last executing test programs: 5m24.835092738s ago: executing program 1 (id=131): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x1}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xd, 0xfffffbff, 0x7f, 0xe}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', 0x2}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', 0x2}) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010100}, 0x10) r2 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@private, @multicast1}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@private, @multicast1, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @empty, r3}, 0xc) shutdown(r0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x81}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20008041) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x81}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20008041) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000700)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000400)={0x18, 0x32, 0x100, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x142, 0x0, 0x0, @str='{,\'\x00'}]}, 0x18}, {&(0x7f0000000440)={0x1c, 0x26, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x26, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x129}]}, 0x1c}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0x20, 0x1}, 0x4000040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/binder0\x00', 0x802, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000000780)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r7) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r7) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x84, r9, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000440}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90d0}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x98}}, 0x40) (async) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000440}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90d0}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x98}}, 0x40) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000b40), r0) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x80, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x100}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x80, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x100}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000c80)={{0x6, 0x8, 0x1, 0x5}, 'syz0\x00', 0x27}) (async) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000c80)={{0x6, 0x8, 0x1, 0x5}, 'syz0\x00', 0x27}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000d00)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000d00)=0x2, 0x4) accept$inet(r2, &(0x7f0000000d40)={0x2, 0x0, @local}, &(0x7f0000000d80)=0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) 5m24.828887309s ago: executing program 1 (id=132): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000440)={@my=0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x4e25, 0x0, 0x3, 0x2, 0x2, 0x20}, {0x2, 0x53, 0xfff, 0x7, 0xffffdffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x727, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast1, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000100)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140), 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) write$FUSE_LK(r6, &(0x7f0000000040)={0x28, 0x0, r7, {{0x6b1, 0x100, 0x0, r8}}}, 0x28) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m24.509907925s ago: executing program 2 (id=139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000040002000c0010000800014004000000", 0x58}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000600)=[@decrefs], 0x0, 0x0, 0x0}) 5m24.437520676s ago: executing program 2 (id=140): ioperm(0x400000000003, 0x39, 0x16c) ioperm(0x8, 0x5, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0xfdc6, &(0x7f0000000200)='(\x0f\x00') r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f0000000b40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0xb) r1 = socket(0x10, 0x6, 0x3) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0) syz_usb_disconnect(r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x1802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0x2, [0xffffffffffffffff, 0x5, 0x0, 0xfffffffffffff521, 0x2, 0x200]}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x65) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc1400002c51d6e72fb3c5c0e0", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x11, 0x6, @multicast}, 0x14) close(0xffffffffffffffff) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, 0x0, &(0x7f0000000180)) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 5m24.296736139s ago: executing program 1 (id=141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x3}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 5m24.281171219s ago: executing program 1 (id=142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x69, 0x1, 0x2, "36e4224acc1d0d00eb18280b325edf48", "11191ea10bae380e7999ca75d785775845535d7b9fb30fa368cc1a2cc6f3f1ea5dd33a82abc270be4c96c1194f5c379c0d504bf413881eaf32557dd40280d9a3c5725487252ca0f21c0313716c0306bb8d08c246"}, 0x69, 0x2) 5m24.217615811s ago: executing program 1 (id=143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x2c}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m24.206455481s ago: executing program 1 (id=144): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000400)="00214717a707a6ce29fcae5e32a1407500000000000000008a45d2b100006c21886210f9f6ddd14b90fff825d5bb5ad1adeceea1a1a728446dbbd7cda3f4ae759d66bc7510be5ee20648836bb3d01aed3b60f8d8a08eb8b0e86944b20f80af1dad8e1acb0e00188a86d31aab54f589b7823e42ee0a00ee7d97ab28301c7d109093a955b710e84a4125ed330526d10f93416f8c5950fca14639c2575e006eabe256bfb0e47b81fbc0aa1ca3e4bc854916ef71508c47dd025fa8ea367bb78cca940674790b015358167709fa4f0ce1faf5e3a7c49c3cb8c63a3b2343187d", 0xdd}], 0x1, 0x33a, 0x1) 5m24.154248322s ago: executing program 32 (id=144): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000400)="00214717a707a6ce29fcae5e32a1407500000000000000008a45d2b100006c21886210f9f6ddd14b90fff825d5bb5ad1adeceea1a1a728446dbbd7cda3f4ae759d66bc7510be5ee20648836bb3d01aed3b60f8d8a08eb8b0e86944b20f80af1dad8e1acb0e00188a86d31aab54f589b7823e42ee0a00ee7d97ab28301c7d109093a955b710e84a4125ed330526d10f93416f8c5950fca14639c2575e006eabe256bfb0e47b81fbc0aa1ca3e4bc854916ef71508c47dd025fa8ea367bb78cca940674790b015358167709fa4f0ce1faf5e3a7c49c3cb8c63a3b2343187d", 0xdd}], 0x1, 0x33a, 0x1) 5m23.649515132s ago: executing program 2 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000040"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x51, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m23.608022203s ago: executing program 2 (id=149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/../file0\x00', 0x0, 0x210000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r2, 0xff, 0x3) (async) mount$bind(0x0, &(0x7f0000000100)='./file0/file0/../file0\x00', 0x0, 0x84403, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5m23.553502604s ago: executing program 2 (id=150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004b80), 0x141000, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x66, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0x7fff, 0x4, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x7f, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x8, '\x00', 0x3}, {0xee, 0x3, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x8, 0x54, '\x00', 0x39}, {0x1, 0x3, 0x4, '\x00', 0x6}, {0xd, 0x40, 0x7, '\x00', 0x14}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x68}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x7}], 0x0, 0x0, 0x0}) 5m23.447403346s ago: executing program 2 (id=152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = getpgid(0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200090, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) chdir(&(0x7f0000000080)='./file0\x00') (async, rerun: 32) read$FUSE(r5, &(0x7f0000006e80)={0x2020}, 0x2082) (async, rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5m23.374880478s ago: executing program 33 (id=152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = getpgid(0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200090, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) chdir(&(0x7f0000000080)='./file0\x00') (async, rerun: 32) read$FUSE(r5, &(0x7f0000006e80)={0x2020}, 0x2082) (async, rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 5m22.821664269s ago: executing program 3 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000840)=[{}], 0x1, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) setrlimit(0x3, &(0x7f0000000000)={0x8, 0xd}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x0, 0x23}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}], 0x50, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5995aa7eeb1ca60f45334c9"}) 5m22.741325631s ago: executing program 3 (id=165): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x7c802, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x484502, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x11c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4cfe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8354}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7e2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4010}, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400070dfeffffff0000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) ioctl$BLKRRPART(r0, 0x125f, 0x0) recvmmsg(r1, &(0x7f0000005e80)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/218, 0xda}], 0x7, &(0x7f0000001800)=""/185, 0xb9}, 0x400}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/206, 0xce}, {&(0x7f00000019c0)=""/67, 0x43}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001a40)=""/206, 0xce}], 0x4, &(0x7f0000001b80)=""/75, 0x4b}, 0x1}, {{&(0x7f0000001c00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001c80)=""/124, 0x7c}, {&(0x7f0000001d00)=""/43, 0x2b}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/247, 0xf7}, {&(0x7f0000002e40)=""/220, 0xdc}, {&(0x7f0000002f40)=""/39, 0x27}, {&(0x7f0000002f80)=""/173, 0xad}, {&(0x7f0000003040)=""/55, 0x37}, {&(0x7f0000003080)=""/212, 0xd4}], 0x9, &(0x7f0000003240)=""/247, 0xf7}, 0x4}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003340)=""/170, 0xaa}], 0x1, &(0x7f0000003440)=""/235, 0xeb}, 0x2d00000}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003540)=""/178, 0xb2}, {&(0x7f0000003600)=""/192, 0xc0}, {&(0x7f00000036c0)=""/139, 0x8b}, {&(0x7f0000003780)=""/23, 0x17}, {&(0x7f00000037c0)=""/67, 0x43}, {&(0x7f0000003840)=""/138, 0x8a}, {&(0x7f0000003900)=""/73, 0x49}], 0x7, &(0x7f0000003a00)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004a00)=@un=@abs, 0x80, &(0x7f0000005e00)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/16, 0x10}, {&(0x7f0000005ac0)=""/165, 0xa5}, {&(0x7f0000005b80)=""/159, 0x9f}, {&(0x7f0000005c40)=""/243, 0xf3}, {&(0x7f0000005d40)=""/69, 0x45}, {&(0x7f0000005dc0)=""/13, 0xd}], 0x7}, 0x401}], 0x6, 0x40000000, &(0x7f0000006000)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x7c802, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x484502, 0x4) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x11c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4cfe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8354}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7e2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4010}, 0x2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002400070dfeffffff0000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) recvmmsg(r1, &(0x7f0000005e80)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/218, 0xda}], 0x7, &(0x7f0000001800)=""/185, 0xb9}, 0x400}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000018c0)=""/206, 0xce}, {&(0x7f00000019c0)=""/67, 0x43}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001a40)=""/206, 0xce}], 0x4, &(0x7f0000001b80)=""/75, 0x4b}, 0x1}, {{&(0x7f0000001c00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001c80)=""/124, 0x7c}, {&(0x7f0000001d00)=""/43, 0x2b}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/247, 0xf7}, {&(0x7f0000002e40)=""/220, 0xdc}, {&(0x7f0000002f40)=""/39, 0x27}, {&(0x7f0000002f80)=""/173, 0xad}, {&(0x7f0000003040)=""/55, 0x37}, {&(0x7f0000003080)=""/212, 0xd4}], 0x9, &(0x7f0000003240)=""/247, 0xf7}, 0x4}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003340)=""/170, 0xaa}], 0x1, &(0x7f0000003440)=""/235, 0xeb}, 0x2d00000}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003540)=""/178, 0xb2}, {&(0x7f0000003600)=""/192, 0xc0}, {&(0x7f00000036c0)=""/139, 0x8b}, {&(0x7f0000003780)=""/23, 0x17}, {&(0x7f00000037c0)=""/67, 0x43}, {&(0x7f0000003840)=""/138, 0x8a}, {&(0x7f0000003900)=""/73, 0x49}], 0x7, &(0x7f0000003a00)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004a00)=@un=@abs, 0x80, &(0x7f0000005e00)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/16, 0x10}, {&(0x7f0000005ac0)=""/165, 0xa5}, {&(0x7f0000005b80)=""/159, 0x9f}, {&(0x7f0000005c40)=""/243, 0xf3}, {&(0x7f0000005d40)=""/69, 0x45}, {&(0x7f0000005dc0)=""/13, 0xd}], 0x7}, 0x401}], 0x6, 0x40000000, &(0x7f0000006000)) (async) 5m22.628603993s ago: executing program 3 (id=166): pipe(&(0x7f0000019480)) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000280)={0x4, 0xffffffffffffffff, 'id1\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000640)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64479d00000003000000000000000000000000000014cdcd4100", "2809e8dbe108598927875397bab22d0000b4209dc81f40f05f819e01177d3d458dac00000080000000000000003b00000000000000000200", "90be8b1c5a12406c7f00000000000000000000fcff00", [0x4, 0x40000000000000]}}) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000640)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64479d00000003000000000000000000000000000014cdcd4100", "2809e8dbe108598927875397bab22d0000b4209dc81f40f05f819e01177d3d458dac00000080000000000000003b00000000000000000200", "90be8b1c5a12406c7f00000000000000000000fcff00", [0x4, 0x40000000000000]}}) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xa0001, 0x4) (async) r6 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xa0001, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000780)={0x0, 0x7, 0x100}) pread64(r5, &(0x7f0000001b80)=""/4074, 0xfea, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) (async) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) close(r0) (async) close(r0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x30}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000000)=ANY=[]) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000000)=ANY=[]) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000200)=0x8) 5m22.389003558s ago: executing program 3 (id=169): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r2, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) close_range(r1, 0xffffffffffffffff, 0x0) move_mount(r3, &(0x7f0000000080)='./file0/../file0\x00', r3, &(0x7f0000000100)='./file0/../file0\x00', 0x12) 5m22.347730949s ago: executing program 3 (id=170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5m22.26947777s ago: executing program 3 (id=171): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1e) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 5m22.240799601s ago: executing program 34 (id=171): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1e) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 3m57.265578469s ago: executing program 6 (id=1031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="400000bba354e1d3c9a72f73761d18988fe65bd2d81de73f25d5a77dd8008c2e0010fb5403b40c6a830365985b51bfd6d0c17001fa26ed5194e9602d72807648639a5a8ef351188b37574c6efeefa500000000b516da23eb11e4a5f78227d63f1327fc00"/111], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (rerun: 32) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="20162e000000b5ea4a8140b00a0c16c25868203b77e822f941ebbf289e8f34abe7de32d0ff"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200004000000000108d2d530aa00"], 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x18}, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async, rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) readahead(r5, 0x2a5c, 0x4) ioctl$BLKROSET(r9, 0x125d, &(0x7f0000000180)=0xe) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xc8, 0x0, &(0x7f0000000940)=[@decrefs={0x40046307, 0x1}, @dead_binder_done, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x8, 0x2, 0x39}, @flat=@weak_handle={0x77682a85, 0x100b, 0x2}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}}, @release, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@flat=@weak_handle={0x77682a85, 0x110a, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x400000000013}, @ptr={0x70742a85, 0x4, &(0x7f0000000600)=""/26, 0x1a, 0x2, 0x1f}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000001400)=[@release], 0x0, 0x0, 0x0}) 3m55.791791178s ago: executing program 6 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4048095) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000200)={0xae0, r1, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x557, 0x1, 0x6, 0x100, 0xffff, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x68, 0x30, 0x53, 0x3, 0x18, 0x60, 0x1, 0x6c, 0x9, 0x6c, 0x12, 0x18, 0x15, 0x9, 0x30, 0x1, 0x16, 0x1b, 0x6c, 0x36, 0x6, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x4, 0x0, 0x8001, 0xfa7f, 0x0, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x15, 0x3, 0x6, 0x18, 0x18, 0x1b, 0x12, 0x36, 0x1, 0x1b, 0x16, 0x36, 0xe, 0x6, 0x5, 0x1b, 0xc, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x30, 0x9, 0x36, 0x30, 0x3, 0x16, 0x9, 0x6, 0x2, 0x0, 0x4, 0x6, 0x36, 0x1b, 0x18, 0x48, 0xc, 0x6c, 0xb]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x1, 0x2, 0x24, 0x5, 0x6c, 0x48, 0x12, 0x49, 0x30, 0x9, 0x18, 0x1, 0x36, 0x24, 0x6c]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x9, 0x18, 0x5, 0x1, 0x30, 0x1b, 0x16, 0xb, 0xb, 0x60, 0x6, 0xc, 0x18, 0xb, 0x1, 0x60, 0x6, 0x24, 0x36, 0x36, 0xec900f927355e5de, 0x16, 0x30, 0x1a, 0x2, 0x0, 0x1, 0xc, 0x12, 0x1b, 0x5]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x1, 0x36, 0x36, 0x6c, 0x9, 0x48, 0x60, 0x3, 0x1, 0x48, 0x60, 0x48, 0x5, 0xc, 0x2, 0x24, 0x5, 0x1b, 0x2, 0x18, 0xb, 0x24, 0x48, 0x1b, 0x9, 0x6, 0x9, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x101, 0x8, 0x57ba, 0x6, 0x2, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x9, 0x60, 0x4, 0x24, 0x6, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x36, 0xc, 0x18, 0x1, 0x24, 0x30, 0x1, 0x60, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfffe, 0x7e06, 0x2, 0x5, 0xc907, 0x6, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc5, 0x6, 0x5, 0x9, 0x2, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x4, 0xc, 0xb, 0x6, 0xb, 0x60, 0xb, 0x36, 0x2, 0x1b, 0x1b, 0x6c, 0x2, 0x6, 0x9, 0x30, 0x60, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0x0, 0x1000, 0xfffd, 0x6, 0x3, 0xfffa]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x1, 0x5}, {0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x8}, {0x7}, {0x0, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x6c, 0x6, 0x5, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfdc, 0x8, 0x4, 0xa, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8a, 0x7, 0xff, 0x7fff, 0x4, 0x4, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x5}, {0x3, 0xa}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x8, 0xd, 0xf555, 0x5, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x7}, {0x7, 0x4}, {0x3, 0x6}, {0x7, 0xa}, {0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x5}, {}, {0x5, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x5}, {0x0, 0x8}, {0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x1}, {0x7}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x6, 0x8, 0xc7, 0x3, 0x9909, 0x401, 0x4]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x30, 0xc, 0x6c, 0x5, 0x3, 0x75, 0x12, 0x30, 0x9, 0x48, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x61c, 0x9, 0x0, 0x3, 0x400, 0x6, 0x3ff, 0x2]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffd6, 0x5, 0x200, 0xf3, 0x7, 0x6, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x9, 0x0, 0x7, 0x557, 0x6, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x1, 0x6, 0x9, 0x2, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x1, 0x1, 0xf3, 0x6, 0xff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x46, 0x1, 0x7b, 0x3, 0x12, 0x6, 0x5, 0x60, 0x6c, 0x16, 0x9, 0x12, 0x4, 0x1, 0x18, 0xc, 0x6, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xcc, 0x400, 0x2c3e, 0x3, 0x6, 0xfff7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x5}, {0x7, 0x2}, {0x5}, {0x4}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xeb9, 0x8, 0x0, 0x6, 0x8000, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x6, 0x3, 0xcbbe, 0x4, 0x2, 0x289, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x4, 0x4, 0x1b, 0x1b, 0x1b, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x4, 0x9, 0x0, 0x6, 0xf, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x0, 0x1, 0x2, 0x8001, 0x4]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x1}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x6}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x3, 0x6}, {0x1, 0xa}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x9}, {0x4, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x423, 0x6, 0xb, 0xfffe, 0x7, 0x4, 0x93c]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff00, 0x2, 0x9, 0x8, 0x8, 0x5, 