37f5f727c2536ebb166b95ef77ddd2eb89052a93a923b91dc4b7894f3008ce672d3a234763dfe239543b64b5e1aa50e236501771d3cc25fc2af60eb7d09271a694453038892c76e7ac42ea34e761ffed0cbb15bbac35c61a94eef0e4f5f2a0de0adf24d98c76dd2e3947bef9eecff818ca655409368c32797acb3c6d65a2c1173af", 0xea}, {&(0x7f0000004740)="338ef09d5cb374514cea25e2a3a734661b44c54d93f422e59d8247d6109fb0bf0c1ab393482e9b9cb7b068a1e48174e82970e268782fb4d3e36de6fad609f5a1ab87d737fb9d07abb1775300b426476dd0", 0x51}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f00000057c0)}, {&(0x7f0000005800)="523f315c9ff8b425fb841db52ffa6068958f3ef583cde53560d2abd83da9e51962394236d31c33a6d4e4dfb40ccb64ac824d50499394b2f92f15c8da3d37cd68495b302ef4e732989a1621b921fc8f00c524fb472cbc07a424a83bc8363d5d329839baeaa3b6138432c7bf422461d23c9dac6504e44ad09b90ee9b94aa095e5c699c5ecda2b804f81647afeeeb31658fad3224215874c7b63390cfec2090f33894fd5735bee8c7c09e70e73c982e1105427abbf742a20c98b9560610b4b2050dab9d5d78984c54ba81da490d7d2e4a2fbb1c4767fe30a9ff0a3106510d6d6fa4a0c02a2f4ccc927cfd6fa7c94e23084d9cc99dfc0b5e47d62405987a", 0xfc}, {&(0x7f0000005900)="bef181a5b5a1acdda8e73d1c6e3b52a438580bed4e79557fd6269f6dac7d9990121c99fac363ed6d50dc87336718ac5e77ce226d0ba0164476c4455eba265bff3ac819c74f5c8806e307fc6eb605ed6304ba91fcea55d6215a05983c56de37884af41435fa7710bd7a30b3bf74fc5dce9ace6721def7ef7531a7be9e5f2c99cb75b080b8d548c1a8dc65d009a027a6a888bced12", 0x94}, {&(0x7f00000059c0)="3b559dd791b4740e785b53aa3123e038a29b59a5458f5098ac6c4a5b708695fcaf75af07de6ba8c19dab976d7993de891d53da40509a253f8d68e46a036e02a05bb95d9ec67b4c182ba42579dd7a75a1e950ed7950514e4f", 0x58}], 0x9, &(0x7f0000005b00)=[{0xf0, 0x10a, 0x9, "c484d29de7cf1fe1de27a45911298ca63e64e10aa6a9b14d5e5c20cf53a2e98e525b0720c0c848b741d4af4cf0cd646785b870cb8e2a901dd5d320c5dea908ec2f76106a205b9fd678a2c17ff2f3f77a7d63b5598acb1954078fe9843d4395f66f601aeab644ecee9ce20afc1cde224d6c513ea01dd93209b9c75d461e4cdc8bfd1de27630d4109ef5fb2b9549168773ab2b90464dc300c94c69fabad8f22eab47d8f40ef2e3ed1c0622b4f0d66bbf91b2b1030e3e804ff15ee0e7ddc744946d7bccadca44a50446133da880e23d6e4902cc7bfd3a58fc725d"}, {0x10, 0x104, 0x8}], 0x100}}, {{&(0x7f0000005c00)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005c80)="4a9a36ef3c571ce0bd6671e141882d1aeb1d823d2b09737a1f3d71f296d7df618b172480333c12682f9d5bf06aefb5440729e6aab1db512eecf70b80a636dbdc0fafb6717eaf5621d3b574f228156c4e54bf69a1659cc24e51d13a537f5d06eaf89be2d7ea97a3f78c71768bf8744b0c71cff5b36c916b7a600431c1055243c1313a68f161e023bc4ccecb05e150bcb7d3f56ca734ae22a58044a3a97c594453421c3e0c3fa1598f744299062bcb0f678a5025d570ddc2d460e5b0353bf8c884e0d772dd440ef66ea8166fea3a4e0252b549696e9d62", 0xd6}, {&(0x7f0000005d80)}, {&(0x7f0000005dc0)="9a4898acc6e33e02b2da27a0dbce769c98f0adbb11d2ba1f868a8b7e4c16fca14d0c58e5177dbaff625b364992c001c0250efb83086e7a6e92d8b1c1254cb6098dadd2888a72b27eeda0b97a588be5338f416f4dda1ef5ae9e871753b8cac39a7ed2d32047752c86056b38eff4674423ac4a5b54ba8a25575bcf9dd0722504c48b45a95512a924b37570d4c32716560cf0662d26ccd7c28630fcc0309dcad657959f1dfc59cf2c1683c0345508b25f38e2c51b8b79730f183e52ad8723d1873cd16f7a4dd4a9c98c6c13582a92b0bab3139db4e429babeff8b", 0xd9}, {&(0x7f0000005ec0)="0af1a54e60b59729bb92df0f5aad2158cacf46ca1ff13db5737cba7cda61ed18bc1467ae8b5727355c6e11c7b4bbaee90501264c4fcb1ca84abcde6997fcf0ae1387f907e3e6b4ae845e3cb5d95e7cb9", 0x50}, {&(0x7f0000005f40)="f1af3fef45011e9f6eef38c7f5da457204ce648e4a75664e614b591c462fa11864d3d253d6ce9eb05bffd0dd27c45b576031ca9a6cc038fca3d44cc98d28b36f473675d71658ee9c321f766c447ca614f7cb8621a6eff07961af77af5a36e307454cb85f947295e74fbde9ebf4019909ece4d0c8b83df058f6c34264efcdf8ba40464ae324263f7addf1d4ee204d1433056ebda22b3b2fe58dc79474813d98c3af523ebecf0d3e4b2f292f61a9fccc0339111a88ad7f0b91a9972e2821c1807c9ec3abc108f8b1464ca0c627815cfb914b1d63b36eefdc6e1b5cfd1d39e7881a48fe480ffb2ac8164675d7612f2da9", 0xef}, {&(0x7f0000006040)="941e5fc489c81e0bf18c65f1ac8d24d2f24d3fffaa33ac939c32dd9ed9c82aea78c4cf1d73fbe47de6a7700b4a2fac52d1b64394ded5ecc359d3204f997ab3ac6b7e1aba0da163362670b9f63bf8f051df85ab3e7b57822e5fca15a42554bc538e5aef9312edff8e55c0fe057d663a05c7092914695f0b396038d5a7edec94f31e41ea072514d5f07663437fe7cc992d531ea3d7329ff67dda951cba919239121a6b2b9a52c5", 0xa6}, {&(0x7f0000006100)="c4e2889237e050ca125cb66086405c6565e6a6415c4ff5fc93d17931f1c19ffef389bf52d9f4a03e40", 0x29}, {&(0x7f0000006140)="92c2a5575ec6ec97d7113de0a81ad825c7ca0cd51c2f34bc33731039ee2ce2fef4ac6e0985400a6fc4ebb87996e4a5f4558259ce01f3dfe75dbf415a78471a838954", 0x42}], 0x8, &(0x7f0000006240)=[{0xd0, 0x108, 0x6, "8e59b4f5fcace4a3e81c272d374cd7f0d5456aff638573f8bb047a0613b2a5a68aa87243d92176e6ca7ec914c9d69876395f26d58440ef42dbd6058e0a097a3031e1ab19f3a9931604fc43d35c0d3381dd38564b9a437882359e93127e9063cbaa6555a76777bf51bf6646f51089b78013a5ce9e289fd748fd63c8c0dedcd3d673434767bed029d8c8aeea30c3193785e4f6b56e40899d8903667170014c2fc136b70cbf9cc9ad87a908559105666181afaa8af2f422c93ebe"}, {0x58, 0x0, 0x1ac, "2cbea7d81e5c2005cf5a5203b99efbf5694367c1a231b364295bc78cbc41e28ac3d8ce1f17297649a422f0237fb1ba78fdc0e2216fd9c908f853ac2c208279c30317d335be999c"}, {0x68, 0x112, 0x4, "f83e30c14bcf951d14baf24cd362a3e6eb9fbbf703137531dcc8eb1c6109a17083cc1a8d5f9d28d9529fb7822aec8cc631ce1415ce24458db43d26c3ce1388b7cd72be007dc013f0cf0917fec3dfc657e5"}, {0x60, 0x115, 0x6, "8f043975f601f273fe2be560b01d2a1ab63a1688946397c799dde973fe59345604d20d5c0be325e52c5608dac3d60636143ab6b374bdefd88fcb6f9b856bab3bfb96f0e26689b6427bc84a40982a7b"}, {0xe0, 0x10e, 0xfffffff8, "b0e4d3b52f9a2602be51e0eb38c74b9f2120d24ce363de7efc7b47126c440f1a8ae208e921a6c83104351e1413bc48c2d614b1c27ea444384f99d6c1ad1a1e8d3be66ed178e13faf9befe5729f42b74a3982e2382f70b06b0d2bb240fa3afb771c0866605659a2ae55b08b74719af71b25324b44ea63fd8058e18c5be8d8e5425cdcf307236c83e35d2cbcef7fe92d166c6dcb8078c310359c715bda27abf85fc7bfdf5d68c2434bcade2e294f0d688a4c03f0f7024713976ce8bdf2c83fae374994637add109ac884a6739d9f6b"}], 0x2d0}}], 0x6, 0x4890) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r15, &(0x7f00000067c0)={&(0x7f00000066c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006780)={&(0x7f0000006700)={0x54, r3, 0x3a, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x1) 6.284522174s ago: executing program 2 (id=8781): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) (async, rerun: 64) getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) (rerun: 64) setregid(r0, r0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfdef) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ppoll(&(0x7f0000000440), 0x0, &(0x7f0000000480), 0x0, 0x0) (async) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000280)) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) (async) r3 = syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) (async) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), 0x0, 0x0, 0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$incfs(r3, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x71) (rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025361a3a2647571828000000180001801400020076657468305f746f5f687372"], 0x2c}}, 0x40000) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6.281254434s ago: executing program 2 (id=8782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'xfrm0\x00', &(0x7f0000000300)=@ethtool_rx_ntuple={0x35, {0x12, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x40}, @broadcast, 0x80, 0x7}, @hdata="ffd1109322b14e57808601a8d500446940f9de9f3a8671dca80e03b2d85df36333aa4b1f007f9c6dcb9db7f8357670b59f423996f9630e2357bec8ead1ee17602ef282165dca5e9b", 0x3, 0x6ab, 0x4, 0x1, 0x1}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 6.253164154s ago: executing program 2 (id=8785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x4814) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x109500, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, 0x0) (async) ioctl$BLKROTATIONAL(r3, 0x127e, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4048881) r4 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902630002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000008072414060004000905810100020024000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x3, 0x3, "7940d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x3, 0x3, "7940d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) (async) setuid(r6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 3.291392289s ago: executing program 8 (id=8824): userfaultfd(0x80001) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) userfaultfd(0x801) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) syz_io_uring_setup(0x214a, &(0x7f0000000440)={0x0, 0x28cc, 0x2, 0x2, 0x23d}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) 3.278486829s ago: executing program 8 (id=8825): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf9, 0xff}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf9, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0xba9d7717c8c83b5, 0x4, {0x4, 0x1, "00f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c00)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x18, 0x1, 0x0, 0x10, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x16}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x18, 0x1, 0x0, 0x10, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x16}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x1a, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x1a, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) syz_clone(0x44014000, &(0x7f0000000140)="24379a4a9e2f702e25fbd6d7e283be0da063a479a87ac2c9b523643ffb26d2eed506bd79ef1792525faf06cd02ed5943356f4ff010fff9fc0a87b1e0e1550c31ce523682477e821fa69be75f1402385ed1d21d8bcbf855a58be31e974e366d64e84e19b6759d589e03836b7b1dbd50a8", 0x70, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="493ece2ed313fbf4ac526059e52be5a08eb082d0f65a3803f264ea1414f1") (async) r5 = syz_clone(0x44014000, &(0x7f0000000140)="24379a4a9e2f702e25fbd6d7e283be0da063a479a87ac2c9b523643ffb26d2eed506bd79ef1792525faf06cd02ed5943356f4ff010fff9fc0a87b1e0e1550c31ce523682477e821fa69be75f1402385ed1d21d8bcbf855a58be31e974e366d64e84e19b6759d589e03836b7b1dbd50a8", 0x70, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="493ece2ed313fbf4ac526059e52be5a08eb082d0f65a3803f264ea1414f1") pipe(&(0x7f0000000300)={0xffffffffffffffff}) read$FUSE(r6, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000300)={0x2, r5}) 2.969483415s ago: executing program 2 (id=8827): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xd1fb2cf87c56e28c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3000008, &(0x7f0000000380)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}], [{@appraise_type}, {@hash}, {@permit_directio}, {@seclabel}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x28, 0x0, 0x0) recvmsg(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x6, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x7, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x8, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0x48433624, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x1, 0x20000005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xfffffff8, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="440000003300000126bd7000fddbdf253400fb802d001380783cabcf3de8f3c211caac292bfba1f6c66248e270b366cbaf5734d5e7f8a5376e5bfdeaf3e51870"], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) 2.67253074s ago: executing program 8 (id=8830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0x800}, @dead_binder_done], 0x0, 0x0, 0x0}) r3 = syz_clone(0x4000, &(0x7f0000000240)="b2315a27d982c383acd3142b6a12034b59b4cf25ec5a0f555ff1def708c1e7b72583590744ef179223b17147ac9034b63d7f554606ba459a9be6a54daab591d21082dbff62f8fb0f4dd7785a32d2db7635bc676b648a39c0", 0x58, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000340)="45e24bd70bfc07599fbd10f7ef12c4d66f705a7ccc4307d484f71fd7d58022226b8c7ab24cd4a0edd43227d24c988a022f09d160e8a54d3084444fd1cb9bee19c26f8df450c0ceb3294407eeba") tkill(r3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314, 0x800}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) syz_clone(0x4000, &(0x7f0000000240)="b2315a27d982c383acd3142b6a12034b59b4cf25ec5a0f555ff1def708c1e7b72583590744ef179223b17147ac9034b63d7f554606ba459a9be6a54daab591d21082dbff62f8fb0f4dd7785a32d2db7635bc676b648a39c0", 0x58, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000340)="45e24bd70bfc07599fbd10f7ef12c4d66f705a7ccc4307d484f71fd7d58022226b8c7ab24cd4a0edd43227d24c988a022f09d160e8a54d3084444fd1cb9bee19c26f8df450c0ceb3294407eeba") (async) tkill(r3, 0x2) (async) 2.67191989s ago: executing program 9 (id=8831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 2.67133972s ago: executing program 9 (id=8832): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r0, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="2c4f3a42c1f3eebf753005a8fcd10ce20ffc080000007b5219"]) read$FUSE(r3, &(0x7f00000062c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0xffffffffffffffda, 0x3, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) unshare(0x22020600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = userfaultfd(0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0xdddd0000, 0x7000, 0x1}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44050}, 0xc002) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, 0x0) userfaultfd(0x0) getpid() syz_pidfd_open(r5, 0x0) 2.606984062s ago: executing program 8 (id=8833): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) tkill(0x0, 0xf) (async) wait4(0x0, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x6, 0x95d, 0x344, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x800401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x64000400) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = dup(r2) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x2200000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',dfltgid=', @ANYRESHEX=r9, @ANYBLOB="1000"]) write$binfmt_aout(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/4896], 0x1320) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc00"/32], 0xb8}}, 0x0) (rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) setgid(0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r12) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r15, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00022abd7000fedbdf2502000000d02a91b7fe8000000000000000000000000000bb080002000100000008000400ac1e010108000700", @ANYRES32=r14, @ANYBLOB="0c0003000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8090) 2.545586483s ago: executing program 8 (id=8834): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000340)='\x00') 2.452614065s ago: executing program 9 (id=8835): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776664c5463d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 2.451021185s ago: executing program 8 (id=8836): ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_disconnect(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1d, @broadcast}, 0xe) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f0000000340), 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r8 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_create(r8, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT2(r7, &(0x7f00000001c0)={0xc, {0x3, "1aa9fd"}}, 0x9) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x5, 0x6, 0x4d, 0x39cc191a, 0x96a3, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0xb], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x8006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x1009, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffff9, 0x5, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xdf2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x8, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0x4000c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x203, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.449676235s ago: executing program 9 (id=8837): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r2, 0x19}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001080)={0xfffffffffffff001, 0x0, 0x4, r2, 0xd}) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) pipe2$9p(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 2.378494856s ago: executing program 9 (id=8838): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x2, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6, 0x8}]) 1.994782583s ago: executing program 2 (id=8841): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) remap_file_pages(&(0x7f0000767000/0x1000)=nil, 0x1000, 0x6, 0x4, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x2, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eda658744d2d010203010902350001080010000904df000308060006060309050700"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 864.964464ms ago: executing program 0 (id=8850): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x7}, {0x8, 0x3}]}, 0x14, 0x3) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x8c200) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x95530adedb44fcfe) ftruncate(r0, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000100)=@ethtool_modinfo={0x42, 