last executing test programs: 4m13.053338395s ago: executing program 1 (id=2377): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x7fffeffd) 4m9.557176784s ago: executing program 1 (id=2407): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x40101288, 0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8fe67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000200)) (async) getitimer(0x2, &(0x7f0000000200)) recvmmsg(r3, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) 4m9.487553065s ago: executing program 32 (id=2407): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x40101288, 0x3) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8fe67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000200)) (async) getitimer(0x2, &(0x7f0000000200)) recvmmsg(r3, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) 3m42.739103709s ago: executing program 0 (id=2709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x4c, &(0x7f0000000500)=[@exit_looper], 0x0, 0x0, 0x0}) 3m42.651334051s ago: executing program 0 (id=2711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0x7b, 0xe0, 0x10, 0x1557, 0x8150, 0x13da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc6, 0x7, 0x2, 0xcc, 0x60, 0x4, 0x3, [], [{{0x9, 0x5, 0x10b, 0x3cbcc9e31ccf0f55, 0x200, 0x3, 0x8, 0x22}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x5, 0x9, 0x5}}]}}]}}]}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) munlockall() mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x400000, 0x14e) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x4840) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000280)=""/83) 3m41.102237191s ago: executing program 0 (id=2728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x4e22, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 3m38.10499539s ago: executing program 0 (id=2758): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x7704, 0x400006) 3m37.959430303s ago: executing program 0 (id=2760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/225) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xa0000001}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000000)=0x1) epoll_wait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44000006) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x9000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x30500000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c) recvmmsg(r7, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x0, 0x0, 0x0}) 3m37.811968926s ago: executing program 0 (id=2761): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x404d3, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xd) setfsgid(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e725f694b6f6465733d502c00694ffeb76244ac015bb47decc2269fce7351"]) (async, rerun: 64) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) close(r0) (async, rerun: 32) r3 = gettid() (rerun: 32) wait4(r3, 0x0, 0x20000000, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xa) (async, rerun: 64) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) readahead(r5, 0x5, 0x1) 3m22.718377271s ago: executing program 33 (id=2761): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x404d3, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xd) setfsgid(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e725f694b6f6465733d502c00694ffeb76244ac015bb47decc2269fce7351"]) (async, rerun: 64) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64) close(r0) (async, rerun: 32) r3 = gettid() (rerun: 32) wait4(r3, 0x0, 0x20000000, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xa) (async, rerun: 64) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) readahead(r5, 0x5, 0x1) 2m17.465838498s ago: executing program 4 (id=3420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.422328479s ago: executing program 4 (id=3421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) socket(0xc, 0x6, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) r1 = socket$inet6(0xa, 0x800, 0x20000) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup2(r2, r2) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r4, 0x0) ioctl$MON_IOCG_STATS(r4, 0x80089203, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0xfffffffffffffffe]}, 0x0, &(0x7f0000000200), 0x8) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSBRK(r6, 0x5427) 2m17.37138499s ago: executing program 4 (id=3423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000e80), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c4) 2m17.271080863s ago: executing program 4 (id=3424): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x1e, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x40816) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) close_range(r2, 0xffffffffffffffff, 0x0) 2m17.111431606s ago: executing program 4 (id=3426): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005e8ddc20f105dcffebfd01020301762d27ec0409022400010100002c202c77000270ffff0009050102080008057f09051500000203090a"], 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000040) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x64, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "30002db53c2c44e45947f9d50884ec5698bf777b"}}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8) (async) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/182, 0xb6}], 0x1, 0x800, 0x8) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="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"], 0x398}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4}) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) 2m17.043790747s ago: executing program 4 (id=3428): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0xd0, 0x61, 0x52, 0x64, 0x10, 0x403, 0x6010, 0xffab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x54, 0x40, 0xc3, [{{0x9, 0x4, 0x3f, 0x8, 0x0, 0x84, 0x72, 0x59, 0x7}}]}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 2m16.914129639s ago: executing program 34 (id=3428): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0xd0, 0x61, 0x52, 0x64, 0x10, 0x403, 0x6010, 0xffab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x54, 0x40, 0xc3, [{{0x9, 0x4, 0x3f, 0x8, 0x0, 0x84, 0x72, 0x59, 0x7}}]}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 19.708686184s ago: executing program 3 (id=4794): pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="85820528c32ef8bdfcaf925ed8b87c82d543b54a8dfd870b12d8e35da72ca1b00549", 0x22}], 0x1, 0x1400, 0x0, 0x1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 19.637223645s ago: executing program 3 (id=4796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20281, 0x157) close_range(r0, 0xffffffffffffffff, 0x0) 19.562656347s ago: executing program 3 (id=4798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25050000000c0001800800", @ANYRES32=r3, @ANYBLOB="1400038004000400040001000800020000000000080005"], 0x3c}}, 0x4000000) 19.518438848s ago: executing program 3 (id=4800): openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.42521858s ago: executing program 3 (id=4801): socket(0x18, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x8, &(0x7f0000000080)=""/54, &(0x7f0000000000)=0x36) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0880050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x488, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x56a3, 0x5e}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_IE={0xd0, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @preq={0x82, 0x8e, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x9, 0x9, @device_a, 0x5, @value=@device_b, 0x9, 0x7f4, 0xa, [{{0x0, 0x0, 0x1}, @device_a, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffffc}, {{}, @device_b, 0x10}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_b, 0x1}]}}, @channel_switch={0x25, 0x3, {0x1, 0xad}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x5, 0x31}}, @chsw_timing={0x68, 0x4, {0x81, 0x1687}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7f, 0x1, "3bfa8f9f243802c6cc4e7152090c81bf2054494f1ba11db7dd698b547285e935f394899b6817c1fbed4518ec0d0fb3fc963f5bf1c6ed6d0bd8fc1cf1691071ba28d1ca51ded8b72b5384d591d4c2c3f76c6626db287101613b4ecb0232788d974532adef75272b57f1852b54c0e0e610586174655990adc77b201d"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x9, 0x0, "088d7d922c"}, @NL80211_BAND_60GHZ={0x61, 0x2, "9241356ff8135234eb3b110f4f85482f657211ba93d328fcf6e382d4c92fdde865651f91a28a81b6d279c05d208fb6311c2f746ba7353de9deb665cb2133020b2c4360f27c39c1e0a2f5bbf1eb5094aafd69df4b0ce34933467d3094bb"}, @NL80211_BAND_2GHZ={0xdf, 0x0, "3a006d0ce1ed41fd27d186977027224f46e5fbe70992a7e1c7be961e487a224e5dd50142aa9486bab449820b4505a427bff3fa108b90314e3b54c349d7b864d6e94b7e619572bc2f85318fd194bfa13dc908dba0035101fd2cd2292d1593e66fde5f4c6604f0edc684e05a3abb16a6defdab56904b219d2213aab0e04c170890941bc1383c7f6e556a4f11dae499d1715bc217af9be1bb2c43ebc8061961b612f5245665a07ceb9f4236b01b04cfcb46d2e929c13c1b89464759dc86fd92f3c05b82eda3dfa5742da5237068c8f5a639934e02d54debc742ac1d7f"}]}, @NL80211_ATTR_IE={0x19c, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xa9, 0x6}}, @supported_rates={0x1, 0x5, [{0x6c}, {0x6}, {0x30}, {0x3}, {0x12}]}, @random={0x3, 0x78, "b0448f36f72ced7bb2a80d23bdb4b71f71a42c9ad757fafa484300ae830a3147fbb589c01c9f93230c489e446ae87f1f528f090750288d7e0867e65036d55fbedf679a14cb8d4acc9efe1399d16b408fc92077db3b3251ad6339a31741dff83c473325778d3f4e02d4df9e0f33ec071becb37373cf336555"}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb3}, @random_vendor={0xdd, 0xe0, "949306ca917c0e683aaacff665b22ca37b53adcdcb6989aa74e7aaec1b77cff2721b0ec5c12c84ce72b0877dbd01777eb45f29009b404eeb8d52f0dbb6d3b82071093c5c7c474642e438dc1fdfa26d5af4299385840d45b927eaf576327c444590dd8aaae19f969e85daf60eb4b79200bac12af2041cd467b74d1dccf203e4d1c97e6719c20dec1f7b25bfab2b98c99f0db43949c6569ddf0314f573e7d62f5e11ae43cb4f46b32832f13bf6c515504eeecf77cf9276fdcfbe696bd1f19e790c5812af97387a10d71328c7bb079d65cd8b779ec82c292cb7da1eef16867ccb29"}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x2, 0xb8, @device_a, 0x3, 0xc, 0x2}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5b}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x178, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ab07087b02efefcc53d3bc1c7fa920fc7a01cdf2e483093"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e566f943089259fe21bb2763cb296c56dc2f59dde6e5a05d"}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1fc3c77dbd9ee4e4359880874eb9a2743831309e2ffdfd6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "caa2f47af7fe25f37ff81e9a398797953cccea1c43c1e705"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df1ada85b5a38e02fc5f60f1aae4bd6a86f64f3cca0bdf45"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4d804a886dae9a96717e3af363dbde9231f1f21217e5dd5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebb8646e10e90cd7e8b05f54679e4affeb1cd0b986a6ab75"}]]}, 0x178}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040084) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x114, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xce3, 0x10}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xcd, 0x2a, [@tim={0x5, 0xc7, {0x95, 0x95, 0x4, "6c5bbf7baf1e01a2120c5167184a9d837de99a8c63a782ffd12f90407dc6f77ef3969baca68f4cf30c05f23a0f47fa55bdb437808fcf3b3f6c0dfe1f66043c94f537591b0e091eb4372145f56a2971d2f1e29126b1ad62ac54ef81adb6f00993b6589d842c961b3a99defee1624b0bae22c395f3574ff471c3f093c75ac722a5f613e1d5531e4da399cac29d6b0404ad49fe98dcea0ec5512de0152ad87ea7dd9294d3628065928b2d5984c945add93ef597fa49cd2a4cf2c00dea825a54def01914696a"}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x24048040}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x4, @private1}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8b5}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x528) 19.325437542s ago: executing program 3 (id=4802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) tgkill(0x0, 0x0, 0x22) (async) unshare(0x2c020400) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async, rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x24, 0x0, 0x59076100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r8, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0xe81, {0x100006, 0x7, 0x80002, 0x0, 0x8081, 0x3, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000000, 0xc, 0x0, 0xfffffff8, 0x5, 0x4000, 0x4000000, r8, r9, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r11) (async) setuid(r11) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0, 0x0}, &(0x7f0000002e80)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000500)="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", 0x2000, &(0x7f0000003000)={&(0x7f0000002500)={0x50, 0x0, 0xf, {0x7, 0x2b, 0x54, 0x400510a, 0x1, 0x7b3, 0x4, 0x81, 0x0, 0x0, 0x4, 0xe}}, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0xd1, {0x2c20af54}}, &(0x7f0000000380)={0x18, 0x0, 0x0, {0xffffffff}}, &(0x7f0000000480)={0x18, 0x0, 0x5, {0x4}}, &(0x7f0000002580)={0x18, 0x0, 0x7}, &(0x7f00000025c0)={0x28, 0x0, 0x6, {{0x800, 0x8, 0x2, r4}}}, &(0x7f0000002600)={0x60, 0xfffffffffffffff5, 0x0, {{0x8001, 0x5, 0x0, 0x7, 0x2, 0x0, 0x20, 0x6}}}, &(0x7f0000002680)={0x18, 0xfffffffffffffff5, 0x2, {0x3ff}}, &(0x7f00000026c0)={0x14, 0x0, 0x2, {'*}:\x00'}}, &(0x7f0000002700)={0x20, 0x0, 0xff, {0x0, 0x10}}, &(0x7f00000028c0)={0x78, 0x0, 0xffffffffffff9f06, {0x2, 0xcd, 0x0, {0x4, 0x2, 0x101, 0xfffffffffffffffd, 0x0, 0x8, 0x8, 0x1, 0x8, 0x8000, 0x1cf3d802, 0x0, 0x0, 0xc, 0x7fffffff}}}, &(0x7f0000002a00)={0x90, 0x0, 0x3, {0x0, 0x3, 0x7e, 0x80, 0x80000000, 0x7ff, {0x2, 0xfffffffffffffffa, 0x9, 0x5180000000, 0x9, 0x4, 0x5, 0x9, 0x915c, 0xa000, 0x335, 0x0, 0x0, 0xfffffff9, 0x5c5b}}}, &(0x7f0000002ac0)={0xd8, 0x0, 0x8, [{0x4, 0x1, 0x0, 0x26e7}, {0x5, 0x7, 0x0, 0x7}, {0x1, 0xf, 0x0, 0x2}, {0x5, 0x0, 0x3, 0x6, '.{&'}, {0x5, 0xe, 0x13, 0x7, './binderfs/binder1\x00'}, {0x5, 0x3, 0x13, 0x0, './binderfs/binder1\x00'}]}, &(0x7f0000002c80)={0xb0, 0x0, 0x1, [{{0x3, 0x3, 0x1000, 0x3, 0x7fff, 0x34b, {0x3, 0x1, 0x80000001, 0x4, 0x7, 0x5, 0x0, 0x3, 0xfffffffd, 0x1000, 0xb265, r5, r9, 0x7, 0x4}}, {0x2, 0x4, 0x4, 0x8, '[%\'+'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x82, {{0x5, 0x2, 0xa63, 0x3, 0x2, 0x5, {0x6, 0x1, 0x4, 0xffff, 0xc, 0x0, 0x9, 0x5, 0x5, 0x1000, 0x7, r11, 0xffffffffffffffff, 0xf5e, 0x8}}, {0x0, 0x10}}}, &(0x7f0000002e00)={0x20, 0x0, 0x8, {0x10001, 0x0, 0xad, 0xc858}}, &(0x7f0000002ec0)={0x130, 0x0, 0x3, {0x80, 0xc, 0x0, '\x00', {0x2000, 0x5, 0x2, 0x6, 0xee00, r12, 0x6000, '\x00', 0xc2, 0x81c, 0x8, 0x2, {0x5}, {0x8a0, 0x3}, {0xffffffffffffff25, 0x3}, {0x100000000, 0x2}, 0x6b, 0xfffffffe, 0x5}}}}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 4.281533316s ago: executing program 35 (id=4802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) tgkill(0x0, 0x0, 0x22) (async) unshare(0x2c020400) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async, rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x24, 0x0, 0x59076100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r8, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0xe81, {0x100006, 0x7, 0x80002, 0x0, 0x8081, 0x3, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000000, 0xc, 0x0, 0xfffffff8, 0x5, 0x4000, 0x4000000, r8, r9, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r11) (async) setuid(r11) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002e40)={0x0, 0x0, 0x0}, &(0x7f0000002e80)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000500)="337b6526f2ec498d06b21058d0d974a88f9958b4384ea1fc9e78727229ea02f6811383c0b23110695f26f0f46e65c03b076bbd9545e7e8f8d386ae247faa6ba3f30fe851377dcf8dc7fca5f5eba12126fbe05aff5b65039060bd8433564b73d319321c7ed4f2ce26d0ded81077c50fc64e306b4e5559b0beaf882d0b9937678fecde43b0cce967b88570099888ced89fed71844d50ac7173cd5e18004f09e1de3c3b8e3618d0f96a7ee88f97a1662167534661830736c87e5c55cfe8e47fd1e73586169a71ed976daf5bfd0ce90f4468f9a1b20de2747c7b4ba0bbbf5fcbdafc8af726cc936932cd15ce6cf1871751df84817aebba48e56d39ecae940d0061b3ed964f1ece6ca688f34e11f031e379ca689874e503ad92aecbc3cb40fc775596eb89f569578c8d07ce28bddaef38ac6cb5f406befcb250ef75468db532cd7dced75755c8048764d4858595c32d2511e4f29131c71752b4903728c254746cedfc47566f3215198d2f322e3baf31f8940516cd82dc95cf5b115e21990d8c9dc7608515524baf5c7dc07a3624b276a769f18933178c834f3f64cc0c508adb30f9302d3cd2ff64cb6369badcac04a4b381857da45f73a5f6387789f2d8b2fd991b82f21dfce67864d13f7a6e64e0bd4ce61154b220fee3386000972f3d8bfedc329c585a18575711ecc7959145407602a3714d4f958f0c5c8bba6a2e7b7d5a82c12b9dd00829971f6b17d86c0e6588834df10198a6271509482cfb3f9f717b99d1286a943d5b35ca3c29b49d32272ad73abd64813ba122e449736f8afd4ff22c82a7f6809e6c2727bdc8e5ff6a7962d70b473970976a9f98b9c220358d709c6ec4446057b823b461e0ba434781932ee9147d96a00aa880b6162ca8a5a1659934ef16199a8e350ea639ba374e1608724dd9cecb43aa973298545147295ba45ce24a5d0072854e0953dc066172023b2bfd57f510883b2d64675bc3263e0f024f17879bb89a233465731c0955610250770c606ab25d6b5240292281c7a77afd1824dbd3f09863ede74af0e570a1c7c55ad67b200edda76803c885ba26ae91954957e0e0acdc85ad6006c60aa3f9c61de37cea1572ff54105f609dc76ca855f3e5596b827718321814ac77f788f84b8881c001caca1ca120d0b14688ca6f5d91f304d4c4b58b4ecf0b54b25f41db7c8567430b0728716b59b40c94f6b593937779c48bf9de888e66d64621ac103225bf5315392dddd43dbbd14610ac7d0e877d0b847f00068b0a62350ebee5556680909d46a0a40a20588ae75e96ae00c50448d5f01bb025210caf1f976cdad6ddec88c96ec63cef32399ca1bee3142f24c776a719fa9f4b80ba5147f2978ef162ed41fbe41d9e683a77b904c1847a2bef6f8fee3f6de57f05a81baebdea9cb7ec5af0a4811565060824e63c26aebcf1c02ba3f65407a95ce0dc0c3366324096d2b23648cbdd5e850c4f2ba3987d50fc7cacc3b6ffffdc326ee6cd74319f1836d188123fcc6bbf359816155075ac0e27c5834a65b35d5a25e274f831bc79db1a10b0d494967622134a1b5a2b970f1c8dbd58d708296ea9d8319b03791f236d63c4f91bfbc6b58c9285afa46f1f721cebb0a3a059253ea3c11a3073860d6fc54ab036b2554541e382422d2c467f822e7052b572bc20ee9725a98c7fb1a5277bae6a3f6620e1375521bd8cac48d8598d10644d89f78eb22794a755eefe8178265cb0b7f65fbc96913f56293b085e1f403392c78775eafa3638f670855f3e7bbcc941f8e1dcc70d39292a9cdbb3030f31c61290b7d2efdf16d78c562e39192d0f2ff3fc56a04d4a1731970d41748f29587ea5d5014dd06695f9a840b59ec0a2d3b1ffcc24d01669b13a9dc026f696b266bfb0cfa0361b9f5c579885fd60405a1dafee8bde21e1d36b38cd4a77c1b7769f89aba5f92c757722fe99f77b61f1a1b31654da3c54f23fe1a92c42fb6316e79015b8b7df7566492da4c59dc450e617fa14373925615bf008c0633a0024cc953a34a74229b72909f76fd0113881f9dec409ecd81db5c82717099103408c459bdd0f41e2b92babdb15deb02363f2698569bf3524a19e30bc8ffbd16226350e2ef635e42dc27adebc9c1d49b85f49c64374a6b42365cd168f0556918058e4f6ec7c82ce8aced1f877335b36d9bc7220dde50eb39b5a25992bce491129f7ec1d2d5c33f66aa4709bec9598ece955340b1d1bba6ce6d1e66b6eced070624576233bcdc3218eba633efce9b7e3b96fe4e0336a5219a174224c80a5647c7ec1240efd4cdeda918133288b2f4b14d97dddf3f70c723be2edc409d4fc2f4dc49b14de429d2fc318913c53cf72508ffab72c022f1e619dcbf7abe1267ec5badaed39fdf53ec098829ed8beb516eb345c6cbc9ea7af4ae57cd6bf2d4b1d418b2b3ccf90166c8162c4e04624720048a4947c60b0b2ffa1095cdd80e0386d9b8e5492826486711a63d67dc6dcd47da92c45e834a5d378a66b968208bcc23ede4a75fedeccf4b3c75c26e085bcadb4aee31032fd0c729be7c235aaaf094d98f0e7e22294cbaded4a5b3c92e9d7c0c0769eff27796544890cebecca60062c2cebc127f1b4534c51ae81f45bbce0a1a6c540f6c183f2df050fbb026b817177261353be6c72f312fa7ce3d0746302635731bbabb8db511d2c40da3132ce7d40bcc758564e0c074b76b2483d2fbd2b9fcda57003635cb6b1f39cfbe7e8a7a505091011b6f14ddf69eece303e02134a3d7e164ab83b2d941aa42c4b77a380ac29ede335ab1e23333e305befdea84b375049b739068c2e71442cc15c9f18d386061b2d8b9ff7934840c7b859e8d243c90ddc323852a5799a5f9ba8538837d8b7e594e1e42c69b4cadf0820e8954eac12b3320ff083f6f8bd90fea09f79dca8add3b746b1249d7798ea81dcc97b60558b1f2b48144bd48c19356c236efcdbc2a566bc92d9c53435a75b7a6e3aad67a91da24975a32171b8f7c8f205d2e6c2724be5f8374598dbb8706e62d39989d463f9a4d25ced10318d50d920ad173df50e8ed0ac685ab298d608ae5123ab7fa1cdbb12d9a9b1ae8a592a2306e39919239a2cf9703e07b57986978474142bb54a27a38fbcedc9809bd18149bc0870a4614f93efa2fa950cdc492be1f97fbecdaacb0bdc7402bdb389111b3fb16c3ddca3b21f3380977bd41b6b700e73efd9eddb6ca2f856aa2742ccfac266a265835093b36948d2970d258ca26ed820332af261f58eced0c93d51e9085c7929ed9cbf557cf82ff4bd3a2c53870e2a12616480c0011bad1c5bda2d844d2a988b8a39a6fc418df8bab