0x8, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x1, 0x6, 0xfff7, 0x4, 0x3e5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x6, 0x9, 0x8, 0x2, 0x7ff, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x188, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x6c, 0x30, 0x1, 0x52, 0x48, 0x24, 0x60, 0x9, 0x0, 0x2, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3d, 0x2, 0x1, 0xb, 0x1d, 0x70, 0x2, 0x1, 0x5, 0x36, 0x1b, 0x1b, 0x36, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0xffff, 0x10, 0x3, 0x0, 0x8, 0xffe6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x4}, {0x1}, {0x4, 0x6}, {0x0, 0x8}, {0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0x9}, {0x2, 0x8}, {0x3, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x1}, {0x6}, {0x4, 0x3}, {0x3}, {0x4, 0x8}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x1}, {0x1, 0x5}, {0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {}, {0x6, 0x7}, {0x5}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x5}, {}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0xa}, {0x2, 0x2}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x7, 0x3}, {0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0xa}, {0x4}, {0x6, 0x8}, {0x6}, {0x0, 0x9}, {}, {0x2, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x8}, {0x6}, {0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x24, 0x1, 0xb, 0x1b, 0x1b, 0x52, 0x60, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5bd6, 0x9, 0x2, 0x5, 0x1, 0x1ff, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1b, 0x58, 0xfff9, 0x6, 0x9, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x8, 0x4, 0x6, 0x2, 0x3, 0x0, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x3b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x4, 0x16, 0x3a, 0x9, 0xb, 0x1, 0x9, 0x30, 0x5, 0x16, 0x12, 0x3, 0x1, 0x1, 0x9, 0x3, 0x16, 0x3, 0x60, 0xb, 0x24, 0x9, 0x1b, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0x6, 0x8, 0x1, 0x8, 0x6, 0xc21]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xe}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x81, 0x8, 0xa, 0xfffc, 0x7fff, 0x1000, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xdb6, 0x0, 0x9, 0xfc6, 0x2128, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0xb, 0x6, 0x2, 0x6c, 0x0, 0x3, 0x9, 0x3, 0x60, 0x16, 0x0, 0x24, 0x1b, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xffff, 0x3, 0xfa, 0x8, 0x5, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x18, 0x12, 0x1, 0x30, 0x6c, 0x60, 0xc, 0x4, 0x24, 0x3, 0x3, 0x48, 0x4, 0x4, 0x1b, 0x1b, 0x9, 0x1b, 0xc, 0x5, 0x9, 0x1, 0x36, 0x36, 0x12, 0x2, 0xb, 0x30, 0x1b, 0x1b, 0x24]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xa, 0x7fff, 0x5, 0xffff, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x9, 0xc, 0x36, 0x12, 0x16, 0x6c, 0x1b, 0xb, 0x30, 0x36, 0xb, 0x6c, 0x48bb506bd71c103, 0x24, 0x2, 0xc, 0x9, 0x36, 0x12184c54e6a3aa5a, 0x60, 0x18, 0x16, 0x3]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x6}, {0x6, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x2}, {0x2, 0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x8}, {0x4, 0x3}, {0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x3}, {}, {0x7, 0x9}, {0x3, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x7}, {0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0xa}, {0x1}, {0x6}, {0x1, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {}, {0x0, 0x1}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x3}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x4}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {}, {0x4, 0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x3}, {0x6, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0x7}, {0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0xa}, {0x3}, {0x7}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x3}, {0x2, 0xa}, {0x1, 0x7}, {0x3}, {0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0x7}, {0x3, 0x8}, {}, {0x2, 0x9}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x1}, {0x2, 0x2}, {0x6, 0x3}, {0x5, 0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x3}, {0x5, 0x3}, {0x7}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x1f}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x1}, {0x3, 0x8}, {0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x0, 0x0, 0x3, 0x30, 0x9, 0x48, 0x4, 0x30, 0x1b, 0xb, 0x30, 0xb, 0x6, 0xc, 0x1b, 0x1b, 0x60, 0x16, 0x18, 0x6c, 0x12, 0x24, 0x6c, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x7ee5, 0x9a63, 0x1e, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xff80, 0x7f, 0x8, 0x3, 0x7, 0x9, 0x7016]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x1}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x3}, {0x3}, {0x2, 0x3}, {}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x1}, {0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x1}, {0x2}, {0x3}, {0x3, 0xa}, {0x6, 0x3}, {0x4, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x2}, {0x3}, {0x1}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x24, 0x16, 0x36, 0x18, 0x9, 0x3e, 0x0, 0x6c, 0x4, 0x9, 0xc, 0x3e, 0x1b, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x94b5, 0x4, 0x0, 0x5, 0x2, 0x8, 0x8]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0xc, 0x2, 0x16, 0x12, 0x3, 0x18, 0x12, 0x2, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0xd, 0x9, 0x1e9, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x5}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x6, 0x9}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x4}, {0x7, 0x6}, {0x3}, {0x4}, {0x6}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x6}, {0x2, 0x4}, {0x5, 0xa}, {0x5}, {0x1, 0x6}, {}, {0x3, 0x2}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x4}, {0x4, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xae0}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x80, 0x2, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x80}, 0x1, 0x0, 0x0, 0x2}, 0x4884) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f40)={0x260, r5, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x167c0e2, 0x5f}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x37, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x5}, 0x1, 0xd, @broadcast, 0x0, 0x2, 0x5}}, @ht={0x2d, 0x1a, {0xc000, 0x2, 0x6, 0x0, {0x8, 0x99a, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x6, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x200, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @broadcast, @random="df4c2ec7e299", {0x3, 0x5af}}, 0x9, @default, 0x800, @void, @void, @val={0x3, 0x1, 0x88}, @val={0x4, 0x6, {0x32, 0x6, 0x562c, 0x58bd}}, @val={0x6, 0x2, 0x4}, @void, @val={0x25, 0x3, {0x1, 0xad, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x80, 0x20}}, @void, [{0xdd, 0xe1, "5745fda606fc7ea82af2d8ee838be1caa07d5176e7d45a52fb16e0571641bf9893f6a1f6f3ac990fa71cecff40b8f26a5d07da17d1b8f2e4655e63db354186cf7db4a0eb794e0c697e9241b95851f977b1b629d316ba035467ac94009fe1d59a934213d5e0c56298458c5bc921e117f054a84b0171c38f488dc665d7c29c8bc9ea5ffd65117ad77d142dd74ef4f0d3e38364a8eef824599fb439232b32c0c071923fdc30332ddea93638511db9a02a6ee85ab6c9d5c66bad87a0c98baba93a9f3ad5edbefa5deecd5cd6080f4055701a14ab01e7e9a4f352c36dedbb1e6b68d0c0"}, {0xdd, 0x1c, "a9b47812273c3c22997e40bb6e0161d2ad71151e8a2368b7ab2ca39a"}, {0xdd, 0x69, "ec7aaba92f681bc434519a165b55d7c66a4f248a2266d005ab742ffc86eef55c4de198df2527fb73be0bf0b33679e75785dd13336c8efff7a2890f0c3d29600bc6ec982cc383b67a84abd724466792280e86428fe7c0a2705202efcd29bd0c84a8126193e14dc83c86"}, {0xdd, 0x28, "8149143a68f30733a91cae92b80198aedbce9b78cee83829a2d4aaf5ffdf51d9f4ba5842cdd9a8e1"}, {0xdd, 0x18, "c5d24867cb13f4b843f51cbf06f287d75cd54016495c9267"}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x40001}, 0xc1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x90, r1, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "395560cbb8af8add845ebfddfe66b8beb1fbf32f26baac14"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000014c0)=[{{&(0x7f00000013c0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001400)}], 0x1, &(0x7f0000001480)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x30}}], 0x1, 0x24004800) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000001600)={0x1, 0x3, 0x1000, 0x42, &(0x7f0000001500)="a760dcc7d1e1d418ebcb6c8e2eca07b236d3c7efdf4e9e726bdfe64f5cb204bf611de2d8187cf9b07da91e6ea16c3d9776d704d26d92abe9737eaf262d2dd3b1e98a", 0x7f, 0x0, &(0x7f0000001580)="16a83cf08d9cb7d48f02e6e1c2d52062c524cd5351ce88539527518adf440522da6aa864035c64035b91db8a6bed2b437b5af7eecf70e84048f8a6dabeac37e27d312d6cee709fe2b49ea0457bbc310365ab88e9d169caffabcdd202b3d4590df06b9c894dc69ebb42016236dba23ce12a96fbf1d90e303d4c501b804a16b8"}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000001680)={0x1, 0x8000}, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001700), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={0x11c, r8, 0xe04, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9d1e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xefa4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f5c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x400c801}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x8, 0x8, {{0xb, 0x4, 0x0, 0x1, 0x2c, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x24, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001ac0)={'ip6_vti0\x00', &(0x7f0000001a40)={'syztnl1\x00', 0x0, 0x6, 0x7f, 0x5, 0xf5a, 0x52, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x40, 0x20, 0x1, 0x96}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001c40)={'ip_vti0\x00', &(0x7f0000001b00)={'gretap0\x00', 0x0, 0x1, 0x8, 0x5, 0x100, {{0x3e, 0x4, 0x1, 0x2a, 0xf8, 0x1, 0x0, 0xd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x44, 0xf, "4eb4351408c6dc5c0d8eec0658"}, @timestamp={0x44, 0xc, 0xc9, 0x0, 0x0, [0x5, 0x4]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x7d, 0x1, 0x8, [{@broadcast, 0x10}]}, @timestamp_addr={0x44, 0x54, 0x96, 0x1, 0x3, [{@rand_addr=0x64010100, 0x40}, {@multicast2, 0x70000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0xe}, {@remote}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfc}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcf}, {@private=0xa010100, 0x101}]}, @timestamp_addr={0x44, 0x34, 0xb0, 0x1, 0x7, [{@multicast2, 0x9}, {@rand_addr=0x64010101, 0xbce}, {@multicast2}, {@private=0xa010101, 0x5df6}, {@multicast1, 0x4}, {@multicast2, 0x5129}]}, @cipso={0x86, 0x22, 0x3, [{0x1, 0xa, "4bf2f9e34a6dd8cc"}, {0x1, 0x4, "7bc3"}, {0x1, 0xe, "1bcd849716cc3b41ccc9b789"}]}, @lsrr={0x83, 0xf, 0xe4, [@broadcast, @private=0xa010100, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001e00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10c, r9, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc1}, 0x8082) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002ec0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/4096, 0x1000, 0x0, &(0x7f0000002e40)=""/126, 0x7e}, &(0x7f0000002f00)=0x40) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000002f40)) r13 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r13, 0x11b, 0x7, &(0x7f0000002f80), &(0x7f0000002fc0)=0x30) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000003000)) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x38, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20002090) timerfd_settime(0xffffffffffffffff, 0x0, 0xfffffffffffffffd, &(0x7f0000003140)) 3m55.791190458s ago: executing program 6 (id=1042): r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 3m55.790925708s ago: executing program 6 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000480)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r1 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/254, 0xfe}], 0x9}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000001a40)=""/198, 0xc6}, {&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000001b40)=""/159, 0x9f}, {&(0x7f0000001c00)=""/44, 0x2c}, {&(0x7f0000001c40)=""/100, 0x64}], 0x6, &(0x7f0000001d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001e00), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001e80)=""/24, 0x18}, {&(0x7f0000001ec0)=""/82, 0x52}, {&(0x7f0000001f40)=""/102, 0x66}, {&(0x7f0000001fc0)=""/212, 0xd4}, {&(0x7f00000020c0)=""/121, 0x79}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/208, 0xd0}, {&(0x7f0000002300)=""/122, 0x7a}, {&(0x7f0000002380)=""/23, 0x17}], 0x9, &(0x7f0000002480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000002580), 0x0, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002780)=""/48, 0x30}], 0x1, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002940)=""/216, 0xd8}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x2, &(0x7f0000003a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x6, 0x10000, &(0x7f0000003c40)={0x77359400}) chdir(&(0x7f00000001c0)='./bus\x00') syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) 3m55.759378009s ago: executing program 6 (id=1044): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x28, 0x81, 0x11, 0x40, 0x403, 0xfa78, 0xdefa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x92, 0x90, 0xfb}}]}}]}}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080b25bd7000fbdbdf250300000008000600", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="0800007b84a8af00"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f00000000c0)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20281, 0x157) sendmmsg$unix(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)="a58a2465c27f9e2467983a4985a5111b5029affaec31d387a5a8e4e6b226a374d408c8f956110552c8656d9b0dc2664001d63759fd10bd15dbf9842a742e431fedd3879da7388e4f187c674b52bb32a5fccf8172ebe3815f0322c97e4ef243458660cbb94676eee80486cd07954387e59a6389d7e3ff7593207bdb576f12def463263a6d4e3a3e3ad76f674a4f19cdc073a3b0b85299a179a7b3df14e713a83e8f9b640d4093332eaa83278bf3761975e65ee35900ac4fcdc257131000ecf0c7c8962919b7f3f949841db58eaa9d0e03d7d644f0196109a42ce2", 0xda}, {&(0x7f0000000240)="7b382c82d3cb3c8c1273ca05bedbe569e388431a64669dc8fe8aaeb193d0af99971d84e85aae70da69844b2f77b313cff3bed655b4e5665007818a33499af4f4bac471dc9e016166c4c80f7b7906adb275b847c59c3480c884aa00f20a5120e0ccc790895ae3f5f28124f22da117265f233d1e0ee13ab8a54dbf7ba1d80bcb0f4faebdc1e34981a1a590da8f62f8eced15243eafb6421ee7cb2a454a65aa313397b91443919da316c14916067a476ba3638daea0fb5738a38b9a410fef", 0xbd}, {&(0x7f0000000180)}, {&(0x7f0000000300)="0960423e65e8cc8774233adc4c31d3ded9b66546ca21a636a86ae31dc606e3d6f3bf8c60b255ede88ec22690b75539d94bed9c6b519f528364219f74a27d0f75af354a71a4c7bb46c34ae4e2a0d75aefc396435f92191ed7fde8755ee296cfd185d6924519a6a2d6559b51395abf5dd5e4d6a4bd9a8721ab2c5faf8959680ef16175a7afb4631bd1b48980da1a0191edc24cb278fedd03d7209176db62352c5ec5543e484643f04f78239f84bd72f866dbd9f51105195d44", 0xb8}, {&(0x7f00000003c0)="ae6901fde3a83347fc3844722614db229070206bffe670dd36b2742d36837348aa12908af84777b0982fed1ef3abb701b7f399d8baeb7aeb9ab3d4d724108aa4bc99e7827b812898ff7132dbb3be763b5845335b9c888bd32e22e647d0a93ea288ce90765a3fa470abbdb909aabd757278604eec7e397d966f6028e80e63691995a2964a9c00865beba590da29f2cc6bef8d6f3e821860ed9d0a454162faa35fccf54916e98a28a483f3c547c85b247468d4fc0cb62f693093f16874642d69ac51254a86256c0def5bb093d1a6c9e2ed5927676ce5c7a665c010bd0747b4cb603d55532e14c08e883f8a71a70895fb77dfbfeb79", 0xf4}], 0x5, &(0x7f00000001c0), 0x0, 0x200440c0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) 3m55.509220904s ago: executing program 6 (id=1047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) flock(r1, 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x80030}], 0x1, 0xe7b, 0x0, 0x41) (async) read(r0, &(0x7f0000000040)=""/25, 0x19) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r2, 0x2, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x11, 0x8, "27ff3c4f894c6c911845aa67ed51ab75ed3f1d7a18e3add59299ee197d7e622c872e3daae4c9acec3e24d15faa9870b036301032d44cbbab82c675c3a73d8ead", "0f36c976b9d87d29c36120e5fb7e07a24744170e731bbe6c4318e0a2f894327396ce3490c9ad067bdf17beb6772eaf0eaa423b3680f858a55e3d1d686c57eda5", "0fa1fd56ab25f74f881d865744450d8d56acff693770eedb92f96f0799a590d6", [0x1, 0x8000000000000001]}}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m55.484711254s ago: executing program 35 (id=1047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) flock(r1, 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x80030}], 0x1, 0xe7b, 0x0, 0x41) (async) read(r0, &(0x7f0000000040)=""/25, 0x19) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r2, 0x2, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x11, 0x8, "27ff3c4f894c6c911845aa67ed51ab75ed3f1d7a18e3add59299ee197d7e622c872e3daae4c9acec3e24d15faa9870b036301032d44cbbab82c675c3a73d8ead", "0f36c976b9d87d29c36120e5fb7e07a24744170e731bbe6c4318e0a2f894327396ce3490c9ad067bdf17beb6772eaf0eaa423b3680f858a55e3d1d686c57eda5", "0fa1fd56ab25f74f881d865744450d8d56acff693770eedb92f96f0799a590d6", [0x1, 0x8000000000000001]}}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m5.769173723s ago: executing program 5 (id=1745): openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="220000000300000000000000000000000100000000000000017d"], 0x22) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000, 0x9) 3m5.672593065s ago: executing program 5 (id=1748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0, 0x8, 0x9, 0x10000}, {0x5, 0x2, 0x85, 0x6000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getgroups(0xfffffffffffffdc5, 0x0) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x40000002}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xf8, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0xab, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @increfs={0x40046304, 0x2}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x100b}, @fda={0x66646185, 0x1, 0x1, 0x3d}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 3m5.249425963s ago: executing program 5 (id=1757): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) syz_clone3(&(0x7f0000000180)={0x206361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)={0xff, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xb811}, @enc_lim={0x4, 0x1, 0x83}, @generic={0xef, 0xef, "3907f13fcf76117247bf3e7c6c104dfc33dac807792ede8d33f1a28420b9bc70d18ef43ef128aa61f7d1e653ec74ed39ee67295d9d0371b10bfadec843f6ed3cd8c2cc56dff19c0001ad881265847f098679cb6c3594bf66f63eb00b136b382b1789a053d712ccc5e306c1b5306f85446f64ee3a79c4f8ce2d9cf1f7093bffa171472856991017e65bc41ac9c5a9f4dfe681cae59af19ecb67d802070afefeab6c806f85374eb8ff4251d2376d2554b95b75e7404a8ae7e6fb0cc761fba13fe09486e1be541c5f076859b7188157d1dc14fa39cf423f47f3345cd98091a53c34c435f7770026506515908e033f5a0a"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x92, 0x101, [0x3, 0x6]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x99}]}, 0x140) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc0c4) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc0c4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvfrom(r1, 0x0, 0x0, 0x40000103, 0x0, 0x0) shutdown(r1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3e8, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0) (async) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3e8, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x4040000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) userfaultfd(0x801) (async) r6 = userfaultfd(0x801) read(r6, 0x0, 0x0) 3m5.095201746s ago: executing program 5 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000100)={0x0, "1222d30eb42a0de2094147ee557a9a42"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000100)={0x0, "1222d30eb42a0de2094147ee557a9a42"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001100)={r2, 0x6, 0x4}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001100)={r2, 0x6, 0x4}) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents64(r4, &(0x7f0000000040)=""/27, 0x1b) getdents(r4, &(0x7f0000001f80)=""/4096, 0x1000) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x0, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001500)={@dev={0xfe, 0x80, '\x00', 0xb}, 0xffffffff, 0x2, 0x2, 0x1, 0xfffc, 0x8006}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'geneve1\x00', {0xba3}, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3m3.89213475s ago: executing program 5 (id=1770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0x1, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x18, 0x2, 0x9, 0x5, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x3c, 0x80, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}}, 0x24000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0x1, 0x80000000, 0x3, 0x11, 0xffffffff, 0x6, 0x9}, {0x40000000, 0x4, 0x6, 0x6, 0x53a, 0x7f, 0x157}, {0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x9, 0xffff}, {0x80000001, 0x5, 0x5, 0x6, 0x8, 0x400, 0xdd61}]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x6}, 0x4) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) r8 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x22, 0x10, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b8a545c4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x4, 0xd}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x3, 0xfc, 0x0, 0x8, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x8, 0x9c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3bf, 0xf4, 0x89, 0xa2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0xe}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xe, 0x3, 0x6, 0x40}, 0x23, &(0x7f0000000180)={0x5, 0xf, 0x23, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x7f, 0xd, 0x2e8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x2}]}, 