last executing test programs: 5.280254361s ago: executing program 1 (id=2): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x50}, 0x1, 0x0, 0x0, 0x42001}, 0x4008001) r3 = syz_clone(0x800200, &(0x7f0000000200)="2d58a8d504b4003de9dd9d8f1c57c88ee6cbeb182d85cebb25976ca0acbb2e9346ea1c26c4ed373422ba64a295599cb9dac12562ec4aa5f07e9122788013c7eefc4a578d040e9a678a0fa1d258616d860eb40cd7a8f766df0d0389763fa09f8a5dac4103b61c2c7f66b3ecce59c6d8d3cb330063c8a91f26702aad4bf37ac40a69dfbcc46f25ad692a65", 0x8a, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="54f3dc762196ce203c611772cb1c23ea05532ddcb64dbd237194302d1fdcda3c4a174472d321b5c7a38dd1480950e47254c6e3a9359f124bbfdb494f5657df6a78066e7a06ea65a2fc34517ebf404b7f40d5be7493980f7b01ac34e598b817273fe3d9ff3ecc49d67e6a9a0aefda472270a97eda8cdc951fa8dfb661259b7f237b7564") r4 = syz_open_procfs(r3, &(0x7f0000000400)='net/rt_cache\x00') r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x124, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c804}, 0x20000000) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x6a3, 0x621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x70, 0xe, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x95a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x10, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x6}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0x7f, 0x9, 0x3, 0xff, 0xc}, 0x1c, &(0x7f0000000700)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "68691677799294da890462d0cdd59325"}]}, 0x2, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1407}}, {0x14, &(0x7f0000000780)=@string={0x14, 0x3, "8f95c3825286eaccacb7c87907c97bace1ea"}}]}) syz_usb_control_io$hid(r6, &(0x7f00000009c0)={0x24, &(0x7f0000000800)={0x40, 0x1, 0xf6, {0xf6, 0xa, "decab8d78a283d51c0ea54517b6fb77eadadc400cd805f583726d8259c8beb4b658a42b3ba55c95c7d59760cf9074c88640dc8866d3f36ae2130cf4a11956e63de3edf3e36f0a3930c6edcd257eebdd6bd86745cd2323da9afb605ded959a3ee82eb4829a188bf3f8721a4a67d4100fe3bc462fb9c269055bd6a2d4f22584173950b4678d6afaf0b578cd4cae352cf1184fbd042c221111b4fc330b7de5000ae9a69b2f7ab695207804b9c61f23ae2a5a403bdab14a9ff039e86b4339df92f0b9544ca4f58d5e990841f66236c9d8f1ea5c0d820729ed4c5138b7a04d2cebbb654f6779986cd732bc31836bd2622a955df95e8f7"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000940)={0x0, 0x22, 0x1b, {[@global=@item_012={0x1, 0x1, 0xa, "b9"}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_4={0x3, 0x1, 0x0, "03f181f0"}, @global=@item_4={0x3, 0x1, 0x8, "73aa61d7"}, @local=@item_012={0x2, 0x2, 0x6, "b646"}, @main=@item_4={0x3, 0x0, 0xb, "0a09800f"}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_4={0x3, 0x0, 0xb, "b8149e9d"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe73}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000a00)={0x20, 0x17, 0x65, "cb07eb6693e72aad0a34d31deea97d04427c390e2aa5f53fe292ebebd6df283849611da25210aec4ae2a0c4161e59f37c775fe4743ffe682a39304f4272bc23d1bf5fee5dc25f28ab2e2e209b634f918c2a8def84b60188b7717b162deb37093dfc8c66b2f"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b00)={0x20, 0x1, 0x15, "ab5b02ed823144c2f6d640d5141e2b4e235a6a0e1d"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x6}}) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5c, 0x40, 0x24, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0xb, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x7e3, 0x6, 0x4, 0x52}}]}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x300, 0xe, 0x6, 0x9, 0x40, 0x4}, 0x15, &(0x7f0000000c40)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x2f, 0x1, 0x8, 0xf, 0x1, [0xc060]}]}, 0x5, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0xc71}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000f00)={0x14, &(0x7f0000000e40)={0x0, 0x30, 0x48, {0x48, 0x23, "d5d78d08084dd328a7592118676a362a6ae9119c9924317a0b067aa42fc9a3f384a691c8b27ca118c5d0f479e6b4fa29e114d939fecc45bc55bb6938bb231ddc054eea924906"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000001140)={0x34, &(0x7f0000000f40)={0x40, 0x17, 0x2a, "ea21c481b831a017e2e85a7ed5bfea6237fa878ad098e8eb11037c15ecefab2de9bf28baa37aeabf8588"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000fc0)={0x0, 0x8, 0x1}, &(0x7f0000001000)={0x20, 0x0, 0xb2, {0xb0, "ed9cc2c0599bbb28ce2bd41e7a73bd15d00cdcdb82c5bb050a6a6f14903cf29ae8c208ba849347d09d19b7094f1632ad77e1d05c17123db70993f1bad846503cd9527e9f436696cd324d2502dc2a0fc15526fd4774728c5b59bef3c29d6a9a4aacc96e4eb598e13da8bd27184968df2f3f98bb69cb10f176bf70741307a5faca17baea30dcdedb533adb10482e76cb029d14b0d69459be760e84f8900e23c09ad38f4f0e8d910f18bc738a49a685e302"}}, &(0x7f00000010c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000001100)={0x20, 0x0, 0x1, 0xb}}) mkdirat(r1, &(0x7f0000001180)='./file0\x00', 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r8) r9 = syz_usb_connect$uac1(0x3, 0xf9, &(0x7f0000001200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x9, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x1, 0x4, [0x6, 0x7, 0x7, 0xa], 0x11}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x3, "1b463f2368"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x10, 0x4, 0x0, 0x10, "fc03a911b3fa"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x2, 0x83, 0x3, "28ef42"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x40, "2fba5e"}, @as_header={0x7, 0x24, 0x1, 0xc, 0xc, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x8, "309e", "4db2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xe6, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x40, 0x3, 0x2, 0x4, "e94dfc", "beb6"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x5, 0x6, "89e084465ace"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x20, 0x2, 0x0, 0x3, "cc", "93"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0xc8, 0x40, "b7a54c64ba1eeb69"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf, 0x1, 0x8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x3}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x110, 0x4, 0x10, 0x80, 0x40, 0x9}, 0x33, &(0x7f0000001340)={0x5, 0xf, 0x33, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0xe, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe0, 0xc4, 0x3, 0x2, 0x9}, @generic={0x5, 0x10, 0x4, "d252"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6e37290550bcfc91db62e519285ce50f"}]}, 0x2, [{0x85, &(0x7f0000001380)=@string={0x85, 0x3, "b78d55b30395714f4805f125e0bc48cd35f80f2dc76598dbde7b388ae01e2377aa591c0c0561a6798e3264596a1ec9911653a0572434645c2a371b57d0b04d62d0623515bafae8654ed8a2a5010c64173846cc0a68abfa4154cf4a881627f46a647543ab705d306f00c5613dac229a2885f7c014b3a437f0d34bb368aebb8d576025e2"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000001600)={0x14, &(0x7f00000014c0)={0x20, 0x3, 0x7f, {0x7f, 0x1, "cbb87062e7e036b8f9e459d9db56811f99caf5e9f8bda3f4ab39aabd62fdd9067b4533fbe47c6e3b59ad412ff303ad4017a92a1a4256f6a0283667941f010825376b670dda46dbc2242663b2ba365780ab74b07c09a35545151502438c66269cc5b865e389c66f46fb6d1bb1ff39e9cd1af0d51dd96bdb83147238e733"}}, &(0x7f0000001580)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "8a87a753d7f6fd89bf63e50731ea8b2c7e6419b91ac94f90794b118cb152215343b71b8fa2fc11577252a1cdbdcc4714f6f1182a5aeae46277cd70c215f7fe85e74296449b7ea09af416390a01"}}}, &(0x7f0000001840)={0x44, &(0x7f0000001640)={0x0, 