0x800, 0xa}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000380)={0x640, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc2a, 0x21}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x5f4, 0x111, 0x0, 0x1, {0x5f0, 0x5, 0x0, 0x1, [{0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xcf18b98f7abf9e01}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x698}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x314}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x56}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x385}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x16}]}, 0x640}}, 0x24018014) r6 = socket$pptp(0x18, 0x1, 0x2) flock(r6, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x81) r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x80000) pwritev2(r7, &(0x7f00000011c0)=[{&(0x7f0000000a80)="5483624d79f18bb8", 0x8}, {&(0x7f0000000ac0)="0cf1417b09cea030a49b4182c1f7e9fc5b7c9875d7368590d279e88523da63e8c24e847e20cb196f90c4f4d7d4070ed9cd4b8f917ae5d8f70d9e54aa405f2586081ff5de8c460311d68b93c36f6f01fadfce118b2fa3d5055f5249edbbf6eb07c6fc4a2c324d9d8e490ef2ad2b9ceb6587e29a265104b877612019534341a29dce6251bb06f91ea5b9900036a367f21336bf11bcb290e104defa0a8600133b6760f9295cc9fc2fa1a8f1b98a03c582d7c42fb5fda13e71908cbeb822d4e39954d67157b38e17337a5ed8", 0xca}, {&(0x7f0000000bc0)="743e01aadbabdd0680f1ed13b1610bfb9ff5dddd72f85396fa326bb73440b9cd7af237685da7bfdf6c5346d02c53a2ab7d3e6e73497a370a1d82d5387a624fe6d6503f2a1ad5e7e80c288c18ea785cf5ed07f8ec13ae3cfca9de2cfdf9e12644c91978c1a57e3ec1ab4abc78208a3e77d1695da16d09bd95015f821be8716f5675072cb665e693d9478bf1c06b26ad0eadedb0bc135c3e9e277691daf32648e5473d13f22c5cf6461c1b56ddb25d68b13eba65da4ddf0c45abd25190458c4e0ee9693d3bd7f9417c659ca991db00056998d0ff8dbef55d09ab5ee6c848493938aa898d323f3c0ba390016289542ee2ffc5ac5cb347348fb3ab", 0xf9}, {&(0x7f0000000cc0)="1d2652ef821e77322e8bbcad2b98b95e4f1ba95d9eb86b859b88fb020fbfd6c2b826f8ed4ae8a6cd8aed7eb74b7757fb130130ee96ae7a616a87055cbc172954c75dfbf53b10de5c231de6a06c5be357682fa1d6215e7437afc5792db06341b41c6290ef5d8bc87446b0bd0f9eeb7145ef3203a85ac0d52a9ef344ca904ec772183dfcce63a5370a314c12121963adfb0d732aec433f141df7e0ef627a782f8c02eee8a5f8a9492c5488337423b8480ac3794a22482fff6276ab7dc15f8cac1ad28a3270bf1787", 0xc7}, {&(0x7f0000000dc0)="5af21da2dfefe4f0cdad3470715d31b5858880777235249f70756b93b0ce9e492400dfb1bd381236042f24b250897d6b6e58411e4a707b01597fea2b343f4e6d86946b23708ce17069949220ecda83ea91b5cbd1524a5f85bf1050b2ef2a97573b8be4139dd1cc3f260c28b2489ff6e7b77ae7ec1f48b59e04f5716d72a917682943ce4ca4e80cea32df8e90e64fb4d6abfed3e6babb1d12281614230850e28dccfa1f9e76f215275e30e43b683a6c9947b74209a2a685a9ff7d9a912832d25dd3b11ed71ff4c6bae97a0cd119808569572f94ee9c275e5d59003c83692f", 0xde}, {&(0x7f0000000ec0)="fc8a06901a055ee4d6acf0955cda9084dc5250b542ece9bd133bc1f1a5e1b46c280b1c04cca5110103d91db9f4ba27745b519fbdc860544642b56026d643c48fcd147137de5bd1ae1d631b4fc42adde84c77708bb15f5a1b4c6d37a47de673b18b7497fcfdcee4b398394f06811e5ab33267bcb3b6182f7f53fdcf5bc3d3c567f75175622d4a65ef58e14f3fad1ff561e7e9cadce61a0677d196b6e488db018b477c49767376989dcaa2cd21b9dea71bd5523914c10e5fd9b4fd05c215da7084d6978d450ad7c66fc7", 0xc9}, {&(0x7f0000000fc0)="a4d9de8fdbb9f5602f180e14a8188b08f328eb51922e9a05b6a7b597952b14f393bad7b98fc9472be751c2af258aea2e3d9d6b09c38b77450557ff337b5fb1ba19f46c0c795fcbbaac7d964e42617565dc0d98a023c8c495a574ef9217d310ec8f99267ffd77d38f1c0aa2df64a81027eb41cc3a8dbfff9bcb3c8a408a82ca7e1db733270a4544fe3acc4476a6c6ac48a44c5e510b04c07b4e2aa97c647c6c9a1b286335111720b2ce", 0xa9}, {&(0x7f0000001080)="73afc1007060784dd0d546ac97a6e6ddb3c36f2c8c79584de86ec4aa86cdbada5aeb921ddef743f64098a703ee1c1f359b84e63f62f34a5acc66c7b9f275d01787f6d60d6f27653b86f8c3c5f53178f46cd4eae0", 0x54}, {&(0x7f0000001100)="264fa7e9d7a49097d7bf79beaa40fb146a74ef57c72d6e3f1a3d5a612affdbdf65387f4ee2bb54acaa08029ebe0afbe41b87db6d3038d184a13eb5703ae214496addaa463362178015489e68019da7c1662b17d6bdd0d4dbc6337dcaafd276544fe32c6b6b1a4e736d2ca9fc", 0x6c}, {&(0x7f0000001180)}], 0xa, 0x7, 0x8605, 0x4) madvise(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x12) r8 = dup3(r6, r6, 0x80000) getsockopt$inet6_tcp_int(r8, 0x6, 0x10, &(0x7f0000001280), &(0x7f00000012c0)=0x4) pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff}, 0x80000) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9) vmsplice(r6, &(0x7f0000001380)=[{&(0x7f0000001340)="587bd73e76", 0x5}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0xa4000, 0x0) write$tun(r10, &(0x7f0000001400)={@val={0x0, 0xf7}, @void, @mpls={[{0x0, 0x0, 0x1}, {0x7}, {0x78, 0x0, 0x1}, {0xeaa}], @generic="9e44778615539820016bef500b298747e4c8470cda7c369d20217705d6dee983dfbe86bdd8bdc7e77e7d322213cfe60999419c90fe96a7fba0"}}, 0x4d) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001480)=0x0) ptrace$peek(0x3, r11, &(0x7f00000014c0)) ioctl$BLKFINISHZONE(r8, 0x40101288, &(0x7f0000001500)={0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) 821.232445ms ago: executing program 0 (id=8851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 616.426779ms ago: executing program 0 (id=8852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) fcntl$setpipe(r2, 0x407, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000400)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000080)=""/15, 0xf}], 0x2, &(0x7f0000000600)=""/209, 0xd1}, 0x40010000) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x55, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101c8553d2099040c504933010203010902240001000010000904a90201466627000924020206000400000905f9020002000110"], 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000002d00), 0x4) (async) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xec) (async) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, 0x0, 0x810) dup2(r8, r5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x0, 0x0, 0x37}, @fda={0x66646185, 0x4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2b}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 615.418879ms ago: executing program 0 (id=8853): getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000004b00)={0x2020}, 0x2020) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x1ff, 0x9, {{0x6, 0x4, 0x0, 0xf, 0x18, 0x66, 0xfffe, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@lsrr={0x83, 0x3, 0x4}]}}}}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) 613.357068ms ago: executing program 0 (id=8854): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x22, 0x1, @thr={&(0x7f00000001c0)="ec0f6088d0f3a4117530e0e5f05babcd07eda0f7558b8d8d0fc76b743df54ef9255db461c78762587b32b97051b8cef85913d267a094a9c30826101448e56b87c2b1bc6b088f6ef73f8da7", &(0x7f00000002c0)="3a45b87320844c0a77736bfe0d3d67ee49fc16e379b4819239ae3162554beb27c6252fa5d5d7416ea47e4ebdc287bb75cc42e659a2a7f1c25ab276eb66873c0d9eabb2"}}, &(0x7f0000000340)) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) io_setup(0x1, &(0x7f00000016c0)) (async) timer_create(0x6, &(0x7f0000000040)={0x0, 0x22, 0x1, @thr={&(0x7f00000001c0)="ec0f6088d0f3a4117530e0e5f05babcd07eda0f7558b8d8d0fc76b743df54ef9255db461c78762587b32b97051b8cef85913d267a094a9c30826101448e56b87c2b1bc6b088f6ef73f8da7", &(0x7f00000002c0)="3a45b87320844c0a77736bfe0d3d67ee49fc16e379b4819239ae3162554beb27c6252fa5d5d7416ea47e4ebdc287bb75cc42e659a2a7f1c25ab276eb66873c0d9eabb2"}}, &(0x7f0000000340)) (async) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) (async) 556.29102ms ago: executing program 0 (id=8855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d2763", 0x4}], 0x1}, 0x4000001) (async) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=8856): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0xd}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001"], 0x310) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) r4 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x10000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xe, 0xa]}}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x713bf9fb, 0x210100) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000280)={0x9f, {{0xa, 0x4e21, 0x2, @remote}}, {{0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}}, 0x108) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x2, 0x3, 0x31, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x10, 0x8, 0xffff}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r9, r9, 0x0, 0x7a680000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000001c0)=0xd4) ioctl$LOOP_CLR_FD(r3, 0x4c01) kernel console output (not intermixed with test programs): attributes in process `syz.8.7638'. [ 500.598137][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 500.606949][T24194] erspan0: entered promiscuous mode [ 500.617666][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 500.633885][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 500.645380][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 500.656840][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 500.675085][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 500.686958][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 500.707655][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 500.719881][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 500.739734][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 500.751131][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 500.782140][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 500.812104][ T435] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 500.838317][ T435] ax88179_178a 10-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 5e:52:44:30:e3:51 [ 500.857805][ T435] usb 10-1: USB disconnect, device number 42 [ 500.870384][ T435] ax88179_178a 10-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 501.043319][T24249] Invalid ELF header magic: != ELF [ 501.049703][ T36] audit: type=1400 audit(2033555212.801:978): avc: denied { module_load } for pid=24247 comm="syz.0.7646" path="/54/bus" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 501.241137][T24284] rust_binder: Write failure EFAULT in pid:165 [ 501.257545][T24287] 9pnet_fd: Insufficient options for proto=fd [ 501.344035][T24298] overlayfs: failed to clone upperpath [ 501.430821][T24307] rust_binder: 24307 RLIMIT_NICE not set [ 501.442424][ T455] rust_binder: 24306: removing orphan mapping 0:1168 [ 501.482508][T24311] netlink: 'syz.0.7670': attribute type 15 has an invalid length. [ 501.490714][T24311] 9pnet_fd: Insufficient options for proto=fd [ 501.574418][T24325] rust_binder: Read failure Err(EAGAIN) in pid:992 [ 501.650787][ T339] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 501.670791][ T339] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 501.787884][ T455] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 501.845357][T24342] kvm: kvm [24341]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 501.854092][T24342] kvm: kvm [24341]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 501.875563][T24342] support for cryptoloop has been removed. Use dm-crypt instead. [ 501.917841][T24345] overlayfs: failed to clone upperpath [ 501.957814][T24351] x_tables: unsorted entry at hook 2 [ 501.963428][ T455] usb 1-1: Using ep0 maxpacket: 8 [ 501.971044][ T455] usb 1-1: config 4 has an invalid interface number: 48 but max is 3 [ 501.979157][ T455] usb 1-1: config 4 has an invalid interface number: 119 but max is 3 [ 501.987796][ T455] usb 1-1: config 4 has an invalid interface number: 229 but max is 3 [ 501.996620][ T455] usb 1-1: config 4 has an invalid interface number: 213 but max is 3 [ 502.011812][ T455] usb 1-1: config 4 has an invalid interface number: 56 but max is 3 [ 502.020319][ T455] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 502.032122][ T36] audit: type=1400 audit(2033555213.727:979): avc: granted { setsecparam } for pid=24356 comm="syz.9.7687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 502.055217][ T455] usb 1-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 502.064382][ T455] usb 1-1: config 4 has no interface number 0 [ 502.073832][ T455] usb 1-1: config 4 has no interface number 1 [ 502.080003][ T455] usb 1-1: config 4 has no interface number 2 [ 502.087719][ T455] usb 1-1: config 4 has no interface number 3 [ 502.093951][ T455] usb 1-1: config 4 has no interface number 4 [ 502.100403][ T455] usb 1-1: config 4 interface 48 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 502.111397][ T455] usb 1-1: config 4 interface 48 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 502.122353][ T455] usb 1-1: config 4 interface 48 altsetting 8 endpoint 0x3 has invalid maxpacket 528, setting to 64 [ 502.133770][ T455] usb 1-1: config 4 interface 48 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 502.152283][ T455] usb 1-1: config 4 interface 48 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 502.163583][ T455] usb 1-1: config 4 interface 48 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 502.174381][ T455] usb 1-1: config 4 interface 48 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 502.185213][ T455] usb 1-1: config 4 interface 48 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 16 [ 502.198741][ T455] usb 1-1: too many endpoints for config 4 interface 119 altsetting 231: 151, using maximum allowed: 30 [ 502.199065][T24366] overlayfs: failed to clone upperpath [ 502.215929][ T455] usb 1-1: config 4 interface 119 altsetting 231 has an invalid descriptor for endpoint zero, skipping [ 502.227136][ T455] usb 1-1: config 4 interface 119 altsetting 231 has an invalid descriptor for endpoint zero, skipping [ 502.238620][ T455] usb 1-1: config 4 interface 119 altsetting 231 has a duplicate endpoint with address 0x3, skipping [ 502.249797][ T455] usb 1-1: config 4 interface 119 altsetting 231 has a duplicate endpoint with address 0xA, skipping [ 502.260918][ T455] usb 1-1: config 4 interface 119 altsetting 231 has 5 endpoint descriptors, different from the interface descriptor's value: 151 [ 502.274487][ T455] usb 1-1: config 4 interface 229 altsetting 164 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 502.285816][ T455] usb 1-1: config 4 interface 229 altsetting 164 has a duplicate endpoint with address 0xD, skipping [ 502.296892][ T455] usb 1-1: config 4 interface 229 altsetting 164 has a duplicate endpoint with address 0xA, skipping [ 502.308145][ T455] usb 1-1: config 4 interface 229 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 502.319403][ T455] usb 1-1: config 4 interface 229 altsetting 164 has a duplicate endpoint with address 0xD, skipping [ 502.330469][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 502.341344][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 502.352213][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 502.363079][ T455] usb 1-1: config 4 interface 213 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 502.374129][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 502.385016][ T455] usb 1-1: config 4 interface 213 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 502.396186][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 502.407138][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 502.418157][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 502.431427][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 502.443102][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 502.454072][ T455] usb 1-1: config 4 interface 213 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 502.465020][ T455] usb 1-1: config 4 interface 56 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 502.478249][ T455] usb 1-1: config 4 interface 48 has no altsetting 0 [ 502.485224][ T455] usb 1-1: config 4 interface 119 has no altsetting 0 [ 502.492676][ T455] usb 1-1: config 4 interface 229 has no altsetting 0 [ 502.499753][ T455] usb 1-1: config 4 interface 213 has no altsetting 0 [ 502.506794][ T455] usb 1-1: config 4 interface 56 has no altsetting 0 [ 502.515302][ T455] usb 1-1: New USB device found, idVendor=046d, idProduct=08d8, bcdDevice=54.a5 [ 502.524618][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.532857][ T455] usb 1-1: Product: ည [ 502.537277][ T455] usb 1-1: Manufacturer: ᙊꭣ⯡․掯∈誻쓐䘊أ悡᪠ᦄ䙌ขῡ薦鹲뾮㐇∬◖ꝅ㥵㢜≪ꎳῖⳚ렊퀓먟刖羴학묂젻겥簾邮韎펎䥞禌愷颋鱇骭剺綌잽挅﬎霪줘ꖴ鳠’ꋞ櫓㈉爛鹿鿖䵎ꋪ␦䷛㋗ര᤹ኂ럙暻Ѣ홵겮̟闚፟䴭᢯倯씌 [ 502.567709][ T455] usb 1-1: SerialNumber: syz [ 502.790429][T24315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.801364][T24315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.968803][T24373] loop0: detected capacity change from 0 to 7 [ 503.023779][ T60] blk_print_req_error: 65 callbacks suppressed [ 503.023800][ T60] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 503.039255][ T60] buffer_io_error: 65 callbacks suppressed [ 503.039268][ T60] Buffer I/O error on dev loop0, logical block 0, async page read [ 503.053013][T24373] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 503.062595][T24373] Buffer I/O error on dev loop0, logical block 0, async page read [ 