0x8, [{0xbd, &(0x7f0000000540)=@string={0xbd, 0x3, "e471c0ae5a57d3c2d2b02f6a19fcca1c87a3ae05b85487704f5a8d968e3b97ca1e69bedc35fd11cb696c71f9ad769e7f3cede1a8cc14e53f8d2d6a6b4cf8d49f4859ff682104a20254d3b0b8aabb3874f833d2ef7bd7edf087044f1bae6cead60e02772019d1e1370734aed26d2db47d585840e85193cb797f443ea80972d7270b2a6ecc7c615d0d2e339c7090b35421dc9bec83db353bd19fc18ca9f8ba37ce8afaf9b14c06c6221bb6743230592f56f810c9165e2690c7658007"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42b}}, {0x46, &(0x7f0000000380)=@string={0x46, 0x3, "ae3e471a6adf60c129d644f89f5cd778f91c2c449b644616e6edd963ac07d0bf9e6c4901a04b760ffde118cd742b47b161f051ee305f7425ee02245e9b1367eb44913ce8"}}, {0xd5, &(0x7f0000000600)=@string={0xd5, 0x3, "caba93a4cbda9dd2c5d219d5d1a20fe1819a446073935b46db47c7fafeda6680e39d2dd1da64c1a52a306d5c77d9a83ba4bb7a3116a4dbddf70706a3757442c9b6a7f4a30d5c33b6a1f74858fac4343c6a144e6f531f8a7d6738132122ffdbdb52b67cc5ad195e196343900a4ec4f7caf2f009fab58ee09082c51234b3495b835a36d849297981e28dabb4c0212ece9f935943b1f63e3ff74fb4d8e397e16e5839a4d66cd6103015cccafbcf0201d839230b12ffaf28cd7b6fc000cf1f61cf7dab6d2f5340ca5b4060dcf60c99633478ef8f16"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x0, 0x10, 0xbb, {0xbb, 0x7, "58ddec2bcd5492455570f89527027282d51b9fe7c543466a6245cd6eef70d059bda74e0e1865c49e372984805931790b5ca6cb29a712b917ca73a6476df9eb78ea90b04ef88fddd16caa61bb40d064736b4cdffa8f9f59a09ab850caeb505b47cf2880be3876c9601b6de5b744436f35cfe84e58311bde87cdc840200b55560ab7087eced7d79a099bda21d9d4990b01ed7f10f63493ddd22d96ce1cf2a5b392f620319f46faf9a4c51daf25d7c73e8827087c27fdf7df5280"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x40, 0xb}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xa9}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x5f88, 0x4, 0x400, 0xc, 0xffff, 0x1, 0x2, 0x0, 0x0, 0xc, 0x80, 0x1}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b40)={0x20, 0x87, 0x2}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) 3m0.510153946s ago: executing program 5 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ptrace(0x10, 0x1) 2m45.454218783s ago: executing program 36 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ptrace(0x10, 0x1) 2m17.045229362s ago: executing program 8 (id=2266): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r0, 0x0, 0x6) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x2008844) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0xb5c, 0x4400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async) sendfile(r4, r4, 0x0, 0x8000) 2m16.999706113s ago: executing program 8 (id=2267): open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x100) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT], 0x31) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x3, 0x56, 0x80, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x3, 0x0, 0x1000, &(0x7f00003ac000/0x1000)=nil}) r7 = add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="7a985b13ee63b2f948db691c9d0bb4a3bb630fb579c3299dfeb6af3ddfb49e293e8e9a0c419e421bedb47fc9177996e2f2619212f7361aa62270a5", 0x3b, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) 2m16.833597646s ago: executing program 8 (id=2268): timer_create(0x5, &(0x7f0000000040)={0x0, 0x35, 0x2, @thr={&(0x7f0000000000)="84cb1bae9229afd0ce7e5fbe9cdba12be9ce616e10d13e81", &(0x7f00000000c0)="2b4af9a71fea15ec680ae84d5afdd30f9858b6c2359cd899f08ebbe315e3eade056b81c99665cbe2eb38b7722018d3b4fbe981acd43bd5779258b774fe58b82910f8140ba6eb2a542f6e97d31861b14b7101cca700d29fb5d5b0f704f5f38dee40eccba1b130efc6ac7ebedf0000000000000000"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{r1, r2+10000000}, {r3, r4+60000000}}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r5, 0x98b2f000) 2m16.782648927s ago: executing program 8 (id=2270): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)="84d84ab51da70ebd995dab1703654c9df912e14b9e44", 0x16}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2181007, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000740)=[{{&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="fd41f3af351a2f1d406add44d99030caf79862352204588f81f90025a78e18cdae21fa6e68b4d83b94ae5b5dadf5392a44739fb7da657709856e0205ff3305e5fa7a9f4807629ad3cd195e75870f455a819e8e3ab168352d93b736aa4351542ed27224855b5aa2434618e6f66b537bbf0d", 0x71}, {&(0x7f0000000400)="1b58d772e7c2f5c4baa7a05f1c74fb8a158af6e994f55144d6a579c3806f50dba9c1034536247c8247c2b916505ee3a5c243490fc58c17469c3049139ebaa81742e36448fe01537749e18c47701bc1e84f111ddc40bd6460a34203de86b11b662ef212a0466901153902b0220ef46066fc8330d00ddd95c39f61eddd00cc00677b37a4", 0x83}], 0x2, &(0x7f0000000500)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x38}}, {{&(0x7f0000000540)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)="65932596738147696ca42189bd0107ce624b0be6b95258c61b66afb12e115d74ed1d875b8531fdc7b544c68966ac6651fe621ef25bbdb85344d19a1a4ce8ba92bb2644e199d4c8b3ea1a0d2f410083853dbf6a69c1aaf0f2069a40c57f30b2807eed878ef490add38bb315083dd95aad23b99512db15403ae1c3f5de81cb908f72146135901b355b2d7704c503235da56b1aa12db6", 0x95}], 0x1, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0xc7, [@multicast2]}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x6}, {@private=0xa010101, 0x3}]}, @timestamp={0x44, 0x28, 0x25, 0x0, 0x2, [0x1, 0xece0, 0x195, 0x9, 0xa, 0x6, 0x2, 0x6465560a, 0x8]}, @ssrr={0x89, 0xb, 0x3c, [@empty, @local]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x1, 0xe, "cc82560c6f4c8e028882032c"}, {0x38f5f4134a104831, 0x11, "9bba6bee1a84ba4e0a0ebcdfe870f3"}, {0x5, 0x7, "e10d4da6dc"}, {0x1, 0x7, "df6c0b2a40"}, {0x6, 0x9, "8b82f16fcfe6ea"}, {0x1, 0xa, "3f4d3a1814117994"}, {0x2, 0x8, "7a4afb8754b9"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x130}}], 0x2, 0x2000c044) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) 2m16.584602531s ago: executing program 8 (id=2274): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, 0x0, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x40000002}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x56, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000100)}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)}, 0x40}], 0x0, 0x0, 0x0}) 2m16.508277803s ago: executing program 8 (id=2276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) io_setup(0x197, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb6000040"]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1fffffffffffff) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m16.414087105s ago: executing program 37 (id=2276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) io_setup(0x197, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb6000040"]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1fffffffffffff) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 10.614322951s ago: executing program 0 (id=3521): sysinfo(&(0x7f00000003c0)=""/5) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x9, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x4, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setns(r1, 0x24020000) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000180)="01010101", 0x4) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 8.757661018s ago: executing program 0 (id=3521): sysinfo(&(0x7f00000003c0)=""/5) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x9, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x4, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setns(r1, 0x24020000) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000180)="01010101", 0x4) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 6.813233506s ago: executing program 0 (id=3521): sysinfo(&(0x7f00000003c0)=""/5) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x9, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x4, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setns(r1, 0x24020000) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000180)="01010101", 0x4) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 4.937160363s ago: executing program 4 (id=3621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4117, 0x1015}], 0x4}, 0x10005e}], 0x1, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x84, 0x10001, 0x0, 0x2, 0x1c, 0x0, "cd2df20006bf907dc7ce39ddbeb2e1b99e219917165575434a3cfe573e8a14b7fa0e32091795824409fb406e71628db19730a64a29abc9e42bae8f3a78de9867", "fccddbe77974f4f17adf8b72ab1a844aa127d6b1f7b792ede2662154a41e15ec17ce4be61affa3c7a6f306ece1f0760ae82a754ba346449adb58e4fb093f9708", "b62ce48bd3466f6bd6428ce5c06a33c4437409364c4e9d4d15fcb040627b4609", [0x7, 0x1]}) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x49, &(0x7f0000001040)=0x40, 0x4) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) r6 = userfaultfd(0x1) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)) ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 4.885713594s ago: executing program 7 (id=3624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 4.817514576s ago: executing program 4 (id=3625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.810466955s ago: executing program 7 (id=3627): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x9f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r5 = getpid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000003e00)={0x2000000, [{0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x672, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3cc9, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7f1b, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}]}) r8 = syz_pidfd_open(r5, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r11, &(0x7f0000000140)={0x78, 0x0, r12, {0x254, 0x4, 0x0, {0x5, 0x10001, 0x7, 0x9, 0x65e6, 0xcf93, 0x3, 0x2, 0x6, 0xa000, 0x8000000, r13, r14, 0x2, 0x80}}}, 0x78) sendmsg$unix(r9, &(0x7f0000000380)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)="dff24b17a0fe68a64e82b6e6b44b9c537ef9cddaf6e05737811c8ca010909bbe16772a7eef6dc739184ee6b251450e99e66c307f915024d9b0364a5da39820868c880663927f460be90a68", 0x4b}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, r10, r14}}}], 0x20, 0x40800}, 0x48804) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000500)={0x1, 0x2e92, @status={[0x5, 0x39, 0xffffffffffffffff, 0x0, 0x5]}, [0x7, 0x4, 0xfff, 0x8000000000000001, 0x9, 0x4, 0x2, 0x3, 0x9, 0x4, 0x20, 0xc, 0x6, 0x1, 0x2, 0x800, 0xffffffffffffff7f, 0x6, 0x6, 0xff, 0x1, 0x633a, 0x4, 0x6, 0x40, 0x0, 0x4, 0x1, 0xa9d, 0xd, 0x7, 0x81, 0x2, 0x2, 0x3c, 0x0, 0x6, 0x30fc, 0x0, 0x8, 0x5, 0x85f9, 0x7f, 0xa438000000000000, 0x3, 0x101, 0x8, 0x3, 0x7fffffff, 0x400, 0x5, 0x6, 0x80000000, 0xba2, 0x1, 0x9342, 0x7, 0xfffffffffffffffd, 0xdef, 0x400, 0x0, 0x9, 0x6, 0xd5b]}) 4.753765107s ago: executing program 9 (id=3628): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000003840)={0x2716, 0x7, 0x2, 0x2000, &(0x7f0000fec000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12d7}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000003, 0x7, 0x449c, 0x401, 0x10000000000000a, 0x3, 0x8000000000000001, 0x0, 0x8, 0xffffffffffffff81, 0xb218, 0xfffffffffffffff9, 0x4, 0x8000000000000000, 0x100000000007], 0xe000, 0x200800}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000003800)={0x2, 0x5, 0x6000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x22080) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000003780)={0x0, 0x0}) recvmmsg(r8, &(0x7f00000035c0)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1, &(0x7f0000000300)=""/203, 0xcb}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/41, 0x29}], 0x3, &(0x7f0000000640)=""/157, 0x9d}, 0x7}, {{&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/187, 0xbb}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f0000000bc0)=""/105, 0x69}], 0x6, &(0x7f00000007c0)=""/28, 0x1c}, 0x9}, {{&(0x7f0000000cc0)=@can, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000d40)=""/45, 0x2d}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/227, 0xe3}, {&(0x7f0000001e80)=""/115, 0x73}, {&(0x7f0000001f00)=""/146, 0x92}, {&(0x7f0000001fc0)=""/123, 0x7b}, {&(0x7f0000002040)=""/72, 0x48}], 0x7, &(0x7f0000002140)=""/51, 0x33}, 0x2}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/30, 0x1e}, {&(0x7f00000021c0)=""/32, 0x20}], 0x2, &(0x7f0000002240)=""/33, 0x21}, 0x8}, {{&(0x7f0000002280)=@phonet, 0x80, &(0x7f0000003400)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/6, 0x6}, {&(0x7f0000003340)=""/172, 0xac}], 0x3}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003440)=""/35, 0x23}], 0x1, &(0x7f00000034c0)=""/240, 0xf0}, 0x7}], 0x7, 0x0, &(0x7f00000037c0)={r9, r10+10000000}) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r11, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.653448708s ago: executing program 4 (id=3629): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) write$nbd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1010) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8000000000800000, 0x412200) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x14, 0x1ffe, 0x0, 0x5, 0x0}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0x1000) 4.652906658s ago: executing program 7 (id=3630): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000440)="31c0dce0f61ce4294eb9d415630bcc61b6f670a73f4389ff83393da70dbc4c881cbf89f9d549fc4e47d64e915a931d6c8e3ceb7f520578ef89159c7ed0c7ce0d5724378e14253d2da1bb22b8f29569c2ccb120c44635e39966ea1f7d03746663372b0e0ba11767153991da559872139d9ae59c6846919c8de67d0a7e734f553a83a3f751e62bcc57bb2d044c2f5bc180009681660098910ac4aef52eee9ad3f091706791aac2f34d2c0e5c16b8f9d088ee7853b6da4d2e9523303448f2daba9423da980a5a96675d5b78d7f6f81d5052", 0xd0}, {&(0x7f0000000540)="13a1c20f84f250c8c39621cc588147c12e0bad0b5a229fd662e16bff01694758db56c54a5c22e809e4e4cafcdc2e7b75852b4df2e64df68b7de86b9c732b9b6ff1cbd5cb0b9f745fca472d31e8ec070035c31bcc836d1a699bdfd1a8782f350f9b52d5d490c3d48108868b88ac82e11fcb745b6448d38beb17b0bc6393f80fb9bd9d87a1840f6b6006ae1f949742024f0c48789cc80361ae1c3ad60fc657db17ee1811982dbd3d0142f58fb1732661cacc89f14af954ee6d269c6aaebf476f4cbfec3a7172569b80b69efc986da27484", 0xd0}, {&(0x7f0000000740)="d93b57fb029d482d2b0e160bfd8079abb3f6af54c95118b0bb784942b3b564464d9e694ae1c0e4bcb9885d7ec9c577983ca09dec3ecf76066d805a4c9113d8be44739a038ecfa0a5577d039bb6f6cf4501a74bccdd2a500968a9ca8fe6266b624e291f896c67184bce361b422538fcfb234b8516159352beb5022766f79b92263cd71129e7c2f345ca2831fea7275d49c5000f867d0473ace787fd387eb29e6572c263e8415d7c55212cade741488a78853b33cd5bec7bb88d9454d5efb0da81b1f03ee480c4127a814a8eb2a98e4fd27820014108bcd9865f2b85e0d5ed381460df04", 0xe3}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000000180)="d56bc44a83c3a4c471ccc3f2e777e96af9386f7d920fcb974768adaebef92f844041d87a6a2f775c206916c4c1f40ec03427d8980403b03409ef6ef4", 0x3c}, {&(0x7f00000001c0)="22509e5d39b26bdb1cd0359486df9979bf753f4e33f83e2a63c839d1d74055c4b23678f9a994d875108480f9fa7fbab2f61fa00bb317a25e425fe2888a781b54f4f14d425cf476f80abb", 0x4a}, {&(0x7f00000002c0)="c5d8f469590c19615f073cb0fe", 0xd}, {&(0x7f0000000640)="c4a9f15f2180d997006c529a37f5ff0a68f5f6af25ff7bc72723e210071c26547c5341e6f8837660202ca7833340078a26d60cd1e0181af41d3adc2ac3f611d55c9e71666b01476bf2173417380c0a423ac0f28c4806c3c92d8a0e6a607670f0530345c959092db2b4ae7483139d9d7db91fd7405508633160f122968d43028856ac85fc4416193d0c58a9fa2a2cda57f8e9a09198b5e4556d0f119d5f9dfc3d4130a778dc1fde21b680b64f857ebb120b5932ff95074fd15a0e4944", 0xbc}, {&(0x7f0000000840)="2cbf3ac66cbddff92beb147fad5edc60a706cec12a00fb8ee74cabd3a2b170b1708ac901c84a139d66c25c25e0ea76c256aee1bcef195ac57d181b1d00846256239cf5a51734d60b86a64f2ba44ca5d2128c1e3eda96b38c8963d844fbd85d9e11de9ba4181b1bf13e6d27d5731fe8fcffb6a12e0c998020ced3f74b5ba66b4be39a4dbbd2a7b401bd42b4497dadd743833501e232eb06ddbd447a98ad7609b47dab51e4546e4d9d8794d0990e9e2ad2cf83cdfff9e958c82520400c13509bae33ccf1990b3a592057773eb973e5dafea473cbf714778dab16227e8ec52840f0a89fc6b281754b670a28723d3316659ff62c415e7f26", 0xf6}], 0x9, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0xc040) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x17) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}}], 0x2, 0x609d8d5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000001d40)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000280)=0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)={0x24, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x32, 0x0, 0x0, @pid}, @nested={0x4, 0x12f}]}, 0x24}], 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 4.650596938s ago: executing program 0 (id=3521): sysinfo(&(0x7f00000003c0)=""/5) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x9, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x4, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setns(r1, 0x24020000) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000180)="01010101", 0x4) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2.649653358s ago: executing program 4 (id=3631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) clock_adjtime(0x0, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.648662038s ago: executing program 9 (id=3632): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_pwait(r1, &(0x7f0000000540)=[{}], 0x1, 0x200, 0x0, 0x0) (async) epoll_pwait(r1, &(0x7f0000000540)=[{}], 0x1, 0x200, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 2.643776298s ago: executing program 7 (id=3633): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c052}, 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x800000d3c2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1400, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9"], 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') r6 = syz_io_uring_complete(0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x85b83000) 2.5335005s ago: executing program 7 (id=3634): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x1002, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000002880)={0x0, 'veth0_vlan\x00', {}, 0xfffa}) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x7c00000000000000, 0x4000, 0x7, 0x2, 0x16}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002"], 0x1a0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a"], 0x20}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.500653421s ago: executing program 9 (id=3635): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_open_dev$loop(0x0, 0x7, 0x180862) (async) syz_open_dev$loop(0x0, 0x7, 0x180862) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) 2.293452185s ago: executing program 0 (id=3521): sysinfo(&(0x7f00000003c0)=""/5) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x9, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x4, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setns(r1, 0x24020000) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000180)="01010101", 0x4) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 210.702856ms ago: executing program 4 (id=3636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000940)={0x1, 0x0, [{0x7, 0x1, 0xf, 0x0, 0x0, 0x2, 0x1000}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r3) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000240)={0x4, 0x0, [{0xc0000001, 0x2, 0x2, 0x7, 0x9, 0x8, 0x2}, {0x6, 0x1, 0x5, 0x7, 0xee, 0x2, 0x2}, {0xc0000000, 0x3, 0x2, 0x33c9, 0x2, 0x7, 0x8}, {0x80000007, 0x0, 0x5, 0x9, 0x80000000, 0xffff, 0x90}]}) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r3, 0x0, 0x0) (async) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x0, 0x5003) (async) fsopen(&(0x7f0000004600)='bdev\x00', 0x0) (async) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0xfffffffd}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r5, r5, 0x0, 0x8000) 169.530277ms ago: executing program 9 (id=3637): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x6, 0xffffff81) pread64(r0, &(0x7f0000001200)=""/4092, 0xffc, 0xd37) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) 168.814727ms ago: executing program 7 (id=3638): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40f01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x40004, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532302c76657273696f6e3d3970323030302e752c63616368653d7265616461686561642c69676e6f726571762c616669643d3078303030303030303030303030303030372c6673636f6e746578743d726f6f742c6f626a5f726f6c653d3a212c6673631a70990454f2b3ae84bb6f6e746578743d73746166665f752c646f6e745f686173682c736d61636b66736465663d2f6465762f70746d78002c00"]) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001240)={0x6, 0x0, [{0xdddd1000, 0x9b, &(0x7f0000000dc0)=""/155}, {0xd000, 0x64, &(0x7f0000000e80)=""/100}, {0x3000, 0x25, &(0x7f0000000f00)=""/37}, {0x10000, 0xcc, &(0x7f0000000f40)=""/204}, {0x0, 0xc3, &(0x7f0000001040)=""/195}, {0x4, 0xc7, &(0x7f0000001140)=""/199}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000000c0)=@x86={0xa4, 0xd, 0x7, 0x0, 0xa, 0xfe, 0x4, 0x6e, 0xfe, 0x2, 0x30, 0x4, 0x0, 0x9, 0x8, 0xfc, 0x2, 0x1, 0x3, '\x00', 0x6, 0x7}) syz_usb_connect(0x3, 0x930, &(0x7f0000000280)={{0x12, 0x1, 0x340, 0x6b, 0x16, 0x6, 0x28, 0x5e3, 0x503, 0xc111, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91e, 0x4, 0x1, 0xfd, 0x40, 0x5, [{{0x9, 0x4, 0x25, 0x7, 0x9, 0x90, 0x6, 0x4f, 0x5, [@generic={0xe1, 0xc, "a9a4b2b11d3c2683df491c9406b94b1195bb4022e39a9e49dfe1a2996935cd7537cc9078818043ee50c2f1cdbb7f1c902044cc3e1cde4cf8e889fc10c94630d2fc7e870a6a4347c1715fe213b717e20dacd23c4283fd707fac2c24e45d20f1387c3e8cf83d2a2f24feb3b6e76822bb6ca8be96bcc85336c47b44733e36ba5c31cd74b0aa7590765760703b6c3d3b40e43334fdf92e8a8d87c126b77b5a581c4a00e8a81006f2f024dc347a86cd5516622d71665c4e9291144e70a6334b82bf23158b35a0f02c94104852f689ee29aa6a0aef7a71c8cd6078aacbf3d1a5c805"}], [{{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x8, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x57, 