0x17, 0x14, "cd0aac4c15a9f719eff1d31b8a43387c58323007"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000001700)={0x20, 0x81, 0x1, "a5"}, &(0x7f0000001740)={0x20, 0x82, 0x1, 'v'}, &(0x7f0000001780)={0x20, 0x83, 0x3, "290a99"}, &(0x7f00000017c0)={0x20, 0x84, 0x4, "896a0561"}, &(0x7f0000001800)={0x20, 0x85, 0x3, "962041"}}) syz_usb_control_io(r9, &(0x7f0000001bc0)={0x2c, &(0x7f00000018c0)={0x20, 0x24, 0x81, {0x81, 0x24, "b40cf930b4e388fea40fe0e95b685cab530d21f54be67163066a677f7defa813a54aca3ba8c54d54a8a698f961eac17a8a3a0621077c3ae796220ac0bc6e0cd2ffdd95704da0ff2e6d3d016e2a913fa8012022c22ef49319f32b7f844caaadc66ec0078208d94e03d507958c6d9967c779bef6f805c1597d4907d78c34d874"}}, &(0x7f0000001980)={0x0, 0x3, 0x47, @string={0x47, 0x3, "cd38528d06c3d0b7b09ee7f7e91db9c8061dde42300fcb3daaab68ff8df218863a61ce11c1c93c3151afa1c3a4865c3d11a580c8c0ab05447472af779dd883694c5e3e693d"}}, &(0x7f0000001a00)={0x0, 0xf, 0x12b, {0x5, 0xf, 0x12b, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xa0, 0x4, 0x8, 0xf, 0x0, [0xc0, 0xfe7ff0, 0xc000, 0xffc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x401, 0xff00, 0x3, [0xff00, 0xf, 0xff0000, 0x7e30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x2, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x5, 0x1, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0x72, 0x5, 0x1, 0x7}, @generic={0xcf, 0x10, 0x3, "a47648f128af54c7d66927734329721707501b4e2db36d1c36116a51d547cc5c9d25742facaf846b1af13bbeae8e44546d8bd70e3d60221465e1c651f16858269eea22c456daceac7a7ce13e4f4849be9b53dfa23026a98e14bd076327ff21d1d7de22298e35adb12024ac83687944eda70c6548bf3240b80ff5702950ad8f0af30d4ce1e8f7742f6cfd610a5ab883315186b2aa4be0c04d7ad13270a671bec463fc26e55a01ec0ff9a5bc5f10d0348c9473f203d134b16ccdeb7bad68e0c9e50bcad7ef4e2860535be99a90"}]}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0xd4, 0x3, "abcb293d", "323fbbdd"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x2, 0x8, 0x0, 0x8}}}, &(0x7f0000002080)={0x84, &(0x7f0000001c00)={0x0, 0x13, 0xaf, "95e82af0b0747b22b9caf5a1aa6ac4139cffd1155719bb3f0b14c24cb316fbe3aa842e880d5bfdefa08c68b425f5c2cb21c7eb0cc82b72da575608d04230be99815ce8d50ecaee9ccd1c75e6c337b3c2df77a27b14fa5a0ec9ae58a0a78b96af035f8900312ac2da4ced6b0666c7427c4f22f39b0bad3f55c08d598e6dd5b87886404848ac7b30e47bd376ae7635b53308b21d98ba33165858e2d9aefa689e38be2f71cff156e99e3dd039f58ea7bc"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000001d40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001d80)={0x20, 0x0, 0x8, {0x200, 0x4, [0xf770]}}, &(0x7f0000001dc0)={0x40, 0x7, 0x2}, &(0x7f0000001e00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001e40)={0x40, 0xb, 0x2, "c9d3"}, &(0x7f0000001e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001ec0)={0x40, 0x13, 0x6}, &(0x7f0000001f00)={0x40, 0x17, 0x6, @local}, &(0x7f0000001f40)={0x40, 0x19, 0x2, "94c7"}, &(0x7f0000001f80)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000001fc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002000)={0x40, 0x1e, 0x1, 0xda}, &(0x7f0000002040)={0x40, 0x21, 0x1, 0xff}}) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000002180), 0x404101, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r10) syz_usb_connect$cdc_ecm(0x5, 0x105, &(0x7f00000021c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x1, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "cc375b76a6"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd39, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0xf, 0x5, 0x4, 0xf}, @country_functional={0xc, 0x24, 0x7, 0x3, 0xdf8, [0x18, 0x2, 0x770]}, @acm={0x4, 0x24, 0x2, 0x5}, @mdlm_detail={0x7d, 0x24, 0x13, 0x0, "4eb90e1321beae5b8cf64484364499c9fb8bb26d8b7d4d79f4b0bae49c76b18ce820bc4901d3ac2556dd07ef526b4e16ca810c2e149effe633398e9289454b478dca4b94ce59b5861d649a1ef264719f6040d21dcf84c67b5e4abc55da52e06a4b8d7e2d9a80a17aa39ac0e28a150d5d44f0e8a6601f917e20"}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x8, [0x0, 0x40, 0x4, 0xb]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0xe1}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xc, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0xe, 0x7}}}}}]}}]}}, &(0x7f0000002680)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x310, 0x8, 0x7, 0x6, 0x10, 0x9}, 0x25, &(0x7f0000002340)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0xffff, 0xf000, 0x8, [0xff003f, 0x3fcf, 0xffff00, 0x7, 0xff0000]}]}, 0x8, [{0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x440a}}, {0x1b, &(0x7f0000002440)=@string={0x1b, 0x3, "40c5cbc8c478010544703a246d96e2a8487c3c65f6717e5d78"}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x240a}}, {0xf3, &(0x7f0000002500)=@string={0xf3, 0x3, "7c78332ad8bdd8ac5f093c0e44757ff0544fda6a3172b6ee090b4e0c96ea1e0b7a956bdeeb2cf85b3b1efb59843b75b47cbf10089c12a8c5627746802d0b05b94b40236ad1bcf9b54ed9eaa7ec8937b34d4bb28bc1dd8ada88ddca3256a5e432fa12f41bd9e01298c2ec6d7b948d3447e3c9de4f1df0d92db2164172df91bd98964f2fd9a14bbbbb8dc7cd3d06024e9dedfdbfa6adb7b1e7e65317eccd61c8f4eb5cf55e3917b2b6cbf082b7de5ea1c11dea2ffc75f177375f5f10bc8b984450e1d42924082e1ba1c664af8fff3ef64ef8bca0c647c1782a56657e948c74dfdf93cc567a3958936fd96ac8aaac3b93d7f9"}}, {0x55, &(0x7f0000002600)=@string={0x55, 0x3, "f4dd4b951b7c8ee2f796cc3d491eb88ba5ce3eb34b8c58624ae3a6ce589e76653b0546e0abb7b2df35617a695c38ae215b5d4e299dcc2df9f614950cb0b7ee8d61c72266b189bfa4f7448c9e5e395c9982f1e7"}}]}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x284}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xa}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x408c4}, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800), r4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000002840)={@any, 0x8}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000002a00)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f00000028c0)={0xcc, r11, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xda}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x8002) pread64(r4, &(0x7f0000002a40)=""/69, 0x45, 0x8) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3.153084703s ago: executing program 2 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8c600, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0xc0) close(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) 3.152604213s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@huge_always}, {}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000040)=""/40, 0x28) getdents64(r1, 0xfffffffffffffffe, 0x29) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0xfffffffffffffd8e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-8'], 0x27) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 3.147650233s ago: executing program 2 (id=28): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000000000000000ac1414aa000000004000000000000000000000004e2300000000000014000000e37991bd6168b3d88402212ddd14e52bf42beea8529d0f79a1b3061aa93118e597", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0xc000) close_range(r0, 0xffffffffffffffff, 0x0) 3.028902755s ago: executing program 2 (id=29): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYRES16]) r0 = getuid() mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x280008, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x4}}], [{@obj_role={'obj_role', 0x3d, '[(!'