503.070705][T24373] loop0: unable to read partition table [ 503.079819][T24373] loop_reread_partitions: partition scan of loop0 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 503.387305][ T455] usb 1-1: USB disconnect, device number 10 [ 503.509936][ T36] audit: type=1400 audit(2033555215.111:980): avc: denied { setattr } for pid=24426 comm="syz.0.7711" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 503.544851][T24429] netlink: 596 bytes leftover after parsing attributes in process `syz.8.7710'. [ 504.121428][T24435] binder: Binderfs stats mode cannot be changed during a remount [ 504.461631][ T455] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 504.623220][ T455] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 504.631630][ T455] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 504.642089][ T455] usb 10-1: config 220 has no interface number 2 [ 504.648536][ T455] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 504.661862][ T455] usb 10-1: config 220 interface 0 has no altsetting 0 [ 504.668849][ T455] usb 10-1: config 220 interface 76 has no altsetting 0 [ 504.675814][ T455] usb 10-1: config 220 interface 1 has no altsetting 0 [ 504.684245][ T455] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 504.693443][ T455] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.701565][ T455] usb 10-1: Product: syz [ 504.705824][ T455] usb 10-1: Manufacturer: syz [ 504.710645][ T455] usb 10-1: SerialNumber: syz [ 504.770818][T24454] overlayfs: missing 'lowerdir' [ 505.336696][T24482] overlayfs: failed to clone upperpath [ 505.342688][T24482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7729'. [ 505.691633][ T7247] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 505.853268][ T7247] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 505.862447][ T7247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.871355][ T7247] usb 1-1: config 0 descriptor?? [ 506.422419][T24510] fuse: Bad value for 'user_id' [ 506.427350][T24510] fuse: Bad value for 'user_id' [ 506.522429][ T7247] usb 1-1: Cannot set autoneg [ 506.527635][T24531] batadv_slave_1: entered promiscuous mode [ 506.533642][ T7247] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 506.551280][T24531] batadv_slave_1: left promiscuous mode [ 506.568563][T24543] futex_wake_op: syz.9.7751 tries to shift op by 144; fix this program [ 506.738624][T24568] @: renamed from vlan0 (while UP) [ 506.758423][T24570] netlink: 84 bytes leftover after parsing attributes in process `syz.8.7760'. [ 507.152738][ T36] audit: type=1400 audit(2033555218.514:982): avc: denied { map } for pid=24579 comm="syz.8.7763" path="socket:[103959]" dev="sockfs" ino=103959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 507.199643][ T36] audit: type=1400 audit(2033555218.514:981): avc: denied { map } for pid=24579 comm="syz.8.7763" path="socket:[103959]" dev="sockfs" ino=103959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 507.279620][ T65] usb 1-1: USB disconnect, device number 11 [ 507.301545][T24589] /dev/sr0: Can't lookup blockdev [ 507.307549][T24589] /dev/sr0: Can't lookup blockdev [ 507.337709][T24594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 507.337763][T24594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 507.555590][T24606] tipc: MTU too low for tipc bearer [ 507.584608][T24608] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7772'. [ 507.619500][T24613] netlink: 'syz.9.7773': attribute type 40 has an invalid length. [ 507.711165][T24623] overlayfs: missing 'lowerdir' [ 507.733001][T24625] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 507.768551][T24629] IPv6: syztnl0: Disabled Multicast RS [ 507.832926][ T36] audit: type=1400 audit(2033555219.159:983): avc: denied { setattr } for pid=24630 comm="syz.9.7779" path="socket:[104081]" dev="sockfs" ino=104081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 508.206979][T24644] kvm: kvm [24642]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 508.219198][T24644] kvm: kvm [24642]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 508.229001][ T36] audit: type=1400 audit(2033555219.524:984): avc: denied { map } for pid=24655 comm="syz.7.7787" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.229553][T24656] rust_binder: Error in use_page_slow: ESRCH [ 508.254826][ T36] audit: type=1400 audit(2033555219.524:985): avc: denied { execute } for pid=24655 comm="syz.7.7787" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 508.255981][T24656] rust_binder: use_range failure ESRCH [ 508.290907][T24656] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 508.296422][T24656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 508.304749][T24656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:450 [ 508.405467][T24677] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 508.422984][T24677] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 508.431058][T24677] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 508.491605][T24687] overlayfs: failed to clone upperpath [ 508.562175][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 508.568681][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 508.602256][T24696] netlink: 188 bytes leftover after parsing attributes in process `syz.7.7800'. [ 508.612458][T24696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24696 comm=syz.7.7800 [ 508.713026][T24687] netlink: 'syz.9.7797': attribute type 13 has an invalid length. [ 509.178902][ T36] audit: type=1400 audit(2033555220.412:986): avc: denied { lock } for pid=24706 comm="syz.8.7804" path="socket:[104885]" dev="sockfs" ino=104885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 509.229069][T24716] pim6reg1: entered promiscuous mode [ 509.234935][T24716] pim6reg1: entered allmulticast mode [ 510.090933][ T455] usb 10-1: selecting invalid altsetting 0 [ 510.096991][ T455] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 510.103576][ T455] usb 10-1: No valid video chain found. [ 510.186835][T24760] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1107 sclass=netlink_xfrm_socket pid=24760 comm=syz.9.7820 [ 510.771831][ T551] Bluetooth: hci1: command 0x1003 tx timeout [ 510.777934][ T552] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 511.110729][T24797] input: syz1 as /devices/virtual/input/input53 [ 511.370798][ T455] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 511.531126][ T455] usb 1-1: Invalid ep0 maxpacket: 64 [ 511.670210][ T455] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 511.830650][ T455] usb 1-1: Invalid ep0 maxpacket: 64 [ 511.836268][ T455] usb usb1-port1: attempt power cycle [ 511.858941][T24856] 9pnet_fd: Insufficient options for proto=fd [ 512.168803][T24898] 9pnet_fd: Insufficient options for proto=fd [ 512.204955][ T455] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 512.237383][ T455] usb 1-1: Invalid ep0 maxpacket: 64 [ 512.376147][ T455] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 512.398281][ T455] usb 1-1: Invalid ep0 maxpacket: 64 [ 512.403700][ T455] usb usb1-port1: unable to enumerate USB device [ 513.215972][T24953] netlink: 'syz.8.7885': attribute type 4 has an invalid length. [ 513.224334][T24953] netlink: 'syz.8.7885': attribute type 4 has an invalid length. [ 513.283255][T24967] netlink: 9 bytes leftover after parsing attributes in process `syz.8.7889'. [ 513.292671][T24967] gretap0: entered promiscuous mode [ 513.317894][T24967] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7889'. [ 513.326919][T24967] 0{X: renamed from gretap0 [ 513.332959][T24967] 0{X: left promiscuous mode [ 513.338054][T24967] 0{X: entered allmulticast mode [ 513.344291][T24967] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 513.367597][T24969] sit0: entered promiscuous mode [ 513.372957][T24969] netlink: 1 bytes leftover after parsing attributes in process `syz.9.7890'. [ 513.398779][T24976] /dev/loop0: Can't lookup blockdev [ 513.404551][T24976] overlay: ./file0 is not a directory [ 513.523864][T24994] overlayfs: failed to clone upperpath [ 513.972373][T25001] overlayfs: failed to clone upperpath [ 514.028020][T25013] /dev/loop0: Can't lookup blockdev [ 514.034065][T25013] netlink: 'syz.9.7906': attribute type 2 has an invalid length. [ 514.228282][T25042] netlink: 'syz.9.7917': attribute type 6 has an invalid length. [ 514.280126][ T36] audit: type=1400 audit(2033555225.171:987): avc: denied { relabelto } for pid=25051 comm="syz.8.7921" name="399" dev="tmpfs" ino=2212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 514.312556][ T36] audit: type=1400 audit(2033555225.217:988): avc: denied { write } for pid=22356 comm="syz-executor" name="399" dev="tmpfs" ino=2212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 514.338820][ T36] audit: type=1400 audit(2033555225.217:989): avc: denied { remove_name } for pid=22356 comm="syz-executor" name="file0" dev="tmpfs" ino=2217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 514.367560][ T36] audit: type=1400 audit(2033555225.217:990): avc: denied { rmdir } for pid=22356 comm="syz-executor" name="399" dev="tmpfs" ino=2212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 514.395222][ T36] audit: type=1326 audit(2033555225.264:991): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25055 comm="syz.8.7923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6b7f8eba9 code=0x0 [ 514.398657][T25065] rust_binder: Write failure EFAULT in pid:265 [ 514.910856][ T386] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 515.081987][ T386] usb 1-1: Using ep0 maxpacket: 16 [ 515.090233][ T386] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 515.099481][ T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.107527][ T386] usb 1-1: Product: syz [ 515.111717][ T386] usb 1-1: Manufacturer: syz [ 515.116347][ T386] usb 1-1: SerialNumber: syz [ 515.123740][ T386] r8152-cfgselector 1-1: Unknown version 0x0000 [ 515.130056][ T386] r8152-cfgselector 1-1: config 0 descriptor?? [ 515.252992][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7943'. [ 515.316124][ T36] audit: type=1400 audit(2033555226.143:992): avc: denied { write } for pid=25121 comm="syz.9.7947" path="socket:[106046]" dev="sockfs" ino=106046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 515.381458][T25131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=25131 comm=syz.9.7950 [ 515.406790][T25133] overlayfs: failed to clone upperpath [ 515.443717][T25141] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.452534][T25141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 515.571338][T25105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.580397][T25105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.594658][T25105] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 515.602953][T25105] rust_binder: Write failure EINVAL in pid:275 [ 515.748473][T25164] overlayfs: failed to clone upperpath [ 517.333874][T25176] 9pnet_fd: Insufficient options for proto=fd [ 517.363867][ T36] audit: type=1400 audit(2033555228.069:993): avc: denied { add_name } for pid=25182 comm="syz.9.7967" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 517.388592][ T36] audit: type=1400 audit(2033555228.069:994): avc: denied { create } for pid=25182 comm="syz.9.7967" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 517.408932][ T36] audit: type=1400 audit(2033555228.069:995): avc: denied { associate } for pid=25182 comm="syz.9.7967" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 517.430500][ T36] audit: type=1400 audit(2033555228.069:996): avc: denied { write open } for pid=25182 comm="syz.9.7967" path="/446/file0" dev="tmpfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 517.562164][T25191] overlayfs: failed to clone upperpath [ 517.869267][ T386] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 518.175963][T25211] 9pnet_fd: Insufficient options for proto=fd [ 518.206407][T25218] tipc: Enabling of bearer rejected, failed to enable media [ 518.832842][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7989'. [ 518.938924][T25268] No source specified [ 519.187082][T25298] 9p: Unknown access argument 00000000000000000000sX:n<|D-p: -22 [ 519.319858][T25303] netlink: 'syz.8.8013': attribute type 4 has an invalid length. [ 519.353756][ T46] tipc: Left network mode [ 519.361826][ T46] veth1_macvtap: left promiscuous mode [ 519.367342][ T46] veth0_vlan: left promiscuous mode [ 519.414310][T25301] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.421461][T25301] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.428827][T25301] bridge_slave_0: entered allmulticast mode [ 519.435179][T25301] bridge_slave_0: entered promiscuous mode [ 519.441602][T25301] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.448841][T25301] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.455925][T25301] bridge_slave_1: entered allmulticast mode [ 519.471730][T25301] bridge_slave_1: entered promiscuous mode [ 519.537715][T25301] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.544833][T25301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.552241][T25301] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.559326][T25301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.584530][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.593900][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.609679][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.613690][T25321] 9pnet_fd: Insufficient options for proto=fd [ 519.616807][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.632317][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.639424][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.660407][T25324] overlayfs: missing 'workdir' [ 519.667625][T25301] veth0_vlan: entered promiscuous mode [ 519.678196][T25324] overlayfs: missing 'workdir' [ 519.682359][T25301] veth1_macvtap: entered promiscuous mode [ 519.745821][T25333] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 336, limit: 1176, size: 18446744073709551401) [ 519.745849][T25333] rust_binder: Error while translating object. [ 519.758193][T25333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 519.764662][T25333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 520.090047][ T328] bridge_slave_1: left allmulticast mode [ 520.104823][ T328] bridge_slave_1: left promiscuous mode [ 520.111302][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.119044][ T328] bridge_slave_0: left allmulticast mode [ 520.125155][ T328] bridge_slave_0: left promiscuous mode [ 520.131039][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.228983][ T328] veth1_macvtap: left promiscuous mode [ 520.234767][ T328] veth0_vlan: left promiscuous mode [ 520.323808][T25359] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.330916][T25359] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.338083][T25359] bridge_slave_0: entered allmulticast mode [ 520.344570][T25359] bridge_slave_0: entered promiscuous mode [ 520.351646][T25359] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.358754][T25359] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.365957][T25359] bridge_slave_1: entered allmulticast mode [ 520.372281][T25359] bridge_slave_1: entered promiscuous mode [ 520.425128][T25359] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.432208][T25359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.441074][T25359] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.448289][T25359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.471276][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.478834][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.488855][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.496067][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.506118][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.513204][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.542853][T25359] veth0_vlan: entered promiscuous mode [ 520.554004][T25359] veth1_macvtap: entered promiscuous mode [ 520.615943][T25374] can0: slcan on ttyS3. [ 520.666187][T25374] can0 (unregistered): slcan off ttyS3. [ 520.689510][T25393] overlayfs: failed to clone upperpath [ 520.747922][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 520.747942][ T36] audit: type=1326 audit(2033555231.230:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.9.8038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0a4d8eba9 code=0x0 [ 520.777966][T25411] rust_binder: Error while translating object. [ 520.778017][T25411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 520.797989][T25411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:6 [ 521.105038][T25431] overlayfs: failed to clone upperpath [ 521.681963][T25444] xt_NFQUEUE: number of total queues is 0 [ 521.762285][T25461] fuse: Unknown parameter '' [ 521.830657][T25470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8049'. [ 521.855270][T25477] fuse: Bad value for 'fd' [ 522.194810][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8067'. [ 522.203939][T25523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8067'. [ 