0x0, 0x3}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0xcf, 0x85, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}, @generic={0xb0, 0x6, "8d00c1bf71c43ed3e458cc82178e885051a99ac683997ee398d9ddd9336fe6ad3afc5e9dd4eec872c813fd32dbd520507169bc947c4f471769d6d3214355d779b2d8b27ad45e58fc6901d85bed60fa763cfbe014811f0ebeb1d13f5a985de5936e654a958c1a7284295275cb9bb9dc126db86e48d136aa437ea026f06cf8d100d20edb83be72c2355edeb04966d128a52ae741ec03530af69af32008bdda3a7392355ee0f3deb9ee09a7362ee763"}]}}, {{0x9, 0x5, 0xd, 0xe, 0x200, 0x7, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xc000}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0xb, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7f}, @generic={0xa5, 0xa, "224496f0e13e648a1648d894ec6992b76c04cfa6445c595edfa7a260df3d3473588bfc3eca7c84c781e347244cb2b848871b43c00f3d1ed17e5857e0f7a4032e6878b72f4a9c80e24f32710d7a19bffe57f56a5bd8ded3f459e9cbe2639c441f9e0ade430327fbadff17a70dbc2b350a40e6606f0484c07878c40070b5ee74bfa663c66a18284c9c6ff1c8256b828ea1392cadf41b5cc71a35b4a2c4d41c8a7b961341"}]}}, {{0x9, 0x5, 0x4, 0x3bd1665c7e024265, 0x40, 0x8, 0x1, 0xdc}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0xe, 0x10}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0x5a, 0x9, 0xd, 0xff, 0x39, 0xc0, 0xb7, [], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x9b, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x18, 0x100}, @generic={0x38, 0xc, "575b020a23884f7818fbc0f642b7c53fce6b95e5abf6e5bb53de4fdc1e9d9b84e0416d7cf1a34846a88f6939d53a9f3e9d8be57c6eb9"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x6, 0xfb}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xe3, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x285}, @generic={0x7e, 0x24, "9dc336cea566f4e449c159c36bc5d8e7a7b001148fa870ea157a3c12ac16514abef3297704d7b53336e419f957522756d84ede62cd1b03a51a76d74b4611c249e126934023b4e669071ab639717449a1e5e8a9bfdf11206a70e5805b0312e147fc5e3a9a5021168edcc230c9b51808a03497f68d1a06e41dca673a9e"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x997dcc4f4bf6ee84, 0x68, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0xfb, 0x1c, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0x56, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7c, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xf1, 0x3, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x50, 0xd, 0xe8, [@generic={0x53, 0x23, "20a465a2d505a812a5076d8340c06415c8b7baa3a5ace9ceeb54bbec92357966909689f2d250c64a1d28c0deb00543b4a5a3858cd8c2a42f55ea46dc4a1df2141c33269893adb6f63ce80707fd5fe545a4"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6c, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x6, 0x8, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xfb, 0x5, 0xfd}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x1, 0x8e, 0x9, [@generic={0x13, 0x10, "08b78e678a3a9186cfe651ca79193ba3d4"}, @generic={0x44, 0x24, "82dfee20d884e81cc45f82749aab117d5cd04eaf8a3ffbbf6d3595a032f69367664a04be75916e784e4b93bfd253d7a72a699f8accbab6ec93f9d28aa9df22b676a5"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x14, 0x1, 0x39, [@generic={0x102, 0x4, "fb6746bb037270204607df8f0cf1908c091d96d921160e5af382d3f70a50bef2cf1a9eee737723bbcc9b56ef13831f623f5027b0ea220a3509148e6ea1d0adfb33e1d0d0ad6574cd4bebd62f151a99c50f349341a89579d92fc6fa9b3086fb252c66f296e3874156feb8833b694dd60d426b6fa1498ef32f131ceed2e6fe6e800422f39729f677652f4242200560e768bfc0cad38a95ff0709dab26cd323235232f1c6e088e5f1dbc94d9a8d2bd170ae784d8e85b44b299fd63901be5969c6b3141d1781046eeb71676be14d6ec09b656400fc65612eac11d28e9346bcd14c4be94f18fda5a76ffb6e2da4ab433367d971594bcba5e6f30eda78be9a8503e829"}]}}]}}, {{0x9, 0x4, 0x38, 0x80, 0x2, 0x96, 0xc8, 0x88, 0x8, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfb00, 0xfb20, 0x0, "a579"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x4, 0x7, 0x3, "c1e2d7339df6"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0xd, "0cf23954cd074f"}]}], [{{0x9, 0x5, 0x6, 0x1, 0x0, 0x9, 0xd, 0x6, [@generic={0x8e, 0x5, "02a511f89dd1a6467c91e8a70db98d65461411c3895e54b296bbbfa98f263eff87e06ae5cc6d22857a75e7e2431cce7dc82112eefbbba5039223a65e75ffcfc3200ed30825dbc48a70226fb4f8fb2dec34e74e30db48e8b5a64fdd44b287e57923d1f7ebc57ff4e48af2042db8ce12ebefb61c195471320a99e5f42f2536debd2b5f7af6719f57f31f0eb555"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x47f7}]}}, {{0x9, 0x5, 0x16f36f7beff1f37, 0x0, 0x400, 0xa, 0xc, 0x40, [@generic={0x3d, 0xf, "39023554eae0a1466ea57db6de0cbd64e7b58f95a76476e0ea43a58bfa1e4c443fe5a63e48fc588cd0e8c6910372647ec9b40e1a913f168766cbc7"}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x6, 0x2}]}}]}}, {{0x9, 0x4, 0x3a, 0x80, 0x7, 0x1a, 0x5e, 0x3, 0x7, [@hid_hid={0x9, 0x21, 0xd9, 0x3, 0x1, {0x22, 0x5cd}}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0x5}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0xe, 0x3, 0x2, [@generic={0x56, 0xd, "63e8e2e207c2d46d7c76f18c254d2b009ceef5cfc2601ef66bd8a677452639c3652aeafb780451a35a5cecd12070843bb3e15c15b42eb882d8665eee3581b67b5a9f29d74e9fc9b108717be21fc6b1c76c264d29"}]}}, {{0x9, 0x5, 0x7, 0x16, 0x238, 0x80, 0x7, 0x44, [@generic={0x7c, 0x10, "815301fff395d75ba31620395122e3584cb14b277f69cca87703d879c7d6e324c6ebe9408f454f840697c8b0d59b26d08698b538358929c60001c9cafb418394e87e27bdb327a50441b6aae925490026c2b666fa61f26be40e828d636622e8f8da8fb2b6b45dc59b6b0aa8b588c4a76c77e5442274711e795935"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x6, 0xe1, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x6, 0x7}, @generic={0x53, 0x3, "abb6293db34ed6b4161fdad6a9340c9d14ce22a8e8603d488f97c59cc46ce6deefa61fce8afaf8cc0a2f4e83eab40a43c1713c8fef37d9768b66580b07f0a9176ad12789d8139f04bd0a01a4b17ca74f6b"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x0, 0x7, 0x8, [@generic={0xb, 0x3, "b0ca1019b2e4d9e93f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x4, 0x40, 0xa, [@generic={0xad, 0xa, "39080d14bed62c0c3060a75c5f5a87a0ec7cd3fca2241962316c510d8cccf2205e1a142b6e7a71603784910798fd9bfa2ca5520aa8d5e739800d441a54ae4743a0dc29f4f8bc56163cba9d5e05f9d97fd452168ed0b4f9740f787b49c4d121395e406e2a0e7a09d0c284437921b2799b9f60c70d7ebcbf7caf4764cf775a3954d3f5c9e2b8720efd8a3df78ca535b4ec58e57b299d3ec6693b6494aa5e0356794ced1cd0f190c635c1fc78"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xff, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0x3, 0x8, 0x3, 0x8, 0x10}, 0xf6, &(0x7f0000000c00)={0x5, 0xf, 0xf6, 0x2, [@generic={0xe6, 0x10, 0x2, "9ee89d2c0efa2ba29ee3ee701f133a862347295b19dc5676578cf2b5d7c414761dda5f7fe3c4e8f82a80f5768ade5b07676d71524328c3cddefb1bbe28e4fe9e661735af4cb6ea1495e27f4230d08d35ee5ca6616c4027a6f3a2b12430b31182550d3719f762d94bccb0d2c7af4c13c5aabb681f5de0b9300ff826a80152fcf8148083c8fefa4d21a3c4eb11970e0fb8ddeb157b7f5a3e6b549210f38e1a0fc4b952ce0fc459c115a9e84a6eaa26aef53c7e2293481b5ff4e67049eef859a3bf696a20e0f67c5e9b0d40ce281fb6bd8f11d3faaee74b333a7a04df1dbc89e8a64cb85f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0x75, 0x2, 0x5, 0x1}]}, 0x1, [{0x70, &(0x7f0000000d00)=@string={0x70, 0x3, "d18886a7ba4bf1d35cb5cc6a32006e82308b89819dee9e921fbb937967be0d68222d6c60c8296e7f30f7d1f32d8a1b2ae0b52235deb2c924c375859af8e1aca954c736f9bd7492236610f3134a6e1d836bbf04cc2f5907bed8cebd4eb372e5c3103f44df80fcc66d6e9e896a7248"}}]}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) 168.473547ms ago: executing program 9 (id=3639): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmsg(r1, 0x0, 0x40012140) (async) getpeername$packet(r1, 0x0, &(0x7f0000007480)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8990, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303067f82369411ea0c430303830302c64656661756c745f7065726d69"]) (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) lremovexattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$UFFDIO_API(r5, 0xff03, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, 0x0) 104.947358ms ago: executing program 4 (id=3640): getuid() r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffa, 0x0, 0x81, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x9, @in=@private=0xa010101, 0x3501, 0x0, 0x0, 0xb7, 0x2, 0x0, 0x8}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffa, 0x0, 0x81, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x9, @in=@private=0xa010101, 0x3501, 0x0, 0x0, 0xb7, 0x2, 0x0, 0x8}}, 0xe8) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) eventfd(0xb) (async) r4 = eventfd(0xb) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x7ff, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101}}}}) getpid() (async) getpid() r9 = syz_open_procfs$pagemap(r6, &(0x7f0000000140)) close_range(r4, r9, 0x0) (async) close_range(r4, r9, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) 50.654369ms ago: executing program 9 (id=3641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x5000, 0xdddd1000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x0, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x8, 0x0, 0xeeef0000, [0x4, 0x401, 0x8, 0x4]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3521): sysinfo(&(0x7f00000003c0)=""/5) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x9, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x4, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setns(r1, 0x24020000) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async, rerun: 32) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) (rerun: 32) write(r7, &(0x7f0000000180)="01010101", 0x4) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) kernel console output (not intermixed with test programs): strings: Mfr=1, Product=228, SerialNumber=2 [ 241.425446][ T65] usb 5-1: Product: syz [ 241.432287][ T65] usb 5-1: Manufacturer: syz [ 241.437067][ T65] usb 5-1: SerialNumber: syz [ 241.450962][ T65] usb 5-1: config 0 descriptor?? [ 241.708759][ T7869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 241.708805][ T7869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 241.723684][ T7871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.748425][ T31] rust_binder: 7868: removing orphan mapping 0:8 [ 241.774555][ T7876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19660 sclass=netlink_tcpdiag_socket pid=7876 comm=syz.4.2359 [ 241.811830][ T7876] binder: Bad value for 'stats' [ 241.857431][ T7884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.917720][ T7885] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 242.070844][ T2832] Bluetooth: hci1: Frame reassembly failed (-84) [ 242.318685][ T36] kauditd_printk_skb: 290 callbacks suppressed [ 242.318705][ T36] audit: type=1400 audit(1759051239.977:30796): avc: denied { create } for pid=7889 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.345857][ T36] audit: type=1400 audit(1759051239.977:30797): avc: denied { write } for pid=7889 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.366536][ T36] audit: type=1400 audit(1759051239.977:30798): avc: denied { read } for pid=7889 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.402325][ T36] audit: type=1400 audit(1759051239.977:30799): avc: denied { read } for pid=7889 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.431422][ T36] audit: type=1400 audit(1759051239.987:30800): avc: denied { create } for pid=7889 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.437787][ T7894] fuse: Bad value for 'fd' [ 242.458173][ T36] audit: type=1400 audit(1759051239.987:30801): avc: denied { write } for pid=7889 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.478754][ T36] audit: type=1400 audit(1759051240.097:30802): avc: denied { mounton } for pid=7891 comm="syz.0.2373" path="/222/file0" dev="tmpfs" ino=1182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.551194][ T36] audit: type=1400 audit(1759051240.207:30803): avc: denied { create } for pid=7898 comm="syz.0.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.572913][ T36] audit: type=1400 audit(1759051240.217:30804): avc: denied { write } for pid=7898 comm="syz.0.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.594466][ T36] audit: type=1400 audit(1759051240.217:30805): avc: denied { read } for pid=7898 comm="syz.0.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.714386][ T7906] /dev/rnullb0: Can't open blockdev [ 242.772919][ T7908] securityfs: Unknown parameter 'favordynmods' [ 242.892900][ T7910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:696 [ 242.932878][ T1099] Bluetooth: hci0: command 0x1003 tx timeout [ 242.932881][ T1067] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.987295][ T7914] overlayfs: missing 'lowerdir' [ 243.244857][ T7924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.245964][ T7924] rust_binder: Failed to allocate buffer. len:184, is_oneway:false [ 243.345314][ T7929] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 243.361554][ T7929] rust_binder: Write failure EINVAL in pid:712 [ 243.404460][ T7933] random: crng reseeded on system resumption [ 244.045800][ T65] usb 5-1: USB disconnect, device number 62 [ 244.142255][ T1109] udevd[1109]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.146236][ T1067] Bluetooth: hci1: command 0x1003 tx timeout [ 244.164183][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 245.139248][ T31] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 245.304204][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.317198][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.329270][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.343295][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.352931][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.363279][ T31] usb 5-1: config 0 descriptor?? [ 245.613470][ T7971] SELinux: security_context_str_to_sid () failed with errno=-22 [ 245.780028][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 245.801880][ T31] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 245.823717][ T31] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 246.129055][ T31] usb 5-1: USB disconnect, device number 63 [ 246.465586][ T7997] binder: Bad value for 'defcontext' [ 246.963776][ T8025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56 [ 247.213568][ T45] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 247.374641][ T36] kauditd_printk_skb: 638 callbacks suppressed [ 247.374661][ T36] audit: type=1400 audit(1759051245.024:31444): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.377251][ T45] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 247.381076][ T36] audit: type=1400 audit(1759051245.024:31445): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.408041][ T45] usb 10-1: config 1 has no interface number 0 [ 247.414397][ T36] audit: type=1400 audit(1759051245.024:31446): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.440430][ T45] usb 10-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.445822][ T36] audit: type=1400 audit(1759051245.024:31447): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.471509][ T45] usb 10-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.481907][ T36] audit: type=1400 audit(1759051245.024:31448): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.511710][ T45] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 247.517390][ T36] audit: type=1400 audit(1759051245.054:31449): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.543852][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.551513][ T36] audit: type=1400 audit(1759051245.154:31450): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.577666][ T45] usb 10-1: Product: syz [ 247.584724][ T36] audit: type=1400 audit(1759051245.154:31451): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.610831][ T45] usb 10-1: Manufacturer: syz [ 247.613994][ T36] audit: type=1400 audit(1759051245.154:31452): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.640158][ T45] usb 10-1: SerialNumber: syz [ 247.643813][ T36] audit: type=1400 audit(1759051245.154:31453): avc: denied { ioctl } for pid=8021 comm="syz.9.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.683275][ T8024] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 247.838514][ T8033] netlink: 'syz.7.2418': attribute type 16 has an invalid length. [ 247.846522][ T8033] netlink: 'syz.7.2418': attribute type 3 has an invalid length. [ 247.854308][ T8033] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.2418'. [ 247.904134][ T8035] veth1: entered allmulticast mode [ 247.923891][ T8035] veth1: left allmulticast mode [ 247.992429][ T65] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 248.011001][ T65] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.219517][ T8046] vlan0: entered promiscuous mode [ 248.229510][ T8046] vlan0: entered allmulticast mode [ 248.234788][ T8046] veth0_vlan: entered allmulticast mode [ 248.244944][ T8046] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 248.949496][ T8056] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 248.972886][ T8056] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.242197][ T8071] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 249.242223][ T8071] rust_binder: Read failure Err(EFAULT) in pid:74 [ 249.939909][ T8098] netlink: 'syz.0.2441': attribute type 10 has an invalid length. [ 249.955849][ T65] usb 10-1: USB disconnect, device number 5 [ 250.134026][ T8114] overlayfs: failed to clone upperpath [ 250.259638][ T8120] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2448'. [ 250.272713][ T8120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2448'. [ 250.323533][ T8123] tipc: Started in network mode [ 250.328574][ T8123] tipc: Node identity 02e9e7f480ec, cluster identity 4711 [ 250.335832][ T8123] tipc: Enabled bearer , priority 0 [ 250.347778][ T8120] 9pnet_fd: Insufficient options for proto=fd [ 250.355376][ T8123] tipc: Disabling bearer [ 250.700988][ T8133] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 250.889151][ T2822] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.647515][ T8159] rust_binder: Error while translating object. [ 251.647572][ T8159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 251.653917][ T8159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:96 [ 251.708869][ T8161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 251.718175][ T8161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:98 [ 251.887577][ T8170] netlink: 'syz.0.2463': attribute type 2 has an invalid length. [ 251.904612][ T8170] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2463'. [ 251.922123][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 251.931143][ T8170] erspan0: default FDB implementation only supports local addresses [ 252.406272][ T36] kauditd_printk_skb: 524 callbacks suppressed [ 252.406292][ T36] audit: type=1400 audit(1759051250.045:31978): avc: denied { create } for pid=8197 comm="syz.0.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.433148][ T36] audit: type=1400 audit(1759051250.045:31979): avc: denied { setopt } for pid=8197 comm="syz.0.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.452815][ T36] audit: type=1400 audit(1759051250.075:31980): avc: denied { ioctl } for pid=8190 comm="syz.4.2469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.484463][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 252.494189][ T36] audit: type=1400 audit(1759051250.135:31981): avc: denied { create } for pid=8201 comm="syz.0.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.522001][ T36] audit: type=1400 audit(1759051250.145:31982): avc: denied { ioctl } for pid=8190 comm="syz.4.2469" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.563341][ T36] audit: type=1400 audit(1759051250.195:31983): avc: denied { create } for pid=8201 comm="syz.0.2472" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.563347][ T65] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 252.607397][ T36] audit: type=1400 audit(1759051250.195:31984): avc: denied { execmem } for pid=8201 comm="syz.0.