}}, {@uid_eq={'uid', 0x3d, r0}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs2\x00'}}, {@hash}, {@subj_user}]}) 3.016303015s ago: executing program 2 (id=30): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000100), 0x10, &(0x7f0000000340)={[{@stats}, {@max={'max', 0x3d, 0x7}}], [{@hash}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@smackfsfloor}, {@uid_gt={'uid>', r0}}, {@subj_user}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@hash}, {@euid_eq={'euid', 0x3d, r1}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) unshare(0x2c020400) r3 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c0}, 0x9080) r5 = syz_pidfd_open(r3, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec010203010902"], 0x0) pidfd_getfd(r5, r5, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) syz_usb_control_io$uac1(r6, &(0x7f0000000580)={0x14, &(0x7f0000000400)={0x0, 0x24, 0xfc, {0xfc, 0x6, "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"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x40, 0x14, 0xe8, "ef1686398594771a0c34a4366711f6247547fa6830d4e9894ff2906ade2c716b825f08cc9bd397114da32fb66e0f39d5415cafa69394f939291e9185a9f3a43a97f454bf45e6a37a45a3f9b983e5aa744fc8c4dab32d989928ec44e661237100c1dd12ee2284612167a521c4c6814d40f75b57b083faf58ffef552573b0bec1dc7558c35695679839823447e7c2cd0d8fe8e093c4fcf887035e939ed23c5ad57e4aae74b118eaa92faba96bf2b8652d1d50cbcc740b6dc2522332d3e699ad129458b5fe48b01a54f8d1cc9e6db1b77d3db17f24524c60a54f658f812b8576ded4e1ef53f43dcf429"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "3947a9"}, &(0x7f0000000c00)={0x20, 0x82, 0x2, "1230"}, &(0x7f0000000c40)={0x20, 0x83, 0x1, '9'}, &(0x7f0000000c80)={0x20, 0x84, 0x1, 'd'}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "7506b5"}}) 2.503471303s ago: executing program 0 (id=41): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x1}], 0xc2, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e434c6d8f42f75fc75d10d6f7da01da140ffd57cf696187efc0c35cecfeb6839374632c99b76479234ca7fc472792e6349a7e2f275a2361681d4d69881cd41da136fa1a5dba9f2451520d18d715554dd1a1a075f67f215a498e39ed80"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}) 2.421661134s ago: executing program 0 (id=43): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x4, 0xc3, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @remote}}}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x30400, 0x0) close_range(r7, r0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x12, r10}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r11, &(0x7f0000000140)={0x1f, @any, 0x7}, 0xfffffffffffffec4) connect$bt_rfcomm(r11, &(0x7f0000000100)={0x1f, @any, 0x2}, 0xa) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.419932604s ago: executing program 0 (id=44): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000802, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0xddcd1000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6, 0x8, 0x9, 0x10}, {0x2, 0xffff1000, 0xc, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x7, 0x4, 0x4}, {0x2000, 0xffff1000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x3000, 0xffff1000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x26}, {0xdddd1000}, {0xdddd0000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x2501, 0x1, [0x100000, 0xfffffffffffffffc, 0x2]}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x170003, 0x0, [0x53b2, 0x9, 0x4, 0x5, 0xffffffffffff1e53, 0x5, 0x9, 0xb82]}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0xb2}, {{0x0, 0x0, 0x0}, 0x14d6}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000380)=""/113, 0x71}], 0xa}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000240)) 2.415423634s ago: executing program 3 (id=45): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000635a87a10d4905539fa5f03947b1000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e0000001000000000f00"/412], 0x190) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000240)) 2.290633766s ago: executing program 3 (id=46): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000800)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000140)) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x20000040) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0xb}, @global=@item_4={0x3, 0x1, 0x4, "5343ecec"}]}}, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x101, 0x212240) r5 = dup(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}, {@aname={'aname', 0x3d, '\xb79V\xd9\xfeO\x17\xa8\xd2\xe5\xd5V\x9f\xceF\x85\x1a\a\x9e\x0fz\xb6k\xa9\xad?\xe7O\xb1\xc67T\xca\xec\x15\xc6t\xd3\xa1\x1e\xa4s\a\x19\xac\v\bN;\x02\x9ab\x9ae\x1a/\xae\xc6\xe1\x86\xd34\xb1\xfc;\xdd\x85\x93\xd3\xb6\x99]\xb5\xc4\x1d\xe5\"\xc7\x9cwKl\xa2\x9a\x9cx\f\xa6f*d\xa0z\x9c\xc1\xb1\x18\x01\xf8\xc1)F\xbd`\xac[\x860\xff\xc7\x8c\x18^\x84\x18`\xab\x0e\xb0\xe7/\x8f\x95\x87\xd6\xdb\xa5]\x01y\x15p\x8e\\\x93\xc7v\x96:\xf0v\x91\xb1{\xc3\xa09\xc8OGPI\x8e\xae\xf2_Ge\x9c\xa7\xf4\x9c\x91\xda}\x00\xa2\'$\xc4\xf4\xb0\v=d\xa9z\'Qv\x01\x13\xa6\xe9\xeb\xf9\xcf\xdc\xe3\xc0\n=\x80Y\x119\xbf'}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 2.217232107s ago: executing program 1 (id=47): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async) r2 = syz_open_pts(r0, 0x80100) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x1, 0xc7, 0x2, 0x8, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x3, 0x3, 0x3, 0x7}, @sadb_ident={0x2, 0xb, 0xfff, 0x0, 0x5389}]}, 0x40}}, 0x4000000) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x7, 0xfffffffa, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x2b, 0x3, 0x5, [{@multicast2, 0x40}, {@empty, 0x8b}, {@broadcast, 0xff}]}]}}}}}) (async, rerun: 32) r8 = geteuid() (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)=@expire={0x2d8, 0x18, 0x200, 0x70bd2b, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e24, 0x6, 0x4e21, 0x0, 0xa, 0x49a80b6864158b89, 0x0, 0x5c, 0x0, r6}, {@in=@private=0xa010102, 0x4d6, 0x32}, @in6=@private0, {0x8, 0x0, 0x6, 0x1, 0xfffffffffffff801, 0x1, 0x6, 0x5}, {0x4, 0x0, 0x7ff}, {0x6, 0x8, 0x83}, 0x70bd26, 0x3504, 0xa, 0x2, 0x9, 0xd0}}, [@mark={0xc, 0x15, {0x35075b, 0x80}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x0, 0xa}}, @etimer_thresh={0x8, 0xc, 0x4}, @sa={0xe4, 0x6, {{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x101, 0x4e21, 0x9, 0xa, 0x80, 0x80, 0x0, r7, r8}, {@in=@rand_addr=0x64010101, 0x4d4, 0xd4}, @in=@multicast2, {0x6, 0x0, 0x7fffffff, 0x1, 0x3, 0x3, 0x5, 0x5}, {0x9, 0x6, 0x3, 0x6}, {0x2, 0x4, 0x9}, 0x70bd25, 0x3503, 0x2, 0x3, 0x3, 0xd7}}, @extra_flags={0x8, 0x18, 0x7f}, @tfcpad={0x8, 0x16, 0x4}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, 0x4e21, 0x400, 0x4e23, 0xfff2, 0x2, 0x0, 0x0, 0x0, r9, r10}, {0x1, 0x2, 0x6, 0x1000, 0x7ff, 0xffffffff, 0x5, 0x101}, {0x9, 0x5, 0x9, 0x2}, 0x3, 0x6e6bba, 0x1, 0x0, 0x0, 0x2}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x400c4}, 