last executing test programs: 3m5.102533775s ago: executing program 0 (id=432): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in=@local}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0xcc442, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@verity_require}, {@userxattr}]}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900000000004f0000000500f60000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x10b900) read$usbmon(r4, &(0x7f0000000140)=""/112, 0x70) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x8, 0x2, 0x1000000000008}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @fda={0x66646185, 0x2, 0x1, 0x2a}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 3m5.097465234s ago: executing program 0 (id=433): pipe2$9p(0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440ec0002030109025c0002010700060904000001020d0000052406000105240000000d240f0100000000000000000002241a000016090581030002000000f9599a1ac78ffc62471dba21f611305d0904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000e99f0d6c96365577b76f0000"], 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x10a) (async) mkdir(0x0, 0x100) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) fchown(r4, 0xee00, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) (async) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) 3m3.84202126s ago: executing program 0 (id=461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x378, 0x3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wg2\x00', &(0x7f0000000140)=@ethtool_eeprom={0xa, 0x3}}) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) bind$bt_hci(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m3.676035003s ago: executing program 0 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/93, 0x5d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/25, 0x19}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}}], 0x4, 0x400120a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000240)="fe07b4e97752dd25786fd921832b3a67074b7aa01ec132b40abe305743c7b23e9650e4c869d0ff550cdb7a4315b803447f535a9e359a585ea629cf2ea29fe822c851454f994c08b85f5e7c5d9266fb2d07fd5842d535fb8e0b8002a264050fbe153b0174c7faf1aa2bdcf5964d7466aeb845d3170b2a70e001af12ac431578ada6db9e0d4f81d1986fbaea5dad058dd5401568061e505b11fbf6cab053c049a1d6cc6281e9e77867021ea2aa22f5f864e0b7059d62663298302a738e9e5ae1c6fb65777d5aa52a2237e128a6f6b01056e39a7bf368e209a80b", 0xd9}, {&(0x7f0000000400)="07f337404f526b7ad25d017cb0dc942345c071f4630fc16f091a6bdb49e2a311d3f7051af890a5627a3d6af330c05fd0ab03329ec73dd40ae01915eda0f2131ed7abfab62e4894edd37aa03740ab5cb2d043ccf0d3fae3a4b92fc0fb8036d1c6fc2d31e288264539e9937309fa317dd4d08b6872a7d291", 0x77}, {&(0x7f0000002840)="a08fb7c86e7b96045bacc17b090cb840e8c93bb3b0e21970e7a6b93164d4a4bb072f8b1b9d9183b8c5d627a5909e77f9f03b267039c0b1e1ee0a7119b178db1565d47b13e98f6aaeefe4e459ce58fc4a47073e4506b5576d6e1a30d7b9be3b91f946633791ca9068144d05699855d78e73c00b62333e020e6b7639d759ae791e6465b68aa04e7a1468fa2889b6c84bd54e42470d41bb927a6d96f020ffa7a6a19728a1cb83226e9ce1796730dc315790fbb7babaed90e68e4fea", 0xba}, {&(0x7f0000002600)="d13294a82a485242ab8d70e7afec1040181dbdb33890c80f96b254f112c4324820504948cf054d9b5a6cf26c0f5f1ea9738bc3e63481c883bb34d989ce91a1c44b72d498c62edc648e36f3b9dbf40df07b0d085b68ac41d0e7776bbd45be9bccdf8bb3f0a15ae5789c1aaf6bb7a1f5624e870467d9ca2df3e345e2ebe22dc954a1eefa35d0fbd6a202f43e4a6467795bbc08cb9a9e19ff91eaf1a7d06c62f83c1c28cdebf4f3876c0af3a9ccaf7df69df9cda5a311140a055fb34a86fc442a8144c539d0589665f69edc609a03b65cb6684ac4e3cec532f7707bf665dbf6e13d9ca38df8d9528741e76bbb67", 0xec}, {&(0x7f0000000500)="324b80b92d3b242259cedf3ff616cd92d880a380476e746f1e0f76547abc1249d7fa21b4654199023d9f5993fdbdef017846366e18c4338692bfe9729e92e89094c90938c1b0d123f0457c61ebd1ef162346d6f1f57f", 0x56}, {&(0x7f0000000080)="12598eba4fc9f61941a618febbfe0f050a85e70410be8f88e4e3ef1103738cbc47ef6ba2fd94110747b2e8b56c51367a9be2db205f1bb0b7d158a1", 0x3b}, {&(0x7f0000000340)="add105b73de806dbbe6eb71c2c652801bc3573aef770e92ca54e659c21e1873f0c12", 0x22}, {&(0x7f0000002700)="a1879aab8c29f0a26d22359fe41fdb3675bd8278d942b3fd659f924bdbcb5ce07b68856b70ba2d59add953c7e3ca6f67c80caa89ed2f25c46573858da073078051129d72eb4955e376c11406382301dca20de5b4ba07f03cc15cc640c0eb519705cd3e732376f89d718395e5a9dfc05742852d2bfa50d5361a39bcadeccc090782e1a249cfd14280b61f03798d481757e1b9c3bf4953059b31071409", 0x9c}], 0x8}}], 0x1, 0x9200000000000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 3m2.930135218s ago: executing program 0 (id=477): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 3m1.819745841s ago: executing program 0 (id=511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1004, 0x0) fsopen(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.793641961s ago: executing program 32 (id=511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1004, 0x0) fsopen(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.249506426s ago: executing program 3 (id=1925): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="040005000000000010000600000000002000000000000000"], 0x2c, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x49) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1m53.227854857s ago: executing program 3 (id=1929): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) stat(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) statx(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x80, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x1, 0x0) r8 = creat(&(0x7f0000000100)='./cgroup\x00', 0x1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r0, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="040006000000000008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000ff7f0000000020000081000000006e87a07554e0ed6c1b9a0259602c0e3d57fdf1f527efe827458e4e8c2490d19c331cddb460ca864d4823bac8980d75a8d0a3ead63a6f5273850532a30022c5835327fd586cbb632542743194f5df0710223d8013928513ddab0da589d04654a08b9f01b686adbfd52e8a7643bcf5ab5e2be99c8f9eb6a30ac39fb1ab62df6fe447be497ed4de0f55dd30205932b5bef0ea6728972c5cddac73c66cac13e7104e1436f8907c66554e"], 0x6c, 0x0) faccessat2(r8, &(0x7f0000000140)='./file0\x00', 0x8, 0x1200) listen(r8, 0x8) 1m53.152944288s ago: executing program 3 (id=1930): inotify_init1(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async, rerun: 32) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) (rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000280)={{r1, r2+10000000}}, 0x0) (async, rerun: 64) r3 = socket(0x2, 0x2, 0x1) (async, rerun: 64) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106) (async) modify_ldt$write(0x1, 0x0, 0x0) (async, rerun: 32) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) (rerun: 32) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000140)=0x44, 0x4) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x100010, r0, 0x9a22e000) (async) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1m53.152157498s ago: executing program 3 (id=1931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x2b, 0xb, 0x0, 0x2, 0x9, 0x2, 0xa7d2, 0x0, 0x0, 0x40, 0xb}}, 0x50) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m53.151984278s ago: executing program 3 (id=1932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1m53.107817039s ago: executing program 3 (id=1933): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000280)={0xb, 0x6, 0xb333}) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_submit(r2, 0x1, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x77c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000240)={0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000200)) 1m53.0184268s ago: executing program 33 (id=1933): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000280)={0xb, 0x6, 0xb333}) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_submit(r2, 0x1, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x77c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000240)={0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000200)) 1m36.315861s ago: executing program 1 (id=2176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xb0, 0x6, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x85, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x9, 0x5, 0x7, 0x22, 0x37, 0x82, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2005, 0xf, 0x0, 0xeeee8000, [0x5, 0x5, 0x15e, 0x200000000000002]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000180)="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", 0xfb, 0x20008014, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x2c, @dev={0xac, 0x14, 0x14, 0x35}, 0x4e21, 0x2, 'sh\x00', 0x4, 0x6, 0x3c}, 0x2c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') dup(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 1m36.216061642s ago: executing program 1 (id=2180): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @pic={0x1, 0x1, 0x8, 0xf8, 0x8, 0x4, 0xe9, 0x1, 0x2, 0x4, 0x8, 0xa6, 0x81, 0x1, 0x2, 0x5}}) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$cgroup_pressure(r0, &(0x7f0000000080)={'full', 0x20, 0x57, 0x20, 0xe}, 0x2f) (async) clock_settime(0xa, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, 0x4d3, 0xa, 0x33}, @in=@broadcast, 0x4, 0x3505}}, 0x40}}, 0x90) (async) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000040)) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) (async) r5 = accept4$tipc(r4, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x802, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x8, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) (async, rerun: 32) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg(r5, &(0x7f00000006c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="7d3b2b254f038baa74153e580ec0fe379970df2d994c630d22fcf824b98e71ead33002d297b6f633cd7adba404e87be75d6c0e0d5a5f859d6994550c2fc525e3aced13526829909c82d23872f00a06fad9faddfc9cc4a049a161d5999db3f2145670d0490d185499a6a9f5f11f", 