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.626910][ T36] audit: type=1400 audit(1759051250.195:31985): avc: denied { read write } for pid=3797 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.677022][ T36] audit: type=1400 audit(1759051250.195:31986): avc: denied { read write open } for pid=3797 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.725664][ T36] audit: type=1400 audit(1759051250.195:31987): avc: denied { ioctl } for pid=3797 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.752038][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 252.773654][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 252.795994][ T65] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.817687][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.844994][ T65] usb 5-1: config 0 descriptor?? [ 252.907688][ T8209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.907720][ T8209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:773 [ 252.954104][ T1067] Bluetooth: hci0: command 0x1003 tx timeout [ 252.954968][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.054692][ T8219] rust_binder: Write failure EFAULT in pid:135 [ 253.213050][ T8229] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 253.219385][ T8229] rust_binder: Error while translating object. [ 253.228200][ T8229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.234548][ T8229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 253.260593][ T65] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 253.301239][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input29 [ 253.404098][ T65] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 253.655092][ T332] usb 5-1: USB disconnect, device number 64 [ 253.790028][ T8241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.790389][ T8241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.875542][ T45] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 254.049116][ T45] usb 10-1: unable to get BOS descriptor or descriptor too short [ 254.061194][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 254.072625][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 254.091519][ T45] usb 10-1: string descriptor 0 read error: -22 [ 254.105630][ T45] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.117284][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.129833][ T8238] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 254.146589][ T8238] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 254.346645][ T8264] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.390736][ T8238] rust_binder: Error while translating object. [ 254.404894][ T8238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.417677][ T8238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 254.447905][ T45] usb 10-1: USB disconnect, device number 6 [ 254.494198][ T8270] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 254.494235][ T8270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:111 [ 254.876676][ T65] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 255.056964][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 255.066919][ T8297] can0: slcan on ptm0. [ 255.069717][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.086945][ T65] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 255.094715][ T65] usb 5-1: can't read configurations, error -71 [ 255.137969][ T8296] can0 (unregistered): slcan off ptm0. [ 255.185039][ T2822] Bluetooth: hci0: Frame reassembly failed (-84) [ 255.521406][ T8320] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2511'. [ 255.530921][ T8321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2511'. [ 255.946483][ T8337] /dev/rnullb0: Can't open blockdev [ 256.288467][ T65] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 256.438701][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 256.451696][ T65] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 256.461030][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.469485][ T65] usb 5-1: Product: syz [ 256.475605][ T65] usb 5-1: Manufacturer: syz [ 256.480717][ T65] usb 5-1: SerialNumber: syz [ 256.495754][ T65] r8152-cfgselector 5-1: Unknown version 0x0000 [ 256.505284][ T65] r8152-cfgselector 5-1: config 0 descriptor?? [ 256.520348][ T8343] overlayfs: failed to clone upperpath [ 256.596601][ T8345] 9pnet_fd: Insufficient options for proto=fd [ 256.734208][ T65] r8152-cfgselector 5-1: Needed 2 retries to read version [ 256.741535][ T65] r8152-cfgselector 5-1: Unknown version 0x0000 [ 256.747883][ T65] r8152-cfgselector 5-1: bad CDC descriptors [ 256.980513][ T45] r8152-cfgselector 5-1: USB disconnect, device number 67 [ 257.199623][ T1067] Bluetooth: hci0: command 0x1003 tx timeout [ 257.200580][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.294058][ T8359] rust_binder: Error while translating object. [ 257.294102][ T8359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.300350][ T8359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 257.419747][ T36] kauditd_printk_skb: 587 callbacks suppressed [ 257.419783][ T36] audit: type=1400 audit(1759051255.039:32575): avc: denied { ioctl } for pid=7585 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.470032][ T36] audit: type=1400 audit(1759051255.088:32576): avc: denied { read } for pid=8363 comm="syz.9.2529" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.531862][ T36] audit: type=1400 audit(1759051255.098:32577): avc: denied { read open } for pid=8363 comm="syz.9.2529" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.565250][ T36] audit: type=1400 audit(1759051255.098:32578): avc: denied { create } for pid=8363 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.626949][ T36] audit: type=1400 audit(1759051255.098:32579): avc: denied { read } for pid=8363 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.651555][ T8372] rust_binder: Write failure EFAULT in pid:122 [ 257.671678][ T36] audit: type=1400 audit(1759051255.098:32580): avc: denied { write } for pid=8363 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.699225][ T36] audit: type=1400 audit(1759051255.098:32581): avc: denied { associate } for pid=8363 comm="syz.9.2529" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.737762][ T36] audit: type=1400 audit(1759051255.098:32582): avc: denied { write } for pid=8363 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.775891][ T36] audit: type=1400 audit(1759051255.098:32583): avc: denied { write } for pid=8363 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.796189][ T36] audit: type=1400 audit(1759051255.098:32584): avc: denied { write } for pid=8363 comm="syz.9.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.790964][ T8420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2545'. [ 258.791333][ T8422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.808118][ T8422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 259.153080][ T2832] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.955631][ T8483] 9pnet_fd: Insufficient options for proto=fd [ 261.179317][ T8512] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 261.203532][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.203532][ T1067] Bluetooth: hci0: command 0x1003 tx timeout [ 261.508095][ T8540] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2586'. [ 262.134349][ T45] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 262.298031][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.319940][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.321630][ T8546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.331796][ T8546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 262.338532][ T8546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:805 [ 262.353250][ T45] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 262.401053][ T8550] binder: Bad value for 'defcontext' [ 262.414296][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.428943][ T45] usb 5-1: config 0 descriptor?? [ 262.440790][ T36] kauditd_printk_skb: 422 callbacks suppressed [ 262.440808][ T36] audit: type=1400 audit(1759051260.064:33007): avc: denied { ioctl } for pid=8543 comm="syz.4.2587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.464650][ T8552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=8552 comm=syz.9.2590 [ 262.473238][ T36] audit: type=1400 audit(1759051260.064:33008): avc: denied { ioctl } for pid=8543 comm="syz.4.2587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.501505][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2590'. [ 262.509807][ T36] audit: type=1400 audit(1759051260.064:33009): avc: denied { ioctl } for pid=8543 comm="syz.4.2587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.543816][ T36] audit: type=1400 audit(1759051260.064:33010): avc: denied { ioctl } for pid=8543 comm="syz.4.2587" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.569376][ T36] audit: type=1400 audit(1759051260.194:33011): avc: denied { create } for pid=8553 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.589173][ T36] audit: type=1400 audit(1759051260.194:33012): avc: denied { bind } for pid=8553 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.609663][ T36] audit: type=1400 audit(1759051260.194:33013): avc: denied { create } for pid=8553 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.629488][ T36] audit: type=1400 audit(1759051260.194:33014): avc: denied { setopt } for pid=8553 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.649183][ T36] audit: type=1400 audit(1759051260.194:33015): avc: denied { write } for pid=8553 comm="syz.9.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.669049][ T36] audit: type=1400 audit(1759051260.194:33016): avc: denied { write } for pid=8553 comm="syz.9.2591" lport=53829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.251857][ T45] hid-led 0003:0FC5:B080.0015: probe with driver hid-led failed with error -32 [ 263.262394][ T45] usb 5-1: USB disconnect, device number 68 [ 263.871060][ T8576] fuse: Unknown parameter 'groUp_id' [ 264.067169][ T8591] overlayfs: failed to clone upperpath [ 264.110593][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2604'. [ 265.786398][ T2822] Bluetooth: hci0: Frame reassembly failed (-84) [ 266.153341][ T8694] batadv_slave_0: entered promiscuous mode [ 266.162112][ T8693] batadv_slave_0: left promiscuous mode [ 266.197638][ T8698] tipc: Enabling of bearer rejected, failed to enable media [ 267.133200][ T8712] __vm_enough_memory: pid: 8712, comm: syz.4.2641, bytes: 18014402804453376 not enough memory for the allocation [ 267.433617][ T8730] overlayfs: failed to resolve 'lowerdir=./file0': -2 [ 267.457597][ T36] kauditd_printk_skb: 261 callbacks suppressed [ 267.457616][ T36] audit: type=1400 audit(1759051265.070:33278): avc: denied { associate } for pid=8724 comm="syz.9.2646" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 267.498048][ T36] audit: type=1400 audit(1759051265.080:33279): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.518129][ T670] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 267.533242][ T36] audit: type=1400 audit(1759051265.150:33280): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.564150][ T36] audit: type=1400 audit(1759051265.150:33281): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.590079][ T36] audit: type=1400 audit(1759051265.150:33282): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.617435][ T36] audit: type=1400 audit(1759051265.150:33283): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.642547][ T36] audit: type=1400 audit(1759051265.150:33284): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.658209][ T670] usb 5-1: device descriptor read/64, error -71 [ 267.667726][ T36] audit: type=1400 audit(1759051265.150:33285): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.698956][ T36] audit: type=1400 audit(1759051265.150:33286): avc: denied { ioctl } for pid=8720 comm="syz.4.2645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.728923][ T36] audit: type=1400 audit(1759051265.190:33287): avc: denied { create } for pid=8732 comm="syz.9.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.752484][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2651'. [ 267.848310][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.854535][ T1067] Bluetooth: hci0: command 0x1003 tx timeout [ 267.928352][ T670] usb 5-1: device descriptor read/64, error -71 [ 268.073654][ T8749] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 268.081458][ T8749] netlink: 'syz.0.2655': attribute type 2 has an invalid length. [ 268.168516][ T670] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 268.313331][ T670] usb 5-1: device descriptor read/64, error -71 [ 268.558808][ T670] usb 5-1: device descriptor read/64, error -71 [ 268.671666][ T670] usb usb5-port1: attempt power cycle [ 268.704835][ T8788] 9pnet_fd: p9_fd_create_unix (8788): problem connecting socket: ./file0: -111 [ 269.008929][ T670] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 269.031940][ T670] usb 5-1: device descriptor read/8, error -71 [ 269.136563][ T8794] overlayfs: failed to clone upperpath [ 269.162005][ T670] usb 5-1: device descriptor read/8, error -71 [ 269.211286][ T8800] Invalid ELF header magic: != ELF [ 269.350561][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.360249][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.368637][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.377191][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.386121][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.394933][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.403325][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.411871][ T8813] netlink: 'syz.0.2679': attribute type 64 has an invalid length. [ 269.419328][ T670] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 269.442079][ T670] usb 5-1: device descriptor read/8, error -71 [ 269.572795][ T670] usb 5-1: device descriptor read/8, error -71 [ 269.689482][ T670] usb usb5-port1: unable to enumerate USB device [ 269.935240][ T8829] overlayfs: failed to clone upperpath [ 270.261238][ T8849] 9pnet_fd: Insufficient options for proto=fd [ 270.559226][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.559542][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.584378][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.585033][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.594406][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.598267][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.606746][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.613278][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.618910][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.627309][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.633106][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.640784][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.647755][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.657298][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.668682][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.669036][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.678824][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.686218][ T8857] rust_binder: Error in use_page_slow: ESRCH [ 270.692694][ T8857] rust_binder: use_range failure ESRCH [ 270.701146][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.707031][ T8857] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 270.715269][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.721531][ T8857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 270.728477][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.746379][ T8857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:164 [ 270.758865][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.759484][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.778687][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.778990][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.813642][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.840198][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.840525][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.855869][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.856195][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.870581][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.877418][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.886953][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.896405][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.901967][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.918446][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.918866][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.950213][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.950532][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.968836][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.969158][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.000074][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.000441][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.007443][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.014321][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.021266][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.028169][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.035117][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.042095][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.049020][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.055879][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.062629][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.069330][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.076139][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.082841][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.089527][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.096346][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.103198][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.109880][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.116619][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.123421][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.130293][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.137063][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.143941][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.150721][ T8858] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.405650][ T8902] overlayfs: missing 'lowerdir' [ 271.592308][ T8910] SELinux: policydb version -1759833820 does not match my version range 15-33 [ 271.640230][ T8910] SELinux: failed to load policy [ 271.739994][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 271.766828][ T8920] bridge_slave_1: left allmulticast mode [ 271.783893][ T8920] bridge_slave_1: left promiscuous mode [ 271.801372][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.824869][ T2833] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.835532][ T8920] bridge_slave_0: left allmulticast mode [ 271.846532][ T8920] bridge_slave_0: left promiscuous mode [ 271.852279][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.168958][ T8952] veth1_macvtap: left promiscuous mode [ 272.174531][ T8952] macsec0: entered promiscuous mode [ 272.564228][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.564588][ T36] kauditd_printk_skb: 718 callbacks suppressed [ 272.564628][ T36] audit: type=1400 audit(1759051270.178:34006): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.602100][ T36] audit: type=1400 audit(1759051270.218:34007): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.602521][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.630499][ T36] audit: type=1400 audit(1759051270.248:34008): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.656802][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.665106][ T36] audit: type=1400 audit(1759051270.278:34009): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.688667][ T36] audit: type=1400 audit(1759051270.308:34010): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.689035][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.721060][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.722652][ T36] audit: type=1400 audit(1759051270.338:34011): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.753204][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.760815][ T36] audit: type=1400 audit(1759051270.378:34012): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.785829][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.790756][ T36] audit: type=1400 audit(1759051270.408:34013): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.819009][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.819715][ T36] audit: type=1400 audit(1759051270.428:34014): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.850610][ T36] audit: type=1400 audit(1759051270.458:34015): avc: denied { mounton } for pid=8957 comm="syz.9.2725" path="/139/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.852003][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.882688][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.895354][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.917145][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.934870][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.947239][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.956987][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.966574][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.976052][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.986185][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 272.995320][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.005837][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.018294][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.028229][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.037545][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.061660][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.081001][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.092367][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.101860][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.116874][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.127638][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.141050][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.150429][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.161853][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.171063][ T8958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 273.371184][ T8965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.379932][ T8965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.556379][ T8987] overlayfs: failed to clone lowerpath [ 273.851157][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 273.851157][ T1067] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 274.453831][ T8990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2737'. [ 274.667326][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 275.081628][ T670] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 