0x4c845) (async, rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@flushpolicy={0x28, 0x1d, 0x20, 0x70bd29, 0x25dfdbff, "", [@XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4000001) (async, rerun: 64) r11 = accept(r3, &(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000900)=0x80) r12 = getpgid(0xffffffffffffffff) sendmsg$AUDIT_SET(r11, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x3e9, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, 0x1ffe00, 0x5, 0x1, 0x8, 0x0, 0x8, 0xfffffff8}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000844) (async) r13 = userfaultfd(0x80800) (async) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) (async, rerun: 32) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r16, 0x4068aea3, &(0x7f0000000b40)={0xa8, 0x0, 0x1}) (rerun: 32) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) (async, rerun: 64) ioctl$TCXONC(r16, 0x540a, 0x2) (async, rerun: 64) ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000bc0)={0xaa, 0x400}) (async, rerun: 32) syz_fuse_handle_req(r16, &(0x7f0000000c00)="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", 0x2000, &(0x7f0000003480)={&(0x7f0000002c00)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x947, 0x0, 0x1, 0x8, 0x9, 0x2, 0x0, 0x0, 0x8}}, &(0x7f0000002c80)={0x18, 0xfffffffffffffff5, 0x1d, {0xca}}, &(0x7f0000002cc0)={0x18, 0xffffffffffffffda, 0x1000, {0x7}}, &(0x7f0000002d00)={0x18, 0xffffffffffffffda, 0x5, {0x9}}, &(0x7f0000002d40)={0x18, 0x0, 0x3, {0x1}}, &(0x7f0000002d80)={0x28, 0x0, 0x2, {{0x5, 0x8, 0x1, r12}}}, &(0x7f0000002dc0)={0x60, 0x0, 0x1000, {{0xee, 0x9, 0x2, 0x7fffffff, 0xfff, 0x7fffffff, 0x52000000, 0x329e}}}, &(0x7f0000002e40)={0x18, 0x0, 0x3, {0x2ec0b3ec}}, &(0x7f0000002e80)={0x11, 0x0, 0x7, {'\x00'}}, &(0x7f0000002ec0)={0x20, 0x0, 0x2, {0x0, 0x10}}, &(0x7f0000002f00)={0x78, 0x4fdd9a262c77a28, 0x2, {0x9, 0xfffffff8, 0x0, {0x4, 0x24, 0x9, 0x585c819c, 0x9, 0x0, 0x8, 0x4, 0x4, 0x8000, 0x3, r10, r15, 0x4, 0x458}}}, &(0x7f0000002f80)={0x90, 0x0, 0x7, {0x5, 0x3, 0xffffffffffffffff, 0x1, 0x6, 0xa7, {0x3, 0x1, 0x4, 0x7, 0x6, 0x5, 0xfffffffd, 0x6, 0x6, 0x0, 0x3, r8, r15, 0xffff, 0x8}}}, &(0x7f0000003040)={0x130, 0x0, 0x4, [{0x2, 0xbcffcc9, 0x2, 0x1, '+]'}, {0x3, 0x2, 0x1, 0x8, '\x00'}, {0x3, 0xdce, 0x2, 0x4, '#%'}, {0x4, 0x1, 0x3, 0x7fffffff, '-+&'}, {0x3, 0x2a, 0x2, 0x9, ')$'}, {0x2, 0x8, 0x2, 0x8, '/['}, {0x3, 0xffffffffffffc361, 0x8, 0x7, 'syztnl2\x00'}, {0x5, 0x5, 0x8, 0x6, 'syztnl2\x00'}, {0x6, 0x6, 0x5, 0x5, '!**%\x81'}]}, &(0x7f0000003180)={0xb0, 0x0, 0x2, [{{0x1, 0x3, 0xffffffffffffffff, 0x1, 0x8, 0xd, {0x3, 0x7, 0xcd1, 0x7fffffffffffffff, 0x1000, 0x7, 0x5, 0x3, 0x4, 0x8000, 0xfffffff7, r14, r15, 0x0, 0xe92}}, {0x0, 0x1, 0x3, 0x100, '&+I'}}]}, &(0x7f0000003240)={0xa0, 0x0, 0x8, {{0x2, 0x0, 0x8000000000000001, 0x3ff, 0x6, 0x0, {0x1, 0x4, 0x4, 0x2, 0x5, 0x2c4c, 0x4, 0x8, 0xa317ef2f, 0x0, 0x7fffffff, r6, r15, 0x7, 0x2}}, {0x0, 0x4}}}, &(0x7f0000003300)={0x20, 0x0, 0x4, {0x7, 0x4, 0x8, 0xef0}}, &(0x7f0000003340)={0x130, 0x0, 0x7fff, {0x0, 0x7, 0x0, '\x00', {0x0, 0x3ff, 0x2, 0x0, r14, r15, 0x3aa6312ac6b48948, '\x00', 0x2, 0xa, 0x5, 0x3e15, {0x7, 0x7}, {0x3, 0x5}, {0xa3, 0xfffffbd8}, {0x3, 0x465}, 0xa, 0x3, 0x5, 0x3}}}}) (rerun: 32) ioctl$USBDEVFS_GET_CAPABILITIES(r16, 0x8004551a, &(0x7f0000003540)) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f00000035c0), r16) sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000003940)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003900)={&(0x7f0000003600)={0x2cc, r17, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90e5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf61}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfcf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x26}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x957}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff0d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4d8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27c260e4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 2.216717077s ago: executing program 0 (id=48): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x80}, {0x6}]}) ioctl(r0, 0xfffffffa, &(0x7f00000002c0)="61263425333ecb0a0319e89e0c44e0aec0ef91bd191b5015a86d66e0d5dfa653be801d0c9051e0812c606945416eaa03a12aabfd7c4d20d36e4b419d0a8331f1d304b636730b683ded1bc20332a63cee967a7b4b3026ab1aa235ca43124d90ba2c7a585b7a77a3b965583fb66e3c5795f8005ec133bc04eb6d96203b88f2e62d5adb94ea189a24323901eab375a1c07e16e20987") 2.124558678s ago: executing program 1 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d}]}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000040)='RB9u_', 0x5) fcntl$addseals(r1, 0x409, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fe=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) keyctl$set_reqkey_keyring(0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 2.0398801s ago: executing program 1 (id=50): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000600)={{0x0, 0xd000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8f}, {0xffff1000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x3}, {0x10000, 0x4, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x15, 0x0, 0x3a, 0xfe, 0x2, 0x2, 0x0, 0x0, 0xaf, 0xfc}, {0x5000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0xff}, {0x80a0000}, {0xf000}, 0x9df8ffd0, 0x0, 0x80a0000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0xffffffffff7ffffc, 0x1]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getpid() openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000600)={{0x0, 0xd000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8f}, {0xffff1000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x3}, {0x10000, 0x4, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x15, 0x0, 0x3a, 0xfe, 0x2, 0x2, 0x0, 0x0, 0xaf, 0xfc}, {0x5000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0xff}, {0x80a0000}, {0xf000}, 0x9df8ffd0, 0x0, 0x80a0000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0xffffffffff7ffffc, 0x1]}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) getpid() (async) 1.969763041s ago: executing program 1 (id=51): r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000001c0)) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r5, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) readv(r5, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r5, 0x1) close(r2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.38247346s ago: executing program 0 (id=52): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socketpair$tipc(0x1e, 0xc0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffe) futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) syz_clone(0x80, &(0x7f0000000040)="0b424332f80eecadc3a9b17a62d57ab4d7e207110c1ea038cdd1f89ce71a70387764d6a691b6cf15a420fe1c8e2f2f40ce1e72345f83501ad72250ea830021319aa4440e407328a4f5c1523812777011689cb98b13a7175a59e192c5e3b4f38ea8d14f169556c880c645a68a77bf69f482f9b323d67099c224b5594b11f02d2932b2feaed4f8f579e6390d2104", 