522.307935][T25530] can0: slcan on ttyS3. [ 522.376970][T25530] can0 (unregistered): slcan off ttyS3. [ 522.471768][T25554] syzkaller0: entered promiscuous mode [ 522.477384][T25554] syzkaller0: entered allmulticast mode [ 522.588066][T25580] binder: Bad value for 'max' [ 522.812329][T25613] netlink: 'syz.0.8092': attribute type 6 has an invalid length. [ 522.823043][T25614] exFAT-fs (rnullb0): invalid boot record signature [ 522.823056][T25597] rust_binder: Write failure EFAULT in pid:27 [ 522.830445][T25614] exFAT-fs (rnullb0): failed to read boot sector [ 522.843636][T25614] exFAT-fs (rnullb0): failed to recognize exfat type [ 522.903070][T25628] overlayfs: failed to clone upperpath [ 523.038946][T25650] rust_binder: 25650 RLIMIT_NICE not set [ 523.041441][T25649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 523.053053][ T435] rust_binder: 25648: removing orphan mapping 0:1160 [ 523.231677][ T65] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 523.394489][ T65] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 523.403652][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.412427][ T65] usb 5-1: config 0 descriptor?? [ 523.474303][T25678] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8116'. [ 523.484609][T25678] netlink: 128 bytes leftover after parsing attributes in process `syz.9.8116'. [ 523.507758][T25680] overlayfs: failed to clone upperpath [ 524.328533][T25715] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 524.709785][ T65] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 524.728337][ T65] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 524.738844][ T65] asix 5-1:0.0: probe with driver asix failed with error -71 [ 524.747146][ T65] usb 5-1: USB disconnect, device number 25 [ 525.190105][ T36] audit: type=1400 audit(2033555235.381:999): avc: denied { execute } for pid=25744 comm="syz.0.8139" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 525.263118][T25749] loop7: detected capacity change from 0 to 7 [ 525.270041][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.279227][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.287318][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.296671][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.304521][T21596] loop7: unable to read partition table [ 525.311476][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.320679][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.328701][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.337862][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.346220][T25749] loop7: unable to read partition table [ 525.352504][T25749] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 525.366664][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.375849][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.384002][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.393466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.402774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.412789][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.422039][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.430206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.439371][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.447501][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.456728][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 525.512730][ T36] audit: type=1400 audit(2033555235.689:1000): avc: denied { create } for pid=25763 comm="syz.8.8146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 525.536596][T25762] rust_binder: 42: no such ref 0 [ 525.564260][T25770] rust_binder: 44: no such ref 0 [ 525.579701][T25770] overlayfs: failed to resolve './file0': -2 [ 525.646567][T25768] overlayfs: failed to clone upperpath [ 525.926898][ T455] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 526.087649][ T455] usb 5-1: Using ep0 maxpacket: 8 [ 526.094100][ T455] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.102566][ T455] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 526.114129][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 526.125025][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 526.134955][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.144663][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 526.154392][ T455] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 526.164084][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 526.174605][ T455] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 526.186064][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 61515, setting to 64 [ 526.198489][ T455] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 526.207608][ T455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.215661][ T455] usb 5-1: Product: syz [ 526.219831][ T455] usb 5-1: Manufacturer: syz [ 526.224432][ T455] usb 5-1: SerialNumber: syz [ 526.229756][ T455] usb 5-1: config 0 descriptor?? [ 526.244242][T24414] udevd[24414]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 526.339249][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8157'. [ 526.383017][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8159'. [ 526.520082][T25810] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25810 comm=syz.9.8164 [ 526.553716][ T455] usb 5-1: USB disconnect, device number 26 [ 526.743267][T25851] netlink: 'syz.9.8179': attribute type 13 has an invalid length. [ 526.756558][T25851] 9pnet_fd: Insufficient options for proto=fd [ 526.773923][T25854] fuse: Bad value for 'fd' [ 526.844356][T25867] 9pnet_fd: Insufficient options for proto=fd [ 527.168063][T25877] fuseblk: Bad value for 'fd' [ 527.174068][T25877] veth0: entered promiscuous mode [ 527.185040][T25876] veth0: left promiscuous mode [ 527.445580][ T7247] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 527.607099][ T7247] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 527.616278][ T7247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.625107][ T7247] usb 5-1: config 0 descriptor?? [ 527.939204][T25909] overlayfs: failed to resolve './file1': -2 [ 528.059769][ T7247] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 528.069917][ T7247] asix 5-1:0.0: probe with driver asix failed with error -32 [ 528.558060][T25936] overlayfs: failed to resolve './file1': -2 [ 528.820058][ T435] usb 5-1: USB disconnect, device number 27 [ 528.850571][T25959] __vm_enough_memory: pid: 25959, comm: syz.0.8217, bytes: 18014402804453376 not enough memory for the allocation [ 528.895103][ T36] audit: type=1400 audit(2033555238.840:1001): avc: denied { map } for pid=25956 comm="syz.4.8216" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 529.241739][T25967] 9pnet_fd: Insufficient options for proto=fd [ 529.277644][T25971] netlink: 596 bytes leftover after parsing attributes in process `syz.9.8222'. [ 529.405896][T25982] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8225'. [ 529.517379][T25993] sit0: entered promiscuous mode [ 529.524364][T25993] netlink: 'syz.8.8230': attribute type 1 has an invalid length. [ 529.532378][T25993] netlink: 1 bytes leftover after parsing attributes in process `syz.8.8230'. [ 529.566779][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.575610][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.583690][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.592060][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.600530][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.610748][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.618944][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.627013][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.635326][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.643603][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.655932][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.664239][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.672715][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.681008][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.689352][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.697607][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.705859][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.714049][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.722163][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.730386][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.746292][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.756079][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.765170][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.792242][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.800718][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.809113][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.817487][T26001] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 529.820614][T26003] __vm_enough_memory: pid: 26003, comm: syz.0.8234, bytes: 18014402804453376 not enough memory for the allocation [ 529.827456][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.848546][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.858332][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.864765][T26005] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 529.866970][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.867584][T26006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.875777][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.897692][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.905950][T25996] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 529.932619][T26016] KVM: debugfs: duplicate directory 26016-6 [ 530.037027][T26018] rust_binder: got new transaction with bad transaction stack [ 530.037052][T26018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 530.149431][ T36] audit: type=1400 audit(2033555240.019:1002): avc: denied { read write } for pid=23582 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.183138][ T36] audit: type=1400 audit(2033555240.019:1003): avc: denied { open } for pid=23582 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.207589][ T36] audit: type=1400 audit(2033555240.019:1004): avc: denied { ioctl } for pid=23582 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.233278][ T36] audit: type=1400 audit(2033555240.037:1005): avc: denied { read } for pid=26027 comm="syz.0.8243" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.256103][ T36] audit: type=1400 audit(2033555240.037:1006): avc: denied { open } for pid=26027 comm="syz.0.8243" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.280273][ T36] audit: type=1400 audit(2033555240.037:1007): avc: denied { read } for pid=26027 comm="syz.0.8243" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 530.303342][ T36] audit: type=1400 audit(2033555240.037:1008): avc: denied { open } for pid=26027 comm="syz.0.8243" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 530.326932][ T36] audit: type=1400 audit(2033555240.037:1009): avc: denied { ioctl } for pid=26027 comm="syz.0.8243" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 530.351700][ T36] audit: type=1400 audit(2033555240.056:1010): avc: denied { create } for pid=26027 comm="syz.0.8243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.440219][ T455] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 530.601868][ T455] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.612927][ T455] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 530.624447][ T455] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.633608][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.641746][ T455] usb 1-1: Product: syz [ 530.645979][ T455] usb 1-1: Manufacturer: syz [ 530.650689][ T455] usb 1-1: SerialNumber: syz [ 530.705212][T26035] loop4: detected capacity change from 0 to 8388608 [ 531.167508][ T7247] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 531.338623][ T7247] usb 5-1: Using ep0 maxpacket: 32 [ 531.355315][ T7247] usb 5-1: unable to get BOS descriptor or descriptor too short [ 531.363832][ T7247] usb 5-1: config 6 has an invalid interface number: 254 but max is 0 [ 531.372146][ T7247] usb 5-1: config 6 has no interface number 0 [ 531.378251][ T7247] usb 5-1: config 6 interface 254 has no altsetting 0 [ 531.386762][ T7247] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00 [ 531.396135][ T7247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.404207][ T7247] usb 5-1: Product: syz [ 531.408550][ T7247] usb 5-1: Manufacturer: syz [ 531.413184][ T7247] usb 5-1: SerialNumber: syz [ 531.652863][T26086] 9pnet_fd: Insufficient options for proto=fd [ 531.788455][ T455] cdc_ncm 1-1:1.0: bind() failure [ 531.800141][ T455] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 531.808487][ T455] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 531.820023][ T455] usb 1-1: USB disconnect, device number 18 [ 532.397373][T26096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8267'. [ 532.422743][T26100] exFAT-fs (rnullb0): invalid boot record signature [ 532.429634][T26100] exFAT-fs (rnullb0): failed to read boot sector [ 532.435986][T26100] exFAT-fs (rnullb0): failed to recognize exfat type [ 533.492798][T26142] overlayfs: missing 'lowerdir' [ 533.543725][T26149] netlink: 188 bytes leftover after parsing attributes in process `syz.9.8285'. [ 533.676931][T26160] overlayfs: failed to clone upperpath [ 534.107808][ T7247] ftdi_sio 5-1:6.254: FTDI USB Serial Device converter detected [ 534.118782][ T7247] usb 5-1: Detected FT2232HP [ 534.123723][ T7247] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 534.130854][ T7247] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 534.138628][ T7247] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 534.148372][ T7247] usb 5-1: USB disconnect, device number 28 [ 534.159282][ T7247] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 534.168904][ T7247] ftdi_sio 5-1:6.254: device disconnected [ 534.323721][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 534.323740][ T36] audit: type=1400 audit(2033555243.927:1075): avc: denied { setopt } for pid=26169 comm="syz.9.8293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.367119][ T36] audit: type=1400 audit(2033555243.927:1076): avc: denied { bind } for pid=26169 comm="syz.9.8293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.390215][ T36] audit: type=1400 audit(2033555243.927:1077): avc: denied { write } for pid=26169 comm="syz.9.8293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.410019][ T36] audit: type=1326 audit(2033555243.946:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26139 comm="syz.0.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c98eba9 code=0x7fc00000 [ 534.433735][ T36] audit: type=1326 audit(2033555243.946:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26139 comm="syz.0.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e0c98eba9 code=0x7fc00000 [ 534.434027][T26177] overlayfs: missing 'lowerdir' [ 534.457510][ T36] audit: type=1326 audit(2033555243.946:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26139 comm="syz.0.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c98eba9 code=0x7fc00000 [ 534.486038][ T36] audit: type=1326 audit(2033555243.946:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26139 comm="syz.0.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c98eba9 code=0x7fc00000 [ 534.514595][ T36] audit: type=1326 audit(2033555243.946:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26139 comm="syz.0.