275.164115][ T9014] overlayfs: failed to clone lowerpath [ 275.233261][ T670] usb 5-1: not running at top speed; connect to a high speed hub [ 275.247888][ T670] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.259712][ T670] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.273454][ T670] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.284588][ T670] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.294435][ T670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.303099][ T670] usb 5-1: Product: syz [ 275.307287][ T670] usb 5-1: Manufacturer: ಍ឮ阁⍦幜ᾳ·ꟲ䁚㢅韣黇惒ⷊ꒶竜屛칸㑂ﺚ䖂Ի枋꦳㵧ꁂ캑ﮓ漮諓莽坶ᄴ퍓捉씾륥崐㈴ນ⸝ᮮ㙶먐셊踙꠲䭮㖄篳苺鮱㸗燚ꉜ슚累䷅዆럣ⴢ瘎Ụ [ 275.330860][ T670] usb 5-1: SerialNumber: syz [ 275.421383][ T9023] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2750'. [ 275.521636][ T9031] overlayfs: failed to clone upperpath [ 275.551973][ T670] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 275.574566][ T670] usb 5-1: USB disconnect, device number 73 [ 275.891901][ T670] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 276.046039][ T670] usb 5-1: not running at top speed; connect to a high speed hub [ 276.056613][ T670] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 276.066240][ T670] usb 5-1: can't read configurations, error -22 [ 276.203195][ T670] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 276.212709][ T9055] netlink: 316 bytes leftover after parsing attributes in process `syz.9.2760'. [ 276.231421][ T9055] netlink: 316 bytes leftover after parsing attributes in process `syz.9.2760'. [ 276.386335][ T670] usb 5-1: not running at top speed; connect to a high speed hub [ 276.401269][ T670] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 276.416058][ T670] usb 5-1: can't read configurations, error -22 [ 276.430560][ T670] usb usb5-port1: attempt power cycle [ 276.772174][ T670] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 276.796158][ T670] usb 5-1: not running at top speed; connect to a high speed hub [ 276.806132][ T670] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 276.814135][ T670] usb 5-1: can't read configurations, error -22 [ 276.942256][ T670] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 276.966544][ T670] usb 5-1: not running at top speed; connect to a high speed hub [ 276.978180][ T670] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 276.986941][ T670] usb 5-1: can't read configurations, error -22 [ 276.994067][ T670] usb usb5-port1: unable to enumerate USB device [ 277.572699][ T36] kauditd_printk_skb: 383 callbacks suppressed [ 277.572720][ T36] audit: type=1400 audit(1759051275.196:34399): avc: denied { create } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.612411][ T36] audit: type=1400 audit(1759051275.196:34400): avc: denied { create } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.640300][ T36] audit: type=1400 audit(1759051275.196:34401): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.681142][ T36] audit: type=1400 audit(1759051275.196:34402): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.707761][ T36] audit: type=1400 audit(1759051275.196:34403): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.728579][ T36] audit: type=1400 audit(1759051275.196:34404): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.749009][ T36] audit: type=1400 audit(1759051275.196:34405): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.769182][ T36] audit: type=1400 audit(1759051275.196:34406): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.790187][ T36] audit: type=1400 audit(1759051275.196:34407): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.812178][ T36] audit: type=1400 audit(1759051275.196:34408): avc: denied { connect } for pid=9095 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.886610][ T9114] /dev/loop0: Can't lookup blockdev [ 277.940946][ T9116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.941000][ T9116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 279.249024][ T2833] Bluetooth: hci0: Frame reassembly failed (-84) [ 279.473364][ T9188] /dev/sg0: Can't lookup blockdev [ 279.626454][ T9195] SELinux: Context system_u:object_r:semanage_read_lock_t:s0 is not valid (left unmapped). [ 279.803313][ T9203] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 279.924112][ T9211] virtiofs: Unknown parameter 'always' [ 280.213270][ T9237] veth0_to_team: entered promiscuous mode [ 280.219230][ T9237] veth0_to_team: entered allmulticast mode [ 280.835552][ T9243] 9pnet_fd: Insufficient options for proto=fd [ 280.857224][ T9243] 9pnet_fd: Insufficient options for proto=fd [ 280.903162][ T9247] rust_binder: pid 9247 performed invalid decrement on ref [ 281.054027][ T9254] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2822'. [ 281.091380][ T9254] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2822'. [ 281.114175][ T9255] rust_binder: Write failure EFAULT in pid:868 [ 281.133700][ T9254] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 281.293621][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 281.295668][ T1067] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 281.842259][ T9274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.909472][ T9274] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 282.503330][ T9284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.545096][ T9284] tmpfs: Unknown parameter 'oid' [ 282.584214][ T36] kauditd_printk_skb: 466 callbacks suppressed [ 282.584233][ T36] audit: type=1400 audit(1759051280.205:34875): avc: denied { read write } for pid=9287 comm="syz.4.2832" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.623635][ T36] audit: type=1400 audit(1759051280.235:34876): avc: denied { read write open } for pid=9287 comm="syz.4.2832" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.648771][ T36] audit: type=1400 audit(1759051280.245:34877): avc: denied { read write } for pid=9287 comm="syz.4.2832" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.672253][ T36] audit: type=1400 audit(1759051280.245:34878): avc: denied { read write open } for pid=9287 comm="syz.4.2832" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.700556][ T9290] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 282.700880][ T36] audit: type=1400 audit(1759051280.245:34879): avc: denied { ioctl } for pid=9287 comm="syz.4.2832" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.733831][ T36] audit: type=1400 audit(1759051280.315:34880): avc: denied { read } for pid=9283 comm="syz.7.2830" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 282.758574][ T36] audit: type=1400 audit(1759051280.315:34881): avc: denied { read open } for pid=9283 comm="syz.7.2830" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 282.783204][ T36] audit: type=1400 audit(1759051280.315:34882): avc: denied { ioctl } for pid=9283 comm="syz.7.2830" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.811338][ T36] audit: type=1400 audit(1759051280.315:34883): avc: denied { call } for pid=9283 comm="syz.7.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 282.830694][ T36] audit: type=1400 audit(1759051280.325:34884): avc: denied { read } for pid=9287 comm="syz.4.2832" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 283.217478][ T9309] overlayfs: failed to clone upperpath [ 283.550392][ T9338] validate_nla: 57 callbacks suppressed [ 283.550416][ T9338] netlink: 'syz.7.2843': attribute type 16 has an invalid length. [ 283.571476][ T9338] netlink: 47758 bytes leftover after parsing attributes in process `syz.7.2843'. [ 283.640665][ T9345] rust_binder: Write failure EFAULT in pid:899 [ 284.124099][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 284.284065][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 284.291610][ T45] usb 5-1: config 8 has an invalid interface number: 108 but max is 1 [ 284.300000][ T45] usb 5-1: config 8 has an invalid interface number: 40 but max is 1 [ 284.308140][ T45] usb 5-1: config 8 has no interface number 0 [ 284.314279][ T45] usb 5-1: config 8 has no interface number 1 [ 284.320387][ T45] usb 5-1: config 8 interface 40 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 284.331185][ T45] usb 5-1: config 8 interface 40 altsetting 6 bulk endpoint 0xF has invalid maxpacket 1024 [ 284.341254][ T45] usb 5-1: config 8 interface 40 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 284.351906][ T45] usb 5-1: config 8 interface 40 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 284.362711][ T45] usb 5-1: config 8 interface 40 has no altsetting 0 [ 284.372965][ T45] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=6e.97 [ 284.383826][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.391924][ T45] usb 5-1: Product: syz [ 284.396139][ T45] usb 5-1: Manufacturer: syz [ 284.400757][ T45] usb 5-1: SerialNumber: syz [ 284.634547][ T45] usb 5-1: bad CDC descriptors [ 284.654960][ T45] usb 5-1: USB disconnect, device number 78 [ 284.872406][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2861'. [ 285.184260][ T45] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 285.336975][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 285.347981][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 285.362083][ T45] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 285.372027][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.381886][ T45] usb 5-1: config 0 descriptor?? [ 285.389731][ T9399] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 285.399515][ T45] usbhid 5-1:0.0: can't add hid device: -22 [ 285.405581][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 285.604833][ T45] usb 5-1: USB disconnect, device number 79 [ 293.932155][ T36] kauditd_printk_skb: 592 callbacks suppressed [ 293.932177][ T36] audit: type=1400 audit(1759051291.543:35477): avc: denied { create } for pid=9449 comm="syz.4.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.973470][ T36] audit: type=1400 audit(1759051291.553:35478): avc: denied { read } for pid=9452 comm="syz.7.2884" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.996663][ T36] audit: type=1400 audit(1759051291.553:35479): avc: denied { read open } for pid=9452 comm="syz.7.2884" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.041279][ T36] audit: type=1400 audit(1759051291.553:35480): avc: denied { read write } for pid=9452 comm="syz.7.2884" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.083001][ T36] audit: type=1400 audit(1759051291.553:35481): avc: denied { read write open } for pid=9452 comm="syz.7.2884" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.148163][ T36] audit: type=1400 audit(1759051291.553:35482): avc: denied { ioctl } for pid=9452 comm="syz.7.2884" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.198402][ T36] audit: type=1400 audit(1759051291.553:35483): avc: denied { read write } for pid=9452 comm="syz.7.2884" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.226767][ T9466] fuse: Bad value for 'group_id' [ 294.233967][ T9466] fuse: Bad value for 'group_id' [ 294.247443][ T36] audit: type=1400 audit(1759051291.563:35484): avc: denied { read write open } for pid=9452 comm="syz.7.2884" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.285278][ T9469] netlink: 'syz.0.2889': attribute type 27 has an invalid length. [ 294.302628][ T36] audit: type=1400 audit(1759051291.563:35485): avc: denied { ioctl } for pid=9452 comm="syz.7.2884" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.336015][ T9469] netlink: 'syz.0.2889': attribute type 27 has an invalid length. [ 294.366932][ T36] audit: type=1400 audit(1759051291.563:35486): avc: denied { ioctl } for pid=9452 comm="syz.7.2884" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 294.527870][ T9489] overlayfs: failed to clone upperpath [ 294.660087][ T9493] rust_binder: 9491 RLIMIT_NICE not set [ 294.706463][ T9499] vcan0: entered allmulticast mode [ 294.873013][ T2822] Bluetooth: hci0: Frame reassembly failed (-84) [ 295.611302][ T9538] __vm_enough_memory: pid: 9538, comm: syz.4.2909, bytes: 18014402804453376 not enough memory for the allocation [ 296.430293][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 296.572999][ T9580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.574247][ T9580] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2924'. [ 296.597044][ T9580] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 296.687304][ T9585] loop7: detected capacity change from 0 to 16384 [ 296.695800][ T670] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 296.855813][ T670] usb 5-1: Using ep0 maxpacket: 32 [ 296.863556][ T670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.873729][ T670] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.883059][ T670] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 296.891388][ T9586] loop7: detected capacity change from 16384 to 0 [ 296.893252][ T670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.898672][ T1067] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.906701][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 296.921149][ T670] usb 5-1: config 0 descriptor?? [ 296.976272][ T9589] netlink: 'syz.9.2927': attribute type 1 has an invalid length. [ 297.004031][ T9589] netlink: 160 bytes leftover after parsing attributes in process `syz.9.2927'. [ 297.014424][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.015075][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.022200][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.036579][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.036900][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.051949][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.052588][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.108759][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.109086][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.145046][ T31] usb 5-1: USB disconnect, device number 80 [ 297.177878][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.179307][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.193420][ T9595] rust_binder: Error in use_page_slow: ESRCH [ 297.206696][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.210311][ T9595] rust_binder: use_range failure ESRCH [ 297.217439][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.245030][ T9595] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 297.245066][ T9595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 297.248135][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.253291][ T9595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:922 [ 297.277235][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.278275][ T9591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.365861][ T9607] netlink: 'syz.7.2932': attribute type 9 has an invalid length. [ 297.418533][ T9609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.427093][ T9609] cgroup2: Unknown parameter 'euid<00000000000000060928' [ 297.441536][ T9609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:934 [ 297.973868][ T9637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.994027][ T9637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 298.072728][ T9641] /dev/loop0: Can't lookup blockdev [ 298.572145][ T9682] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2954'. [ 298.635809][ T9684] overlayfs: failed to clone upperpath [ 298.686697][ T9686] rust_binder: Read failure Err(EAGAIN) in pid:946 [ 298.871511][ T9696] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2959'. [ 298.973077][ T36] kauditd_printk_skb: 851 callbacks suppressed [ 298.973098][ T36] audit: type=1400 audit(1759051296.582:36338): avc: denied { read } for pid=9705 comm="syz.4.2964" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 299.024210][ T36] audit: type=1400 audit(1759051296.582:36339): avc: denied { read open } for pid=9705 comm="syz.4.2964" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 299.095992][ T36] audit: type=1400 audit(1759051296.622:36340): avc: denied { create } for pid=9705 comm="syz.4.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.145989][ T36] audit: type=1400 audit(1759051296.652:36341): avc: denied { create } for pid=9712 comm="syz.0.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.188875][ T9718] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2968'. [ 299.203683][ T36] audit: type=1400 audit(1759051296.652:36342): avc: denied { setopt } for pid=9712 comm="syz.0.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.285971][ T36] audit: type=1400 audit(1759051296.652:36343): avc: denied { create } for pid=9712 comm="syz.0.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.345965][ T36] audit: type=1400 audit(1759051296.652:36344): avc: denied { bind } for pid=9712 comm="syz.0.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.411001][ T36] audit: type=1400 audit(1759051296.672:36345): avc: denied { watch watch_reads } for pid=9710 comm="syz.9.2965" path="/236/file0" dev="tmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 299.497344][ T36] audit: type=1400 audit(1759051296.672:36346): avc: denied { read write } for pid=7698 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.583035][ T36] audit: type=1400 audit(1759051296.672:36347): avc: denied { read write open } for pid=7698 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.764017][ T9747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.816440][ T9747] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 300.916086][ T713] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 301.103479][ T713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.126070][ T713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.167410][ T713] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.186076][ T713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.204222][ T713] usb 5-1: Product: syz [ 301.214287][ T713] usb 5-1: Manufacturer: syz [ 301.224334][ T713] usb 5-1: SerialNumber: syz [ 301.653801][ T713] usb 5-1: cannot find UAC_HEADER [ 301.684339][ T713] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 301.706898][ T713] usb 5-1: USB disconnect, device number 81 [ 301.825400][ T9461] udevd[9461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 302.100546][ T9808] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2993'. [ 302.640103][ T9823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:366 [ 302.679679][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 302.701389][ T2833] Bluetooth: hci1: Frame reassembly failed (-84) [ 302.710870][ T2833] Bluetooth: hci1: Frame reassembly failed (-84) [ 303.087420][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3007'. [ 303.274486][ T9854] can0: slcan on ptm2. [ 303.316865][ T9854] can0 (unregistered): slcan off ptm2. [ 304.202865][ T36] kauditd_printk_skb: 344 callbacks suppressed [ 304.202886][ T36] audit: type=1400 audit(1759051301.812:36689): avc: denied { create } for pid=9870 comm="syz.9.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.228919][ T36] audit: type=1400 audit(1759051301.822:36690): avc: denied { connect } for pid=9870 comm="syz.9.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.736309][ T1067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 304.736332][ T1099] Bluetooth: hci1: command 0x1003 tx timeout [ 304.751348][ T36] audit: type=1400 audit(1759051302.362:36691): avc: denied { create } for pid=9872 comm="syz.0.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.771237][ T36] audit: type=1400 audit(1759051302.362:36692): avc: denied { setopt } for pid=9872 comm="syz.0.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.791700][ T36] audit: type=1400 audit(1759051302.362:36693): avc: denied { bind } for pid=9872 comm="syz.0.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.811686][ T36] audit: type=1400 audit(1759051302.362:36694): avc: denied { name_bind } for pid=9872 comm="syz.0.3018" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 304.834904][ T36] audit: type=1400 audit(1759051302.362:36695): avc: denied { node_bind } for pid=9872 comm="syz.0.3018" saddr=172.30.