0x8d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="00b8d9e604c37d58df678e34a5ebdb00cf606e95d8781f80a3db524b4d4ed5669f70d9872c8622161df992ce4d5264e97204ed0929d9e8d63af03d300f0d9727997b1b91bb9d3bccffcb97a9e1648e7ebc5e535422f3f91af35bee33037adfb2037c2febb1997cc325a4afbaed27298dc288cccae416cea255bd1d1553f8df1a03f555042344e8d50df4ab3a8c4ebc4b9723") futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) write$cgroup_pid(r2, 0x0, 0x0) futex(0x0, 0x80, 0xfffefffe, 0x0, 0x0, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 1.3518049s ago: executing program 0 (id=53): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x7, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x3, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x70, 0xc, "541670", "d14a"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xd4ae, 0x7, 0x3, "81d0e0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9b, 0x68, 0x2, {0x7, 0x25, 0x1, 0x0, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0x6, 0x5, "d12402a057d9c13ec4"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x89, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0xbd, "dc71", "b259"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x57, 0x4, {0x7, 0x25, 0x1, 0x0, 0x39, 0xf}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x4, 0x4, 0x4, 0x8, 0x2}, 0x30, &(0x7f00000003c0)={0x5, 0xf, 0x30, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x2, 0x7, 0xff3f, 0x5f}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xae3f, 0xf000, 0x8000, [0xffc000, 0xffffcf, 0xc0, 0x3fcf, 0x0]}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x20, 0x5, 0xe0, {0xe0, 0x2b, "29ca2f5b43dc8417be27496b681a3f14c4ed8bd27bfea774bd3c5d2e82a08a4f400927c002676559269ef4f82014e3b95114cf1a303b81f239c35403abdd6c2509c32481f0ecdf335443c76adfcc59fe8f6e49de994cec478c80d21b94e4cea25f18091e31156e5efc79ee1542039256a1bf18ecbc7bc01fd99496f0decad75e8935cdcd13fd977fe976991e46f7873828768cbac974b903619f00771bec7ded36c4ced529b670ba6516250ecc3fd65ed89b5d140a759c659b75e81e263810a021b6783c0d3a1b1fa3d5d98473d8edab84ae7dadb7bc1ae84b518d8fec81"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x40, 0x13, 0x81, "5b71455d6d314f0beb4bce286cd622d1856121d6101f999b2666f8fe61a315c3faf9167e04c49fd99a9892ae97cc989172a22798df35629b80a85ff5dbbbb5fe67f4ce526a5a5af41a2391b082628a764558cd5fb8eccf186de9a5fe5ad23c309f9e4788311f69b5f5be31d84c9c5358e68f3d32ec57a6ca5bd813ab1de160e3d0"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x86}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x81, 0x1, ' '}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "b694e4"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="20f989c5cfffd5e71c"], &(0x7f0000000a40)={0x20, 0x84, 0x3, "15d1d5"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "08b200"}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x8001) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7}) sendmmsg$unix(r5, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat, @fda={0x66646185, 0xfffffffffffffffe, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 673.75708ms ago: executing program 3 (id=54): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) mount(0x0, 0x0, 0x0, 0x1310230, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async) readv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6d6d61702c69676e6f726571762c009ada66e2d639d5cfd6e228e78d6265239fc84410790f291bffc2d92d28c0f7d8d168df516c8bd9edee0c873a86246d209d0fc2696e50304b3c10a759d424c5cb23190927827167913a8c38bce8d119f8cd2ff0244340af92f8596dcb83d45e57159c8e176792ee25c73ab2794452b1a9a36e108bab373ed2c3edcf7f08890800e497c59b6fe94e7dff7e9fbfef051ca54ce54f3fee85df15fa775c277d76033c50b798eaea8ab356"]) (async) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) (async) r4 = syz_clone(0x0, &(0x7f0000000100)="c30e13db7254d48d10e9efb697f03f60c51cb3da37074fdea4c72cbd4005fa8c2ac35d45872193b82b1d4c15b1e55d1fd83969ec979ceea19cac6bd3894730c0bac504dcaaf4f2392eaff737b5c347e53b47c749b8e4d444a1", 0x59, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000580)="e929ec900a1e89b1d6758b225d4a7ebab63279762340b91afe5143277337794656159d40dd202f08092c1b43cbc1c3b91ba60a7c7d0702a410c1bc2e328f3ffe17915c376f159214be29bc75f4f5f8a8d84280dbbc191f943265fe48edb296126a99cb54e6d75aaa132680008e50a15059f4dca951222925909e0417e63f") r5 = syz_open_procfs(r4, &(0x7f0000000600)='net/ip_mr_vif\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 632.525411ms ago: executing program 3 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 531.148092ms ago: executing program 3 (id=56): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x10009, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x100, 0x2c2, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x404, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x49, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x63], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0xaece, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc001102a, 0x0, 0x390}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6(0xa, 0x80002, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x10009, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x4, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x100, 0x2c2, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x404, 0x0, 0x2, 0x5, 0x10a, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x49, 0x5, 0x2, 0x2, 0x800f38, 0x25, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x63], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0xaece, 0x0) (async) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc001102a, 0x0, 0x390}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 357.799355ms ago: executing program 3 (id=57): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000fbffffff0000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0x7c, {0x7c, 0x10, "ab61c17ddc3fcb0bc4e9d03c9c42b5e37b852714de26a099cad2354e050295f35e56447a740bc765e2cbccecd10c0e7d0eb2de01f782d4fbc43c60769e7aa1fb99838ce1d4052ab4e3478f7818c407266c2c857a2538d6ff9e6ea8d5a81bffcc0561b73b0d6d6681bffde05e3dd050f587445e35cebba98df54c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)=ANY=[@ANYBLOB='global,\x00']) 0s ago: executing program 2 (id=58): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6c, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x305e) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 21.430047][ T36] audit: type=1400 audit(1751187486.930:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.431537][ T281] cgroup: Unknown subsys name 'net' [ 21.452795][ T36] audit: type=1400 audit(1751187486.930:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.480137][ T36] audit: type=1400 audit(1751187486.960:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.480347][ T281] cgroup: Unknown subsys name 'devices' [ 21.588928][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.594549][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.750148][ T36] audit: type=1400 audit(1751187487.250:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.773425][ T36] audit: type=1400 audit(1751187487.250:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.798242][ T36] audit: type=1400 audit(1751187487.250:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.809531][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.830129][ T36] audit: type=1400 audit(1751187487.330:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.855623][ T36] audit: type=1400 audit(1751187487.330:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.885226][ T36] audit: type=1400 audit(1751187487.380:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.910779][ T36] audit: type=1400 audit(1751187487.380:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.910872][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.330459][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.337569][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.344622][ T289] bridge_slave_0: entered allmulticast mode [ 23.351019][ T289] bridge_slave_0: entered promiscuous mode [ 23.361307][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.368422][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.375465][ T290] bridge_slave_0: entered allmulticast mode [ 23.381825][ T290] bridge_slave_0: entered promiscuous mode [ 23.388043][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.395089][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.402222][ T289] bridge_slave_1: entered allmulticast mode [ 23.408516][ T289] bridge_slave_1: entered promiscuous mode [ 23.421110][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.428190][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.435244][ T290] bridge_slave_1: entered allmulticast mode [ 23.441604][ T290] bridge_slave_1: entered promiscuous mode [ 23.467186][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.474239][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.481354][ T288] bridge_slave_0: entered allmulticast mode [ 23.487851][ T288] bridge_slave_0: entered promiscuous mode [ 23.502552][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.509642][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.516768][ T288] bridge_slave_1: entered allmulticast mode [ 23.522988][ T288] bridge_slave_1: entered promiscuous mode [ 23.538537][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.545683][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.552839][ T291] bridge_slave_0: entered allmulticast mode [ 23.559261][ T291] bridge_slave_0: entered promiscuous mode [ 23.575244][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.582330][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.589434][ T291] bridge_slave_1: entered allmulticast mode [ 23.595679][ T291] bridge_slave_1: entered promiscuous mode [ 23.756526][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.763580][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.770888][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.777952][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.787214][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.794267][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.801566][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.808612][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.817911][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.824955][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.832218][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.839767][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.868204][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.875281][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.882586][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.889627][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.905774][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.913782][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.920959][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.928488][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.935631][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.942902][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.950150][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.957466][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.979768][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.986853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.994432][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.001497][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.031650][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.038719][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.046328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.053363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.067346][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.074383][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.086111][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.093178][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.104381][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.111431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.124077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.131130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.159752][ T289] veth0_vlan: entered promiscuous mode [ 24.175802][ T288] veth0_vlan: entered promiscuous mode [ 24.192306][ T289] veth1_macvtap: entered promiscuous mode [ 24.204942][ T291] veth0_vlan: entered promiscuous mode [ 24.219680][ T288] veth1_macvtap: entered promiscuous mode [ 24.238533][ T291] veth1_macvtap: entered promiscuous mode [ 24.254535][ T290] veth0_vlan: entered promiscuous mode [ 24.268657][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.300107][ T290] veth1_macvtap: entered promiscuous mode [ 24.334089][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.656328][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.727852][ T333] cgroup: fork rejected by pids controller in /syz3 [ 24.796344][ T31] usb 2-1: device descriptor read/64, error -71 [ 24.886318][ T306] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.046768][ T31] usb 2-1: device descriptor read/64, error -71 [ 25.067430][ T306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.083053][ T306] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.098831][ T306] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 25.108544][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.131565][ T306] usb 3-1: config 0 descriptor?? [ 25.243827][ T474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 25.243886][ T474] rust_binder: Read failure Err(EFAULT) in pid:5 [ 25.262263][ T479] fuse: Bad value for 'group_id' [ 25.273721][ T479] fuse: Bad value for 'group_id' [ 25.289331][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.322495][ T485] binder: Bad value for 'defcontext' [ 25.421499][ T494] Zero length message leads to an empty skb [ 25.427580][ T31] usb 2-1: device descriptor read/64, error -71 [ 25.447993][ T496] rust_binder: Read failure Err(EAGAIN) in pid:20 [ 25.558806][ T334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.573777][ T334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.666321][ T31] usb 2-1: device descriptor read/64, error -71 [ 25.776460][ T31] usb usb2-port1: attempt power cycle [ 26.088356][ T306] usb 3-1: string descriptor 0 read error: -71 [ 26.095251][ T306] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 