99da6ce39128b4fd0faecc3b8962310e8d7c1fada091f01e605bdb5236c5c8194eba2ff3dacab8f4e2cb26c7e200094dc487895e82a0b5524094339deb19195ba3e0fa5fc3a3e247ceaaa26cdce4f474b68822bfe1a92bb3c1075dfa7fae7fe9ad1a262dea57bd288d7f5d5033cd3bfb035c9386b659c9330179637bb9ecaa310ab35f38ee47bc69fd9e40863b2eb215da64ee72e675821d3b0f19c270cc8a4cd590bc0905d91f1f9a96d9acf52edd8f09ade30d11c64ab6fd6c2958171ac0867611890ab63b035d3a48663ddf1e75f1d4f485321bd12056caace720d1f7cb106755b751c468dd518cc440a8ccd42e62ec4c75bc4cb3aeb6e007d53460736daa7fbd2c1cd8df250e4720beac64e6a2af20c42206898ad33a35832c57b9d2b04f5154176c4b9113fea7b5369c7d69e6b7117e29bbdceab4c2fc7085b1951d7464600e5ef2ed2abe71e9f6998c4fedcdaa905129cbf32a7619379c56dcc348be120119db7d2599500f5ea771ffd4a445da2bb435a5aa69880a46f996721e9350a04491181a8dac7702cb9ecf9306071269120dcc244680429deddcff296345f537c103f24f0dcb87bcc5252bf573ae571557be465eab463748a13cd08c6c8c22bdfa51465c8569179d62521e939102d9ad1e8fcea11f520b9a57805d5f7cd94e2f42a2c927e02b692c439549a7de9937e6fb9fe6d905bf7f913f570f72abf4dda6203df32ccd33f2ac45cdbe9f63e5de102e9c7cd83333058d43506be540e2101381899e58e40b9e15e95b92753496ef44246fe49d33ee2ffdba9d0d062f7cb5ca59e6b69a9e7e00cb1af880976c76e33217485331ac65d3620c59cab26bdb8967850d44bae4a82775b7f3d7d04ef4474b8e20b77c1f15b7b05b3a09a8b59cbd84845bb81070636e6ac56db1887227d11537ddff9abb42fec7a6ff3cbaac2f62b64a1c5d9fd828c811388049dc1e57babbcfe3b3d3e8397f58b4232f9b93f398043f7dec20b6586ec4c80e8d14599877361a9de80cb65e9c1916d5ddc8703b43e4507dc8bce8dbbbf938a806987e2eff18943125af9d6238a42b5d57ca6458d60d77b798fcb224df1a381903f4917983e744133b14f307faf0186f15d5aa346c5421a7a7330336803fc5a99e3b03c6d3f51806bbaa3a145258b2c07c747cffb74699ebc1a906013fbcb20b45c9da4def9206cf92f35e4d34f0d2e02ce11aca1152ef33552c10c1742a92caf62fa90e7aba2bb703ce45c7d26d08d44b81b2ff33a89f959d030d23146f6591d68712ac43cf02ae1794fb25365aeb5b1f56a5e68c312396c0ecc579b4d8ce408b7c9879da031763d840ca5e420fbd9f5d0d14dc79cbc59b60e97d3848ddf02612f44fd9ddb3c86513969a3e62a5be5e70aba7ba48cbc722a875a93d5157b7e678d3df929455e22c921f3d3b7999d627d179de7366b02c8670237b252f0dd94742db68bb7e3dcbbe163432f96d804718957080b4377e489a6fc07e0aa55d422702a6d883d18ae3f058c6951ed0e7b022f90b0441e626a7e12eabd5a33095ee0c685b1da4e6b2e680c4c76885a27f03c17df1ceb7e40fc009ec503750f97abe818f90d6e8da4fff6c0b886f164eb78afeb04701c921fc43ca0ff7c9d3ddcbb8ab598028924368187432c0e13d20cefc7297f5f3c8769db5b948a6030bf041536be27bcd8918a38986d87d52a8dbc13288f2e74821e15f005c2ebce8f1d409f3856f9bf16c17f7ec8d07700f24f8a407f9ced890fd6e521f8075940a08a928136fe6e2c388cf8099c6bd53b897f50856e49114f33258de624fcc7a38055cb22a2ff3ffc1992f26a3d06a685cea8dd32108e2e6def0cfadabb7eecc9ca1be258ed42cff1907fa421c20a7161f1a23bc331fff72d21c7831f8bcad31924118099fc6bb7739f36a8a57cd90cc1e1e576bf345d6dca3f3b26e6a7f8d76fc379fea8817b61f6b429f38130b2eef68224101e9c46739c5434d0be7969f1eceff5614611939b40de5be4a030f644a1c2c2c909c352fc68fdfe8ed43da1d48d220e9d2da423c7233d36a7d6d48bca6f337fcc331805cfd45eedc07e6deb2e94ec6c37e9c28a89bf5c2dc0d06142a6484cb5edcde4f17129b3504a79d798004a313846e35de70e184d4cc6100271570b93063948332b68cd95fc9f3276aa372dd7d70b348d261399ecd3570423a9096c87a050a41772d18cc4b54f4c204c9d7a0a5c87e09440d32c0acb48802cf5e890aff576c83ff7fd4a951c3c164b4a640437061eba2abf3df1566726a6e9acbea7d1beaee31613099ea90b38700c7e10be13d1c30b346213f9812217e1c70b3c06059c7e6f32d8836d3a2c0d7d282dbacea0d8f9338ec7b3fcd96ce30fc405d343d9fd716375a144df5e41c562b31ab49fd5cc21aad04803d7b6682cf6e08a175ce749ffda458340b2a27e33a8759a8e3f7ecb2ab54b11123e6202edb63e257120f9d8e4e7d4c6fba5527cf1fd7161be4485297078837df3fb4de9d1d2bd04a7141c3e280d0ddc474a9fb72822a58dd287cb981b70075be8405e1f34379ffe7f61bb94ea33c3bc9b95b702c45cc70f789889c74089fb1132e74e4334171c984c90c9949c077d82c9e302f0ec41888535881a4276acc6ae2335d78e26d8822186ee84878b8d033c0f7016e44d4aa2b04f3ffc9ce050e3561023319c757676b304df67f104d39a62cf03057cfcd360b4d40621e8f46bb202c913ecdf4dcf879a8eab71dc9b2b3386f4d5c35d8b6eda981ff7545a976dcf2c15e41506e6413cbfdc95844b8c56073d134212dc4fd4efb8f9dbd6e6f28055a67af4db9500645a639110648feac7fbbfad667333c16720301160155a1ef67a6f07da01361d21f4b60281074e3233ca80e5f1f9dcbe0f749191c922ba6bcc31d4008581478dfcad6ffc050697cb3375d62f462e1f9da122cd926ccef27dadbe4c7bf8c278d2269f6e57c44d7795257b6d3ae53798bd0baf1de27dc90f78f9ef8b9a1630c900efb2df91c98e538aa9d82f7bb93176c09d83ba4e5dc58fbb19b417d5fc446de971f3ab1cd7e04d41f8c3b4e2d4d880e896c2142d0e3beed199136d8fd9cf4efd29c8484484fb98b13462af4c5f3028f5981aeb9fc6b28f96c5ea70774b3de903741a983ff1b6023eae80d9cbbfef4e77f3c04c7eef664757c0b81b3695652abe16df2bbeff7754552459d913b420e8122891153232e85dc3798fafbb87d35743856df373eb5e86be9398bf4f651bc799d03ca855d74e28f8027ccd579b5926d29f998ced79132294b1507186a203b4ef03973baf7bd1314c1744881592491bd5dcc793ed8b45b3da5274b9f2cd75b47544875eb2dceebeef19a26f6888ce096b7a0f5631febbf11c85d636d539cd58eba67c84665c61aac49105c16fdad866ae5f9b031c09f2b0c37fd54fac8dfe09cab0806b43a69f20d63d0af59c30180d97052e0ea4f6a3d8f64e1bdc5091c9bb8f85affed15fc6724578e286e424ee570178baa0da234d3e1d9a01fae18e308a33a5256ad73b8e9653220490fcfc5b65c4eea6c52ce5e16b1af123871e3c1161fd1ecbb431e0e76cc0072623ed00946eb899c220c0a30e8389f7ff83857ee45fc51d1d8cebc846f5f38dc0ada3656c0208d590183dda22da7fff408f106a78a9fac2579267c45f05a3e958ca65623803184a66284b130abcf947d7f2ef89c50a83f60dd9f403e563a954c17b93f30492d669fa89dfb92b21f2b999876062648d18df0ba12054b927be4d59d7bb57805b549816788a6df42ddd396834089ef97608d02d2e6feafc705d81cc50486f05d12f691ed730911d354652aa45dad3c9d5184723118b6d051bd2e5d9b5f3805bcaab416540c760b3501c1ea75d40169aaef5843209fea0b20957d1b1d7f626fc19fb27514242b788cf8f16d7e664d57d44fc8603d3d368d4b2042e5eb261ed8a0e8bc66710382d7998a023b673821e288a07d38561e67233a549746777cfc268e7d4e0b55c7ea1ca85a373678c6c93b3e4f6c9220e08a421799a371a7624759436bfdaed1691df19b529fcc36c7f864a4a2caa5f995a3471ce3588f79279c2e00890f0ea81c45389a4f7421311e1afba9d63131150602de224246e87f123ba89372cb16cf91a33764dd90ebee079bf0b705fecd4c6f35b9f404522c27ec751bacf53cf641ab9b49ed6c2d13abe1ebd237b15b7c7d1b41e4f0d4ee8c113cda9dd344f289e5410475f22a0a81cafefc1d8467127c6cb9d290a77e221df1738197d480e91874e12f05075882c215e64f530c6ca7c9395e8e2d85f0c990c73177ce2144a2a95a7ca7640ca01200aaf442ba919943ac4386fff9fbe1182aa9b9770762902c173608534b050404a6e4906ff4c9c8df94b8d980c381ea7a7046389c8f878d39c8e4ff4e90f3c6bbdbf39b236d792558b8f1ef7794bd9bc501fb06c13f403e4efca1f3d69b8fac5340c7c115e21a625ae7dd5490b487d32b8efb7764eb1c373f32c4f2a8308612464fd975b9c6383f98344d4be7a381a3731d92442b2c324bac61520dafe1899881c14b1078d5c3dc660a8591e9f18482b844dceb22350fae51040a78ae04041c6e87022763237f5145bc9bea9c96f1e6ff980d807701d2ddf87a050399156e8b14a56e7b5328f85193bbff7390f61aef7547d69cd6ac65f30e953c32606171eb1b7dee746e152fb5c6d3b2115cf9112b0dbd6fd309ff6555bf97b8c98224fbcdcb8e0eab2321f6bae34ca7100383e0821f221646f021948c3df3c8e4421dbc7357e8e6938060cf4fed67062b7c89c146bca6f21273d446258bc9bc74c7012ebfc73c4a2cf959dfbd76a51b192700f016e2cacdb3e7a45f587db0bfb771490ecf199445c4a2a32a88d960235f34cfda2983fdb220df0d2235ee799d6b3d72f6216fa9d58aa8dfdefcf1a5f70544bcc4d217faf8e74e895ed2db0e16daca7430f8a3f952e7e6cc1b40df760a1d56c0464af4eda94dcff6a63a78154e4f12016482c2ed9f99712e07c1ab44d94acd9d29c0a73c81d397001e2547e5678abd7e6238031139c27f1e5dc17f8ba08e27513660772caac912316a123fac24b6874f132bbcd8bc5bf09e6677c21c518b5a39a32ddbbd019032f7b2dfd3583dd6250aec735425085599fc9e4c4577425701d80e86141f1a6e61b1a571f947e3bd9f8939e347679b44cd157d99d1df50ac6ec2e236ea60f5b1345bf9fbc4acad6e643c1504bdd76b2db8b16d3efd368a307af323794f5fccd2443a206451be5f61e0389686058788e58e48228aeed05904fffb0ebb336ab0a6b9e90e1de9a3a9cd90c4691812efbc1ec968fbb9bab862b78f52575c779f60c7c303034a73a468b25ddcd28c8ade63630408364e6eb55125e2a3a4d7a06521bac5a379b422fd42792c4725ab91f25d0ab95adc843fcd77417c42011a8cd00c5bf78ebcaed579f45e922b7da4f789540dfc8192afdedb86b15d892612b3ba59235dc37c6ee1d72ffa90c8b4b7c34a3854b93b49468bc2cbdecc4fea51bb2ac1eef20fff9cd181b9a2b873c319f3f283887381676c45bb5930a6b0a43790a74aa534326b3d218a98e2d16a80adc4f91c28d32b16dd487bcca0e244be3436d41e6b4f5d3dab22b61adc4e37767b6235e35d33037a1ddb57e9cbebb17f433cf79a0cb9d47dbe54ab5520162eaad5f77d97b9f099a674c2f4bcc0de90eb5be2e0a393b328c1797a6a6fd3f09e1160f0cd54036afd8bdcaaa6f39d7227f6668a4cff3260364e14b80c109ea8d8c5148175efda8a94a06b5a29f29735f1194da68ad9ab94082db78256a831c5bd3aa503efc7e32812cf9c24df974b1ed876629290d7140492bc0ac51d1aa8c2b21bf9005353da51658517a3bb11ed87ca995be4552dcf64c760913bf35d895d2e87ed72f4fd40fd5fc17f28821fe103fee43a46aecb95c9dda3a7186a71e08fc9dc61105d033b43aaaa2d597305e31c74886c6ac6894f1085faea358641f1bbceb802694f39b857ed998312650d2cb45ccd8a8a8c94551ee8757355bf0579451594c6aad84c6712376e5f8db547c3e2f8559546fd2ecc05ea856b217063110cf3a5a9234e0e5c551057bebff4aaeac7241760c0cd9fa83d9b61dd9b0a08e3c608bdfbee03228d8a92b12cf511111089b793f88f422ca9c398b28a0ef3f7936b9f193c2d629993049fc1e86fe50e37841d09b24474a78ae62b5d43308d81e527f164f140f5f3db2c3ad12ab016430d4c6799bc5e321e198dcb19b804e6344e24bd662b5e316fd72a314ba06ea334d9cb5e4904cd7f40f4cfaa0e96f91cd0a20c81a3dbc39abcb8275c8d7272af2bcf69a5ec902b697050feb0098bf4796da6bbd12c5bb6a32b328a69dc86bd01551e31a620733d2b2e3bb8578a7b14cc17c5a07766c18d1e0507d67654cb2eaeefbc29f95d356de57d70997d649fda1698292e73a61a8e531601e72cc7ddd6ee115565bb27dc7d41b95da982cb8a74cad0f9123d9f7996b41ad2abb7a93d3584c5f495455beaf3880fec52084115d84a31273f348d9b7616fc1d336a1d758ecbc4d62446fb0c1cc1064ccbd6093c42cfc90ec5a58e0a7fa8881288720807ea242b041d1e57ef3e403864016a5f9936d0a4ebd6117c1b324e0ca8ae2e3673e2077d6a4f4dfb1ca627dcf3ef57e8ddf706e50a8705f35ce4856269079f4623768067ff8a82e4366c9abeb15ad357428f9d47ee7185aeece37f43c1b683c7ad471656f571453d10b0d4628009eafb187a0a8aa24cb98393683a6c1b9b89d6a2fd24bd2bb484b1bd6048b3ced57a2d7d35a08f6f85f65a6d827120b12b43aabe02e009b49db6e010e107a22697e216fd6428efdd242dcd911bb6fa013b3315edef81f78545efc829f62b0939cb213b0eec4afe1b1a3a0bf6b33fff2213c057cecb200e242f94c9d48894d30207c8c54ee5f1ecc1c9c9e01e5a2b2d5b6d2394b930fdba8022dd064ec81f40b5adfa4fa301f317e10cdb1a45f260cdb2f6c29744aa47f12ea36a1a0b6d5ef7c04150b83567d99ae909587a287f4fcae183a13058c3053e791790b837c19c10589464d276b108758fe0ef84352c6065dafc3c0e1758d29a94561b320d2f0198c19cd03bdc938b548ba2e7608b4210ab9cb1558b59bbbed4560085be5102a92f3bc59a20cfcfddc6b9ad585075482d00db2b52eca01c516ff915628685d702c21f7124cfaf277096c585ca1296b40c4a2c907468c3feb937117344910abc39e2b268c5be2aba074797fcbca145380b32dfb02ffc69addbf72804677f79ec30b0989f885021e553493ca7c5af58279ea6ca2edfa6ac2d0747428ce1a66d600378d6de28ae098411f6cccdb2569d02d2e1fc7d47277527d7e7ad2658b61dce024d2fcb47d86f9eeb7f205320f58012597c3b2a5ed646f13cafcf20045486f9759c86b79ced73188c03f42ea59b37d049aea8ca9c7cccaadc0c92ae38dec27564d477454bc534f80dce60b5d226745b2baa36efc3441de410e593c99df416a32f149ae4aa238260a0b95b5bf3e2a2d6751236cb0bcd974037cd514c919ecd0006de5bbe82a57c3d644fe17ec45f79f51ac4889348d216b58e66080ab2dac36b268c44179b8ce2de896b73db06d7f93528557e4c3f68ab4f6732fc2cae7a018debda0849dd9d220a3d4b8d2e6ed4f1eb0ce1dbdc3a366311ff17d6f387e6806fc9c54eac45cd0ad51cd46b604a82b2146a14b419f4069d8b7b974cac85ec4cc80c1cbd1da84613b025e2f1e7325f794dcd2460e01316938fad0f9ec52cf58e24e55b73f3ff9dcc38edfe69991012bea216c0f9aa4c462e70c31c36d134f45347110f4c930a4f7ebfb2bd096dc88ed1234317cb49dc907f8cf93c61dadfdd83d342fbfb979808bbf77ef9fefc33c663566e10a83c14f2f687af29d0fc143bb43ef6cda69bad827eafc5c7ae30c0c6bb3d75d1da97bca9fe4ed80895fcb0c18e8b8ddc6158df1575921a0a18ef7b3e2cd416b34d9992f54891a2ef7c099957eaa254641b186cff38791620e0548d23c23e8eb6f56b367db9837a3660ffb4e4abf4bd2c6300abe96dd3a8b49da1061eaa9ca9f655c31509cbc41c2e47a001453efc071c8d89c81eb094c31394095dcb1447faebcced1a01f3efb75df75956ac3baa0e55c3e94044fbf6d8e9a76474752d1cdbaf8a43aaabcac380208b5b3f7d82b22aedaf224855ca30679fe9f927c1f736390d8c93ba8f6756976fe36223d65ce37062e303224c3f5", 0x2000, &(0x7f0000003000)={&(0x7f0000002500)={0x50, 0x0, 0xf, {0x7, 0x2b, 0x54, 0x400510a, 0x1, 0x7b3, 0x4, 0x81, 0x0, 0x0, 0x4, 0xe}}, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0xd1, {0x2c20af54}}, &(0x7f0000000380)={0x18, 0x0, 0x0, {0xffffffff}}, &(0x7f0000000480)={0x18, 0x0, 0x5, {0x4}}, &(0x7f0000002580)={0x18, 0x0, 0x7}, &(0x7f00000025c0)={0x28, 0x0, 0x6, {{0x800, 0x8, 0x2, r4}}}, &(0x7f0000002600)={0x60, 0xfffffffffffffff5, 0x0, {{0x8001, 0x5, 0x0, 0x7, 0x2, 0x0, 0x20, 0x6}}}, &(0x7f0000002680)={0x18, 0xfffffffffffffff5, 0x2, {0x3ff}}, &(0x7f00000026c0)={0x14, 0x0, 0x2, {'*}:\x00'}}, &(0x7f0000002700)={0x20, 0x0, 0xff, {0x0, 0x10}}, &(0x7f00000028c0)={0x78, 0x0, 0xffffffffffff9f06, {0x2, 0xcd, 0x0, {0x4, 0x2, 0x101, 0xfffffffffffffffd, 0x0, 0x8, 0x8, 0x1, 0x8, 0x8000, 0x1cf3d802, 0x0, 0x0, 0xc, 0x7fffffff}}}, &(0x7f0000002a00)={0x90, 0x0, 0x3, {0x0, 0x3, 0x7e, 0x80, 0x80000000, 0x7ff, {0x2, 0xfffffffffffffffa, 0x9, 0x5180000000, 0x9, 0x4, 0x5, 0x9, 0x915c, 0xa000, 0x335, 0x0, 0x0, 0xfffffff9, 0x5c5b}}}, &(0x7f0000002ac0)={0xd8, 0x0, 0x8, [{0x4, 0x1, 0x0, 0x26e7}, {0x5, 0x7, 0x0, 0x7}, {0x1, 0xf, 0x0, 0x2}, {0x5, 0x0, 0x3, 0x6, '.{&'}, {0x5, 0xe, 0x13, 0x7, './binderfs/binder1\x00'}, {0x5, 0x3, 0x13, 0x0, './binderfs/binder1\x00'}]}, &(0x7f0000002c80)={0xb0, 0x0, 0x1, [{{0x3, 0x3, 0x1000, 0x3, 0x7fff, 0x34b, {0x3, 0x1, 0x80000001, 0x4, 0x7, 0x5, 0x0, 0x3, 0xfffffffd, 0x1000, 0xb265, r5, r9, 0x7, 0x4}}, {0x2, 0x4, 0x4, 0x8, '[%\'+'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x82, {{0x5, 0x2, 0xa63, 0x3, 0x2, 0x5, {0x6, 0x1, 0x4, 0xffff, 0xc, 0x0, 0x9, 0x5, 0x5, 0x1000, 0x7, r11, 0xffffffffffffffff, 0xf5e, 0x8}}, {0x0, 0x10}}}, &(0x7f0000002e00)={0x20, 0x0, 0x8, {0x10001, 0x0, 0xad, 0xc858}}, &(0x7f0000002ec0)={0x130, 0x0, 0x3, {0x80, 0xc, 0x0, '\x00', {0x2000, 0x5, 0x2, 0x6, 0xee00, r12, 0x6000, '\x00', 0xc2, 0x81c, 0x8, 0x2, {0x5}, {0x8a0, 0x3}, {0xffffffffffffff25, 0x3}, {0x100000000, 0x2}, 0x6b, 0xfffffffe, 0x5}}}}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 2.278346355s ago: executing program 6 (id=4961): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') fchdir(r1) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) pread64(r1, &(0x7f00000001c0)=""/220, 0xdc, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x2a) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 2.217623867s ago: executing program 6 (id=4962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x24140, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 2.214926447s ago: executing program 6 (id=4963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20281, 0x157) close_range(r0, 0xffffffffffffffff, 0x0) 2.174512337s ago: executing program 6 (id=4965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="1400038004000400040001000800020000000000080005"], 0x3c}}, 0x4000000) 2.126470658s ago: executing program 6 (id=4966): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x31, 0x0, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 2.03539632s ago: executing program 6 (id=4967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0xfffffffc}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b080800418e224e0004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e00000000000000000008000900070000000500190001000000080011000900000008000600f7ffffff08001600"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x6fb2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x28a, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109022400010000109c4c35c1c928af9f17d0db000904b8070296d1ca000905060200020d"], 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f00000004c0)={0x4, 0xffff, [{0x6, 0x0, 0xa}, {0x398a94e3, 0x0, 0x5}, {0x10000, 0x0, 0x1}, {0x61d20459, 0x0, 0x17cad4cf}, {0x69de263, 0x0, 0xfffffffffffffff8}, {0x3, 0x0, 0x5}, {0x80000000, 0x0, 0x7fffffffffffffff}, {0x80000001, 0x0, 0x7}, {0xfffffff8, 0x0, 0x9189}, {0x60, 0x0, 0x5}, {0x24, 0x0, 0x6e0}, {0x7f, 0x0, 0x3}, {0x12000000, 0x0, 0x27db}, {0x1, 0x0, 0x7}, {0x4}, {0x9053, 0x0, 0x9}]}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1.233502586s ago: executing program 7 (id=4969): syz_open_dev$loop(0x0, 0x2, 0xa8083) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x5b2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/191, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}}}], 0x84, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224683eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5995aa7eeb1ca60f45334c9"}) (async) r2 = syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)={{r3, 0x9, 0x6, 0x8, 0xfffffffffffffffa, 0x3, 0x100000000, 0x3, 0xffffffff, 0x6, 0xf86d, 0x80, 0xa7b7, 0x5, 0x81}}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000007c0)={r3, 0xffff}) 1.002547571s ago: executing program 2 (id=4972): r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002200)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002240)={0x0, 0x0}) r5 = getpid() r6 = syz_clone(0x42000, &(0x7f00000022c0)="e8c8ee48f0ba4edd4cf3698717fbfe53a0f28d29266c5b2bf74a089aefb98d1e2ab5adfaa32a9b6ed2ccc35147b5ba4c09ecb0a3ff2053c12f9a82dd6535a4877deb62216730cb691dc1fd9e789726ea45d3dd9a6645d82f02d3261e29ed5c16f9b5ac01aa837d9f6e46b01dfcc251b8c9fde352983404fa64f56aecf7edbd84c7f720b890fabc0fcb133532981446fb1c58e8824585c276413c6f14b6b00e57a6e6f1f5502836c6326aa6", 0xab, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="f339bba9c5ee15f210c1b2ee6ec0b981291109") r7 = getpgrp(0x0) syz_clone3(&(0x7f0000002480)={0x84000200, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/133, 0x85, &(0x7f0000000180)=""/36, &(0x7f0000002440)=[r0, r1, r2, r4, r5, r6, r7], 0x7}, 0x58) get_robust_list(r1, &(0x7f0000002640)=&(0x7f0000002600)={&(0x7f0000002540)={&(0x7f0000002500)}, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)}}, &(0x7f0000002680)=0x18) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002700)={0x2, &(0x7f00000026c0)=[{0x5, 0x2, 0x8, 0x68}, {0x5, 0x4, 0x4, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, &(0x7f0000002740)=r3) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000027c0)={0x1, &(0x7f0000002780)=[{0x8, 0x9, 0x1, 0x238}]}, 0x10) readv(r11, &(0x7f00000028c0)=[{&(0x7f0000002800)}, {&(0x7f0000002840)=""/66, 0x42}], 0x2) timer_create(0x4, &(0x7f0000002900)={0x0, 0x30, 0x1, @tid=r9}, &(0x7f0000002940)=0x0) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) timer_settime(r12, 0x0, &(0x7f00000029c0)={{0x0, 0x3938700}, {r13, r14+10000000}}, &(0x7f0000002a00)) gettid() ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000002a40)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000002b00)={{r8}, r15, 0x12, @inherit={0x58, &(0x7f0000002a80)={0x0, 0x2, 0x5, 0x1, {0x4, 0x3, 0x7fffffffffffffff, 0xcb, 0x5}, [0x2, 0x9]}}, @devid}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000003b40)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r17, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xcb680000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r18}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x50000000}]}, 0x4c}}, 0x801) r19 = syz_open_dev$hidraw(&(0x7f0000003c80), 0x7fffffffffffffff, 0x0) ioctl$HIDIOCGRAWINFO(r19, 0x80084803, &(0x7f0000003cc0)) r20 = accept4(r16, 0x0, &(0x7f0000003d00), 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r20, 0x65, 0x4, &(0x7f0000003d40), &(0x7f0000003d80)=0x4) r21 = syz_open_dev$loop(&(0x7f0000003dc0), 0xe, 0x400181) ioctl$IOC_PR_PREEMPT_ABORT(r21, 0x401870cc, &(0x7f0000003e00)={0xffff, 0x7, 0x6, 0x8}) 1.001719291s ago: executing program 7 (id=4973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20281, 0x157) close_range(r0, 0xffffffffffffffff, 0x0) 933.717542ms ago: executing program 2 (id=4974): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xffff8000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000040)) 856.274043ms ago: executing program 7 (id=4976): openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 727.483336ms ago: executing program 2 (id=4977): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x864202, 0x0) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x2) clock_adjtime(0x0, &(0x7f0000000080)={0x8, 0x200008, 0xfffffffffffffffc, 0x7, 0x8003, 0xae4, 0x5, 0xfffffffffffffffc, 0x40000000000123e, 0x4, 0x4ad48b4b, 0x0, 0x9, 0x0, 0xd, 0x746, 0x5, 0x7ebb, 0x0, 0x6d, 0x10000, 0x6, 0x6, 0x8001, 0x4, 0x4}) write(r0, &(0x7f0000000400)="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", 0xfffffee5) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='syz', r1) 