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 304.857933][ T36] audit: type=1400 audit(1759051302.402:36696): avc: denied { create } for pid=9874 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.879775][ T36] audit: type=1400 audit(1759051302.402:36697): avc: denied { create } for pid=9874 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.900981][ T36] audit: type=1400 audit(1759051302.402:36698): avc: denied { write } for pid=9874 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.967394][ T9883] overlayfs: failed to clone upperpath [ 305.041269][ T9887] netlink: 'syz.0.3025': attribute type 2 has an invalid length. [ 305.327188][ T9916] netlink: 'syz.0.3037': attribute type 16 has an invalid length. [ 305.417881][ T9924] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 305.427362][ T9926] tipc: Enabling of bearer rejected, failed to enable media [ 305.782655][ T9965] ip6gretap0: mtu less than device minimum [ 306.673852][ T9993] rust_binder: Write failure EFAULT in pid:381 [ 307.156767][T10031] can0: slcan on ptm1. [ 307.247259][T10031] can0 (unregistered): slcan off ptm1. [ 307.836453][ T670] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 308.000772][ T670] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 308.011980][ T670] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 308.023841][ T670] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 308.043252][ T670] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.052873][ T670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.060963][ T670] usb 5-1: Product: ї [ 308.065153][ T670] usb 5-1: Manufacturer: ఊ [ 308.076291][T10056] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 308.293685][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.312125][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.329840][T10056] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 308.339796][T10056] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 308.380325][T10086] netlink: 'syz.0.3086': attribute type 7 has an invalid length. [ 308.388235][T10086] netlink: 'syz.0.3086': attribute type 5 has an invalid length. [ 308.396141][T10086] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3086'. [ 308.409424][T10086] overlayfs: failed to clone lowerpath [ 308.540145][T10096] devpts: called with bogus options [ 308.550751][ T670] cdc_ncm 5-1:1.0: bind() failure [ 308.563136][ T670] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 308.571585][ T670] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 308.588027][ T670] usb 5-1: USB disconnect, device number 82 [ 308.735905][T10111] overlayfs: failed to clone upperpath [ 308.909945][T10127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=10127 comm=syz.9.3102 [ 308.923306][T10127] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3102'. [ 309.105150][T10130] __vm_enough_memory: pid: 10130, comm: syz.4.3103, bytes: 18014402804453376 not enough memory for the allocation [ 309.228141][ T36] kauditd_printk_skb: 1127 callbacks suppressed [ 309.228164][ T36] audit: type=1400 audit(1759051306.842:37826): avc: denied { create } for pid=10131 comm="syz.4.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.280755][ T36] audit: type=1400 audit(1759051306.892:37827): avc: denied { map } for pid=10131 comm="syz.4.3104" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.305297][ T36] audit: type=1400 audit(1759051306.892:37828): avc: denied { read } for pid=10131 comm="syz.4.3104" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.386502][ T36] audit: type=1400 audit(1759051306.992:37829): avc: denied { unlink } for pid=4981 comm="syz-executor" name="file2" dev="tmpfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.520091][ T36] audit: type=1400 audit(1759051307.132:37830): avc: denied { create } for pid=10136 comm="syz.9.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.586597][ T36] audit: type=1400 audit(1759051307.132:37831): avc: denied { read write } for pid=3797 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.647565][ T36] audit: type=1400 audit(1759051307.132:37832): avc: denied { read write open } for pid=3797 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.697400][ T36] audit: type=1400 audit(1759051307.132:37833): avc: denied { ioctl } for pid=3797 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.737818][ T36] audit: type=1400 audit(1759051307.222:37834): avc: denied { create } for pid=10136 comm="syz.9.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.781607][ T36] audit: type=1400 audit(1759051307.222:37835): avc: denied { create } for pid=10140 comm="syz.7.3107" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 310.684696][T10211] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 310.696611][T10211] rust_binder: Write failure EINVAL in pid:429 [ 310.719507][T10195] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3127'. [ 310.737444][T10195] gretap0: entered promiscuous mode [ 311.158812][T10229] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3136'. [ 311.171347][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 311.182279][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 311.193594][ T2822] Bluetooth: hci1: Frame reassembly failed (-84) [ 311.200120][ T2822] Bluetooth: hci1: Frame reassembly failed (-84) [ 311.490421][T10249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.638152][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3148'. [ 311.653569][T10261] bridge_slave_1: left allmulticast mode [ 311.659383][T10261] bridge_slave_1: left promiscuous mode [ 311.665045][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.672805][T10261] bridge_slave_0: left allmulticast mode [ 311.678692][T10261] bridge_slave_0: left promiscuous mode [ 311.684347][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.724653][T10266] overlayfs: failed to clone lowerpath [ 311.990278][T10275] netlink: 679 bytes leftover after parsing attributes in process `syz.9.3153'. [ 312.475575][T10279] rust_binder: 997: no such ref 0 [ 312.696222][T10289] rust_binder: Error while translating object. [ 312.696260][T10289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 312.707769][T10289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1003 [ 312.727689][T10289] rust_binder: 1003: no such ref 0 [ 312.974749][T10297] netlink: 'syz.7.3161': attribute type 27 has an invalid length. [ 313.000196][T10297] gretap0: left promiscuous mode [ 313.216648][ T1067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 313.216864][ T1099] Bluetooth: hci1: command 0x1003 tx timeout [ 313.674647][T10315] rust_binder: Write failure EFAULT in pid:1027 [ 314.285097][ T36] kauditd_printk_skb: 668 callbacks suppressed [ 314.285121][ T36] audit: type=1400 audit(1759051311.892:38504): avc: denied { create } for pid=10339 comm="syz.4.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.347615][ T36] audit: type=1400 audit(1759051311.892:38505): avc: denied { create } for pid=10340 comm="syz.9.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.375474][ T36] audit: type=1400 audit(1759051311.912:38506): avc: denied { write } for pid=10340 comm="syz.9.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.422024][ T36] audit: type=1400 audit(1759051311.952:38507): avc: denied { create } for pid=10339 comm="syz.4.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.466679][ T36] audit: type=1400 audit(1759051311.952:38508): avc: denied { write } for pid=10339 comm="syz.4.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.492203][ T36] audit: type=1400 audit(1759051311.952:38509): avc: denied { read } for pid=10339 comm="syz.4.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.516671][ T36] audit: type=1400 audit(1759051311.952:38510): avc: denied { read } for pid=10339 comm="syz.4.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.557285][ T36] audit: type=1400 audit(1759051311.952:38511): avc: denied { write } for pid=10339 comm="syz.4.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 314.581338][ T36] audit: type=1400 audit(1759051311.952:38512): avc: denied { read write } for pid=10339 comm="syz.4.3175" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 314.609529][ T36] audit: type=1400 audit(1759051311.952:38513): avc: denied { read write open } for pid=10339 comm="syz.4.3175" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 314.634832][ T31] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 314.637595][T10349] __vm_enough_memory: pid: 10349, comm: syz.7.3179, bytes: 18014402804453376 not enough memory for the allocation [ 314.776747][ T31] usb 5-1: device descriptor read/64, error -71 [ 315.016720][ T31] usb 5-1: device descriptor read/64, error -71 [ 315.066366][T10364] netlink: 'syz.0.3184': attribute type 5 has an invalid length. [ 315.074216][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'. [ 315.276725][ T31] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 315.372386][T10394] netlink: 'syz.9.3194': attribute type 4 has an invalid length. [ 315.380301][T10394] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3194'. [ 315.436777][ T31] usb 5-1: device descriptor read/64, error -71 [ 315.676756][ T31] usb 5-1: device descriptor read/64, error -71 [ 315.796863][ T31] usb usb5-port1: attempt power cycle [ 316.136740][ T31] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 316.172551][ T31] usb 5-1: device descriptor read/8, error -71 [ 316.254604][T10407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3199'. [ 316.334739][ T31] usb 5-1: device descriptor read/8, error -71 [ 316.471368][T10417] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3203'. [ 316.586780][ T31] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 316.609688][ T31] usb 5-1: device descriptor read/8, error -71 [ 316.749723][ T31] usb 5-1: device descriptor read/8, error -71 [ 316.860248][ T31] usb usb5-port1: unable to enumerate USB device [ 317.341669][T10470] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 317.879538][T10484] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3226'. [ 317.936535][T10489] rust_binder: Error while translating object. [ 317.936595][T10489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 317.952215][T10489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:460 [ 318.966378][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 318.984478][T10522] bridge_slave_1: left allmulticast mode [ 318.991454][T10522] bridge_slave_1: left promiscuous mode [ 318.997805][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.007920][T10522] bridge_slave_0: left allmulticast mode [ 319.014191][T10522] bridge_slave_0: left promiscuous mode [ 319.021581][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.647747][ T36] kauditd_printk_skb: 348 callbacks suppressed [ 319.647769][ T36] audit: type=1400 audit(1759051317.261:38862): avc: denied { create } for pid=10533 comm="syz.9.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.680677][ T36] audit: type=1400 audit(1759051317.261:38863): avc: denied { create } for pid=10533 comm="syz.9.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.702428][ T36] audit: type=1400 audit(1759051317.261:38864): avc: denied { setopt } for pid=10533 comm="syz.9.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.723348][ T36] audit: type=1400 audit(1759051317.261:38865): avc: denied { setopt } for pid=10533 comm="syz.9.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.724165][T10535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 319.758005][T10534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 319.760729][ T7698] audit: audit_backlog=65 > audit_backlog_limit=64 [ 319.764555][T10534] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 319.764571][T10534] audit: backlog limit exceeded [ 319.765109][T10534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 319.801779][T10540] veth1: entered allmulticast mode [ 320.085111][T10554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 320.085150][T10554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:480 [ 320.200362][T10556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.210066][T10556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:482 [ 320.270998][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3251'. [ 320.292777][T10558] fuse: Unknown parameter 'user_iT' [ 320.300177][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3251'. [ 320.466640][T10562] rust_binder: Error while translating object. [ 320.466678][T10562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 320.472919][T10562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:484 [ 320.609301][T10539] veth1: left allmulticast mode [ 320.814403][T10570] binder: Unknown parameter '' [ 321.219408][T10597] /dev/rnullb0: Can't open blockdev [ 321.238120][T10596] rust_binder: Write failure EFAULT in pid:489 [ 321.676475][T10604] rust_binder: Write failure EFAULT in pid:496 [ 321.814571][T10626] tipc: Enabling of bearer rejected, failed to enable media [ 322.038565][T10635] 9pnet_fd: Insufficient options for proto=fd [ 322.052730][T10628] tipc: Enabling of bearer rejected, failed to enable media [ 322.525524][T10671] overlayfs: failed to clone lowerpath [ 323.192183][T10711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.200316][T10711] SELinux: security_context_str_to_sid () failed with errno=-22 [ 323.230757][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 323.239962][T10714] erspan0: default FDB implementation only supports local addresses [ 323.306253][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3308'. [ 323.800379][T10726] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3310'. [ 323.809435][T10726] tipc: Invalid UDP bearer configuration [ 323.809456][T10726] tipc: Enabling of bearer rejected, failed to enable media [ 323.852941][T10728] 9pnet_fd: Insufficient options for proto=fd [ 323.988016][T10735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.996594][T10735] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 324.248100][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3320'. [ 324.269044][T10751] /dev/rnullb0: Can't lookup blockdev [ 324.659214][ T36] kauditd_printk_skb: 1368 callbacks suppressed [ 324.659235][ T36] audit: type=1400 audit(1759051322.271:40228): avc: denied { mounton } for pid=10775 comm="syz.9.3328" path="/syzcgroup/unified/syz9" dev="tmpfs" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.710215][ T36] audit: type=1400 audit(1759051322.321:40229): avc: denied { create } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.730701][ T36] audit: type=1400 audit(1759051322.321:40230): avc: denied { write } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.754177][ T36] audit: type=1400 audit(1759051322.321:40231): avc: denied { nlmsg_write } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.775734][ T36] audit: type=1400 audit(1759051322.331:40232): avc: denied { write } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.798226][ T36] audit: type=1400 audit(1759051322.331:40233): avc: denied { nlmsg_read } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 324.820053][ T36] audit: type=1400 audit(1759051322.331:40234): avc: denied { create } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.839900][ T36] audit: type=1400 audit(1759051322.331:40235): avc: denied { bind } for pid=10777 comm="syz.9.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.866933][ T36] audit: type=1400 audit(1759051322.331:40236): avc: denied { name_bind } for pid=10777 comm="syz.9.3329" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 324.875936][T10788] ip6gretap0: mtu less than device minimum [ 324.888223][ T36] audit: type=1400 audit(1759051322.331:40237): avc: denied { node_bind } for pid=10777 comm="syz.9.3329" saddr=fe80::1c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 325.171634][T10793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.173870][T10793] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 325.180431][T10793] rust_binder: Error while translating object. [ 325.189255][T10793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.195513][T10793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 325.317722][T10801] netlink: 596 bytes leftover after parsing attributes in process `syz.9.3337'. [ 325.601763][T10817] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 325.608991][T10817] rust_binder: Write failure EINVAL in pid:518 [ 325.938707][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 325.959079][T10844] overlayfs: failed to clone upperpath [ 326.068583][T10850] __vm_enough_memory: pid: 10850, comm: syz.4.3355, bytes: 18014402804453376 not enough memory for the allocation [ 326.137281][T10857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.235444][T10863] rust_binder: pid 10863 performed invalid decrement on ref [ 326.795579][T10877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10877 comm=syz.9.3365 [ 326.796941][ T1100] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 326.884113][T10881] 9pnet_fd: Insufficient options for proto=fd [ 326.956925][ T1100] usb 5-1: Using ep0 maxpacket: 32 [ 326.968630][ T1100] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.976675][ T1100] usb 5-1: config 0 has no interface number 0 [ 326.984506][ T1100] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.996676][ T1100] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.007307][ T1100] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 327.016394][ T1100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.031979][ T1100] usb 5-1: config 0 descriptor?? [ 327.087076][T10897] /dev/rnullb0: Can't lookup blockdev [ 327.094951][T10897] /dev/rnullb0: Can't lookup blockdev [ 327.268524][ T1100] usbhid 5-1:0.1: can't add hid device: -71 [ 327.289091][ T1100] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 327.312874][ T1100] usb 5-1: USB disconnect, device number 87 [ 327.318842][T10915] fuse: Bad value for 'group_id' [ 327.327010][T10915] fuse: Bad value for 'group_id' [ 327.352052][T10917] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 327.485111][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 327.864091][T10939] Invalid ELF header len 1 [ 327.870417][T10939] /dev/rnullb0: Can't lookup blockdev [ 328.042498][T10947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=10947 comm=syz.0.3389 [ 328.631487][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3394'. [ 328.642117][T10961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10961 comm=syz.4.3394 [ 328.754712][T10964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.761125][T10964] virtiofs: Unknown parameter 'always' [ 328.804585][T10964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:559 [ 328.806609][T10964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 328.817280][T10964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:559 [ 328.950381][T10973] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 329.050309][T10978] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3400'. [ 329.166018][T10987] tipc: Enabled bearer , priority 10 [ 329.185870][T10985] tipc: Enabling of bearer rejected, already enabled [ 329.195012][T10992] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 329.262098][T10995] random: crng reseeded on system resumption [ 329.759157][ T36] kauditd_printk_skb: 1799 callbacks suppressed [ 329.759177][ T36] audit: type=1400 audit(1759051327.377:42037): avc: denied { create } for pid=11019 comm="syz.7.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.772042][T11020] fuse: Bad value for 'fd' [ 329.787649][ T36] audit: type=1400 audit(1759051327.377:42038): avc: denied { write } for pid=11019 comm="syz.7.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.813129][ T36] audit: type=1400 audit(1759051327.377:42039): avc: denied { read } for pid=11019 comm="syz.7.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.834365][ T36] audit: type=1400 audit(1759051327.377:42040): avc: denied { read } for pid=11019 comm="syz.7.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.855038][ T36] audit: type=1400 audit(1759051327.377:42041): avc: denied { create } for pid=11019 comm="syz.7.