26.103497][ T306] usb 3-1: USB disconnect, device number 2 [ 26.116304][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.137651][ T31] usb 2-1: device descriptor read/8, error -71 [ 26.267301][ T31] usb 2-1: device descriptor read/8, error -71 [ 26.337351][ T515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.462775][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 26.462792][ T36] audit: type=1400 audit(1751187491.960:152): avc: denied { create } for pid=526 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.463196][ T527] netlink: 100 bytes leftover after parsing attributes in process `syz.2.28'. [ 26.469410][ T36] audit: type=1400 audit(1751187491.960:153): avc: denied { write } for pid=526 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.518022][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.518362][ T36] audit: type=1400 audit(1751187491.960:154): avc: denied { nlmsg_write } for pid=526 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.537446][ T31] usb 2-1: device descriptor read/8, error -71 [ 26.632968][ T531] binder: Unknown parameter 'hash' [ 26.677393][ T31] usb 2-1: device descriptor read/8, error -71 [ 26.692660][ T36] audit: type=1400 audit(1751187492.190:155): avc: denied { ioctl } for pid=533 comm="syz.3.31" path="socket:[3743]" dev="sockfs" ino=3743 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.791748][ T31] usb usb2-port1: unable to enumerate USB device [ 26.851866][ T36] audit: type=1326 audit(1751187492.350:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a4d8e929 code=0x7ffc0000 [ 26.856575][ T541] tipc: Started in network mode [ 26.880226][ T541] tipc: Node identity 9adc14b0e03, cluster identity 4711 [ 26.886365][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.887931][ T541] tipc: Enabled bearer , priority 0 [ 26.894919][ T36] audit: type=1326 audit(1751187492.350:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a4d8e929 code=0x7ffc0000 [ 26.925400][ T541] tipc: Disabling bearer [ 26.930803][ T36] audit: type=1326 audit(1751187492.350:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00a4d8e929 code=0x7ffc0000 [ 26.956468][ T36] audit: type=1326 audit(1751187492.350:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a4d8e929 code=0x7ffc0000 [ 26.981794][ T36] audit: type=1326 audit(1751187492.350:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a4d8e929 code=0x7ffc0000 [ 27.010635][ T36] audit: type=1326 audit(1751187492.350:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=540 comm="syz.3.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00a4d8e929 code=0x7ffc0000 [ 27.064433][ T553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 27.086318][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 27.096751][ T9] usb 3-1: config 0 has no interfaces? [ 27.103611][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 27.112861][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.123270][ T9] usb 3-1: Product: syz [ 27.134008][ T9] usb 3-1: Manufacturer: syz [ 27.143740][ T9] usb 3-1: SerialNumber: syz [ 27.153657][ T9] usb 3-1: config 0 descriptor?? [ 27.164422][ T559] rust_binder: Write failure EINVAL in pid:43 [ 27.242396][ T565] /dev/sg0: Can't lookup blockdev [ 27.421804][ T572] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 27.421838][ T572] rust_binder: Error while translating object. [ 27.432663][ T572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.439325][ T572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 27.526788][ T579] fuse: Unknown parameter 'fe' [ 27.606636][ T64] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.757751][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.768796][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.778598][ T64] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 27.787689][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.796399][ T64] usb 4-1: config 0 descriptor?? [ 28.204608][ T64] lua 0003:1E7D:2C2E.0001: item fetching failed at offset 1/5 [ 28.212322][ T64] lua 0003:1E7D:2C2E.0001: parse failed [ 28.217939][ T64] lua 0003:1E7D:2C2E.0001: probe with driver lua failed with error -22 [ 28.271718][ T589] __vm_enough_memory: pid: 589, comm: syz.0.52, bytes: 70373039144960 not enough memory for the allocation [ 28.409790][ T45] usb 4-1: USB disconnect, device number 2 [ 28.536312][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.686325][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 28.692491][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.700632][ T31] usb 1-1: config 0 has no interface number 0 [ 28.708109][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 28.717634][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.725636][ T31] usb 1-1: Product: syz [ 28.729903][ T31] usb 1-1: Manufacturer: syz [ 28.734508][ T31] usb 1-1: SerialNumber: syz [ 28.740100][ T31] usb 1-1: config 0 descriptor?? [ 28.745810][ T31] smsc95xx v2.0.0 [ 28.997779][ T595] 9pnet_fd: Insufficient options for proto=fd [ 29.036073][ T600] kvm: pic: non byte write [ 29.147080][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 29.157898][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.251357][ T608] netlink: 596 bytes leftover after parsing attributes in process `syz.3.57'. [ 29.496290][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.652224][ T611] netlink: 'syz.2.58': attribute type 11 has an invalid length. [ 29.657090][ T609] ================================================================== [ 29.661175][ T611] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.58'. [ 29.668074][ T609] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 29.668120][ T609] Write of size 8 at addr 0000000000000098 by task kworker/1:5/609 [ 29.691701][ T609] [ 29.694066][ T609] CPU: 1 UID: 0 PID: 609 Comm: kworker/1:5 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 29.694102][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.694118][ T609] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 29.694194][ T609] Call Trace: [ 29.694202][ T609] [ 29.694212][ T609] __dump_stack+0x21/0x30 [ 29.694243][ T609] dump_stack_lvl+0x10c/0x190 [ 29.694271][ T609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.694301][ T609] print_report+0x3d/0x70 [ 29.694323][ T609] kasan_report+0x163/0x1a0 [ 29.694358][ T609] ? down_write+0x83/0x2a0 [ 29.694388][ T609] ? down_write+0x83/0x2a0 [ 29.694418][ T609] kasan_check_range+0x299/0x2a0 [ 29.694453][ T609] __kasan_check_write+0x18/0x20 [ 29.694481][ T609] down_write+0x83/0x2a0 [ 29.694510][ T609] ? __cfi_down_write+0x10/0x10 [ 29.694547][ T609] ? _raw_spin_lock+0x8c/0x120 [ 29.694590][ T609] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.694625][ T609] ? mutex_unlock+0x8b/0x240 [ 29.694652][ T609] ? __cfi_mutex_unlock+0x10/0x10 [ 29.694680][ T609] rust_binderfs_remove_file+0x6c/0x110 [ 29.694710][ T609] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 29.694756][ T609] ? update_curr_dl_se+0x10c/0xb20 [ 29.694787][ T609] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.694815][ T609] ? update_curr+0x60d/0xc60 [ 29.694847][ T609] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 29.694890][ T609] ? update_load_avg+0x506/0x19a0 [ 29.694914][ T609] ? detach_entity_load_avg+0x7b0/0x7b0 [ 29.694949][ T609] ? dequeue_entity+0xa9c/0x1750 [ 29.694976][ T609] ? __cfi_ip6_output+0x10/0x10 [ 29.695005][ T609] ? tg_unthrottle_up+0x980/0x980 [ 29.695030][ T609] ? __cfi_ip6_local_out+0x10/0x10 [ 29.695061][ T609] ? __cfi_dst_output+0x10/0x10 [ 29.695090][ T609] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.695119][ T609] ? kvm_sched_clock_read+0x15/0x30 [ 29.695149][ T609] ? sched_clock_noinstr+0xd/0x30 [ 29.695176][ T609] ? sched_clock+0x44/0x60 [ 29.695201][ T609] ? sched_clock_cpu+0x75/0x400 [ 29.695229][ T609] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.695265][ T609] ? kvm_sched_clock_read+0x15/0x30 [ 29.695294][ T609] ? xfd_validate_state+0x68/0x150 [ 29.695320][ T609] ? save_fpregs_to_fpstate+0x196/0x230 [ 29.695355][ T609] ? __kasan_check_write+0x18/0x20 [ 29.695381][ T609] ? __switch_to+0xc7b/0x1310 [ 29.695407][ T609] ? psi_group_change+0xb44/0x1130 [ 29.695433][ T609] ? __cfi___switch_to+0x10/0x10 [ 29.695461][ T609] ? _raw_spin_unlock+0x45/0x60 [ 29.695482][ T609] ? __switch_to_asm+0x3d/0x70 [ 29.695511][ T609] ? __schedule+0x1463/0x1f10 [ 29.695543][ T609] ? kick_pool+0xb9/0x550 [ 29.695565][ T609] process_scheduled_works+0x7d2/0x1020 [ 29.695600][ T609] worker_thread+0xc58/0x1250 [ 29.695631][ T609] ? try_to_wake_up+0xdd2/0x1aa0 [ 29.695668][ T609] ? schedule+0xc6/0x240 [ 29.695692][ T609] kthread+0x2ca/0x370 [ 29.695724][ T609] ? __cfi_worker_thread+0x10/0x10 [ 29.695755][ T609] ? __cfi_kthread+0x10/0x10 [ 29.695788][ T609] ret_from_fork+0x64/0xa0 [ 29.695815][ T609] ? __cfi_kthread+0x10/0x10 [ 29.695848][ T609] ret_from_fork_asm+0x1a/0x30 [ 29.695881][ T609] [ 29.695890][ T609] ================================================================== [ 30.039954][ T609] Disabling lock debugging due to kernel taint [ 30.046588][ T609] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 30.054412][ T609] #PF: supervisor write access in kernel mode [ 30.060494][ T609] #PF: error_code(0x0002) - not-present page [ 30.066517][ T609] PGD 0 P4D 0 [ 30.069914][ T609] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 30.075994][ T609] CPU: 1 UID: 0 PID: 609 Comm: kworker/1:5 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 30.090954][ T609] Tainted: [B]=BAD_PAGE [ 30.095119][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.105186][ T609] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 30.122010][ T609] RIP: 0010:down_write+0x9a/0x2a0 [ 30.127072][ T609] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 30.146706][ T609] RSP: 0018:ffffc9000cf07500 EFLAGS: 00010256 [ 30.152818][ T609] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 30.160809][ T609] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000cf07520 [ 30.168797][ T609] RBP: ffffc9000cf07598 R08: ffffc9000cf07527 R09: 1ffff920019e0ea4 [ 30.176785][ T609] R10: dffffc0000000000 R11: fffff520019e0ea5 R12: dffffc0000000000 [ 30.184764][ T609] R13: 1ffff920019e0ea0 R14: ffffc9000cf07520 R15: 0000000000000000 [ 30.192753][ T609] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.201705][ T609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.208312][ T609] CR2: 0000000000000098 CR3: 000000010cb3a000 CR4: 00000000003526b0 [ 30.216299][ T609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.224279][ T609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.232255][ T609] Call Trace: [ 30.235540][ T609] [ 30.238480][ T609] ? __cfi_down_write+0x10/0x10 [ 30.243354][ T609] ? _raw_spin_lock+0x8c/0x120 [ 30.248146][ T609] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.253379][ T609] ? mutex_unlock+0x8b/0x240 [ 30.257999][ T609] ? __cfi_mutex_unlock+0x10/0x10 [ 30.263040][ T609] rust_binderfs_remove_file+0x6c/0x110 [ 30.268608][ T609] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 30.281397][ T609] ? update_curr_dl_se+0x10c/0xb20 [ 30.286539][ T609] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.292634][ T609] ? update_curr+0x60d/0xc60 [ 30.297257][ T609] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 30.310482][ T609] ? update_load_avg+0x506/0x19a0 [ 30.315551][ T609] ? detach_entity_load_avg+0x7b0/0x7b0 [ 30.321126][ T609] ? dequeue_entity+0xa9c/0x1750 [ 30.326090][ T609] ? __cfi_ip6_output+0x10/0x10 [ 30.330967][ T609] ? tg_unthrottle_up+0x980/0x980 [ 30.336010][ T609] ? __cfi_ip6_local_out+0x10/0x10 [ 30.341140][ T609] ? __cfi_dst_output+0x10/0x10 [ 30.346014][ T609] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.352106][ T609] ? kvm_sched_clock_read+0x15/0x30 [ 30.357332][ T609] ? sched_clock_noinstr+0xd/0x30 [ 30.362384][ T609] ? sched_clock+0x44/0x60 [ 30.366823][ T609] ? sched_clock_cpu+0x75/0x400 [ 30.371721][ T609] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 30.377816][ T609] ? kvm_sched_clock_read+0x15/0x30 [ 30.383031][ T609] ? xfd_validate_state+0x68/0x150 [ 30.388155][ T609] ? save_fpregs_to_fpstate+0x196/0x230 [ 30.393729][ T609] ? __kasan_check_write+0x18/0x20 [ 30.398874][ T609] ? __switch_to+0xc7b/0x1310 [ 30.403570][ T609] ? psi_group_change+0xb44/0x1130 [ 30.408704][ T609] ? __cfi___switch_to+0x10/0x10 [ 30.413676][ T609] ? _raw_spin_unlock+0x45/0x60 [ 30.418551][ T609] ? __switch_to_asm+0x3d/0x70 [ 30.423344][ T609] ? __schedule+0x1463/0x1f10 [ 30.428043][ T609] ? kick_pool+0xb9/0x550 [ 30.432394][ T609] process_scheduled_works+0x7d2/0x1020 [ 30.437974][ T609] worker_thread+0xc58/0x1250 [ 30.442677][ T609] ? try_to_wake_up+0xdd2/0x1aa0 [ 30.447658][ T609] ? schedule+0xc6/0x240 [ 30.451921][ T609] kthread+0x2ca/0x370 [ 30.456014][ T609] ? __cfi_worker_thread+0x10/0x10 [ 30.461149][ T609] ? __cfi_kthread+0x10/0x10 [ 30.465787][ T609] ret_from_fork+0x64/0xa0 [ 30.470233][ T609] ? __cfi_kthread+0x10/0x10 [ 30.474849][ T609] ret_from_fork_asm+0x1a/0x30 [ 30.479636][ T609] [ 30.482683][ T609] Modules linked in: [ 30.486609][ T609] CR2: 0000000000000098 [ 30.490798][ T609] ---[ end trace 0000000000000000 ]--- [ 30.496268][ T609] RIP: 0010:down_write+0x9a/0x2a0 [ 30.501327][ T609] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 30.520956][ T609] RSP: 0018:ffffc9000cf07500 EFLAGS: 00010256 [ 30.527057][ T609] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 30.535045][ T609] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000cf07520 [ 30.543031][ T609] RBP: ffffc9000cf07598 R08: ffffc9000cf07527 R09: 1ffff920019e0ea4 [ 30.551029][ T609] R10: dffffc0000000000 R11: fffff520019e0ea5 R12: dffffc0000000000 [ 30.559025][ T609] R13: 1ffff920019e0ea0 R14: ffffc9000cf07520 R15: 0000000000000000 [ 30.567022][ T609] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.575987][ T609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.582585][ T609] CR2: 0000000000000098 CR3: 000000010cb3a000 CR4: 00000000003526b0 [ 30.590592][ T609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.598594][ T609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.606612][ T609] Kernel panic - not syncing: Fatal exception [ 30.613018][ T609] Kernel Offset: disabled [ 30.617346][ T609] Rebooting in 86400 seconds..