723.306136ms ago: executing program 7 (id=4978): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b00), 0x22000, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000010c0), 0x0, 0x0, 0x1) close_range(r1, r1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000001b40)={0x5, 0x8}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 527.50686ms ago: executing program 7 (id=4980): mkdir(0x0, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2, 0x2, 0x5) 480.82453ms ago: executing program 7 (id=4982): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xe}]}, 0x20}}, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x4, 0xe4}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1f, {0xfffe, 0x109, 0x1, 0xf, 0x401, 0x9, 0x7fff, 0x200005, 0x10, 0x6, 0x7ff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x4}, 0x0}) 335.521833ms ago: executing program 5 (id=4983): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') fchdir(r1) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) pread64(r1, &(0x7f00000001c0)=""/220, 0xdc, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x2a) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 330.311254ms ago: executing program 5 (id=4984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20281, 0x157) close_range(r0, 0xffffffffffffffff, 0x0) 280.218555ms ago: executing program 2 (id=4985): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x488, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x56a3, 0x5e}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_IE={0xd0, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @preq={0x82, 0x8e, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x9, 0x9, @device_a, 0x5, @value=@device_b, 0x9, 0x7f4, 0xa, [{{0x0, 0x0, 0x1}, @device_a, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffffc}, {{}, @device_b, 0x10}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_b, 0x1}]}}, @channel_switch={0x25, 0x3, {0x1, 0xad}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x5, 0x31}}, @chsw_timing={0x68, 0x4, {0x81, 0x1687}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7f, 0x1, "3bfa8f9f243802c6cc4e7152090c81bf2054494f1ba11db7dd698b547285e935f394899b6817c1fbed4518ec0d0fb3fc963f5bf1c6ed6d0bd8fc1cf1691071ba28d1ca51ded8b72b5384d591d4c2c3f76c6626db287101613b4ecb0232788d974532adef75272b57f1852b54c0e0e610586174655990adc77b201d"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x9, 0x0, "088d7d922c"}, @NL80211_BAND_60GHZ={0x61, 0x2, "9241356ff8135234eb3b110f4f85482f657211ba93d328fcf6e382d4c92fdde865651f91a28a81b6d279c05d208fb6311c2f746ba7353de9deb665cb2133020b2c4360f27c39c1e0a2f5bbf1eb5094aafd69df4b0ce34933467d3094bb"}, @NL80211_BAND_2GHZ={0xdf, 0x0, "3a006d0ce1ed41fd27d186977027224f46e5fbe70992a7e1c7be961e487a224e5dd50142aa9486bab449820b4505a427bff3fa108b90314e3b54c349d7b864d6e94b7e619572bc2f85318fd194bfa13dc908dba0035101fd2cd2292d1593e66fde5f4c6604f0edc684e05a3abb16a6defdab56904b219d2213aab0e04c170890941bc1383c7f6e556a4f11dae499d1715bc217af9be1bb2c43ebc8061961b612f5245665a07ceb9f4236b01b04cfcb46d2e929c13c1b89464759dc86fd92f3c05b82eda3dfa5742da5237068c8f5a639934e02d54debc742ac1d7f"}]}, @NL80211_ATTR_IE={0x19c, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xa9, 0x6}}, @supported_rates={0x1, 0x5, [{0x6c}, {0x6}, {0x30}, {0x3}, {0x12}]}, @random={0x3, 0x78, "b0448f36f72ced7bb2a80d23bdb4b71f71a42c9ad757fafa484300ae830a3147fbb589c01c9f93230c489e446ae87f1f528f090750288d7e0867e65036d55fbedf679a14cb8d4acc9efe1399d16b408fc92077db3b3251ad6339a31741dff83c473325778d3f4e02d4df9e0f33ec071becb37373cf336555"}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb3}, @random_vendor={0xdd, 0xe0, "949306ca917c0e683aaacff665b22ca37b53adcdcb6989aa74e7aaec1b77cff2721b0ec5c12c84ce72b0877dbd01777eb45f29009b404eeb8d52f0dbb6d3b82071093c5c7c474642e438dc1fdfa26d5af4299385840d45b927eaf576327c444590dd8aaae19f969e85daf60eb4b79200bac12af2041cd467b74d1dccf203e4d1c97e6719c20dec1f7b25bfab2b98c99f0db43949c6569ddf0314f573e7d62f5e11ae43cb4f46b32832f13bf6c515504eeecf77cf9276fdcfbe696bd1f19e790c5812af97387a10d71328c7bb079d65cd8b779ec82c292cb7da1eef16867ccb29"}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x2, 0xb8, @device_a, 0x3, 0xc, 0x2}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5b}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000600)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x3, 0x7, 0x3, 0x0, 0x0, {0xe}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0xc001) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x54e}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x178, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ab07087b02efefcc53d3bc1c7fa920fc7a01cdf2e483093"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e566f943089259fe21bb2763cb296c56dc2f59dde6e5a05d"}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1fc3c77dbd9ee4e4359880874eb9a2743831309e2ffdfd6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "caa2f47af7fe25f37ff81e9a398797953cccea1c43c1e705"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df1ada85b5a38e02fc5f60f1aae4bd6a86f64f3cca0bdf45"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4d804a886dae9a96717e3af363dbde9231f1f21217e5dd5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebb8646e10e90cd7e8b05f54679e4affeb1cd0b986a6ab75"}]]}, 0x178}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040084) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000b40)={'\x00', 0x1, 0x3, 0xffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x10) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc4, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffffff}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xcdc6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xd}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0xc41) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x59}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x1) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000fc0)='.pending_reads\x00', 0x400000, 0xf) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000001000)=0x2, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000001040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x4000000, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8040) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000001200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r9, 0x4008af23, &(0x7f0000001380)={0x1, 0x7fffffff}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000001b80)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001400)={0x1d8, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x51}}}}, [@NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5538}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x46}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d, 0x40, 0x8001, 0x9, 0xfff4, 0x2, 0x1, 0x9ee4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa, 0x4459, 0x7fff, 0xd, 0xe, 0x0, 0x19]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40100c1}, 0x98) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000001e80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x1f0, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "99a047f3f1e1a92081ab27ca9a4b0fcee9d0bc717d89387f8fe9c17705d8"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6d1478803d08450c9653a93ba6a1b86c3f858b84a03530e967e04a6dc6"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private0, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe8e3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x43}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2a}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0xc0}, 0x80010) 269.483765ms ago: executing program 5 (id=4986): openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 163.998597ms ago: executing program 2 (id=4987): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x488, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x56a3, 0x5e}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_IE={0xd0, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @preq={0x82, 0x8e, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x9, 0x9, @device_a, 0x5, @value=@device_b, 0x9, 0x7f4, 0xa, [{{0x0, 0x0, 0x1}, @device_a, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffffc}, {{}, @device_b, 0x10}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_b, 0x1}]}}, @channel_switch={0x25, 0x3, {0x1, 0xad}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x5, 0x31}}, @chsw_timing={0x68, 0x4, {0x81, 0x1687}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7f, 0x1, "3bfa8f9f243802c6cc4e7152090c81bf2054494f1ba11db7dd698b547285e935f394899b6817c1fbed4518ec0d0fb3fc963f5bf1c6ed6d0bd8fc1cf1691071ba28d1ca51ded8b72b5384d591d4c2c3f76c6626db287101613b4ecb0232788d974532adef75272b57f1852b54c0e0e610586174655990adc77b201d"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x9, 0x0, "088d7d922c"}, @NL80211_BAND_60GHZ={0x61, 0x2, "9241356ff8135234eb3b110f4f85482f657211ba93d328fcf6e382d4c92fdde865651f91a28a81b6d279c05d208fb6311c2f746ba7353de9deb665cb2133020b2c4360f27c39c1e0a2f5bbf1eb5094aafd69df4b0ce34933467d3094bb"}, @NL80211_BAND_2GHZ={0xdf, 0x0, "3a006d0ce1ed41fd27d186977027224f46e5fbe70992a7e1c7be961e487a224e5dd50142aa9486bab449820b4505a427bff3fa108b90314e3b54c349d7b864d6e94b7e619572bc2f85318fd194bfa13dc908dba0035101fd2cd2292d1593e66fde5f4c6604f0edc684e05a3abb16a6defdab56904b219d2213aab0e04c170890941bc1383c7f6e556a4f11dae499d1715bc217af9be1bb2c43ebc8061961b612f5245665a07ceb9f4236b01b04cfcb46d2e929c13c1b89464759dc86fd92f3c05b82eda3dfa5742da5237068c8f5a639934e02d54debc742ac1d7f"}]}, @NL80211_ATTR_IE={0x19c, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xa9, 0x6}}, @supported_rates={0x1, 0x5, [{0x6c}, {0x6}, {0x30}, {0x3}, {0x12}]}, @random={0x3, 0x78, "b0448f36f72ced7bb2a80d23bdb4b71f71a42c9ad757fafa484300ae830a3147fbb589c01c9f93230c489e446ae87f1f528f090750288d7e0867e65036d55fbedf679a14cb8d4acc9efe1399d16b408fc92077db3b3251ad6339a31741dff83c473325778d3f4e02d4df9e0f33ec071becb37373cf336555"}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb3}, @random_vendor={0xdd, 0xe0, "949306ca917c0e683aaacff665b22ca37b53adcdcb6989aa74e7aaec1b77cff2721b0ec5c12c84ce72b0877dbd01777eb45f29009b404eeb8d52f0dbb6d3b82071093c5c7c474642e438dc1fdfa26d5af4299385840d45b927eaf576327c444590dd8aaae19f969e85daf60eb4b79200bac12af2041cd467b74d1dccf203e4d1c97e6719c20dec1f7b25bfab2b98c99f0db43949c6569ddf0314f573e7d62f5e11ae43cb4f46b32832f13bf6c515504eeecf77cf9276fdcfbe696bd1f19e790c5812af97387a10d71328c7bb079d65cd8b779ec82c292cb7da1eef16867ccb29"}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x2, 0xb8, @device_a, 0x3, 0xc, 0x2}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5b}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000600)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x3, 0x7, 0x3, 0x0, 0x0, {0xe}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0xc001) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x54e}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x178, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ab07087b02efefcc53d3bc1c7fa920fc7a01cdf2e483093"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e566f943089259fe21bb2763cb296c56dc2f59dde6e5a05d"}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1fc3c77dbd9ee4e4359880874eb9a2743831309e2ffdfd6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "caa2f47af7fe25f37ff81e9a398797953cccea1c43c1e705"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df1ada85b5a38e02fc5f60f1aae4bd6a86f64f3cca0bdf45"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4d804a886dae9a96717e3af363dbde9231f1f21217e5dd5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebb8646e10e90cd7e8b05f54679e4affeb1cd0b986a6ab75"}]]}, 0x178}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040084) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000b40)={'\x00', 0x1, 0x3, 0xffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x10) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc4, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffffff}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xcdc6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xd}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0xc41) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x59}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x1) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000fc0)='.pending_reads\x00', 0x400000, 0xf) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000001000)=0x2, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000001040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x6000000, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8040) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000001200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r9, 0x4008af23, &(0x7f0000001380)={0x1, 0x7fffffff}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000001b80)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001400)={0x1d8, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x51}}}}, [@NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5538}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x46}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d, 0x40, 0x8001, 0x9, 0xfff4, 0x2, 0x1, 0x9ee4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa, 0x4459, 0x7fff, 0xd, 0xe, 0x0, 0x19]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40100c1}, 0x98) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000001e80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x1f0, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "99a047f3f1e1a92081ab27ca9a4b0fcee9d0bc717d89387f8fe9c17705d8"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6d1478803d08450c9653a93ba6a1b86c3f858b84a03530e967e04a6dc6"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private0, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe8e3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x43}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2a}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0xc0}, 0x80010) 99.432818ms ago: executing program 5 (id=4988): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r1, &(0x7f0000000140)="1a09d21635124c1f706c117b105f", 0xe, 0x4000, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0x4, 0x3, 0x0, 0x1}}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="000126bd7000fcdb0008000300", @ANYRES64=r3, @ANYRESDEC=r5], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x20000004) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e80), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="01000000000000868ffb2000000009001f00706879301f000000050020"], 0x28}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002dbd7000fcdbdf25210000000a0001007770616e330000000c000500000300007303000000000a0001007770616e33000000d583cfa71b8f3f2c1c11b320c4835698387da6642821e6c52381ffa19a4ce1ad083c48110d25cd3dd96071ea5454133f7b1711058df489a5148f649141dc4970fcc7b81d53d168df78d58191cf5f20903fa80c08ec4720107a534b83ce093683206c41b2b524671d"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000380)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[]) 86.644568ms ago: executing program 2 (id=4989): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x10001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r3, r3, 0x0, 0x7a680000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8ab43, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3c) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={r10, 0x4}) write$eventfd(r10, &(0x7f0000000040)=0x6, 0x8) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x16) 55.891349ms ago: executing program 5 (id=4990): mkdir(0x0, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2, 0x2, 0x5) 0s ago: executing program 5 (id=4991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="1400038004000400040001000800020000000000080005"], 0x3c}}, 0x4000000) (fail_nth: 3) kernel console output (not intermixed with test programs): 5): avc: denied { read open } for pid=11918 comm="syz.2.3888" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.587792][ T36] audit: type=1400 audit(2000004576.056:45166): avc: denied { ioctl } for pid=11918 comm="syz.2.3888" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.649464][ T36] audit: type=1400 audit(2000004576.086:45167): avc: denied { ioctl } for pid=11897 comm="syz.6.3881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.674579][ T36] audit: type=1400 audit(2000004576.086:45168): avc: denied { ioctl } for pid=11897 comm="syz.6.3881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.703328][ T36] audit: type=1400 audit(2000004576.086:45169): avc: denied { ioctl } for pid=11897 comm="syz.6.3881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.728429][ T36] audit: type=1400 audit(2000004576.086:45170): avc: denied { ioctl } for pid=11897 comm="syz.6.3881" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.753511][ T36] audit: type=1400 audit(2000004576.086:45171): avc: denied { ioctl } for pid=11918 comm="syz.2.3888" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.823498][ T331] usbhid 7-1:0.0: can't add hid device: -71 [ 365.829497][ T331] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 365.861785][ T331] usb 7-1: USB disconnect, device number 14 [ 366.041533][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3891'. [ 366.104975][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.116870][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.249587][T11934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.257873][T11936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.267871][T11936] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 366.275483][T11936] rust_binder: Error while translating object. [ 366.287623][T11936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 366.293871][T11936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1205 [ 366.755141][T11952] 9pnet_fd: Insufficient options for proto=fd [ 367.002638][T11960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 367.002680][T11960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:276 [ 367.159812][T11962] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 367.176409][T11962] rust_binder: Write failure EINVAL in pid:278 [ 367.274144][T11967] rust_binder: Error while translating object. [ 367.296320][T11967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 367.305074][T11967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:282 [ 367.575282][T11984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.585472][T11984] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 367.591969][T11984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 367.607640][T11984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1217 [ 367.749658][T11991] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3914'. [ 367.774696][T11991] rust_binder: Write failure EFAULT in pid:1223 [ 367.803279][ T9] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 367.893288][ T333] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 367.915937][T11999] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3916'. [ 367.970711][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 368.011744][T12002] can0: slcan on ttyS3. [ 368.055967][ T333] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.069710][T12002] can0 (unregistered): slcan off ttyS3. [ 368.075318][ T333] usb 7-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 368.085776][ T333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.096689][ T333] usb 7-1: config 0 descriptor?? [ 368.113556][ T9] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 368.273240][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 368.279190][ T9] usb usb3-port1: attempt power cycle [ 368.408468][T12016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.471038][T12017] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 368.477553][T12017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 368.485617][T12017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1248 [ 368.510123][ T333] ntrig 0003:1B96:0010.0016: item fetching failed at offset 5/7 [ 368.527401][ T333] ntrig 0003:1B96:0010.0016: parse failed [ 368.533244][ T333] ntrig 0003:1B96:0010.0016: probe with driver ntrig failed with error -22 [ 368.623268][ T9] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 368.644468][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 368.773275][ T9] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 368.794070][ T9] usb 3-1: Invalid ep0 maxpacket: 64 [ 368.799525][ T9] usb usb3-port1: unable to enumerate USB device [ 369.064179][T12019] netlink: 'syz.6.3912': attribute type 4 has an invalid length. [ 369.151777][T12021] binder: Unknown parameter 'ʣ0kJb#Iy3J0~|Bc' [ 369.273251][T12028] rust_binder: Write failure EFAULT in pid:901 [ 369.671298][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.693360][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.742677][T12044] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 369.900259][T12057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.916985][T12057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.524538][ T36] kauditd_printk_skb: 797 callbacks suppressed [ 370.524560][ T36] audit: type=1400 audit(2000004581.006:45969): avc: denied { bind } for pid=12068 comm="syz.5.