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.874897][ T36] audit: type=1400 audit(1759051327.377:42042): avc: denied { setopt } for pid=11019 comm="syz.7.3416" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.895497][ T36] audit: type=1400 audit(1759051327.387:42043): avc: denied { connect } for pid=11019 comm="syz.7.3416" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.916211][ T36] audit: type=1400 audit(1759051327.387:42044): avc: denied { setopt } for pid=11019 comm="syz.7.3416" laddr=fe80::4c34:f1ff:fe8e:3149 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.940993][ T36] audit: type=1400 audit(1759051327.387:42045): avc: denied { write } for pid=11019 comm="syz.7.3416" laddr=fe80::4c34:f1ff:fe8e:3149 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.965513][ T36] audit: type=1400 audit(1759051327.387:42046): avc: denied { write } for pid=11019 comm="syz.7.3416" laddr=fe80::4c34:f1ff:fe8e:3149 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 330.094827][T11024] veth1: entered allmulticast mode [ 330.112729][T11024] veth1: left allmulticast mode [ 330.286920][ T332] tipc: Node number set to 3187974403 [ 330.359390][T11031] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 330.445697][T11031] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 330.445724][T11031] rust_binder: Read failure Err(EFAULT) in pid:577 [ 330.588333][T11049] netlink: 1323 bytes leftover after parsing attributes in process `syz.7.3427'. [ 330.677186][T11059] netlink: 764 bytes leftover after parsing attributes in process `syz.7.3430'. [ 330.886932][ T65] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 331.036906][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 331.044947][ T65] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 331.053342][ T65] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 331.061839][ T65] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 331.070911][ T65] usb 5-1: config 250 has no interface number 0 [ 331.077240][ T65] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 331.088848][ T65] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 331.099344][ T65] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.109648][ T65] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 331.119957][ T65] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 331.133474][ T65] usb 5-1: config 250 interface 228 has no altsetting 0 [ 331.143416][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 331.152546][ T65] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 331.160930][ T65] usb 5-1: Product: syz [ 331.165101][ T65] usb 5-1: SerialNumber: syz [ 331.175629][ T65] hub 5-1:250.228: bad descriptor, ignoring hub [ 331.184065][ T65] hub 5-1:250.228: probe with driver hub failed with error -5 [ 331.252900][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3433'. [ 331.409764][ T65] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 88 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 331.459936][ T65] usb 5-1: USB disconnect, device number 88 [ 331.493381][ T65] usblp0: removed [ 331.613127][T11084] tmpfs: Unknown parameter '@' [ 332.786687][T11133] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3451'. [ 332.796932][T11133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.796963][T11133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 333.320124][T11159] overlayfs: failed to clone upperpath [ 333.580338][T11173] SELinux: failed to load policy [ 333.587897][T11173] rust_binder: inc_ref_done called when no active inc_refs [ 333.628948][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.638846][T11176] netlink: 'syz.4.3471': attribute type 27 has an invalid length. [ 333.653591][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.653913][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.662289][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.669559][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.676368][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.683154][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.689956][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.696637][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.703507][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.710236][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.717001][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.723681][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.730492][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.737308][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.744046][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.750972][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.757828][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.764601][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.775129][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.782221][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.789035][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.795825][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.807219][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.814047][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.821135][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.828311][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.835186][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.841995][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.849069][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.856010][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.862860][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.869727][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.876558][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.898798][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.905673][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.912534][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.919333][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.926126][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.932917][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.939770][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.946647][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.953467][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.960222][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.967979][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.975004][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.983055][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.990479][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.997962][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.004739][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.011567][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.018329][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.025065][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.031863][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.038588][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.045277][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.052116][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.058938][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.065671][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.072482][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.079207][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.085891][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.092686][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.099419][T11175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.500822][T11208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.539166][T11208] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 334.769854][ T36] kauditd_printk_skb: 546 callbacks suppressed [ 334.769875][ T36] audit: type=1400 audit(1759051339.380:42593): avc: denied { create } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.773924][T11232] netlink: 'syz.7.3492': attribute type 32 has an invalid length. [ 334.779751][ T36] audit: type=1400 audit(1759051339.380:42594): avc: denied { write } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.832888][ T36] audit: type=1400 audit(1759051339.380:42595): avc: denied { nlmsg_write } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 334.853848][ T36] audit: type=1400 audit(1759051339.390:42596): avc: denied { create } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.873670][ T36] audit: type=1400 audit(1759051339.390:42597): avc: denied { bind } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.893318][ T36] audit: type=1400 audit(1759051339.390:42598): avc: denied { listen } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.919872][ T36] audit: type=1400 audit(1759051339.390:42599): avc: denied { create } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.939740][ T36] audit: type=1400 audit(1759051339.390:42600): avc: denied { connect } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.959655][ T36] audit: type=1400 audit(1759051339.390:42601): avc: denied { write } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.979402][ T36] audit: type=1400 audit(1759051339.390:42602): avc: denied { accept } for pid=11231 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 336.398244][T11276] tipc: Enabling of bearer rejected, failed to enable media [ 336.604748][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3514'. [ 336.644219][T11289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11289 comm=syz.7.3514 [ 336.875081][T11300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.375791][T11321] /dev/rnullb0: Can't open blockdev [ 337.635669][T11331] fuseblk: Unknown parameter '% 8vI阝"ɷ>Pf[]_h伮dJ' [ 337.776723][ T2822] tipc: Left network mode [ 337.787674][ T2822] veth0_vlan: left promiscuous mode [ 339.776898][ T36] kauditd_printk_skb: 277 callbacks suppressed [ 339.776920][ T36] audit: type=1400 audit(1759051344.380:42880): avc: denied { execmem } for pid=11381 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 339.854210][ T36] audit: type=1400 audit(1759051344.400:42881): avc: denied { read append } for pid=11382 comm="syz.4.3545" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.922670][ T36] audit: type=1400 audit(1759051344.400:42882): avc: denied { read open } for pid=11382 comm="syz.4.3545" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.000632][ T36] audit: type=1400 audit(1759051344.400:42883): avc: denied { mount } for pid=11384 comm="syz.7.3547" name="/" dev="ramfs" ino=64317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 340.029661][ T36] audit: type=1400 audit(1759051344.400:42884): avc: denied { ioctl } for pid=11382 comm="syz.4.3545" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 340.069824][ T36] audit: type=1400 audit(1759051344.410:42885): avc: denied { sys_module } for pid=11384 comm="syz.7.3547" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 340.092688][ T36] audit: type=1400 audit(1759051344.410:42886): avc: denied { create } for pid=11384 comm="syz.7.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.113699][ T36] audit: type=1400 audit(1759051344.410:42887): avc: denied { read } for pid=11382 comm="syz.4.3545" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 340.136270][ T36] audit: type=1400 audit(1759051344.420:42888): avc: denied { read open } for pid=11382 comm="syz.4.3545" path="net:[4026532448]" dev="nsfs" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 340.176940][ T36] audit: type=1400 audit(1759051344.420:42889): avc: denied { create } for pid=11382 comm="syz.4.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 340.226959][ T65] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 340.381439][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 340.391433][ T65] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 340.405590][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.414744][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.422791][ T65] usb 5-1: Product: syz [ 340.427001][ T65] usb 5-1: Manufacturer: syz [ 340.431612][ T65] usb 5-1: SerialNumber: syz [ 340.821010][T11412] netlink: 'syz.9.3554': attribute type 33 has an invalid length. [ 340.829037][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3554'. [ 340.849082][ T65] cdc_ncm 5-1:1.0: bind() failure [ 340.855855][ T65] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 340.886904][ T65] cdc_ncm 5-1:1.1: bind() failure [ 340.901098][ T65] usb 5-1: USB disconnect, device number 89 [ 341.857629][T11436] fuse: Bad value for 'fd' [ 341.866937][ T2833] Bluetooth: hci1: Frame reassembly failed (-84) [ 343.936960][ T1099] Bluetooth: hci1: command 0x1003 tx timeout [ 343.936955][ T1067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 345.244727][ T36] kauditd_printk_skb: 213 callbacks suppressed [ 345.244750][ T36] audit: type=1400 audit(2000000001.220:43103): avc: denied { execmem } for pid=11481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 345.247874][T11483] __vm_enough_memory: pid: 11483, comm: syz.4.3574, bytes: 594475155107876864 not enough memory for the allocation [ 345.262397][ T36] audit: type=1400 audit(2000000001.220:43104): avc: denied { read write } for pid=11482 comm="syz.4.3574" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.300337][T11488] netlink: 'syz.4.3574': attribute type 46 has an invalid length. [ 345.328365][T11488] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3574'. [ 345.338463][ T36] audit: type=1400 audit(2000000001.220:43105): avc: denied { read write open } for pid=11482 comm="syz.4.3574" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.383818][ T36] audit: type=1400 audit(2000000001.220:43106): avc: denied { ioctl } for pid=11482 comm="syz.4.3574" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.451624][ T36] audit: type=1400 audit(2000000001.230:43107): avc: denied { map } for pid=11482 comm="syz.4.3574" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.504601][ T36] audit: type=1400 audit(2000000001.230:43108): avc: denied { read } for pid=11482 comm="syz.4.3574" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.586732][ T36] audit: type=1400 audit(2000000001.310:43109): avc: denied { ioctl } for pid=11482 comm="syz.4.3574" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.646902][ T36] audit: type=1400 audit(2000000001.390:43110): avc: denied { read write } for pid=7698 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.695548][ T36] audit: type=1400 audit(2000000001.390:43111): avc: denied { read write open } for pid=7698 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.731559][ T36] audit: type=1400 audit(2000000001.390:43112): avc: denied { ioctl } for pid=7698 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.959145][T11521] netlink: 'syz.7.3587': attribute type 25 has an invalid length. [ 347.226999][ T1100] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 347.377000][ T1100] usb 5-1: Using ep0 maxpacket: 16 [ 347.384857][ T1100] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.395977][ T1100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.402654][ T1100] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 347.411744][ T1100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.421430][ T1100] usb 5-1: config 0 descriptor?? [ 347.835741][ T1100] wacom 0003:056A:0020.0016: unknown main item tag 0x0 [ 347.842712][ T1100] wacom 0003:056A:0020.0016: unknown main item tag 0x0 [ 347.849742][ T1100] wacom 0003:056A:0020.0016: unknown main item tag 0x0 [ 347.856644][ T1100] wacom 0003:056A:0020.0016: unknown main item tag 0x0 [ 347.863725][ T1100] wacom 0003:056A:0020.0016: unknown main item tag 0x0 [ 347.870860][ T1100] wacom 0003:056A:0020.0016: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 347.882325][ T1100] wacom 0003:056A:0020.0016: hidraw0: USB HID v0.05 Device [HID 056a:0020] on usb-dummy_hcd.4-1/input0 [ 347.896925][ T1100] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0020.0016/input/input32 [ 348.039669][ T65] usb 5-1: USB disconnect, device number 90 [ 350.098745][T11553] rust_binder: Error while translating object. [ 350.098789][T11553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 350.105017][T11553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:693 [ 351.540437][ T36] kauditd_printk_skb: 187 callbacks suppressed [ 351.540474][ T36] audit: type=1400 audit(2000000007.520:43300): avc: denied { execmem } for pid=11555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 351.596909][ T36] audit: type=1400 audit(2000000007.570:43301): avc: denied { read } for pid=11556 comm="syz.4.3599" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.642894][ T36] audit: type=1400 audit(2000000007.570:43302): avc: denied { read open } for pid=11556 comm="syz.4.3599" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.677408][ T36] audit: type=1400 audit(2000000007.600:43303): avc: denied { map } for pid=11556 comm="syz.4.3599" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.721254][T11565] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3601'. [ 351.743033][ T36] audit: type=1400 audit(2000000007.600:43304): avc: denied { read } for pid=11556 comm="syz.4.3599" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.803513][ T36] audit: type=1400 audit(2000000007.610:43305): avc: denied { ioctl } for pid=11556 comm="syz.4.3599" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.866814][ T36] audit: type=1400 audit(2000000007.610:43306): avc: denied { set_context_mgr } for pid=11556 comm="syz.4.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.893051][ T36] audit: type=1400 audit(2000000007.610:43307): avc: denied { ioctl } for pid=11556 comm="syz.4.3599" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.956087][ T36] audit: type=1400 audit(2000000007.610:43308): avc: denied { call } for pid=11556 comm="syz.4.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.983658][T11574] cgroup: fork rejected by pids controller in /syz9 [ 351.991094][ T36] audit: type=1400 audit(2000000007.620:43309): avc: denied { read write } for pid=7698 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.756059][T11737] netlink: 'syz.7.3609': attribute type 29 has an invalid length. [ 353.764030][T11737] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3609'. [ 353.897004][ T65] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 354.049411][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.059572][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.070237][ T65] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.079457][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.087484][ T65] usb 5-1: SerialNumber: syz [ 354.302738][T11731] overlay: ./file0 is not a directory [ 354.310908][ T65] usb 5-1: 0:2 : does not exist [ 354.324327][ T65] usb 5-1: unit 5: unexpected type 0x0a [ 354.338100][ T65] usb 5-1: USB disconnect, device number 91 [ 354.395617][ T9461] udevd[9461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.886925][ T670] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 356.026980][ T670] usb 5-1: device descriptor read/64, error -71 [ 356.266993][ T670] usb 5-1: device descriptor read/64, error -71 [ 356.507004][ T670] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 356.587896][ T36] kauditd_printk_skb: 196 callbacks suppressed [ 356.587917][ T36] audit: type=1400 audit(2000000012.570:43506): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.646939][ T670] usb 5-1: device descriptor read/64, error -71 [ 356.757696][ T36] audit: type=1400 audit(2000000012.740:43507): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.782938][ T36] audit: type=1400 audit(2000000012.740:43508): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.808441][ T36] audit: type=1400 audit(2000000012.740:43509): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.833576][ T36] audit: type=1400 audit(2000000012.740:43510): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.858684][ T36] audit: type=1400 audit(2000000012.740:43511): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.883772][ T36] audit: type=1400 audit(2000000012.740:43512): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.908831][ T36] audit: type=1400 audit(2000000012.740:43513): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.916921][ T670] usb 5-1: device descriptor read/64, error -71 [ 356.933911][ T36] audit: type=1400 audit(2000000012.810:43514): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.047473][ T36] audit: type=1400 audit(2000000013.030:43515): avc: denied { ioctl } for pid=11749 comm="syz.4.3614" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.047499][ T670] usb usb5-port1: attempt power cycle [ 357.386997][ T670] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 357.411582][ T670] usb 5-1: device descriptor read/8, error -71 [ 357.470114][T11757] tipc: Enabling of bearer rejected, failed to enable media [ 357.551513][ T670] usb 5-1: device descriptor read/8, error -71 [ 357.796959][ T670] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 357.819749][ T670] usb 5-1: device descriptor read/8, error -71 [ 357.949642][ T670] usb 5-1: device descriptor read/8, error -71 [ 358.057534][ T670] usb usb5-port1: unable to enumerate USB device [ 359.640904][T11786] fuse: Bad value for 'user_id' [ 359.653189][T11786] fuse: Bad value for 'user_id' [ 359.664612][T11784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:712 [ 359.757938][T11789] netlink: 288 bytes leftover after parsing attributes in process `syz.9.3628'. [ 359.846426][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3628'. [ 361.757536][ T36] kauditd_printk_skb: 141 callbacks suppressed [ 361.757555][ T36] audit: type=1400 audit(2000000017.740:43657): avc: denied { execmem } for pid=11795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 361.768271][T11801] tipc: Enabling of bearer rejected, failed to enable media [ 361.826887][ T36] audit: type=1400 audit(2000000017.740:43658): avc: denied { create } for pid=11798 comm="syz.7.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.887053][ T36] audit: type=1400 audit(2000000017.740:43659): avc: denied { create } for pid=11798 comm="syz.7.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.899925][T11805] audit: audit_backlog=65 > audit_backlog_limit=64 [ 361.921138][T11805] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 361.921135][ T36] audit: type=1400 audit(2000000017.740:43660): avc: denied { write } for pid=11798 comm="syz.7.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.921175][ T36] audit: type=1400 audit(2000000017.740:43661): avc: denied { read } for pid=11798 comm="syz.7.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.933314][T11799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 361.982510][T11805] audit: backlog limit exceeded [ 361.982541][ T36] audit: type=1400 audit(2000000017.740:43662): avc: denied { read } for pid=11798 comm="syz.7.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.009048][T11808] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3634'. [ 362.286987][ T65] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 362.437038][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 362.444657][ T65] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 362.453064][ T65] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 362.463452][ T65] usb 5-1: config 179 has no interface number 0 [ 362.469864][ T65] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 362.483148][ T65] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.492242][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.709952][ T65] usb 5-1: USB disconnect, device number 96 [ 364.289153][T11827] fuseblk: Bad value for 'blksize' [ 364.367854][T11832] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3640'. SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=3521 state=3 status=67 (errno 9: Bad file descriptor) [ 365.062235][ T2832] veth1_macvtap: left promiscuous mode [ 365.067829][ T2832] veth0_vlan: left promiscuous mode [ 365.401675][ T2832] tipc: Left network mode [ 365.406377][ T2832] tipc: Disabling bearer [ 365.412341][ T2832] tipc: Left network mode [ 365.418948][ T2832] veth1_macvtap: left promiscuous mode [ 365.425036][ T2832] veth1_macvtap: left promiscuous mode [ 365.430597][ T2832] veth0_vlan: left promiscuous mode [ 365.483143][ T2832] vcan0 (unregistering): left allmulticast mode