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c98eba9 code=0x7fc00000 [ 534.520840][T26192] audit: audit_backlog=65 > audit_backlog_limit=64 [ 534.538584][ T36] audit: type=1326 audit(2033555243.946:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26139 comm="syz.0.8281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c98eba9 code=0x7fc00000 [ 534.596783][T26199] overlayfs: failed to clone upperpath [ 535.055034][T26209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 535.055063][T26209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:84 [ 535.160868][T26216] overlayfs: missing 'lowerdir' [ 535.196084][T26220] <_m]L: renamed from lo (while UP) [ 535.721439][T26246] netlink: 'syz.0.8321': attribute type 1 has an invalid length. [ 535.805126][T26249] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8322'. [ 536.108674][ T435] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 536.279788][ T435] usb 1-1: Using ep0 maxpacket: 16 [ 536.286164][ T435] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.296417][ T435] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.308343][ T435] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.317574][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.325663][ T435] usb 1-1: Product: syz [ 536.329889][ T435] usb 1-1: Manufacturer: syz [ 536.334535][ T435] usb 1-1: SerialNumber: syz [ 536.558075][ T435] usb 1-1: 0:2 : does not exist [ 536.574894][ T435] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 536.595486][ T435] usb 1-1: USB disconnect, device number 19 [ 536.980281][T26302] rust_binder: Write failure EFAULT in pid:107 [ 537.389178][T26330] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8349'. [ 537.404465][T26330] netlink: 31 bytes leftover after parsing attributes in process `syz.9.8349'. [ 537.413469][T26330] netlink: 'syz.9.8349': attribute type 3 has an invalid length. [ 537.421258][T26330] netlink: 'syz.9.8349': attribute type 2 has an invalid length. [ 537.429023][T26330] netlink: 31 bytes leftover after parsing attributes in process `syz.9.8349'. [ 537.438877][T26330] netlink: 'syz.9.8349': attribute type 16 has an invalid length. [ 537.446795][T26330] netlink: 'syz.9.8349': attribute type 25 has an invalid length. [ 537.454723][T26330] netlink: 56094 bytes leftover after parsing attributes in process `syz.9.8349'. [ 537.477686][ T435] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 537.488496][ T455] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 537.638848][ T435] usb 1-1: Using ep0 maxpacket: 32 [ 537.645224][ T435] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 537.653690][ T435] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 537.662825][ T435] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 537.671948][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 537.683486][ T435] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 537.693511][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.703608][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.714851][ T435] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 537.724690][ T455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.734508][ T435] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 537.747515][ T455] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.760447][ T435] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 537.769656][ T455] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.778750][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.787213][ T455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.795643][ T435] usb 1-1: config 0 descriptor?? [ 537.801417][ T455] usb 5-1: config 0 descriptor?? [ 537.809454][T26327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 537.824176][ T435] usblp0: Disabling reads from problematic bidirectional printer [ 537.899528][T26352] fuse: Bad value for 'fd' [ 537.989584][T26361] tipc: Enabling of bearer rejected, failed to enable media [ 538.059205][T26374] overlayfs: failed to clone upperpath [ 538.167173][T26381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8364'. [ 538.236865][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.250019][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.265346][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.274018][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.283728][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.294396][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.304241][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.314005][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.324835][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.338452][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.346043][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.353513][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.361058][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.368510][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.376128][ T455] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 538.383792][ T455] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 538.397509][ T455] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 538.526446][ T7247] usb 5-1: USB disconnect, device number 29 [ 538.640641][T26409] /dev/loop0: Can't lookup blockdev [ 539.121973][T26415] rust_binder: Error in use_page_slow: ESRCH [ 539.121999][T26415] rust_binder: use_range failure ESRCH [ 539.122204][T26416] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 539.128267][T26415] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 539.133787][T26416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 539.146651][T26415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 539.149877][T26416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:123 [ 539.159263][T26415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:123 [ 539.244277][T26428] overlayfs: missing 'lowerdir' [ 539.276558][T26429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8375'. [ 539.285661][T26429] tipc: Invalid UDP bearer configuration [ 539.285690][T26429] tipc: Enabling of bearer rejected, failed to enable media [ 539.504152][T26444] fuse: Unknown parameter '18446744073709551615' [ 539.569392][T26452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 539.580143][T26452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 539.671091][T26473] netlink: 'syz.9.8394': attribute type 1 has an invalid length. [ 539.679011][T26473] netlink: 1 bytes leftover after parsing attributes in process `syz.9.8394'. [ 540.117657][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 540.117678][ T36] audit: type=1400 audit(2033555249.331:1202): avc: denied { connect } for pid=26478 comm="syz.4.8397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.144598][ T36] audit: type=1400 audit(2033555249.340:1203): avc: denied { read } for pid=26478 comm="syz.4.8397" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 540.167890][ T36] audit: type=1400 audit(2033555249.340:1204): avc: denied { open } for pid=26478 comm="syz.4.8397" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 540.191823][ T36] audit: type=1400 audit(2033555249.340:1205): avc: denied { ioctl } for pid=26478 comm="syz.4.8397" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 540.357593][ T36] audit: type=1400 audit(2033555249.565:1206): avc: denied { watch watch_reads } for pid=26496 comm="syz.4.8402" path="/46" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 540.395398][ T435] usblp 1-1:0.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 540.407778][ T435] usb 1-1: USB disconnect, device number 20 [ 540.426489][ T435] usblp0: removed [ 540.452412][ T36] audit: type=1400 audit(2033555249.658:1207): avc: denied { mount } for pid=26508 comm="syz.8.8407" name="/" dev="pstore" ino=1430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 540.506762][T26515] overlayfs: failed to clone upperpath [ 540.517361][ T36] audit: type=1400 audit(2033555249.714:1208): avc: denied { unmount } for pid=23582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 540.555369][T26518] cgroup2: Unknown parameter 'ft' [ 540.562141][ T36] audit: type=1400 audit(2033555249.714:1209): avc: denied { unmount } for pid=23582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 540.583533][T26518] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8411'. [ 540.594183][ T36] audit: type=1400 audit(2033555249.771:1210): avc: denied { nlmsg_read } for pid=26516 comm="syz.0.8411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 540.616028][T26519] netlink: 'syz.8.8412': attribute type 1 has an invalid length. [ 540.623944][T26519] netlink: 1 bytes leftover after parsing attributes in process `syz.8.8412'. [ 540.634923][ T36] audit: type=1400 audit(2033555249.827:1211): avc: denied { create } for pid=26517 comm="syz.8.8412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 540.662465][T26519] overlayfs: failed to resolve './file1/file0': -2 [ 540.761793][T26529] rust_binder: 26522 RLIMIT_NICE not set [ 540.762712][T26529] 9pnet_fd: Insufficient options for proto=fd [ 540.884832][T26545] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8421'. [ 540.983077][T26550] overlayfs: missing 'workdir' [ 541.079391][T26543] netlink: 328 bytes leftover after parsing attributes in process `syz.8.8420'. [ 541.149505][ T7247] usb 10-1: USB disconnect, device number 43 [ 541.268776][T26564] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.275975][T26564] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.283445][T26564] bridge_slave_0: entered allmulticast mode [ 541.289929][T26564] bridge_slave_0: entered promiscuous mode [ 541.296619][T26564] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.303713][T26564] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.310864][T26564] bridge_slave_1: entered allmulticast mode [ 541.317438][T26564] bridge_slave_1: entered promiscuous mode [ 541.344718][ T46] bridge_slave_1: left allmulticast mode [ 541.350537][ T46] bridge_slave_1: left promiscuous mode [ 541.356217][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.374291][ T46] bridge_slave_0: left allmulticast mode [ 541.380182][ T46] bridge_slave_0: left promiscuous mode [ 541.386338][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.429586][T26573] rust_binder: Write failure EINVAL in pid:154 [ 541.574780][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.588085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.604650][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.611765][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.645411][T26564] veth0_vlan: entered promiscuous mode [ 541.666805][T26564] veth1_macvtap: entered promiscuous mode [ 541.708007][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 542.113518][T26613] rust_binder: 466: no such ref 3 [ 542.211460][T26635] overlayfs: failed to resolve './file1': -2 [ 542.295362][T26641] /dev/rnullb0: Can't open blockdev [ 542.472387][ T386] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 542.504135][T26651] syzkaller0: entered promiscuous mode [ 542.509748][T26651] syzkaller0: entered allmulticast mode [ 542.594393][T26653] binder: Binderfs stats mode cannot be changed during a remount [ 542.644670][ T386] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 542.653103][ T386] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 542.664727][ T386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 542.675582][T26656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 542.675803][T26656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 542.675953][ T386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 542.706092][ T386] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.719089][ T386] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.728152][ T386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.737126][ T386] usb 1-1: config 0 descriptor?? [ 542.742447][T26635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 543.181575][ T386] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 543.194168][ T386] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 543.206040][ T386] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 543.424178][T26669] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.431392][T26669] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.438683][T26669] bridge_slave_0: entered allmulticast mode [ 543.445162][T26669] bridge_slave_0: entered promiscuous mode [ 543.454918][T26669] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.462070][T26669] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.462745][ T455] usb 1-1: USB disconnect, device number 21 [ 543.469227][T26669] bridge_slave_1: entered allmulticast mode [ 543.482274][T26669] bridge_slave_1: entered promiscuous mode [ 543.507172][ T329] bridge_slave_1: left allmulticast mode [ 543.512895][ T329] bridge_slave_1: left promiscuous mode [ 543.518530][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.526570][ T329] bridge_slave_0: left allmulticast mode [ 543.532387][ T329] bridge_slave_0: left promiscuous mode [ 543.538007][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.658321][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.665445][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.674726][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.682000][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.694229][ T329] veth1_macvtap: left promiscuous mode [ 543.699785][ T329] veth0_vlan: left promiscuous mode [ 543.765994][T26669] veth0_vlan: entered promiscuous mode [ 543.777340][T26669] veth1_macvtap: entered promiscuous mode [ 543.884172][ T552] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 543.884274][ T551] Bluetooth: hci0: command 0x1003 tx timeout [ 543.947017][T26694] /dev/rnullb0: Can't open blockdev [ 543.978077][T26696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 543.978112][T26696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 544.095564][T26707] loop7: detected capacity change from 0 to 16384 [ 544.098388][T26705] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 544.111959][T26705] rust_binder: Error while translating object. [ 544.124308][T26705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 544.131010][T26705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 544.276852][T26711] rust_binder: Write failure EFAULT in pid:189 [ 544.301221][ T7247] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 544.301345][T26709] loop7: detected capacity change from 16384 to 0 [ 544.310472][T26713] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 544.368775][T26718] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 544.385060][T26721] netlink: 'syz.8.8470': attribute type 4 has an invalid length. [ 544.473986][ T7247] usb 1-1: unable to get BOS descriptor or descriptor too short [ 544.480054][T26728] loop4: detected capacity change from 0 to 8388608 [ 544.482384][ T7247] usb 1-1: not running at top speed; connect to a high speed hub [ 544.499156][ T7247] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 544.507696][ T7247] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 544.531840][ T7247] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 544.552678][ T7247] usb 1-1: config 129 has no interface number 0 [ 544.569282][ T7247] usb 1-1: config 129 has no interface number 1 [ 544.576009][ T7247] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 544.589602][ T7247] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 544.618022][ T7247] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 544.647856][ T7247] usb 1-1: config 129 interface 135 has no altsetting 0 [ 544.657036][ T7247] usb 1-1: config 129 interface 5 has no altsetting 0 [ 544.669190][ T7247] usb 1-1: string descriptor 0 read error: -22 [ 544.675848][ T7247] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 544.694678][ T7247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.707426][ T7247] usb 1-1: MIDIStreaming interface descriptor not found [ 544.924983][ T7247] usb 1-1: USB disconnect, device number 22 [ 544.995874][T14060] Bluetooth: hci0: Frame reassembly failed (-84) [ 545.114013][ T455] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 545.253228][ T455] usb 10-1: device descriptor read/64, error -71 [ 545.325277][T26752] pim6reg1: entered promiscuous mode [ 545.330704][T26752] pim6reg1: entered allmulticast mode [ 545.427895][T26758] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8485'. [ 545.509793][ T455] usb 10-1: device descriptor read/64, error -71 [ 545.531823][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 545.531842][ T36] audit: type=1400 audit(2033555254.408:1253): avc: denied { create } for pid=26762 comm="syz.4.8487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 545.561285][T26766] FAULT_INJECTION: forcing a failure. [ 545.561285][T26766] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 545.574776][T26766] CPU: 1 UID: 0 PID: 26766 Comm: syz.0.8488 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 545.574802][T26766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.574813][T26766] Call Trace: [ 545.574819][T26766] [ 545.574826][T26766] __dump_stack+0x21/0x30 [ 545.574853][T26766] dump_stack_lvl+0x10c/0x190 [ 545.574874][T26766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 545.574897][T26766] dump_stack+0x19/0x20 [ 545.574917][T26766] should_fail_ex+0x3d9/0x530 [ 545.574934][T26766] should_fail+0xf/0x20 [ 545.574947][T26766] should_fail_usercopy+0x1e/0x30 [ 545.574964][T26766] strncpy_from_user+0x28/0x270 [ 545.574978][T26766] ? getname_flags+0xc6/0x710 [ 545.574995][T26766] getname_flags+0x102/0x710 [ 545.575010][T26766] __x64_sys_symlink+0x61/0x90 [ 545.575033][T26766] x64_sys_call+0x28d8/0x2ee0 [ 545.575064][T26766] do_syscall_64+0x58/0xf0 [ 545.575098][T26766] ? clear_bhb_loop+0x50/0xa0 [ 545.575121][T26766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 545.575141][T26766] RIP: 0033:0x7f6e0c98eba9 [ 545.575155][T26766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.575168][T26766] RSP: 002b:00007f6e0d76a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 545.575186][T26766] RAX: ffffffffffffffda RBX: 00007f6e0cbd5fa0 RCX: 00007f6e0c98eba9 [ 545.575198][T26766] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 00002000000001c0 [ 545.575246][T26766] RBP: 00007f6e0d76a090 R08: 0000000000000000 R09: 0000000000000000 [ 545.575256][T26766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.575266][T26766] R13: 