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.554442][ T36] audit: type=1400 audit(2000004581.016:45970): avc: denied { listen } for pid=12068 comm="syz.5.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.593304][ T36] audit: type=1400 audit(2000004581.016:45971): avc: denied { setopt } for pid=12068 comm="syz.5.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.622934][ T36] audit: type=1400 audit(2000004581.036:45972): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.649401][ T333] usb 7-1: USB disconnect, device number 15 [ 370.710234][ T36] audit: type=1400 audit(2000004581.036:45973): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.764540][T12078] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.781673][ T36] audit: type=1400 audit(2000004581.036:45974): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.893874][ T36] audit: type=1400 audit(2000004581.056:45975): avc: denied { read write } for pid=12070 comm="syz.3.3941" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.923570][T12086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 370.925667][T12086] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.942311][T10553] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.954614][ T36] audit: type=1400 audit(2000004581.056:45976): avc: denied { read open } for pid=12070 comm="syz.3.3941" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.141337][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.166625][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.291413][T12100] netlink: 'syz.6.3950': attribute type 8 has an invalid length. [ 371.303246][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3950'. [ 371.372939][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 371.388503][ T9992] Bluetooth: hci1: Frame reassembly failed (-84) [ 371.404279][ T9992] Bluetooth: hci1: Frame reassembly failed (-90) [ 371.452683][T12107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.791591][T12115] tipc: Enabled bearer , priority 0 [ 371.805975][T12115] tipc: Disabling bearer [ 371.867367][T12123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1292 [ 372.145446][T12136] rust_binder: 1304: no such ref 3 [ 372.159820][T12136] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 372.166869][T12136] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 372.173944][T12136] rust_binder: Write failure EFAULT in pid:1304 [ 372.395712][T12147] netlink: 'syz.2.3967': attribute type 6 has an invalid length. [ 372.693629][T12164] overlay: Unknown parameter 'euid<00000000000000000000' [ 373.383249][T11249] Bluetooth: hci0: command 0x1003 tx timeout [ 373.389337][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 373.439611][T12178] SELinux: security_context_str_to_sid () failed with errno=-22 [ 373.463420][ T421] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 373.469565][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 373.809118][T12202] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3987'. [ 373.856397][T12204] 9pnet_fd: Insufficient options for proto=fd [ 373.991401][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 374.008312][T12208] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3989'. [ 374.124293][T12211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.688584][T12251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.749952][T12251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.786731][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.795270][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.809138][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.818540][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.832609][T12259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.833012][T12260] rust_binder: pid 12260 performed invalid decrement on ref [ 374.847258][T12259] rust_binder: pid 12259 performed invalid decrement on ref [ 374.854673][T12260] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 374.922083][T12270] 9pnet_fd: p9_fd_create_unix (12270): problem connecting socket: ./file0: -111 [ 375.402727][T12291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 375.404648][T12291] rust_binder: Error in use_page_slow: ESRCH [ 375.433620][T12291] rust_binder: use_range failure ESRCH [ 375.439656][T12291] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 375.473085][T12295] rust_binder: Write failure EFAULT in pid:954 [ 375.484302][T12291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 375.490507][T12291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1350 [ 375.554928][ T36] kauditd_printk_skb: 767 callbacks suppressed [ 375.554949][ T36] audit: type=1400 audit(2000004586.036:46731): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.667361][ T36] audit: type=1400 audit(2000004586.036:46732): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.668668][T12302] binder: Bad value for 'stats' [ 375.732925][ T36] audit: type=1400 audit(2000004586.036:46733): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.783262][ T36] audit: type=1400 audit(2000004586.046:46734): avc: denied { mount } for pid=12292 comm="syz.2.4017" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 375.829103][ T36] audit: type=1400 audit(2000004586.076:46735): avc: denied { read write } for pid=6661 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.829727][T12306] devpts: called with bogus options [ 375.854566][ T36] audit: type=1400 audit(2000004586.076:46736): avc: denied { read write open } for pid=6661 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.933224][ T36] audit: type=1400 audit(2000004586.076:46737): avc: denied { ioctl } for pid=6661 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.966665][ T36] audit: type=1400 audit(2000004586.086:46738): avc: denied { ioctl } for pid=12292 comm="syz.2.4017" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.991660][ T36] audit: type=1400 audit(2000004586.096:46739): avc: denied { read append } for pid=12298 comm="syz.5.4019" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.015229][ T36] audit: type=1400 audit(2000004586.096:46740): avc: denied { read open } for pid=12298 comm="syz.5.4019" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.613640][ T331] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 376.711560][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4036'. [ 376.773248][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 376.794071][ T331] usb 3-1: config 243 has too many interfaces: 251, using maximum allowed: 32 [ 376.813701][ T331] usb 3-1: config 243 has 1 interface, different from the descriptor's value: 251 [ 376.822966][ T331] usb 3-1: config 243 interface 0 altsetting 77 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.845063][ T331] usb 3-1: config 243 interface 0 altsetting 77 bulk endpoint 0x82 has invalid maxpacket 1023 [ 376.855600][ T331] usb 3-1: config 243 interface 0 has no altsetting 0 [ 376.872787][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.888884][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.897041][ T331] usb 3-1: SerialNumber: syz [ 376.912297][T12325] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 376.937118][ T331] cdc_ether 3-1:243.0: skipping garbage [ 376.943632][ T331] usb 3-1: bad CDC descriptors [ 377.362436][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 377.396914][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.405689][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.497098][ T64] usb 3-1: USB disconnect, device number 76 [ 377.603020][T12383] /dev/rnullb0: Can't open blockdev [ 377.683162][T12386] netlink: 'syz.3.4050': attribute type 28 has an invalid length. [ 377.886068][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.903285][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.055295][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4055'. [ 378.077619][T12400] bridge_slave_1: left allmulticast mode [ 378.085654][T12400] bridge_slave_1: left promiscuous mode [ 378.091730][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.099758][T12400] bridge_slave_0: left allmulticast mode [ 378.105617][T12400] bridge_slave_0: left promiscuous mode [ 378.115092][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.180896][ T331] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 378.192624][ T331] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.264334][T12406] fido_id[12406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.417425][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.427487][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.464452][T12412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 378.466084][T12412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.482553][T12412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.172001][T12421] rust_binder: Write failure EFAULT in pid:1387 [ 379.259767][T12420] incfs: Options parsing error. -22 [ 379.271313][T12420] incfs: mount failed -22 [ 379.378092][T12426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.386672][T12426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.001513][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 380.010874][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 380.032549][T12431] random: crng reseeded on system resumption [ 380.061253][T12432] Unrecognized hibernate image header format! [ 380.067426][T12432] PM: hibernation: Image mismatch: architecture specific data [ 380.263276][T11249] Bluetooth: hci0: command 0x1003 tx timeout [ 380.263270][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 380.279014][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.288686][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.789138][ T36] kauditd_printk_skb: 603 callbacks suppressed [ 380.789166][ T36] audit: type=1400 audit(2000004591.266:47344): avc: denied { read write } for pid=8542 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.820968][ T36] audit: type=1400 audit(2000004591.266:47345): avc: denied { read write open } for pid=8542 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.878236][ T36] audit: type=1400 audit(2000004591.266:47346): avc: denied { ioctl } for pid=8542 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.908415][ T36] audit: type=1400 audit(2000004591.326:47347): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.983897][ T36] audit: type=1400 audit(2000004591.326:47348): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.039451][ T36] audit: type=1400 audit(2000004591.336:47349): avc: denied { read } for pid=12436 comm="syz.2.4068" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.080573][ T36] audit: type=1400 audit(2000004591.336:47350): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.129842][ T36] audit: type=1400 audit(2000004591.336:47351): avc: denied { read open } for pid=12436 comm="syz.2.4068" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.184745][ T36] audit: type=1400 audit(2000004591.336:47352): avc: denied { create } for pid=12436 comm="syz.2.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.206772][ T36] audit: type=1400 audit(2000004591.346:47353): avc: denied { write } for pid=12436 comm="syz.2.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.367649][T12455] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4074'. [ 381.493253][ T331] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 381.604198][T12464] rust_binder: 1002: no such ref 0 [ 381.616885][T12463] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 381.636198][T12463] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 381.684994][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.698652][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.714792][ T331] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 381.724782][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.738625][ T331] usb 3-1: config 0 descriptor?? [ 382.023237][ T421] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 382.029391][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 382.077265][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.092369][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.190622][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 382.202194][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 382.213809][ T331] usb 3-1: USB disconnect, device number 77 [ 382.309919][T12488] fuse: Bad value for 'fd' [ 382.676460][T12507] futex_wake_op: syz.3.4095 tries to shift op by -1; fix this program [ 382.807946][T12518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.811056][T12517] can0: slcan on ptm0. [ 382.901000][T12517] can0 (unregistered): slcan off ptm0. [ 383.092386][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4104'. [ 383.199222][T12544] SELinux: security_context_str_to_sid (2'x) failed with errno=-22 [ 383.221126][T12542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.222728][T12546] netlink: 'syz.2.4104': attribute type 2 has an invalid length. [ 383.247880][T12542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.330976][T12546] devpts: called with bogus options [ 383.405242][T12554] fuse: Bad value for 'fd' [ 383.556658][T12560] binder: Bad value for 'defcontext' [ 383.663720][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.725355][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.858576][T12574] /dev/rnullb0: Can't open blockdev [ 384.056103][T12586] __vm_enough_memory: pid: 12586, comm: syz.3.4122, bytes: 18014402804453376 not enough memory for the allocation [ 384.252927][T12596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 384.256678][T12596] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 384.270530][T12596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 384.280205][T12596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1426 [ 384.673567][T12613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 384.715657][T12613] rust_binder: Error while translating object. [ 384.722182][T12613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 384.743314][T12613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1035 [ 384.854974][T12619] rust_binder: 1037: no such ref 3 [ 384.872105][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.891706][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.899716][T12619] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 384.907733][T12619] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 384.914848][T12619] rust_binder: Write failure EFAULT in pid:1037 [ 384.923249][ T331] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 385.133233][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 385.147116][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.163220][ T331] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 385.185434][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 385.209767][ T331] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 385.232007][ T331] usb 3-1: Product: syz [ 385.243955][ T331] usb 3-1: Manufacturer: syz [ 385.252559][ T331] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 385.256387][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.292590][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.465219][ T331] usb 3-1: USB disconnect, device number 78 [ 385.541340][T12654] netlink: 'syz.6.4147': attribute type 3 has an invalid length. [ 385.549112][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4147'. [ 385.825803][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 385.825825][ T36] audit: type=1400 audit(2000004596.306:48047): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.857203][ T36] audit: type=1400 audit(2000004596.306:48048): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.890092][ T36] audit: type=1400 audit(2000004596.306:48049): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.913906][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.916769][ T36] audit: type=1400 audit(2000004596.366:48050): avc: denied { read append } for pid=12668 comm="syz.5.4153" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.935639][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.949340][ T36] audit: type=1400 audit(2000004596.366:48051): avc: denied { read append open } for pid=12668 comm="syz.5.4153" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.980974][ T36] audit: type=1400 audit(2000004596.386:48052): avc: denied { read write } for pid=12668 comm="syz.5.4153" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.004681][ T36] audit: type=1400 audit(2000004596.386:48053): avc: denied { read write open } for pid=12668 comm="syz.5.4153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.029233][ T36] audit: type=1400 audit(2000004596.386:48054): avc: denied { ioctl } for pid=12668 comm="syz.5.4153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.054421][ T36] audit: type=1400 audit(2000004596.386:48055): avc: denied { ioctl } for pid=12668 comm="syz.5.4153" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.079550][ T36] audit: type=1400 audit(2000004596.446:48056): avc: denied { create } for pid=12668 comm="syz.5.