00007f6e0cbd6038 R14: 00007f6e0cbd5fa0 R15: 00007ffe014cf638 [ 545.575280][T26766] [ 545.894789][ T455] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 546.012450][ T435] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 546.033982][ T455] usb 10-1: device descriptor read/64, error -71 [ 546.174095][ T435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.186699][ T435] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.195988][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.204085][ T435] usb 1-1: Product: syz [ 546.208417][ T435] usb 1-1: Manufacturer: syz [ 546.213063][ T435] usb 1-1: SerialNumber: syz [ 546.290490][ T455] usb 10-1: device descriptor read/64, error -71 [ 546.379103][ T36] audit: type=1400 audit(2033555255.194:1254): avc: denied { ioctl } for pid=26770 comm="syz.4.8490" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 546.408301][ T455] usb usb10-port1: attempt power cycle [ 546.469210][ T36] audit: type=1400 audit(2033555255.278:1255): avc: denied { unmount } for pid=25359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 546.545981][T26783] overlayfs: missing 'lowerdir' [ 546.647944][ T435] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 546.654053][ T435] cdc_ncm 1-1:1.0: bind() failure [ 546.660192][ T435] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 546.667052][ T435] cdc_ncm 1-1:1.1: bind() failure [ 546.771781][ T455] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 546.794387][ T455] usb 10-1: device descriptor read/8, error -71 [ 546.825263][ T339] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 546.933339][ T455] usb 10-1: device descriptor read/8, error -71 [ 546.986959][ T339] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 546.995301][ T339] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 547.004240][ T339] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 547.014634][ T339] usb 5-1: config 220 has no interface number 2 [ 547.021040][ T339] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 547.034376][ T339] usb 5-1: config 220 interface 0 has no altsetting 0 [ 547.041274][ T339] usb 5-1: config 220 interface 76 has no altsetting 0 [ 547.048152][ T339] usb 5-1: config 220 interface 1 has no altsetting 0 [ 547.057027][ T339] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 547.066196][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.074240][ T339] usb 5-1: Product: syz [ 547.078424][ T339] usb 5-1: Manufacturer: syz [ 547.083198][ T339] usb 5-1: SerialNumber: syz [ 547.135521][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 547.135691][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 547.188920][ T455] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 547.211289][ T455] usb 10-1: device descriptor read/8, error -71 [ 547.307346][ T339] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 547.313972][ T339] usb 5-1: No valid video chain found. [ 547.319658][ T339] usb 5-1: selecting invalid altsetting 0 [ 547.328174][ T339] usb 5-1: USB disconnect, device number 30 [ 547.350559][ T455] usb 10-1: device descriptor read/8, error -71 [ 547.404265][ T7247] usb 1-1: USB disconnect, device number 23 [ 547.418205][ T36] audit: type=1400 audit(2033555256.166:1256): avc: denied { audit_write } for pid=26788 comm="syz.0.8495" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 547.442868][ T36] audit: type=1400 audit(2033555256.185:1257): avc: denied { unmount } for pid=23582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 547.467025][ T455] usb usb10-port1: unable to enumerate USB device [ 547.565775][T26791] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8496'. [ 547.855641][T26799] rust_binder: Write failure EFAULT in pid:240 [ 547.873494][ T339] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 548.023110][ T455] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 548.045588][ T339] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.057151][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 548.073112][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 548.085900][ T339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.099659][ T339] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.109173][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.111404][T26802] rust_binder: Write failure EINVAL in pid:243 [ 548.121207][ T339] usb 1-1: config 0 descriptor?? [ 548.195716][ T455] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 548.210976][ T455] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 548.220138][ T455] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.228408][ T455] usb 9-1: Product: syz [ 548.232917][ T455] usb 9-1: Manufacturer: syz [ 548.237715][ T455] usb 9-1: SerialNumber: syz [ 548.248151][ T455] usb 9-1: config 0 descriptor?? [ 548.257006][ T455] usb 9-1: Waiting for MOTU Microbook II to boot up... [ 548.264203][ T455] usb 9-1: failed setting the sample rate for Motu MicroBook II: -22 [ 548.272872][ T455] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 548.481412][ T7247] usb 9-1: USB disconnect, device number 12 [ 548.562767][ T339] plantronics 0003:047F:FFFF.0026: ignoring exceeding usage max [ 548.573478][ T339] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 548.582662][ T339] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 548.688611][T26821] kvm: pic: non byte read [ 548.693166][T26821] kvm: pic: non byte read [ 548.697939][T26821] kvm: pic: single mode not supported [ 548.697951][T26821] kvm: pic: level sensitive irq not supported [ 548.703383][T26821] kvm: pic: non byte read [ 548.714765][T26821] kvm: pic: single mode not supported [ 548.714776][T26821] kvm: pic: level sensitive irq not supported [ 548.720331][T26821] kvm: pic: non byte read [ 548.731084][T26821] kvm: pic: non byte read [ 548.735568][T26821] kvm: pic: level sensitive irq not supported [ 548.735612][T26821] kvm: pic: non byte read [ 548.746617][T26821] kvm: pic: level sensitive irq not supported [ 548.746673][T26821] kvm: pic: non byte read [ 548.746702][T26824] /dev/rnull0: Can't lookup blockdev [ 548.892109][T26825] netlink: 'syz.0.8497': attribute type 4 has an invalid length. [ 548.900644][T26825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.909310][T26825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.309687][T26837] binder: Unknown parameter 'binder' [ 549.309687][ T36] audit: type=1400 audit(2033555257.933:1258): avc: denied { mounton } for pid=26836 comm="syz.9.8509" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.402825][ T7247] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 549.564930][ T7247] usb 9-1: config index 0 descriptor too short (expected 2075, got 27) [ 549.573321][ T7247] usb 9-1: config 0 has an invalid interface number: 200 but max is 0 [ 549.582107][ T7247] usb 9-1: config 0 has no interface number 0 [ 549.588314][ T7247] usb 9-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 549.598240][ T7247] usb 9-1: config 0 interface 200 has no altsetting 0 [ 549.606518][ T455] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 549.606651][ T7247] usb 9-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 549.623340][ T7247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.631402][ T7247] usb 9-1: Product: syz [ 549.635618][ T7247] usb 9-1: Manufacturer: syz [ 549.640290][ T7247] usb 9-1: SerialNumber: syz [ 549.646464][ T7247] usb 9-1: config 0 descriptor?? [ 549.766424][ T455] usb 10-1: Using ep0 maxpacket: 32 [ 549.780923][ T455] usb 10-1: unable to get BOS descriptor or descriptor too short [ 549.791815][ T455] usb 10-1: config 14 has an invalid interface number: 120 but max is 0 [ 549.800548][ T455] usb 10-1: config 14 has no interface number 0 [ 549.806881][ T455] usb 10-1: config 14 interface 120 has no altsetting 0 [ 549.815695][ T455] usb 10-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 549.830621][ T455] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.838770][ T455] usb 10-1: Product: syz [ 549.843215][ T455] usb 10-1: Manufacturer: syz [ 549.848040][ T455] usb 10-1: SerialNumber: syz [ 549.874220][ T7247] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.200/input/input55 [ 549.887857][ T36] audit: type=1400 audit(2033555258.475:1259): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=1019 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.890679][ T7247] usb 9-1: USB disconnect, device number 13 [ 549.915553][ T36] audit: type=1400 audit(2033555258.475:1260): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1019 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.971172][T26855] rust_binder: Error while translating object. [ 549.971201][T26855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 549.977478][T26855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:263 [ 550.074149][ T455] ftdi_sio 10-1:14.120: FTDI USB Serial Device converter detected [ 550.091569][ T455] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 550.099807][ T455] usb 10-1: USB disconnect, device number 48 [ 550.106670][ T455] ftdi_sio 10-1:14.120: device disconnected [ 550.509144][T26860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:503 [ 550.509522][T26860] rust_binder: Read failure Err(EAGAIN) in pid:503 [ 550.518962][T26860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:503 [ 550.543096][ T36] audit: type=1400 audit(2033555259.083:1261): avc: denied { mount } for pid=26861 comm="syz.0.8517" name="/" dev="ramfs" ino=115205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 550.569362][T26866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 550.575668][T26866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 550.644509][T26869] netlink: 'syz.0.8520': attribute type 4 has an invalid length. [ 550.671451][T26869] netlink: 'syz.0.8520': attribute type 4 has an invalid length. [ 550.683612][T26876] can0: slcan on ttyS3. [ 550.691325][ T36] audit: type=1400 audit(2033555259.223:1262): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 550.771894][T26876] can0 (unregistered): slcan off ttyS3. [ 550.793576][ T435] usb 1-1: USB disconnect, device number 24 [ 550.834386][T26889] rust_binder: Write failure EFAULT in pid:266 [ 550.906939][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 550.906959][ T36] audit: type=1400 audit(2033555259.429:1278): avc: denied { remove_name } for pid=26897 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=13027 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.943102][ T36] audit: type=1400 audit(2033555259.438:1279): avc: denied { unlink } for pid=26897 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=13027 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 550.953660][ T7247] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 551.114019][ T386] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 551.136646][ T7247] usb 10-1: config index 0 descriptor too short (expected 19492, got 36) [ 551.145272][ T7247] usb 10-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 551.154268][ T7247] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 551.163647][ T7247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.174994][ T7247] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.185200][ T7247] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.198588][ T7247] usb 10-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 551.208153][ T7247] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.217617][ T7247] usb 10-1: config 0 descriptor?? [ 551.263754][ T386] usb 5-1: device descriptor read/64, error -71 [ 551.376569][T26925] 9pnet_fd: Insufficient options for proto=fd [ 551.432689][ T36] audit: type=1400 audit(2033555259.915:1280): avc: denied { load_policy } for pid=26929 comm="syz.0.8533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 551.449895][ T7247] usbhid 10-1:0.0: can't add hid device: -71 [ 551.453251][T26932] rust_binder: Write failure EFAULT in pid:46 [ 551.464315][ T7247] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 551.466012][T26930] SELinux: ebitmap: truncated map [ 551.475378][ T7247] usb 10-1: USB disconnect, device number 49 [ 551.493351][T26930] SELinux: failed to load policy [ 551.508311][ T36] audit: type=1400 audit(2033555259.981:1281): avc: denied { write } for pid=26935 comm="syz.8.8535" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.520437][ T386] usb 5-1: device descriptor read/64, error -71 [ 551.546523][T26938] overlayfs: conflicting lowerdir path [ 551.671080][T26947] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8540'. [ 551.680600][ T36] audit: type=1400 audit(2033555260.149:1282): avc: denied { ioctl } for pid=26946 comm="syz.0.8540" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 551.787807][ T386] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 551.841304][ T455] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 551.927076][ T386] usb 5-1: device descriptor read/64, error -71 [ 551.980325][ T455] usb 9-1: device descriptor read/64, error -71 [ 552.012489][ T36] audit: type=1400 audit(2033555260.467:1283): avc: denied { setopt } for pid=26958 comm="syz.9.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 552.032117][ T36] audit: type=1326 audit(2033555260.476:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26958 comm="syz.9.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ac58eba9 code=0x7ffc0000 [ 552.055653][ T36] audit: type=1326 audit(2033555260.476:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26958 comm="syz.9.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd9ac58eba9 code=0x7ffc0000 [ 552.079101][ T36] audit: type=1326 audit(2033555260.504:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26958 comm="syz.9.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ac58eba9 code=0x7ffc0000 [ 552.104483][ T36] audit: type=1326 audit(2033555260.504:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26958 comm="syz.9.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ac58eba9 code=0x7ffc0000 [ 552.204961][ T386] usb 5-1: device descriptor read/64, error -71 [ 552.216635][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 552.258405][ T455] usb 9-1: device descriptor read/64, error -71 [ 552.322701][ T386] usb usb5-port1: attempt power cycle [ 552.515096][ T455] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 552.654180][ T455] usb 9-1: device descriptor read/64, error -71 [ 552.686226][ T386] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 552.708900][ T386] usb 5-1: device descriptor read/8, error -71 [ 552.847888][ T386] usb 5-1: device descriptor read/8, error -71 [ 552.910817][ T455] usb 9-1: device descriptor read/64, error -71 [ 553.028541][ T455] usb usb9-port1: attempt power cycle [ 553.103360][ T386] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 553.125946][ T386] usb 5-1: device descriptor read/8, error -71 [ 553.265001][ T386] usb 5-1: device descriptor read/8, error -71 [ 553.381614][ T386] usb usb5-port1: unable to enumerate USB device [ 553.392129][ T455] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 553.414517][ T455] usb 9-1: device descriptor read/8, error -71 [ 553.553796][ T455] usb 9-1: device descriptor read/8, error -71 [ 553.809225][ T455] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 553.831655][ T455] usb 9-1: device descriptor read/8, error -71 [ 553.970726][ T455] usb 9-1: device descriptor read/8, error -71 [ 554.087465][ T455] usb usb9-port1: unable to enumerate USB device [ 554.174679][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8547'. [ 554.408179][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 554.408202][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 554.475782][T26973] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 554.504390][ T7247] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 554.664843][ T7247] usb 5-1: Using ep0 maxpacket: 8 [ 554.671243][ T7247] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 554.681876][ T7247] usb 5-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0 [ 554.691001][ T7247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.700930][ T7247] ftdi_sio 5-1:254.0: Ignoring interface reserved for JTAG [ 554.913003][T26978] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 554.919781][ T7247] usb 5-1: USB disconnect, device number 35 [ 554.920236][T26978] rust_binder: 55: no such ref 1 [ 554.952226][T26980] __vm_enough_memory: pid: 26980, comm: syz.8.8552, bytes: 21200052158464 not enough memory for the allocation [ 555.070179][T26988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8554'. [ 555.121439][T26992] fuseblk: Unknown parameter 'f^5)@.U" [ 555.121439][T26992] XhP5ҕ}9ڇOd_|FA?sQىk?МqCs' [ 555.147518][T26994] rust_binder: 64: no such ref 3 [ 555.153162][T26994] rust_binder: Write failure EFAULT in pid:64 [ 555.383085][T27017] rust_binder: Error while translating object. [ 555.389254][T27017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 555.395480][T27017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56 [ 555.420988][T27019] fuse: Unknown parameter './file0' [ 555.516473][T27033] rust_binder: Error in use_page_slow: ESRCH [ 555.516494][T27033] rust_binder: use_range failure ESRCH [ 555.523294][T27033] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 555.528817][T27033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 555.537028][T27033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:283 [ 555.702251][ T455] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 555.745301][T27047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.753983][T27047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.763141][T27047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.771728][T27047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.780550][T27047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.790124][T27047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.874608][ T455] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 555.884249][ T455] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.895484][ T455] usb 10-1: config 0 descriptor?? [ 555.991134][T26809] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 556.029970][T27057] loop7: detected capacity change from 0 to 16384 [ 556.037482][T27059] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 556.151508][T26809] usb 5-1: Using ep0 maxpacket: 32 [ 556.157917][T26809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.169608][T26809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.181040][T26809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.192497][T26809] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 556.198529][T27075] syzkaller0: entered promiscuous mode [ 556.201617][T26809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.208669][T27075] syzkaller0: entered allmulticast mode [ 556.216672][T26809] usb 5-1: config 0 descriptor?? [ 556.226119][T27046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 556.234958][T26809] hub 5-1:0.0: USB hub found [ 556.342370][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 556.342388][ T36] audit: type=1400 audit(2033555264.506:1304): avc: denied { shutdown } for pid=27081 comm="syz.8.8586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 556.376087][ T435] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 556.454837][T26809] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 556.464284][T26809] usbhid 5-1:0.0: can't add hid device: -71 [ 556.470247][T26809] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 556.494299][T26809] usb 5-1: USB disconnect, device number 36 [ 556.548297][ T435] usb 1-1: Using ep0 maxpacket: 16 [ 556.555167][ T435] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.565400][ T36] audit: type=1400 audit(2033555264.703:1305): avc: denied { ioctl } for pid=27097 comm="syz.8.8590" path="/35/file2" dev="tmpfs" ino=208 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 556.589764][ T435] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.600434][ T435] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.609576][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.617693][ T435] usb 1-1: Product: syz [ 556.621918][ T435] usb 1-1: Manufacturer: syz [ 556.626563][ T435] usb 1-1: SerialNumber: syz [ 556.690703][T27103] /dev/rnullb0: Can't open blockdev [ 556.850083][ T435] usb 1-1: 0:2 : does not exist [ 556.859220][ T435] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 556.872155][ T435] usb 1-1: USB disconnect, device number 25 [ 556.887400][T21596] udevd[21596]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 557.025481][T27126] rust_binder: 27126 RLIMIT_NICE not set [ 557.026486][T27126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 557.032236][T27126] rust_binder: Failure BR_FAILED_REPLY { source: EFAULT } during reply - delivering BR_FAILED_REPLY to sender. [ 557.041932][T27126] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:300 [ 557.064167][ T435] rust_binder: 27125: removing orphan mapping 0:192 [ 557.088429][T27134] fuseblk: Bad value for 'fd' [ 557.360012][ T7247] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 557.397180][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8603'. [ 557.406279][T27139] erspan0: default FDB implementation only supports local addresses [ 557.523071][ T7247] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 557.532311][ T7247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.540351][ T7247] usb 5-1: Product: syz [ 557.544848][ T7247] usb 5-1: Manufacturer: syz [ 557.549473][ T7247] usb 5-1: SerialNumber: syz [ 557.554984][ T7247] usb 5-1: config 0 descriptor?? [ 557.561134][ T7247] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 557.569078][ T7247] usb 5-1: Detected FT2233HP [ 557.645203][ T36] audit: type=1400 audit(2033555265.722:1306): avc: denied { block_suspend } for pid=27140 comm="syz.8.8604" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 557.680859][ T65] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 557.775512][ T7247] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 557.785365][ T7247] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 557.793323][ T7247] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 557.805111][ T7247] usb 5-1: USB disconnect, device number 37 [ 557.821195][ T7247] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 557.833745][ T7247] ftdi_sio 5-1:0.0: device disconnected [ 557.839180][T27146] overlayfs: failed to clone upperpath [ 557.847216][ T65] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 557.858480][ T65] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 557.868489][ T65] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 557.877615][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.885143][T27024] syzkaller0: entered promiscuous mode [ 557.891768][T27024] syzkaller0: entered allmulticast mode [ 557.962656][ T455] usb 10-1: Cannot set autoneg [ 557.967664][ T455] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 557.982690][ T455] usb 10-1: USB disconnect, device number 50 [ 558.115571][ T65] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 558.123566][ T65] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input58 [ 558.135630][ T65] usb 1-1: USB disconnect, device number 26 [ 558.150753][T27166] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 558.159319][T27166] /dev/loop0: Can't lookup blockdev [ 558.569261][ T36] audit: type=1400 audit(2033555266.591:1307): avc: denied { read } for pid=27186 comm="syz.9.8621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 558.634687][T27193] netlink: 'syz.9.8622': attribute type 4 has an invalid length. [ 558.642561][T27193] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.8622'. [ 558.651918][T27192] netlink: 'syz.9.8622': attribute type 4 has an invalid length. [ 558.662573][T27192] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.8622'. [ 558.677436][T27193] overlayfs: missing 'lowerdir' [ 558.682509][T27192] overlayfs: missing 'lowerdir' [ 558.757041][T27205] netlink: 182 bytes leftover after parsing attributes in process `syz.8.8627'. [ 558.796417][ T36] audit: type=1400 audit(2033555266.806:1308): avc: denied { create } for pid=27213 comm="syz.8.8630" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 558.819543][ T36] audit: type=1400 audit(2033555266.825:1309): avc: denied { rename } for pid=27213 comm="syz.8.8630" name="file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 558.854223][ T36] audit: type=1400 audit(2033555266.853:1310): avc: denied { unmount } for pid=26564 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 558.955921][ T36] audit: type=1400 audit(2033555266.956:1311): avc: denied { setattr } for pid=27222 comm="syz.9.8632" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 558.955968][T27225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 559.691798][ T36] audit: type=1400 audit(2033555267.638:1312): avc: denied { unmount } for pid=23582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 560.055189][ T7247] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 560.216726][ T7247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.227682][ T7247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.237472][ T7247] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.250408][ T7247] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.259516][ T7247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.268140][ T7247] usb 1-1: config 0 descriptor?? [ 560.488013][T27239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.496601][T27239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.989462][T27243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.998480][T27243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.018210][ T7247] usbhid 1-1:0.0: can't add hid device: -71 [ 561.024211][ T7247] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 561.035810][ T7247] usb 1-1: USB disconnect, device number 27 [ 573.392416][ T36] audit: type=1400 audit(2033555280.457:1313): avc: denied { create } for pid=27247 comm="syz.9.8639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 573.426155][ T36] audit: type=1400 audit(2033555280.485:1315): avc: denied { append } for pid=27248 comm="syz.4.8640" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 573.478042][ T36] audit: type=1400 audit(2033555280.485:1314): avc: denied { append } for pid=27248 comm="syz.4.8640" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 573.506384][ T36] audit: type=1400 audit(2033555280.523:1316): avc: denied { execute } for pid=27265 comm="syz.9.8643" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.655989][ T36] audit: type=1400 audit(2033555280.691:1317): avc: denied { watch } for pid=27291 comm="syz.9.8650" path="/33/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 573.718088][T27297] 9pnet_fd: Insufficient options for proto=fd [ 573.730430][T27300] 9pnet_fd: Insufficient options for proto=fd [ 573.905511][T26809] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 573.936149][T27321] rust_binder: 334: no such ref 2 [ 574.010665][T27336] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 574.019671][T27336] SELinux: failed to load policy [ 574.066947][T26809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.078057][T26809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.088171][T26809] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.101345][T26809] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.110508][T26809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.119404][T26809] usb 10-1: config 0 descriptor?? [ 574.554929][T26809] plantronics 0003:047F:FFFF.0027: item fetching failed at offset 14/15 [ 574.564297][T26809] plantronics 0003:047F:FFFF.0027: parse failed [ 574.570865][T26809] plantronics 0003:047F:FFFF.0027: probe with driver plantronics failed with error -22 [ 574.874040][ T36] audit: type=1326 audit(2033555281.832:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27367 comm="syz.8.8672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0274b8eba9 code=0x0 [ 574.958792][T14060] bridge_slave_1: left allmulticast mode [ 574.964562][T14060] bridge_slave_1: left promiscuous mode [ 574.970279][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.978278][T14060] bridge_slave_0: left allmulticast mode [ 574.984088][T14060] bridge_slave_0: left promiscuous mode [ 574.990053][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.112768][T27371] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.119857][T27371] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.127164][T27371] bridge_slave_0: entered allmulticast mode [ 575.133396][T27371] bridge_slave_0: entered promiscuous mode [ 575.140051][T27371] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.147154][T27371] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.147876][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8650'. [ 575.154262][T27371] bridge_slave_1: entered allmulticast mode [ 575.170866][T27371] bridge_slave_1: entered promiscuous mode [ 575.177768][T14060] veth1_macvtap: left promiscuous mode [ 575.183328][T14060] veth0_vlan: left promiscuous mode [ 575.283795][T27371] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.290890][T27371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.298227][T27371] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.305284][T27371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.327718][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.335138][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.345089][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.352181][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.362083][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.369150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.397837][T27371] veth0_vlan: entered promiscuous mode [ 575.414511][T27371] veth1_macvtap: entered promiscuous mode [ 575.463868][T27385] rust_binder: 2: no such ref 0 [ 575.469028][T27386] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 575.476431][T27386] rust_binder: Write failure EINVAL in pid:2 [ 576.026709][ T36] audit: type=1400 audit(2033555282.916:1319): avc: denied { read write } for pid=27394 comm="syz.0.8679" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 576.057651][ T36] audit: type=1400 audit(2033555282.916:1320): avc: denied { open } for pid=27394 comm="syz.0.8679" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 576.081948][ T36] audit: type=1400 audit(2033555282.916:1321): avc: denied { ioctl } for pid=27394 comm="syz.0.8679" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 576.107854][ T36] audit: type=1400 audit(2033555282.982:1322): avc: denied { setopt } for pid=27396 comm="syz.0.8680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.377073][T27433] rust_binder: Write failure EINVAL in pid:5 [ 576.411985][T27441] overlayfs: failed to clone upperpath [ 576.890949][ T65] usb 10-1: USB disconnect, device number 51 [ 576.935165][T27476] KVM: debugfs: duplicate directory 27476-5 [ 577.068371][T27481] syzkaller0: entered promiscuous mode [ 577.074029][T27481] syzkaller0: entered allmulticast mode [ 577.247344][T27488] nsfs: Unknown parameter 'fd' [ 577.393741][T27499] kvm: kvm [27498]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 577.402423][T27499] kvm: kvm [27498]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 577.679690][T27518] random: crng reseeded on system resumption [ 577.735066][T27519] netlink: 'syz.9.8715': attribute type 4 has an invalid length. [ 577.765239][T27519] netlink: 17 bytes leftover after parsing attributes in process `syz.9.8715'. [ 577.930178][T27521] overlayfs: failed to clone upperpath [ 577.957521][T27521] tipc: Enabling of bearer rejected, failed to enable media [ 578.378532][T27543] binder: Unknown parameter '' [ 578.490276][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 578.675491][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 578.835935][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 578.842448][ T65] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 578.850842][ T65] usb 1-1: config 179 has no interface number 0 [ 578.857371][ T65] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 578.868464][ T65] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 578.879858][ T65] usb 1-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 578.890870][ T65] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 578.904147][ T65] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 578.913230][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.922425][T27550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 579.042916][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 579.042936][ T36] audit: type=1400 audit(2033555285.731:1329): avc: denied { bind } for pid=27583 comm="syz.8.8735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 579.145870][ T435] usb 1-1: USB disconnect, device number 28 [ 579.541806][T26809] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 579.696058][T27591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8738'. [ 579.706075][T26809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 579.714365][T27592] netlink: 'syz.0.8738': attribute type 1 has an invalid length. [ 579.717190][T26809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.728901][T27592] netlink: 'syz.0.8738': attribute type 2 has an invalid length. [ 579.735363][T26809] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 579.752031][T26809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.760819][T26809] usb 10-1: config 0 descriptor?? [ 579.765345][T27596] 9pnet_fd: Insufficient options for proto=fd [ 579.886819][T27598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8739'. [ 579.896544][T27598] fuseblk: Unknown parameter 'roo000000000010000' [ 579.980640][T27606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8741'. [ 580.034256][ T65] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 580.042720][ T36] audit: type=1400 audit(2033555286.666:1330): avc: denied { setopt } for pid=27610 comm="syz.0.8743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 580.047264][ T65] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 580.070309][ T65] hid-generic 0003:0004:0000.0028: unknown main item tag 0x0 [ 580.087829][ T65] hid-generic 0003:0004:0000.0028: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 580.120743][T27615] fido_id[27615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 580.196074][T26809] isku 0003:1E7D:319C.0029: item fetching failed at offset 3/7 [ 580.205025][T26809] isku 0003:1E7D:319C.0029: parse failed [ 580.210793][T26809] isku 0003:1E7D:319C.0029: probe with driver isku failed with error -22 [ 580.232949][T26809] usb 10-1: USB disconnect, device number 52 [ 580.247328][T27622] rust_binder: 161: no such ref 3 [ 580.270366][T27624] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 580.643560][ T435] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 580.675723][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 580.676639][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 580.748676][T27644] rust_binder: Write failure EFAULT in pid:169 [ 580.822709][ T36] audit: type=1400 audit(2033555287.395:1331): avc: denied { create } for pid=27645 comm="syz.9.8753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 580.826459][ T435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.861086][ T435] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.870245][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.878286][ T435] usb 1-1: Product: syz [ 580.882510][ T435] usb 1-1: Manufacturer: syz [ 580.887141][ T435] usb 1-1: SerialNumber: syz [ 581.332479][ T36] audit: type=1400 audit(2033555287.872:1332): avc: denied { getopt } for pid=27656 comm="syz.2.8757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 581.683201][T27666] can0: slcan on ttyS3. [ 581.760829][T27666] can0 (unregistered): slcan off ttyS3. [ 581.812213][ T36] audit: type=1400 audit(2033555288.311:1333): avc: denied { listen } for pid=27677 comm="syz.8.