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.363253][ T333] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 386.366014][T12686] FAULT_INJECTION: forcing a failure. [ 386.366014][T12686] name failslab, interval 1, probability 0, space 0, times 0 [ 386.383513][T12686] CPU: 1 UID: 0 PID: 12686 Comm: syz.3.4159 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 386.383546][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.383561][T12686] Call Trace: [ 386.383568][T12686] [ 386.383575][T12686] __dump_stack+0x21/0x30 [ 386.383602][T12686] dump_stack_lvl+0x10c/0x190 [ 386.383624][T12686] ? __cfi_dump_stack_lvl+0x10/0x10 [ 386.383646][T12686] ? is_bpf_text_address+0x17b/0x1a0 [ 386.383665][T12686] ? kernel_text_address+0xa9/0xe0 [ 386.383687][T12686] dump_stack+0x19/0x20 [ 386.383708][T12686] should_fail_ex+0x3d9/0x530 [ 386.383725][T12686] should_failslab+0xac/0x100 [ 386.383744][T12686] __kmalloc_cache_noprof+0x41/0x3c0 [ 386.383760][T12686] ? alloc_pipe_info+0xfb/0x600 [ 386.383784][T12686] alloc_pipe_info+0xfb/0x600 [ 386.383808][T12686] splice_direct_to_actor+0x96d/0xbc0 [ 386.383828][T12686] ? kstrtouint+0x78/0xf0 [ 386.383853][T12686] ? kstrtouint_from_user+0xfb/0x150 [ 386.383868][T12686] ? __x64_sys_openat+0x13a/0x170 [ 386.383890][T12686] ? x64_sys_call+0xe69/0x2ee0 [ 386.383914][T12686] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 386.383930][T12686] ? selinux_file_permission+0x309/0xb30 [ 386.383950][T12686] ? avc_policy_seqno+0xd/0x30 [ 386.383978][T12686] ? __cfi_direct_splice_actor+0x10/0x10 [ 386.383998][T12686] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 386.384019][T12686] do_splice_direct+0x182/0x270 [ 386.384038][T12686] ? __cfi_do_splice_direct+0x10/0x10 [ 386.384057][T12686] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 386.384078][T12686] ? security_file_permission+0x2e/0xc0 [ 386.384097][T12686] ? rw_verify_area+0xac/0x230 [ 386.384121][T12686] do_sendfile+0x5c8/0xfb0 [ 386.384141][T12686] ? vfs_writev+0xcf0/0xcf0 [ 386.384159][T12686] ? __kasan_check_write+0x18/0x20 [ 386.384185][T12686] ? ksys_write+0x1ef/0x250 [ 386.384199][T12686] __x64_sys_sendfile64+0x193/0x1f0 [ 386.384218][T12686] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 386.384236][T12686] ? __kasan_check_read+0x15/0x20 [ 386.384261][T12686] x64_sys_call+0xa26/0x2ee0 [ 386.384286][T12686] do_syscall_64+0x58/0xf0 [ 386.384305][T12686] ? clear_bhb_loop+0x50/0xa0 [ 386.384321][T12686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 386.384346][T12686] RIP: 0033:0x7f24fa18eec9 [ 386.384360][T12686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.384375][T12686] RSP: 002b:00007f24fb081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.384393][T12686] RAX: ffffffffffffffda RBX: 00007f24fa3e5fa0 RCX: 00007f24fa18eec9 [ 386.384406][T12686] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 386.384416][T12686] RBP: 00007f24fb081090 R08: 0000000000000000 R09: 0000000000000000 [ 386.384427][T12686] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 386.384438][T12686] R13: 00007f24fa3e6038 R14: 00007f24fa3e5fa0 R15: 00007ffcebf19298 [ 386.384452][T12686] [ 386.596654][ T333] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.745218][T12694] /dev/rnullb0: Can't open blockdev [ 386.752217][T12694] /dev/rnullb0: Can't open blockdev [ 386.759218][T12694] /dev/rnullb0: Can't open blockdev [ 386.766165][T12694] /dev/rnullb0: Can't open blockdev [ 386.773230][T12694] /dev/rnullb0: Can't open blockdev [ 386.778716][ T333] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 386.780571][T12694] /dev/rnullb0: Can't open blockdev [ 386.796668][T12694] /dev/rnullb0: Can't open blockdev [ 386.800864][ T333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.804022][T12694] /dev/rnullb0: Can't open blockdev [ 386.824668][T12694] /dev/rnullb0: Can't open blockdev [ 386.831892][T12694] /dev/rnullb0: Can't open blockdev [ 386.839610][T12694] /dev/rnullb0: Can't open blockdev [ 386.839949][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.846864][T12694] /dev/rnullb0: Can't open blockdev [ 386.859833][T12694] /dev/rnullb0: Can't open blockdev [ 386.866900][T12694] /dev/rnullb0: Can't open blockdev [ 386.873859][T12694] /dev/rnullb0: Can't open blockdev [ 386.880193][ T333] usb 3-1: Product: syz [ 386.881319][T12694] /dev/rnullb0: Can't open blockdev [ 386.886216][ T333] usb 3-1: Manufacturer: syz [ 386.895164][ T333] usb 3-1: SerialNumber: syz [ 386.897554][T12694] /dev/rnullb0: Can't open blockdev [ 386.903748][T12671] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 386.941998][T12694] /dev/rnullb0: Can't open blockdev [ 386.959171][T12694] /dev/rnullb0: Can't open blockdev [ 386.966664][T12694] /dev/rnullb0: Can't open blockdev [ 386.974080][T12694] /dev/rnullb0: Can't open blockdev [ 386.981715][T12694] /dev/rnullb0: Can't open blockdev [ 386.988812][T12694] /dev/rnullb0: Can't open blockdev [ 386.998888][T12694] /dev/rnullb0: Can't open blockdev [ 387.011172][T12694] /dev/rnullb0: Can't open blockdev [ 387.025085][T12694] /dev/rnullb0: Can't open blockdev [ 387.032158][T12694] /dev/rnullb0: Can't open blockdev [ 387.045184][T12694] /dev/rnullb0: Can't open blockdev [ 387.052522][T12694] /dev/rnullb0: Can't open blockdev [ 387.059809][T12694] /dev/rnullb0: Can't open blockdev [ 387.067567][T12694] /dev/rnullb0: Can't open blockdev [ 387.074634][T12694] /dev/rnullb0: Can't open blockdev [ 387.081719][T12694] /dev/rnullb0: Can't open blockdev [ 387.169081][T12704] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 387.235988][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.244612][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.490282][T12714] binder: Unknown parameter 'defcontext01777777777777777777777' [ 387.953866][ T333] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 387.960405][ T333] cdc_ncm 3-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 387.970993][ T333] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 388.169152][ T333] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 388.556203][T12761] x_tables: duplicate entry at hook 1 [ 388.581748][ T333] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 388.616400][ T333] usb 3-1: USB disconnect, device number 79 [ 388.632843][ T333] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 389.201287][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4193'. [ 389.210326][T12790] bridge_slave_1: left allmulticast mode [ 389.219726][T12790] bridge_slave_1: left promiscuous mode [ 389.230962][T12790] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.239596][T12790] bridge_slave_0: left allmulticast mode [ 389.245421][T12790] bridge_slave_0: left promiscuous mode [ 389.252351][T12790] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.546683][T12812] rust_binder: 1473: no such ref 0 [ 389.551912][T12812] rust_binder: 1473: no such ref 2 [ 389.557597][T12812] rust_binder: 12812 RLIMIT_NICE not set [ 389.565172][T12813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.591298][ T64] rust_binder: 12811: removing orphan mapping 0:112 [ 389.618962][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4201'. [ 389.631381][ T9992] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.642380][ T9992] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.793246][ T333] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 389.925058][T12823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.932513][T12823] netlink: 'syz.5.4204': attribute type 10 has an invalid length. [ 389.947294][T12823] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4204'. [ 389.953443][ T333] usb 3-1: Using ep0 maxpacket: 16 [ 389.976260][ T333] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 389.996111][ T333] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 390.009158][ T333] usb 3-1: config 0 has no interface number 0 [ 390.020214][ T333] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 390.036737][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.046132][ T333] usb 3-1: Product: syz [ 390.051728][ T333] usb 3-1: Manufacturer: syz [ 390.056449][ T333] usb 3-1: SerialNumber: syz [ 390.063017][ T333] usb 3-1: config 0 descriptor?? [ 390.080278][ T333] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 390.088036][ T333] usb 3-1: No valid video chain found. [ 390.133499][T12832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.137347][T12832] rust_binder: Failed copying remainder into alloc: EFAULT [ 390.152515][T12832] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 390.161523][T12832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 390.170677][T12832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1090 [ 390.323139][ T49] usb 3-1: USB disconnect, device number 80 [ 390.407301][T12854] /dev/rnullb0: Can't open blockdev [ 390.497311][T12857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 390.642793][T12865] netlink: 'syz.2.4217': attribute type 1 has an invalid length. [ 390.810559][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.841406][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.880374][ T36] kauditd_printk_skb: 753 callbacks suppressed [ 390.880393][ T36] audit: type=1400 audit(2000004601.356:48810): avc: denied { create } for pid=12877 comm="syz.6.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.921211][ T36] audit: type=1400 audit(2000004601.386:48811): avc: denied { ioctl } for pid=12877 comm="syz.6.4221" path="socket:[83210]" dev="sockfs" ino=83210 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.947124][ T36] audit: type=1400 audit(2000004601.386:48812): avc: denied { create } for pid=12877 comm="syz.6.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.966941][ T36] audit: type=1400 audit(2000004601.386:48813): avc: denied { connect } for pid=12877 comm="syz.6.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.987510][ T36] audit: type=1400 audit(2000004601.386:48814): avc: denied { create } for pid=12877 comm="syz.6.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 391.008152][ T36] audit: type=1400 audit(2000004601.396:48815): avc: denied { sys_admin } for pid=12877 comm="syz.6.4221" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 391.030027][ T36] audit: type=1400 audit(2000004601.396:48816): avc: denied { sys_admin } for pid=12877 comm="syz.6.4221" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 391.051901][ T36] audit: type=1400 audit(2000004601.396:48817): avc: denied { sys_admin } for pid=12877 comm="syz.6.4221" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 391.073877][ T36] audit: type=1400 audit(2000004601.396:48818): avc: denied { sys_admin } for pid=12877 comm="syz.6.4221" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 391.095753][ T36] audit: type=1400 audit(2000004601.396:48819): avc: denied { remount } for pid=12877 comm="syz.6.4221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 391.553602][T12887] rust_binder: 1108: no such ref 0 [ 391.559895][T12887] rust_binder: 1108: no such ref 2 [ 391.703232][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.703257][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 391.878808][T12899] 9pnet_fd: Insufficient options for proto=fd [ 392.548178][T12913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 392.548208][T12913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1487 [ 392.548283][T12912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.575613][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'. [ 394.204566][T12990] /dev/rnullb0: Can't open blockdev [ 394.691704][T13005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.710604][T13005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.727203][T13003] SELinux: failed to load policy [ 394.734784][T13005] !@aaaaaaaaa: renamed from xfrm0 (while UP) [ 395.403223][ T882] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 395.575787][ T882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.584955][ T882] usb 3-1: not running at top speed; connect to a high speed hub [ 395.595878][ T882] usb 3-1: config 9 has an invalid interface number: 49 but max is 0 [ 395.612374][ T882] usb 3-1: config 9 has no interface number 0 [ 395.622748][ T882] usb 3-1: config 9 interface 49 has no altsetting 0 [ 395.637841][ T882] usb 3-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 395.648647][ T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.662789][ T882] usb 3-1: Product: syz [ 395.668205][ T882] usb 3-1: Manufacturer: syz [ 395.672832][ T882] usb 3-1: SerialNumber: syz [ 395.886758][ T36] kauditd_printk_skb: 513 callbacks suppressed [ 395.886778][ T36] audit: type=1400 audit(2000004606.366:49333): avc: denied { setopt } for pid=13009 comm="syz.2.4271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 395.932986][ T36] audit: type=1400 audit(2000004606.376:49334): avc: denied { read write } for pid=6661 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.983960][ T36] audit: type=1400 audit(2000004606.386:49335): avc: denied { read write open } for pid=6661 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.022497][T13031] veth1: entered allmulticast mode [ 396.033571][ T36] audit: type=1400 audit(2000004606.386:49336): avc: denied { ioctl } for pid=6661 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.071437][ T36] audit: type=1400 audit(2000004606.456:49337): avc: denied { create } for pid=13027 comm="syz.3.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.101953][T13029] rust_binder: Write failure EFAULT in pid:1533 [ 396.102364][ T36] audit: type=1400 audit(2000004606.456:49338): avc: denied { getopt } for pid=13027 comm="syz.3.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.151575][ T36] audit: type=1400 audit(2000004606.466:49339): avc: denied { read } for pid=13027 comm="syz.3.4278" name="binder1" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 396.179611][ T882] usb-storage 3-1:9.49: USB Mass Storage device detected [ 396.215408][ T882] usb-storage 3-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 396.224315][ T36] audit: type=1400 audit(2000004606.466:49340): avc: denied { read open } for pid=13027 comm="syz.3.4278" path="/dev/binderfs/binder1" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 396.275157][T13039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 396.280685][T13039] rust_binder: Error in use_page_slow: ESRCH [ 396.293269][T13039] rust_binder: use_range failure ESRCH [ 396.299361][ T36] audit: type=1400 audit(2000004606.486:49341): avc: denied { create } for pid=13028 comm="syz.6.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.326167][T13039] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 396.326201][T13039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 396.337897][T13039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1539 [ 396.345987][ T882] usb 3-1: USB disconnect, device number 81 [ 396.384851][ T36] audit: type=1400 audit(2000004606.486:49342): avc: denied { setopt } for pid=13028 comm="syz.6.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.588461][T13046] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 396.615938][T13046] rust_binder: 1546: no such ref 0 [ 396.781806][T13052] netlink: 'syz.3.4285': attribute type 12 has an invalid length. [ 396.822510][T13028] veth1: left allmulticast mode [ 396.912093][T13058] netlink: 'syz.6.4288': attribute type 58 has an invalid length. [ 396.942149][T13059] 9pnet_fd: Insufficient options for proto=fd [ 397.142542][T13069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.143747][T13069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1554 [ 397.150660][T13069] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 397.323305][ T333] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 397.372463][T13076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.372884][T13076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.475887][ T333] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.492515][ T333] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.508411][ T333] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.518662][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.527440][ T333] usb 3-1: Product: syz [ 397.531687][ T333] usb 3-1: Manufacturer: syz [ 397.536967][ T333] usb 3-1: SerialNumber: syz [ 397.629084][T13088] incfs: Options parsing error. -22 [ 397.634774][T13088] incfs: mount failed -22 [ 397.755823][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 397.967865][ T333] usb 3-1: cannot find UAC_HEADER [ 397.986495][T13103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.987720][ T333] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 397.995045][T13103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.018645][T13103] rust_binder: Write failure EFAULT in pid:1133 [ 398.053254][ T333] usb 3-1: USB disconnect, device number 82 [ 398.119091][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 398.666784][T13117] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 398.844916][T13126] random: crng reseeded on system resumption [ 399.193428][T13142] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4320'. [ 399.202869][T13142] gretap0: entered promiscuous mode [ 399.209780][T13142] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4320'. [ 399.218694][T13142] 0{X: renamed from gretap0 [ 399.224497][T13142] 0{X: left promiscuous mode [ 399.229560][T13142] 0{X: entered allmulticast mode [ 399.235440][T13142] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 399.333241][ T882] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 399.486010][ T882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 399.497067][ T882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 399.510940][ T882] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 399.520791][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.531172][ T882] usb 3-1: config 0 descriptor?? [ 399.539575][T13139] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 399.548816][ T882] usbhid 3-1:0.0: can't add hid device: -22 [ 399.556349][ T882] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 399.753127][T13139] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 399.763361][ T64] usb 3-1: USB disconnect, device number 83 [ 399.783216][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 399.783216][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 399.929604][T13174] overlayfs: missing 'workdir' [ 399.986096][T13176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.987944][T13176] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 400.274073][T13187] random: crng reseeded on system resumption [ 400.463989][T13187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 400.468191][T13186] rust_binder: Error in use_page_slow: ESRCH [ 400.493376][T13186] rust_binder: use_range failure ESRCH [ 400.504936][T13186] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 400.514797][T13186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 400.522931][T13186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1590 [ 400.725231][T13210] IPv6: Can't replace route, no match found [ 400.904106][ T36] kauditd_printk_skb: 839 callbacks suppressed [ 400.904126][ T36] audit: type=1400 audit(2000004611.386:50183): avc: denied { ioctl } for pid=13226 comm="syz.5.4351" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.944622][T13227] __vm_enough_memory: pid: 13227, comm: syz.5.4351, bytes: 18014402804453376 not enough memory for the allocation [ 400.965447][T13232] random: crng reseeded on system resumption [ 400.979715][ T36] audit: type=1400 audit(2000004611.346:50178): avc: denied { read write } for pid=13215 comm="syz.3.4350" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.041937][ T36] audit: type=1400 audit(2000004611.416:50184): avc: denied { ioctl } for pid=13226 comm="syz.5.4351" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.110297][ T36] audit: type=1400 audit(2000004611.416:50185): avc: denied { read write open } for pid=13215 comm="syz.3.4350" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.181412][ T36] audit: type=1400 audit(2000004611.426:50186): avc: denied { map } for pid=13226 comm="syz.5.4351" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.231105][ T36] audit: type=1400 audit(2000004611.426:50187): avc: denied { read } for pid=13226 comm="syz.5.4351" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.263798][ T36] audit: type=1400 audit(2000004611.436:50188): avc: denied { create } for pid=13230 comm="syz.2.4354" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.288750][ T36] audit: type=1400 audit(2000004611.436:50189): avc: denied { write } for pid=13230 comm="syz.2.4354" name="file0" dev="tmpfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.312516][ T36] audit: type=1400 audit(2000004611.436:50190): avc: denied { write open } for pid=13230 comm="syz.2.4354" path="/336/file0" dev="tmpfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.376567][ T36] audit: type=1400 audit(2000004611.446:50191): avc: denied { read } for pid=13230 comm="syz.2.4354" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 401.560206][T13252] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4360'. [ 401.571814][T13259] 9pnet_fd: Insufficient options for proto=fd [ 401.635258][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.653393][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.527403][T13286] can0: slcan on ptm0. [ 402.574341][T13286] can0 (unregistered): slcan off ptm0. [ 402.603331][ T9992] Bluetooth: hci0: Frame reassembly failed (-84) [ 403.502219][T13321] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4382'. [ 403.551407][T13328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 403.554020][T13328] rust_binder: Error while translating object. [ 403.570735][T13328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 403.583301][T13328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1198 [ 403.667016][T13330] fuse: Bad value for 'user_id' [ 403.681628][T13325] rust_binder: Write