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 582.184292][ T435] cdc_ncm 1-1:1.0: failed to get mac address [ 582.191872][ T435] cdc_ncm 1-1:1.0: bind() failure [ 582.200620][ T435] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 582.209613][ T435] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 582.227301][ T435] usb 1-1: USB disconnect, device number 29 [ 582.432137][T27737] rust_binder: Read failure Err(EAGAIN) in pid:50 [ 582.432530][ T36] audit: type=1400 audit(2033555288.910:1334): avc: denied { mount } for pid=27736 comm="syz.2.8775" name="/" dev="configfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 582.445791][T27737] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 582.462167][T27737] rust_binder: Read failure Err(EFAULT) in pid:50 [ 582.462452][ T36] audit: type=1400 audit(2033555288.910:1335): avc: denied { search } for pid=27736 comm="syz.2.8775" name="/" dev="configfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.473320][T27737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 582.477201][ T36] audit: type=1400 audit(2033555288.910:1336): avc: denied { read } for pid=27736 comm="syz.2.8775" name="/" dev="configfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.531069][ T36] audit: type=1400 audit(2033555288.910:1337): avc: denied { open } for pid=27736 comm="syz.2.8775" path="/" dev="configfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.554989][T27739] netlink: 680 bytes leftover after parsing attributes in process `syz.2.8776'. [ 582.714999][T27756] incfs: mount failed -22 [ 582.718746][ T36] audit: type=1400 audit(2033555289.162:1338): avc: denied { read } for pid=27754 comm="syz.2.8781" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 582.719633][T27756] incfs: mount failed -22 [ 582.769805][T27760] rust_binder: 27760 RLIMIT_NICE not set [ 582.785036][ T435] rust_binder: 0: removing orphan mapping 0:1168 [ 582.819655][T27764] binder: Unknown parameter 'w' [ 582.970522][T27780] 9pnet: Could not find request transport: fo [ 583.007942][T27788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27788 comm=syz.0.8791 [ 583.033793][T27788] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 583.044513][T27788] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8791'. [ 583.071372][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 583.093595][T27791] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8792'. [ 583.232769][ T10] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 583.242312][ T10] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 583.250958][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 583.274435][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.285688][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.295478][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.308665][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 583.317896][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.337012][ T10] usb 3-1: config 0 descriptor?? [ 583.376091][T27803] fuse: Bad value for 'fd' [ 583.402762][ T7247] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 583.563207][ T7247] usb 1-1: Using ep0 maxpacket: 16 [ 583.569501][ T7247] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.595270][ T7247] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 583.608176][ T7247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 583.615044][ T7247] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 583.624455][ T7247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.638290][ T7247] usb 1-1: config 0 descriptor?? [ 583.777729][ T10] lg-g15 0003:046D:C225.002A: unknown main item tag 0x0 [ 583.784764][ T10] lg-g15 0003:046D:C225.002A: unknown main item tag 0x0 [ 583.791794][ T10] lg-g15 0003:046D:C225.002A: unknown main item tag 0x0 [ 583.798896][ T10] lg-g15 0003:046D:C225.002A: unknown main item tag 0x0 [ 583.807355][ T10] lg-g15 0003:046D:C225.002A: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0 [ 583.992669][T27766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.001241][T27766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.073816][ T7247] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 584.081192][ T7247] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 584.087965][ T7247] kye 0003:0458:0138.002B: unknown main item tag 0x0 [ 584.095503][ T7247] kye 0003:0458:0138.002B: hidraw1: USB HID v0.08 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 584.266472][T27830] rust_binder: Error while translating object. [ 584.266510][T27830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 584.272940][T27830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:209 [ 584.295520][T27796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 584.295686][T27832] input input59: cannot allocate more than FF_MAX_EFFECTS effects [ 584.309175][ T7247] usb 1-1: USB disconnect, device number 30 [ 584.314919][T27832] /dev/rnullb0: Can't open blockdev [ 584.383279][T27835] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 584.383309][T27835] rust_binder: Read failure Err(EFAULT) in pid:213 [ 584.538987][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.551934][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.558248][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.564469][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.570865][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.577268][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.583499][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.589686][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.595908][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.602141][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.608294][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.614579][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.620744][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.627130][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.633326][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.639677][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.645887][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.652095][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.658299][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.664475][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.670694][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.676911][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.683129][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.689366][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.695530][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.702251][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.708466][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.714613][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.720815][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.727002][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.733225][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.739386][T27854] 9pnet_fd: Insufficient options for proto=fd [ 584.745582][T27854] 9pnet_fd: Insufficient options for proto=fd [ 585.181938][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 585.181965][ T36] audit: type=1400 audit(2033555291.472:1344): avc: denied { mounton } for pid=27875 comm="syz.0.8821" path="/238/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 585.288676][ T36] audit: type=1400 audit(2033555291.574:1345): avc: denied { setattr } for pid=27875 comm="syz.0.8821" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 585.324321][ T36] audit: type=1400 audit(2033555291.602:1346): avc: denied { name_bind } for pid=27879 comm="syz.9.8822" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 585.391699][T27880] fuse: Bad value for 'user_id' [ 585.396661][T27880] fuse: Bad value for 'user_id' [ 585.764208][T27888] IPv6: NLM_F_CREATE should be specified when creating new route [ 586.022156][ T7247] usb 3-1: USB disconnect, device number 30 [ 586.039312][T27890] overlay: Unknown parameter 'appraise_type' [ 586.340346][T27904] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 586.365717][T27907] fuse: Bad value for 'fd' [ 586.658754][ T36] audit: type=1400 audit(2033555292.855:1347): avc: denied { unmount } for pid=26564 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 586.706113][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 587.005256][ T36] audit: type=1400 audit(2033555293.173:1348): avc: denied { setattr } for pid=27936 comm="syz.2.8841" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 587.138702][ T36] audit: type=1400 audit(2033555293.304:1349): avc: denied { setattr } for pid=27943 comm="syz.0.8843" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 587.170230][ T36] audit: type=1400 audit(2033555293.332:1350): avc: denied { bind } for pid=27945 comm="syz.0.8844" laddr=fe80::13 lport=48 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 587.194346][ T36] audit: type=1400 audit(2033555293.332:1351): avc: denied { name_bind } for pid=27945 comm="syz.0.8844" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 587.215078][ T36] audit: type=1400 audit(2033555293.332:1352): avc: denied { node_bind } for pid=27945 comm="syz.0.8844" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 587.274040][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8849'. [ 587.295897][ T7247] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 587.457347][ T7247] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 587.465612][ T7247] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 587.475755][ T7247] usb 3-1: config 8 has no interface number 0 [ 587.481921][ T7247] usb 3-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.496693][ T7247] usb 3-1: New USB device found, idVendor=a6ed, idProduct=7458, bcdDevice=2d.4d [ 587.505805][ T7247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.513845][ T7247] usb 3-1: Product: syz [ 587.518158][ T7247] usb 3-1: Manufacturer: syz [ 587.522797][ T7247] usb 3-1: SerialNumber: syz [ 588.180138][ T36] audit: type=1400 audit(2033555294.277:1353): avc: denied { ioctl } for pid=27960 comm="syz.0.8850" path="socket:[120535]" dev="sockfs" ino=120535 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 588.889375][ T551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 588.889391][ T552] Bluetooth: hci0: command 0x1003 tx timeout [ 589.054699][T27981] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 589.067441][T27981] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 589.075883][T27981] CPU: 1 UID: 0 PID: 27981 Comm: syz.9.8856 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 589.087535][T27981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.097614][T27981] RIP: 0010:iter_file_splice_write+0xa44/0x1100 [ 589.103918][T27981] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 01 ca e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 dd c9 e6 ff 4c 8b 1b 48 8b 3c 24 [ 589.126008][T27981] RSP: 0018:ffffc90001517820 EFLAGS: 00010202 [ 589.132202][T27981] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888120ec8000 [ 589.140303][T27981] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 589.148302][T27981] RBP: ffffc90001517a40 R08: ffff8881f6f722c0 R09: 1ffff1103edee458 [ 589.156482][T27981] R10: 1ffff1103edee45b R11: 0000000000000fd8 R12: dffffc0000000000 [ 589.164486][T27981] R13: 7ffffffffffff9b7 R14: ffff8881324a7038 R15: ffff8881324a7028 [ 589.172483][T27981] FS: 00007fd9ad4c26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 589.181440][T27981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.188044][T27981] CR2: 000000110c342ed3 CR3: 00000001284b4000 CR4: 00000000003526b0 [ 589.196043][T27981] Call Trace: [ 589.199489][T27981] [ 589.202540][T27981] ? __cfi_iter_file_splice_write+0x10/0x10 [ 589.208496][T27981] ? __kasan_kmalloc+0x96/0xb0 [ 589.213387][T27981] ? __kasan_check_write+0x18/0x20 [ 589.218591][T27981] ? __cfi_iter_file_splice_write+0x10/0x10 [ 589.224523][T27981] direct_splice_actor+0x276/0x4b0 [ 589.229770][T27981] splice_direct_to_actor+0x4fe/0xbc0 [ 589.235187][T27981] ? __cfi_direct_splice_actor+0x10/0x10 [ 589.240850][T27981] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 589.246864][T27981] do_splice_direct+0x182/0x270 [ 589.251756][T27981] ? __cfi_do_splice_direct+0x10/0x10 [ 589.257162][T27981] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 589.263086][T27981] ? security_file_permission+0x2e/0xc0 [ 589.268661][T27981] ? rw_verify_area+0xac/0x230 [ 589.273469][T27981] do_sendfile+0x5c8/0xfb0 [ 589.277926][T27981] ? vfs_writev+0xcf0/0xcf0 [ 589.282565][T27981] ? __se_sys_futex+0x28f/0x300 [ 589.287538][T27981] __x64_sys_sendfile64+0x193/0x1f0 [ 589.292790][T27981] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 589.298546][T27981] ? switch_fpu_return+0x12/0x20 [ 589.303517][T27981] x64_sys_call+0xa26/0x2ee0 [ 589.308155][T27981] do_syscall_64+0x58/0xf0 [ 589.312626][T27981] ? clear_bhb_loop+0x50/0xa0 [ 589.317336][T27981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 589.323295][T27981] RIP: 0033:0x7fd9ac58eba9 [ 589.327744][T27981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.347467][T27981] RSP: 002b:00007fd9ad4c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 589.355907][T27981] RAX: ffffffffffffffda RBX: 00007fd9ac7d5fa0 RCX: 00007fd9ac58eba9 [ 589.363897][T27981] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 589.371886][T27981] RBP: 00007fd9ac611e19 R08: 0000000000000000 R09: 0000000000000000 [ 589.379876][T27981] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 589.387894][T27981] R13: 00007fd9ac7d6038 R14: 00007fd9ac7d5fa0 R15: 00007ffd44665fd8 [ 589.395900][T27981] [ 589.398947][T27981] Modules linked in: [ 589.403274][T27981] ---[ end trace 0000000000000000 ]--- [ 589.410504][T27981] RIP: 0010:iter_file_splice_write+0xa44/0x1100 [ 589.416859][T27981] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 01 ca e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 dd c9 e6 ff 4c 8b 1b 48 8b 3c 24 [ 589.436946][T27981] RSP: 0018:ffffc90001517820 EFLAGS: 00010202 [ 589.443104][T27981] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888120ec8000 [ 589.451295][T27981] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 589.459341][T27981] RBP: ffffc90001517a40 R08: ffff8881f6f722c0 R09: 1ffff1103edee458 [ 589.467595][T27981] R10: 1ffff1103edee45b R11: 0000000000000fd8 R12: dffffc0000000000 [ 589.475642][T27981] R13: 7ffffffffffff9b7 R14: ffff8881324a7038 R15: ffff8881324a7028 [ 589.483698][T27981] FS: 00007fd9ad4c26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 589.493395][T27981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.500236][T27981] CR2: 00007fd9ad4a0f98 CR3: 00000001284b4000 CR4: 00000000003526b0 [ 589.508265][T27981] Kernel panic - not syncing: Fatal exception [ 589.514685][T27981] Kernel Offset: disabled [ 589.519015][T27981] Rebooting in 86400 seconds..