failure EFAULT in pid:1615 [ 403.703320][T13330] fuse: Bad value for 'user_id' [ 403.995164][T13351] overlayfs: failed to clone lowerpath [ 404.059095][T13356] usb usb7: usbfs: process 13356 (syz.3.4394) did not claim interface 0 before use [ 404.273617][T13363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.386044][T13365] rust_binder: Error in use_page_slow: ESRCH [ 404.392585][T13365] rust_binder: use_range failure ESRCH [ 404.398673][T13365] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 404.404194][T13365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 404.412234][T13365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1631 [ 404.663326][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 404.678754][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 405.493990][T13374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.496243][T13376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 405.513983][T13376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1635 [ 405.616318][T13382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.652816][T13384] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.669358][T13382] rust_binder: Error in use_page_slow: ESRCH [ 405.669384][T13382] rust_binder: use_range failure ESRCH [ 405.677455][T13382] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 405.684909][T13384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.700178][T13384] IPv6: NLM_F_CREATE should be set when creating new route [ 405.707418][T13384] IPv6: NLM_F_CREATE should be set when creating new route [ 405.716503][T13382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 405.716542][T13382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1639 [ 405.727195][T13390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.729480][T13382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.760075][T13382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.780790][T13390] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 405.783238][T13390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 405.801507][T13390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1211 [ 405.860111][T13394] SELinux: security_context_str_to_sid (ls) failed with errno=-22 [ 405.915792][ T36] kauditd_printk_skb: 554 callbacks suppressed [ 405.915842][ T36] audit: type=1400 audit(2000004616.396:50746): avc: denied { mounton } for pid=13395 comm="syz.5.4409" path="/412/file0" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 405.960045][ T36] audit: type=1400 audit(2000004616.426:50747): avc: denied { mount } for pid=13395 comm="syz.5.4409" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 406.009467][ T36] audit: type=1400 audit(2000004616.426:50748): avc: denied { remount } for pid=13395 comm="syz.5.4409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 406.040118][ T36] audit: type=1400 audit(2000004616.436:50749): avc: denied { unmount } for pid=8717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 406.081995][ T36] audit: type=1400 audit(2000004616.466:50750): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.125765][ T36] audit: type=1400 audit(2000004616.466:50751): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.153744][ T36] audit: type=1400 audit(2000004616.466:50752): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 406.179720][ T36] audit: type=1400 audit(2000004616.476:50753): avc: denied { read } for pid=13399 comm="syz.2.4410" dev="nsfs" ino=4026532760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 406.201496][ T36] audit: type=1400 audit(2000004616.476:50754): avc: denied { read open } for pid=13399 comm="syz.2.4410" path="net:[4026532760]" dev="nsfs" ino=4026532760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 406.225591][ T36] audit: type=1400 audit(2000004616.476:50755): avc: denied { create } for pid=13399 comm="syz.2.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.384362][T13409] netlink: 688 bytes leftover after parsing attributes in process `syz.2.4412'. [ 406.701613][T13428] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4418'. [ 406.728901][T13428] 9pnet_fd: Insufficient options for proto=fd [ 406.961711][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.992029][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.310540][T13451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56170 sclass=netlink_route_socket pid=13451 comm=\ [ 407.645079][T13470] __vm_enough_memory: pid: 13470, comm: syz.3.4432, bytes: 18014402804453376 not enough memory for the allocation [ 407.717067][T13482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.734388][T13482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.415408][T13502] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.4443'. [ 408.440660][T13502] rust_binder: Write failure EFAULT in pid:1232 [ 409.059393][T13529] /dev/rnullb0: Can't open blockdev [ 409.078036][T13531] /dev/rnullb0: Can't open blockdev [ 409.084230][T13530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 409.084727][T13530] rust_binder: inc_ref_done called when no active inc_refs [ 409.152522][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.168364][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.204899][T13537] netlink: 'syz.5.4455': attribute type 2 has an invalid length. [ 409.233214][ T331] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 409.386366][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.397466][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.407263][ T331] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 409.416363][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.426351][ T331] usb 3-1: config 0 descriptor?? [ 409.567220][T13542] fuse: Unknown parameter 'f' [ 410.088332][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.098097][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.114895][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 410.121023][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 410.129874][ T331] usb 3-1: USB disconnect, device number 84 [ 410.932747][ T36] kauditd_printk_skb: 624 callbacks suppressed [ 410.932769][ T36] audit: type=1400 audit(2000004621.406:51380): avc: denied { write } for pid=13581 comm="syz.5.4471" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 410.973149][ T36] audit: type=1400 audit(2000004621.406:51381): avc: denied { write open } for pid=13581 comm="syz.5.4471" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 410.998491][ T36] audit: type=1400 audit(2000004621.446:51382): avc: denied { ioctl } for pid=6661 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.066547][ T36] audit: type=1400 audit(2000004621.446:51383): avc: denied { create } for pid=13581 comm="syz.5.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 411.073889][T13589] fuseblk: Bad value for 'source' [ 411.088507][ T36] audit: type=1400 audit(2000004621.446:51384): avc: denied { write } for pid=13581 comm="syz.5.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 411.113843][ T36] audit: type=1400 audit(2000004621.486:51385): avc: denied { read write } for pid=8542 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.138866][ T36] audit: type=1400 audit(2000004621.486:51386): avc: denied { read write open } for pid=8542 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.172608][ T36] audit: type=1400 audit(2000004621.486:51387): avc: denied { ioctl } for pid=8542 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.203221][ T36] audit: type=1400 audit(2000004621.486:51388): avc: denied { create } for pid=13581 comm="syz.5.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.235803][ T36] audit: type=1400 audit(2000004621.486:51389): avc: denied { write } for pid=13581 comm="syz.5.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.393322][ T64] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 411.543274][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 411.558536][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.573791][T13601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.592813][ T64] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 411.624587][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.632625][ T64] usb 3-1: Product: syz [ 411.653253][ T64] usb 3-1: Manufacturer: syz [ 411.658101][ T64] usb 3-1: SerialNumber: syz [ 411.677663][ T64] usb 3-1: config 0 descriptor?? [ 411.695513][ T64] asix 3-1:0.0: probe with driver asix failed with error -22 [ 411.699601][T13608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.728511][T13608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.753390][T13608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.792044][T13609] rust_binder: Error in use_page_slow: ESRCH [ 411.792070][T13609] rust_binder: use_range failure ESRCH [ 411.805803][T13608] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 411.817259][T13609] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 411.827363][T13608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 411.836431][T13618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.845746][T13609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 411.874862][T13608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1688 [ 411.878271][T13609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1688 [ 411.901301][T13589] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 411.911091][T13622] netlink: 'syz.5.4483': attribute type 11 has an invalid length. [ 411.937633][T13622] netlink: 'syz.5.4483': attribute type 1 has an invalid length. [ 411.938134][ T64] usb 3-1: USB disconnect, device number 85 [ 412.023860][T13630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.032476][T13630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.629541][T13642] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4491'. [ 412.782889][T13652] overlayfs: missing 'lowerdir' [ 412.867645][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.877090][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.891259][T13656] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 412.899847][T13656] overlayfs: missing 'lowerdir' [ 412.906627][T13656] __vm_enough_memory: pid: 13656, comm: syz.3.4495, bytes: 18014402804453376 not enough memory for the allocation [ 413.323258][ T49] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 413.458688][T13674] fuseblk: Unknown parameter 'fd0x0000000000000004' [ 413.476564][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 413.487891][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 413.501212][ T49] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 413.511639][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.522021][ T49] usb 3-1: config 0 descriptor?? [ 413.529318][T13661] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 413.545970][T13676] binder: Bad value for 'stats' [ 413.692672][T13683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.941150][ T49] smartjoyplus 0003:0925:8866.0018: item fetching failed at offset 3/7 [ 413.966034][ T49] smartjoyplus 0003:0925:8866.0018: parse failed [ 413.983275][ T49] smartjoyplus 0003:0925:8866.0018: probe with driver smartjoyplus failed with error -22 [ 414.207190][ T64] usb 3-1: USB disconnect, device number 86 [ 414.207290][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.247401][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.568380][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.582641][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.441863][T13758] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4530'. [ 415.537220][T13766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4533'. [ 415.601495][T13764] netlink: 'syz.6.4532': attribute type 12 has an invalid length. [ 415.941291][ T36] kauditd_printk_skb: 650 callbacks suppressed [ 415.941309][ T36] audit: type=1400 audit(2000004626.416:52040): avc: denied { create } for pid=13778 comm="syz.2.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.981517][ T36] audit: type=1400 audit(2000004626.456:52041): avc: denied { create } for pid=13778 comm="syz.2.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 416.019872][T13780] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13780 comm=syz.2.4538 [ 416.037109][ T36] audit: type=1400 audit(2000004626.516:52042): avc: denied { create } for pid=13782 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.072192][ T36] audit: type=1400 audit(2000004626.516:52043): avc: denied { write } for pid=13782 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.101562][ T36] audit: type=1400 audit(2000004626.516:52044): avc: denied { read write } for pid=8542 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.136129][ T36] audit: type=1400 audit(2000004626.516:52045): avc: denied { read write open } for pid=8542 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.161841][ T36] audit: type=1400 audit(2000004626.516:52046): avc: denied { ioctl } for pid=8542 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.188341][ T36] audit: type=1400 audit(2000004626.576:52047): avc: denied { create } for pid=13782 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.209692][ T36] audit: type=1400 audit(2000004626.576:52048): avc: denied { write } for pid=13782 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.236886][ T36] audit: type=1400 audit(2000004626.576:52049): avc: denied { read } for pid=13782 comm="syz.6.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.313698][T13789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4541'. [ 416.325725][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4542'. [ 416.559681][ T49] usb 4-1: USB disconnect, device number 56 [ 416.722016][T13799] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.729168][T13799] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.736414][T13799] bridge_slave_0: entered allmulticast mode [ 416.742649][T13799] bridge_slave_0: entered promiscuous mode [ 416.750523][T13799] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.757594][T13799] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.764793][T13799] bridge_slave_1: entered allmulticast mode [ 416.771084][T13799] bridge_slave_1: entered promiscuous mode [ 416.879098][T13799] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.886211][T13799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.893531][T13799] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.900579][T13799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.971330][ T330] tipc: Left network mode [ 416.980072][ T330] veth0_vlan: left promiscuous mode [ 417.029583][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.037087][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.054239][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.061306][ T9992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.084670][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.091756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.144300][T13816] binder: Bad value for 'stats' [ 417.283616][T13826] fuse: Bad value for 'group_id' [ 417.288774][T13826] fuse: Bad value for 'group_id' [ 417.329867][T13799] veth0_vlan: entered promiscuous mode [ 417.413244][ T64] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 417.469718][T13799] veth1_macvtap: entered promiscuous mode [ 417.580222][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.613398][ T64] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 417.643472][ T64] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 417.659072][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.669560][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.678367][ T64] usb 3-1: Product: ᠁ [ 417.682560][ T64] usb 3-1: Manufacturer: ࡠ [ 417.689446][ T64] usb 3-1: SerialNumber: 㐊 [ 417.732229][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.755897][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.049627][T13855] veth1: entered allmulticast mode [ 418.311980][T13870] virtio-fs: tag not found [ 418.409693][T13875] rust_binder: Write failure EFAULT in pid:25 [ 418.411893][ T64] cdc_ncm 3-1:1.0: bind() failure [ 418.454271][ T64] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 418.471278][ T64] cdc_ncm 3-1:1.1: bind() failure [ 418.491614][ T64] usb 3-1: USB disconnect, device number 87 [ 418.505450][ T5586] udevd[5586]: setting owner of /dev/bus/usb/003/087 to uid=0, gid=0 failed: No such file or directory [ 418.793040][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.801710][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.823218][ T64] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 418.885184][T13861] veth1: left allmulticast mode [ 418.916158][T13893] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4575'. [ 418.925186][T13893] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4575'. [ 418.934202][T13893] netlink: 'syz.6.4575': attribute type 6 has an invalid length. [ 418.941934][T13893] netlink: 'syz.6.4575': attribute type 5 has an invalid length. [ 418.950410][T13893] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4575'. [ 418.996865][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.008160][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 419.024853][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.034232][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.042275][ T64] usb 3-1: Product: syz [ 419.047819][ T64] usb 3-1: Manufacturer: syz [ 419.052440][ T64] usb 3-1: SerialNumber: syz [ 419.063704][T13878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 419.484647][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.497783][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.515170][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.523865][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.091352][T13920] tipc: Enabled bearer , priority 0 [ 420.101011][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.110015][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.122663][ T64] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 420.129164][ T64] cdc_ncm 3-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 420.137208][ T64] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 420.138341][T13920] tipc: Disabling bearer [ 420.296155][T13925] __vm_enough_memory: pid: 13925, comm: syz.3.4587, bytes: 18014402804453376 not enough memory for the allocation [ 420.333259][ T64] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 420.778604][ T64] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 420.815586][ T64] usb 3-1: USB disconnect, device number 88 [ 420.828017][ T64] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 420.968341][ T36] kauditd_printk_skb: 725 callbacks suppressed [ 420.968362][ T36] audit: type=1400 audit(2000004631.446:52775): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 421.036298][ T36] audit: type=1400 audit(2000004631.486:52776): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.074568][ T36] audit: type=1400 audit(2000004631.486:52777): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.104638][ T36] audit: type=1400 audit(2000004631.496:52778): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.134366][ T36] audit: type=1400 audit(2000004631.516:52779): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 421.213004][ T36] audit: type=1400 audit(2000004631.516:52780): avc: denied { read write } for pid=13799 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.242066][ T36] audit: type=1400 audit(2000004631.516:52781): avc: denied { read write open } for pid=13799 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.300306][ T36] audit: type=1400 audit(2000004631.516:52782): avc: denied { ioctl } for pid=13799 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.333373][ T36] audit: type=1400 audit(2000004631.546:52783): avc: denied { read } for pid=13949 comm="syz.5.4596" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.373150][ T36] audit: type=1400 audit(2000004631.546:52784): avc: denied { read open } for pid=13949 comm="syz.5.4596" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.629799][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4602'. [ 421.649596][T13967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4602'. [ 421.834207][T13977] rust_binder: 13976 RLIMIT_NICE not set [ 421.861351][ T333] rust_binder: 0: removing orphan mapping 0:24 [ 421.992100][T13982] rust_binder: Error while translating object. [ 421.992160][T13982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 422.028797][T13982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1354 [ 422.040233][T13983] rust_binder: 1354: no such ref 0 [ 422.502399][T13998] rust_binder: Write failure EFAULT in pid:1359 [ 423.339613][T14027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.364852][T14027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.682521][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4630'. [ 423.743053][T14047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.743096][T14047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 424.523296][T14090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 424.683828][T14097] tipc: New replicast peer: 0.0.0.0 [ 424.703493][T14097] tipc: Enabled bearer , priority 10 [ 424.715148][T14097] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 424.733212][ T333] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 424.742469][T14097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 424.742497][T14097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1385 [ 424.908355][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.940746][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.952171][ T333] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 424.962119][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.972621][ T333] usb 4-1: config 0 descriptor?? [ 425.145539][T14127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.208595][T14130] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4662'. [ 425.285914][T14130] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 425.396333][T14134] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 425.434264][T14134] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 425.434311][T14134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 425.445185][T14134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1181 [ 425.456298][T14138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.504453][ T333] usbhid 4-1:0.0: can't add hid device: -71 [ 425.532577][ T333] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 425.561853][ T333] usb 4-1: USB disconnect, device number 57 [ 425.825926][T14156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.834836][T14156] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 425.843205][ T49] tipc: Node number set to 3892061829 [ 425.852507][T14156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 425.856754][T14156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1187 [ 425.969915][T14163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 425.979317][ T36] kauditd_printk_skb: 927 callbacks suppressed [ 425.979339][ T36] audit: type=1400 audit(2000004636.446:53712): avc: denied { ioctl } for pid=14162 comm="syz.5.4671" path="/dev/binderfs/binder1" dev="binder" ino=22 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.013262][T14163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1401 [ 426.100943][ T36] audit: type=1400 audit(2000004636.446:53713): avc: denied { call } for pid=14162 comm="syz.5.4671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 426.183676][T14173] loop7: detected capacity change from 0 to 16384 [ 426.197397][ T36] audit: type=1400 audit(2000004636.516:53714): avc: denied { read write } for pid=13799 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.238615][ T36] audit: type=1400 audit(2000004636.516:53715): avc: denied { read write open } for pid=13799 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.283955][ T36] audit: type=1400 audit(2000004636.516:53716): avc: denied { ioctl } for pid=13799 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.332243][ T36] audit: type=1400 audit(2000004636.546:53717): avc: denied { read } for pid=14166 comm="syz.2.4672" name="binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.362289][T14175] loop7: detected capacity change from 16384 to 0 [ 426.368932][ C0] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 3 [ 426.403228][ T36] audit: type=1400 audit(2000004636.546:53718): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.471395][ T36] audit: type=1400 audit(2000004636.546:53719): avc: denied { read open } for pid=14166 comm="syz.2.4672" path="/dev/binderfs/binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 426.527429][ T36] audit: type=1400 audit(2000004636.546:53720): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.597239][ T36] audit: type=1400 audit(2000004636.546:53721): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.781994][T14187] __vm_enough_memory: pid: 14187, comm: syz.2.4679, bytes: 18014402804453376 not enough memory for the allocation [ 427.007088][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.015614][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.333190][ T9992] Bluetooth: hci0: Frame reassembly failed (-84) [ 427.339849][T14227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.340476][T14227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.356684][T14230] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 427.369580][T14227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.370883][T14227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.377830][T14230] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 427.693977][T14252] __vm_enough_memory: pid: 14252, comm: syz.2.4701, bytes: 18014402804453376 not enough memory for the allocation [ 427.775180][T14261] rust_binder: Write failure EFAULT in pid:1426 [ 427.775503][T14261] rust_binder: Write failure EFAULT in pid:1426 [ 427.798056][T14261] rust_binder: Write failure EFAULT in pid:1426 [ 427.961471][T14273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 427.980364][T14273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1218 [ 428.029321][T14279] rust_binder: 1433: no such ref 0 [ 428.044173][T14279] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 428.051395][T14279] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 428.286171][T14297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 428.286204][T14297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1222 [ 428.311176][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.344119][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.536976][T14315] 8021q: VLANs not supported on sit0 [ 428.761602][T14325] tipc: New replicast peer: 255.255.255.255 [ 428.767863][T14325] tipc: Enabled bearer , priority 10 [ 429.333227][ T64] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 429.383210][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 429.389289][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 429.484553][ T64] usb 3-1: too many configurations: 173, using maximum allowed: 8 [ 429.503499][ T64] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 429.522003][ T64] usb 3-1: can't read configurations, error -61 [ 429.653271][ T64] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 429.743221][ T31] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 429.803923][ T64] usb 3-1: too many configurations: 173, using maximum allowed: 8 [ 429.815006][ T64] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 429.822645][ T64] usb 3-1: can't read configurations, error -61 [ 429.829124][ T64] usb usb3-port1: attempt power cycle [ 429.893219][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 429.898471][ T49] tipc: Node number set to 1593805951 [ 429.906367][ T31] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 429.914779][ T31] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 429.923412][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 429.932373][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.942042][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.952087][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.965108][ T31] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 429.974167][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.984172][ T31] usb 4-1: config 0 descriptor?? [ 430.183247][ T64] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 430.201250][ T31] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 430.213074][ T64] usb 3-1: too many configurations: 173, using maximum allowed: 8 [ 430.225615][T14360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.248014][T14360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.256092][ T64] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 430.265057][ T64] usb 3-1: can't read configurations, error -61 [ 430.340557][ T10] usb 4-1: USB disconnect, device number 58 [ 430.355501][ T10] usblp0: removed [ 430.403265][ T64] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 430.425048][ T64] usb 3-1: too many configurations: 173, using maximum allowed: 8 [ 430.435605][ T64] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 430.443317][ T64] usb 3-1: can't read configurations, error -61 [ 430.449763][ T64] usb usb3-port1: unable to enumerate USB device [ 430.744906][T14371] fuse: Bad value for 'fd' [ 431.221109][ T36] kauditd_printk_skb: 806 callbacks suppressed [ 431.221128][ T36] audit: type=1400 audit(2000004641.696:54528): avc: denied { read write } for pid=8717 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.251630][ T36] audit: type=1400 audit(2000004641.696:54529): avc: denied { read write open } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.278131][ T36] audit: type=1400 audit(2000004641.696:54530): avc: denied { ioctl } for pid=8717 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.304592][ T36] audit: type=1400 audit(2000004641.716:54531): avc: denied { read } for pid=14379 comm="syz.5.4748" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.327559][ T36] audit: type=1400 audit(2000004641.716:54532): avc: denied { read open } for pid=14379 comm="syz.5.4748" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 431.352937][ T36] audit: type=1400 audit(2000004641.716:54533): avc: denied { create } for pid=14379 comm="syz.5.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.380325][ T36] audit: type=1400 audit(2000004641.746:54534): avc: denied { create } for pid=14379 comm="syz.5.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.402244][ T36] audit: type=1400 audit(2000004641.746:54535): avc: denied { write } for pid=14379 comm="syz.5.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.416918][T14383] erofs: dax options not supported [ 431.424373][ T36] audit: type=1400 audit(2000004641.746:54536): avc: denied { read } for pid=14379 comm="syz.5.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.448742][ T36] audit: type=1400 audit(2000004641.746:54537): avc: denied { read } for pid=14379 comm="syz.5.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.555212][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.565950][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.183491][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4751'. [ 432.215065][T14391] can0: slcan on ptm0. [ 432.226508][T14389] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 432.255096][T14391] can0 (unregistered): slcan off ptm0. [ 432.415433][T14394] rust_binder: Error while translating object. [ 432.415489][T14394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 432.421791][T14394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1252 [ 432.426153][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4754'. [ 432.678168][T14410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 432.685381][T14410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 432.751440][T14412] can0: slcan on ptm0. [ 432.767465][T14415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1257 [ 432.822275][T14411] can0 (unregistered): slcan off ptm0. [ 432.905172][T14422] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 433.189113][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4767'. [ 434.037253][T14478] /dev/rnullb0: Can't open blockdev [ 434.043389][T14475] /dev/rnullb0: Can't open blockdev [ 434.359445][T14489] 9pnet: Could not find request transport: f [ 434.522427][T14493] /dev/rnullb0: Can't open blockdev [ 434.763210][ T31] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 434.917288][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 434.927696][ T31] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.942407][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 434.953707][ T31] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.40 [ 434.963294][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.971461][ T31] usb 3-1: Product: syz [ 434.977167][ T31] usb 3-1: Manufacturer: 牜Ṗ̞崘靟灮禀횄҆Ϋ䴥舫ﳧ厲䐵 [ 434.986148][ T31] usb 3-1: SerialNumber: syz [ 435.002146][T14493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.231026][ T31] usbhid 3-1:1.0: can't add hid device: -71 [ 435.250288][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 435.278390][ T31] usb 3-1: USB disconnect, device number 93 [ 435.327526][T14495] fuse: Invalid rootmode [ 435.344604][ T10] rust_binder: 14481: removing orphan mapping 0:112 [ 435.593885][T14505] netlink: 'syz.5.4792': attribute type 4 has an invalid length. [ 435.601716][T14505] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4792'. [ 435.623846][T14505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14505 comm=syz.5.4792 [ 435.654773][T14507] 9pnet_fd: Insufficient options for proto=fd [ 435.656458][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 435.868153][T14519] fuse: Invalid rootmode [ 435.876803][T14521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4797'. [ 435.888321][T14521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4797'. [ 435.897493][T14521] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 436.061230][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'. [ 436.225005][ T36] kauditd_printk_skb: 873 callbacks suppressed [ 436.225023][ T36] audit: type=1400 audit(2000004646.706:55411): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.227176][T14538] __vm_enough_memory: pid: 14538, comm: syz.2.4804, bytes: 18014402804453376 not enough memory for the allocation [ 436.243738][ T36] audit: type=1400 audit(2000004646.706:55412): avc: denied { map } for pid=14537 comm="syz.2.4804" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.313213][ T36] audit: type=1400 audit(2000004646.706:55413): avc: denied { read } for pid=14537 comm="syz.2.4804" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.336567][ T36] audit: type=1400 audit(2000004646.706:55414): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.360156][ T36] audit: type=1400 audit(2000004646.706:55415): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.389369][ T36] audit: type=1400 audit(2000004646.706:55416): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.398826][T13799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 436.413780][ T36] audit: type=1400 audit(2000004646.706:55417): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.421142][T13799] audit: audit_lost=185 audit_rate_limit=0 audit_backlog_limit=64 [ 436.442988][ T36] audit: type=1400 audit(2000004646.706:55418): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.817303][T14542] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 436.817329][T14542] rust_binder: Error while translating object. [ 436.826860][T14542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 436.833065][T14542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 437.402928][T14556] __vm_enough_memory: pid: 14556, comm: syz.2.4813, bytes: 18014402804453376 not enough memory for the allocation [ 437.703220][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 437.709557][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 438.151653][T14580] netlink: 'syz.2.4822': attribute type 1 has an invalid length. [ 438.359146][T14593] 9pnet_fd: Insufficient options for proto=fd [ 438.377586][T14591] __vm_enough_memory: pid: 14591, comm: syz.2.4823, bytes: 18014402804453376 not enough memory for the allocation [ 438.577246][T14597] fuse: Bad value for 'rootmode' [ 438.859660][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.908235][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.124636][T14616] overlayfs: failed to resolve './file1': -2 [ 439.217577][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4831'. [ 439.251461][T14617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14617 comm=syz.2.4831 [ 439.294252][T14617] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 439.301497][T14617] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 439.540087][T14624] __vm_enough_memory: pid: 14624, comm: syz.5.4835, bytes: 18014402804453376 not enough memory for the allocation [ 439.676448][T14626] fuse: Unknown parameter 'use00000000000000000000000' [ 440.205565][T14642] overlay: Unknown parameter 'subj_role' [ 440.278080][T14641] syzkaller0: entered promiscuous mode [ 440.297263][T14641] syzkaller0: entered allmulticast mode [ 440.585236][T14651] __vm_enough_memory: pid: 14651, comm: syz.2.4844, bytes: 18014402804453376 not enough memory for the allocation [ 440.703614][T14653] fuse: Unknown parameter 'use00000000000000000000000' [ 441.100039][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.139288][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.214091][T14675] tipc: Enabling of bearer rejected, media not registered [ 441.231516][T14674] ptm ptm13: ldisc open failed (-12), clearing slot 13 [ 441.238576][ T36] kauditd_printk_skb: 4696 callbacks suppressed [ 441.238593][ T36] audit: type=1400 audit(2000004651.721:60048): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.271464][T14675] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 441.283769][T14675] tipc: Enabled bearer , priority 10 [ 441.303452][ T36] audit: type=1400 audit(2000004651.721:60049): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.347167][ T36] audit: type=1400 audit(2000004651.721:60050): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.360995][T13799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 441.377778][T14681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 441.385535][T14681] audit: audit_lost=208 audit_rate_limit=0 audit_backlog_limit=64 [ 441.394653][T14681] audit: backlog limit exceeded [ 441.399804][T14681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 441.406360][ T36] audit: type=1400 audit(2000004651.721:60051): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.406392][T13799] audit: audit_lost=209 audit_rate_limit=0 audit_backlog_limit=64 [ 441.438009][T14681] __vm_enough_memory: pid: 14681, comm: syz.2.4855, bytes: 18014402804453376 not enough memory for the allocation [ 441.466756][T14683] fuse: Unknown parameter 'use00000000000000000000000' [ 441.526489][T14685] __vm_enough_memory: pid: 14685, comm: syz.2.4857, bytes: 18014402804453376 not enough memory for the allocation [ 441.770295][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 441.859990][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.878099][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.017343][T14706] fuse: Unknown parameter 'user_i00000000000000000000000' [ 442.029003][T14707] rust_binder: Fixups oob 165 172 361 173 [ 442.029031][T14707] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 442.050130][T14707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 442.068967][T14707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1516 [ 442.283230][ T31] tipc: Node number set to 1123100927 [ 443.510418][T14732] fuse: Unknown parameter 'user_i00000000000000000000000' [ 443.702488][T14740] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4878'. [ 443.703054][T14738] rust_binder: Error while translating object. [ 443.725842][T14738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 443.743973][T14738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1534 [ 443.783210][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 443.798560][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 443.975357][T14746] rust_binder: Error while translating object. [ 443.975410][T14746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 444.006031][T14746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1375 [ 444.076222][T14748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.103755][T14748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.226014][T14754] __vm_enough_memory: pid: 14754, comm: syz.2.4883, bytes: 18014402804453376 not enough memory for the allocation [ 444.328086][T14759] fuse: Unknown parameter 'user_i00000000000000000000000' [ 444.456906][ T330] tipc: Left network mode [ 444.469052][ T330] veth1_macvtap: left promiscuous mode [ 444.483210][ T330] veth0_vlan: left promiscuous mode [ 444.806347][T14772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 444.806379][T14772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1542 [ 444.910190][T14777] rust_binder: Failed copying remainder into alloc: EFAULT [ 444.932881][T14780] fuse: Unknown parameter 'user_id00000000000000000000000' [ 444.938940][T14777] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 444.961070][T14777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 444.983235][T14777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1391 [ 445.150751][T14784] binder: Unknown parameter '01777777777777777777777' [ 445.455060][T14808] fuse: Unknown parameter 'user_id00000000000000000000000' [ 445.590160][T14812] __vm_enough_memory: pid: 14812, comm: syz.5.4906, bytes: 18014402804453376 not enough memory for the allocation [ 445.633295][ T64] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 445.796035][ T64] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 445.810241][ T64] usb 3-1: config 0 has no interface number 1 [ 445.833230][ T64] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 445.843100][ T64] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.894862][ T64] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 445.913192][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 445.921229][ T64] usb 3-1: SerialNumber: syz [ 445.939875][ T64] usb 3-1: config 0 descriptor?? [ 445.965732][ T64] usb 3-1: Found UVC 0.00 device (0002:0000) [ 445.982575][ T64] usb 3-1: No valid video chain found. [ 446.087674][T14822] rust_binder: Write failure EFAULT in pid:1559 [ 446.166797][ T49] usb 3-1: USB disconnect, device number 94 [ 446.278037][ T36] kauditd_printk_skb: 13160 callbacks suppressed [ 446.278056][ T36] audit: type=1400 audit(2000004656.761:73203): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.334606][ T36] audit: type=1400 audit(2000004656.791:73204): avc: denied { create } for pid=14823 comm="syz.6.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.354370][ T36] audit: type=1400 audit(2000004656.791:73205): avc: denied { create } for pid=14823 comm="syz.6.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.378368][ T36] audit: type=1400 audit(2000004656.791:73206): avc: denied { write } for pid=14823 comm="syz.6.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.426443][ T36] audit: type=1400 audit(2000004656.811:73207): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.458293][ T36] audit: type=1400 audit(2000004656.811:73208): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.484302][ T36] audit: type=1400 audit(2000004656.861:73209): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.494292][T13799] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.515978][T13799] audit: audit_lost=213 audit_rate_limit=0 audit_backlog_limit=64 [ 446.520044][ T36] audit: type=1400 audit(2000004656.861:73210): avc: denied { setattr } for pid=13799 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.654835][T14831] 9pnet_fd: Insufficient options for proto=fd [ 446.784696][T14835] fuse: Unknown parameter 'user_id00000000000000000000000' [ 446.871029][T14837] rust_binder: Error while translating object. [ 446.871077][T14837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 446.885697][T14837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1404 [ 446.907704][T14839] __vm_enough_memory: pid: 14839, comm: syz.5.4917, bytes: 18014402804453376 not enough memory for the allocation [ 447.884098][T14857] rust_binder: 1411: no such ref 0 [ 447.889286][T14857] rust_binder: 1411: no such ref 2 [ 447.906533][T14857] rust_binder: 14857 RLIMIT_NICE not set [ 447.931956][ T31] rust_binder: 0: removing orphan mapping 0:112 [ 447.974380][T14861] fuse: Bad value for 'fd' [ 448.006773][T14859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.036847][T14859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.235399][T14865] __vm_enough_memory: pid: 14865, comm: syz.2.4927, bytes: 18014402804453376 not enough memory for the allocation [ 448.495529][T14867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4928'. [ 449.021185][T14882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.054299][T14882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.585826][T14888] fuse: Bad value for 'fd' [ 449.859018][T14892] __vm_enough_memory: pid: 14892, comm: syz.2.4936, bytes: 18014402804453376 not enough memory for the allocation [ 450.514535][T14904] FAULT_INJECTION: forcing a failure. [ 450.514535][T14904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.553218][T14904] CPU: 1 UID: 0 PID: 14904 Comm: syz.2.4940 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 450.553256][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.553272][T14904] Call Trace: [ 450.553282][T14904] [ 450.553291][T14904] __dump_stack+0x21/0x30 [ 450.553343][T14904] dump_stack_lvl+0x10c/0x190 [ 450.553376][T14904] ? __cfi_dump_stack_lvl+0x10/0x10 [ 450.553411][T14904] dump_stack+0x19/0x20 [ 450.553443][T14904] should_fail_ex+0x3d9/0x530 [ 450.553468][T14904] should_fail+0xf/0x20 [ 450.553490][T14904] should_fail_usercopy+0x1e/0x30 [ 450.553516][T14904] __kvm_read_guest_page+0x177/0x210 [ 450.553542][T14904] kvm_vcpu_read_guest+0x3a6/0x510 [ 450.553569][T14904] read_emulate+0x30/0x50 [ 450.553596][T14904] emulator_read_write_onepage+0x5d2/0xd70 [ 450.553636][T14904] emulator_read_write+0x1ef/0x580 [ 450.553662][T14904] emulator_read_emulated+0x40/0x50 [ 450.553695][T14904] ? __cfi_emulator_read_emulated+0x10/0x10 [ 450.553730][T14904] segmented_read+0x1c2/0x400 [ 450.553755][T14904] x86_emulate_insn+0x354/0x41d0 [ 450.553778][T14904] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 450.553805][T14904] ? x64_sys_call+0xe69/0x2ee0 [ 450.553842][T14904] x86_emulate_instruction+0xce4/0x1870 [ 450.553872][T14904] kvm_emulate_instruction+0x26/0x30 [ 450.553897][T14904] handle_io+0x10f/0x150 [ 450.553921][T14904] ? __cfi_handle_io+0x10/0x10 [ 450.553943][T14904] vmx_handle_exit+0x12c2/0x1b40 [ 450.553976][T14904] ? vmx_read_guest_seg_ar+0x179/0x350 [ 450.554004][T14904] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 450.554037][T14904] ? vmx_get_segment+0x3e4/0x8e0 [ 450.554064][T14904] ? vmx_handle_exit_irqoff+0xe9/0x7a0 [ 450.554098][T14904] vcpu_run+0x4bd0/0x7830 [ 450.554142][T14904] ? signal_pending+0xc0/0xc0 [ 450.554174][T14904] ? complete_emulated_mmio+0x4fb/0x790 [ 450.554203][T14904] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 450.554237][T14904] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 450.554278][T14904] ? kstrtoull+0x13b/0x1e0 [ 450.554311][T14904] ? kstrtouint+0x78/0xf0 [ 450.554357][T14904] ? ioctl_has_perm+0x1aa/0x4d0 [ 450.554384][T14904] ? __asan_memcpy+0x5a/0x80 [ 450.554417][T14904] ? ioctl_has_perm+0x3e0/0x4d0 [ 450.554443][T14904] ? has_cap_mac_admin+0xd0/0xd0 [ 450.554468][T14904] ? __kasan_check_write+0x18/0x20 [ 450.554500][T14904] ? mutex_lock_killable+0x92/0x1c0 [ 450.554532][T14904] ? __cfi_mutex_lock_killable+0x10/0x10 [ 450.554563][T14904] ? proc_fail_nth_write+0x17e/0x210 [ 450.554592][T14904] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 450.554622][T14904] kvm_vcpu_ioctl+0x96f/0xee0 [ 450.554643][T14904] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 450.554676][T14904] ? __cfi_vfs_write+0x10/0x10 [ 450.554695][T14904] ? __kasan_check_write+0x18/0x20 [ 450.554727][T14904] ? mutex_unlock+0x8b/0x240 [ 450.554757][T14904] ? __cfi_mutex_unlock+0x10/0x10 [ 450.554787][T14904] ? __fget_files+0x2c5/0x340 [ 450.554812][T14904] ? __fget_files+0x2c5/0x340 [ 450.554835][T14904] ? bpf_lsm_file_ioctl+0xd/0x20 [ 450.554865][T14904] ? security_file_ioctl+0x34/0xd0 [ 450.554889][T14904] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 450.554922][T14904] __se_sys_ioctl+0x132/0x1b0 [ 450.554946][T14904] __x64_sys_ioctl+0x7f/0xa0 [ 450.554969][T14904] x64_sys_call+0x1878/0x2ee0 [ 450.555001][T14904] do_syscall_64+0x58/0xf0 [ 450.555026][T14904] ? clear_bhb_loop+0x50/0xa0 [ 450.555048][T14904] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 450.555080][T14904] RIP: 0033:0x7fd7f8d8eec9 [ 450.555099][T14904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.555118][T14904] RSP: 002b:00007fd7f9c52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.555141][T14904] RAX: ffffffffffffffda RBX: 00007fd7f8fe5fa0 RCX: 00007fd7f8d8eec9 [ 450.555159][T14904] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 450.555174][T14904] RBP: 00007fd7f9c52090 R08: 0000000000000000 R09: 0000000000000000 [ 450.555186][T14904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.555218][T14904] R13: 00007fd7f8fe6038 R14: 00007fd7f8fe5fa0 R15: 00007ffd079cf6c8 [ 450.555240][T14904] [ 451.121951][T14911] fuse: Bad value for 'fd' [ 451.200489][T14915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 451.276411][ T330] bridge_slave_1: left allmulticast mode [ 451.288658][ T330] bridge_slave_1: left promiscuous mode [ 451.301049][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.314745][ T36] kauditd_printk_skb: 3541 callbacks suppressed [ 451.314764][ T36] audit: type=1400 audit(2000004661.801:76715): avc: denied { ioctl } for pid=14912 comm="syz.2.4944" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.364775][ T330] bridge_slave_0: left allmulticast mode [ 451.370454][ T330] bridge_slave_0: left promiscuous mode [ 451.377753][ T36] audit: type=1400 audit(2000004661.861:76716): avc: denied { create } for pid=14916 comm="syz.6.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.378832][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.406020][ T36] audit: type=1400 audit(2000004661.861:76717): avc: denied { write } for pid=14916 comm="syz.6.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.426805][ T36] audit: type=1400 audit(2000004661.881:76718): avc: denied { read } for pid=14917 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 451.449279][ T36] audit: type=1400 audit(2000004661.881:76719): avc: denied { read open } for pid=14917 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 451.473431][ T333] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 451.483353][ T36] audit: type=1400 audit(2000004661.891:76720): avc: denied { mounton } for pid=14917 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 451.508268][ T36] audit: type=1400 audit(2000004661.891:76721): avc: denied { ioctl } for pid=14912 comm="syz.2.4944" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.534006][ T36] audit: type=1400 audit(2000004661.891:76722): avc: denied { sys_module } for pid=14917 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 451.537902][T14921] sock: sock_timestamping_bind_phc: sock not bind to device [ 451.557435][ T36] audit: type=1400 audit(2000004661.931:76723): avc: denied { create } for pid=14916 comm="syz.6.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 451.583849][ T36] audit: type=1400 audit(2000004661.931:76724): avc: denied { write } for pid=14916 comm="syz.6.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 451.643205][ T333] usb 3-1: device descriptor read/64, error -71 [ 451.657778][ T330] veth1_macvtap: left promiscuous mode [ 451.663426][ T330] veth0_vlan: left promiscuous mode [ 451.736357][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.743461][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.750609][T14917] bridge_slave_0: entered allmulticast mode [ 451.756919][T14917] bridge_slave_0: entered promiscuous mode [ 451.767041][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.774369][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.781962][T14917] bridge_slave_1: entered allmulticast mode [ 451.790025][T14917] bridge_slave_1: entered promiscuous mode [ 451.878944][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.886018][T14917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.893419][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.900461][T14917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.903233][ T333] usb 3-1: device descriptor read/64, error -71 [ 451.964335][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.971670][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.988287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.995372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.009657][ T9992] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.016746][ T9992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.130935][T14917] veth0_vlan: entered promiscuous mode [ 452.153227][ T333] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 452.178921][T14917] veth1_macvtap: entered promiscuous mode [ 452.303690][T14938] netlink: 'syz.5.4950': attribute type 6 has an invalid length. [ 452.312240][ T333] usb 3-1: device descriptor read/64, error -71 [ 452.322166][T14938] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.340951][T14940] __vm_enough_memory: pid: 14940, comm: syz.7.4945, bytes: 18014402804453376 not enough memory for the allocation [ 452.353842][T14938] rust_binder: Write failure EINVAL in pid:1591 [ 452.469506][T14946] fuse: Unknown parameter '0x0000000000000004' [ 452.568172][T14958] rust_binder: 14958 RLIMIT_NICE not set [ 452.573228][ T333] usb 3-1: device descriptor read/64, error -71 [ 452.583016][T14959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1602 [ 452.587320][T14960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1602 [ 452.601863][ T49] rust_binder: 14957: removing orphan mapping 0:1048 [ 452.703308][ T333] usb usb3-port1: attempt power cycle [ 453.043206][ T333] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 453.066503][ T333] usb 3-1: device descriptor read/8, error -71 [ 453.195714][ T333] usb 3-1: device descriptor read/8, error -71 [ 453.256974][T14976] fuse: Unknown parameter '0x0000000000000004' [ 454.201410][ T333] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 454.296472][T14988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1444 [ 454.356805][T14995] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 454.379879][T14995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.381860][T14995] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 454.388571][T14995] rust_binder: Error while translating object. [ 454.398070][T14992] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 454.404400][T14995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 454.412337][T14995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1446 [ 454.455558][T14998] __vm_enough_memory: pid: 14998, comm: syz.5.4971, bytes: 18014402804453376 not enough memory for the allocation [ 454.555608][T15005] fuse: Unknown parameter '0x0000000000000005' [ 454.633247][ T333] usb 3-1: device not accepting address 98, error -71 [ 454.656980][ T333] usb usb3-port1: unable to enumerate USB device [ 454.817661][T15014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 454.817698][T15014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:21 [ 455.150730][T15029] fuse: Unknown parameter '0x0000000000000005' [ 455.454733][T15041] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 455.467384][T15041] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 455.475839][T15041] CPU: 0 UID: 0 PID: 15041 Comm: syz.2.4989 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 455.487505][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.497586][T15041] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 455.503877][T15041] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 455.523538][T15041] RSP: 0018:ffffc9000b80f820 EFLAGS: 00010202 [ 455.529635][T15041] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888113a19300 [ 455.537633][T15041] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 455.545628][T15041] RBP: ffffc9000b80fa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 455.553630][T15041] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 455.561640][T15041] R13: 7ffffffffffeffff R14: ffff888106378010 R15: ffff888106378000 [ 455.569637][T15041] FS: 00007fd7f9c526c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 455.578598][T15041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.585208][T15041] CR2: 000000110c343019 CR3: 0000000147898000 CR4: 00000000003526b0 [ 455.593213][T15041] Call Trace: [ 455.596512][T15041] [ 455.599486][T15041] ? __cfi_iter_file_splice_write+0x10/0x10 [ 455.605445][T15041] ? __kasan_kmalloc+0x96/0xb0 [ 455.610251][T15041] ? __kasan_check_write+0x18/0x20 [ 455.615414][T15041] ? __cfi_iter_file_splice_write+0x10/0x10 [ 455.621347][T15041] direct_splice_actor+0x279/0x4b0 [ 455.626493][T15041] splice_direct_to_actor+0x4fe/0xbc0 [ 455.631904][T15041] ? __cfi_direct_splice_actor+0x10/0x10 [ 455.635121][T15051] fuse: Unknown parameter '0x0000000000000005' [ 455.637557][T15041] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 455.649634][T15041] do_splice_direct+0x182/0x270 [ 455.654514][T15041] ? __cfi_do_splice_direct+0x10/0x10 [ 455.659916][T15041] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 455.665852][T15041] ? security_file_permission+0x2e/0xc0 [ 455.671422][T15041] ? rw_verify_area+0xac/0x230 [ 455.676224][T15041] do_sendfile+0x5c8/0xfb0 [ 455.680696][T15041] ? vfs_writev+0xcf0/0xcf0 [ 455.685235][T15041] ? __se_sys_futex+0x28f/0x300 [ 455.690141][T15041] __x64_sys_sendfile64+0x193/0x1f0 [ 455.695375][T15041] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 455.701124][T15041] ? switch_fpu_return+0x12/0x20 [ 455.706096][T15041] x64_sys_call+0xa26/0x2ee0 [ 455.710773][T15041] do_syscall_64+0x58/0xf0 [ 455.715222][T15041] ? clear_bhb_loop+0x50/0xa0 [ 455.719936][T15041] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 455.725877][T15041] RIP: 0033:0x7fd7f8d8eec9 [ 455.730320][T15041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.749960][T15041] RSP: 002b:00007fd7f9c52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 455.758418][T15041] RAX: ffffffffffffffda RBX: 00007fd7f8fe5fa0 RCX: 00007fd7f8d8eec9 [ 455.766422][T15041] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 455.774419][T15041] RBP: 00007fd7f8e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.782419][T15041] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 455.790422][T15041] R13: 00007fd7f8fe6038 R14: 00007fd7f8fe5fa0 R15: 00007ffd079cf6c8 [ 455.798429][T15041] [ 455.801475][T15041] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.805774][T15041] ---[ end trace 0000000000000000 ]--- [ 455.816727][T15041] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 455.823296][T15041] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 455.849684][T15041] RSP: 0018:ffffc9000b80f820 EFLAGS: 00010202 [ 455.858470][T15041] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888113a19300 [ 455.867865][T15041] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 455.876263][T15041] RBP: ffffc9000b80fa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 455.885123][T15041] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 455.893231][T15041] R13: 7ffffffffffeffff R14: ffff888106378010 R15: ffff888106378000 [ 455.902042][T15041] FS: 00007fd7f9c526c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 455.913194][T15041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.919862][T15041] CR2: 00007fd7f9c31d58 CR3: 0000000147898000 CR4: 00000000003526b0 [ 455.929049][T15041] Kernel panic - not syncing: Fatal exception [ 455.935483][T15041] Kernel Offset: disabled [ 455.939844][T15041] Rebooting in 86400 seconds..