0x6d}, {&(0x7f0000000240)="270e5bc70b0de69e2bb9fb469958bc6cffc53b4a9c636f856e6a4381c2f21a9d9098c7090a2ae29d49cde5ac9bcdb9a172052f0a7ff1f1d09b39a8dbf401fc561a0d6c22aa0a9d752e236d398945904840ff4779fa2f608ded237128b4915e474ffa95d8af85944ee4f6e0ceba4ca63f4a26cc0578e2c20bb43f90f218a3b524a6c80312d9acd0989385ce5935125fc3fbcdcf8111222714e8b31624d4381c089137319497231532aaecd3add88e60bf24e2ecb1015046e8752ca66914", 0xbd}, {&(0x7f0000000340)="e6eea37c07bfaae86e", 0x9}, {&(0x7f0000000a80)="288c1bb7d954b449872654a2ecd028e90a98aead5541ca39a93d6b9981a86013258a408a697dc78f0992300210148e8ca3f79cb932e2c7d2debd040669a723f5c5282ff9c138820f1e956b193dcf674d645ac76888451c98f241c6376992ca2c2203fd7b5f70f516b0ce03554f84f85fd4ae6cfcda24672675bee759ecec3337c7dfa420be19ada8ca620db3bddf2962e179d1abccc140df0ed1c1e2d438355044cb2a5ab988d4237600d049fef8171278fc750cc21ee2f37c0392a69762cca50973069efef7cc5ebf2b6cc917ac78523893414dd883f0f565372555f3697f69697434c76bb8702ebcc2ffaea8bc4bfb23f8", 0xf2}, {&(0x7f0000000380)="4c40282b21f93765b03d4fec08ad8583ea6ab4d6ba4c3170ce3e9806ea6ab8617e238c52028023038dacc81b25062ce981671a3d34e7dfaebf016ed423c1d9fb48aa60db6d9f52fe0938481b15e270ea", 0x50}], 0x5}, 0x4010) 1m36.105009834s ago: executing program 1 (id=2181): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0x9, 0x0, 0x5}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x814) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0x9, 0x0, 0x5}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) fchdir(r3) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x814) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) (async) 1m36.091497544s ago: executing program 1 (id=2182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) (async) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xb2020000) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.036939376s ago: executing program 1 (id=2183): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(r1, 0x8913, &(0x7f00000001c0)={'veth0\x00'}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x4000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000002280)) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m36.029921246s ago: executing program 1 (id=2184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000200)={0xa, 0xd}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x1, @loopback, 0x80000003}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x60840, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000003bc0)={'vcan0\x00', 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(r2, 0x406, r1) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x14, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x44, 0x0, 0x0}) 1m35.985626347s ago: executing program 34 (id=2184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000200)={0xa, 0xd}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x1, @loopback, 0x80000003}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d54296"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x60840, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000003bc0)={'vcan0\x00', 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(r2, 0x406, r1) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x14, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x44, 0x0, 0x0}) 52.008703244s ago: executing program 5 (id=2924): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "dc79cd09e4544d9eb0b293d1e1029c4194fdd2cc8a730c756b129b2030fabc8336854a5ec265d754a340d323606bc1d977633a00ed956b645304181f0faab250ad371084cb1c467bf1a8a89c1c8ded8e1a44b5c2c16f127684b7961c1e8d37b681933048ecd17606fb8593b1daf4f1ade172e6c1d734328d066658311e52994d9223bde8aa7b9e52c8fa1eecb26a03349aade407d70ddc0f7ba76a556a4f4380bcba5190300e586dd439c28e143da4f97f8c8764d84813ebe9"}, 0xc9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={r3, r4, r5}, 0xc) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x2002, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000003c0)={@remote, @multicast2, 0x1, "8e5532e96fe3051e8e6cc5348c52c0722a932253d5f4909ce1109aee48a4b893", 0x7, 0x44aa, 0xa0, 0xe834}, 0x3c) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000440)={0xd14, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x46c, 0x11d, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x7}, {0x7, 0x1}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x4}, {0x4}, {0x3, 0x4}, {0x6, 0x1c}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0xa}, {0x5}, {0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0xa}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x0, 0x5}, {0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa94, 0x3ff, 0x2, 0x5, 0x5, 0x4, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x6, 0x4, 0xffff, 0x3, 0x1, 0xb0f]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x18]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x4}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x16, 0x5, 0x2, 0x12, 0x36, 0x24, 0x3, 0x16, 0x2, 0x24, 0x48, 0x24, 0x30, 0x3, 0x12, 0x24, 0x9, 0x5, 0x6, 0x2, 0x48, 0x18, 0xd15e3f8cd0b6347f, 0x2, 0x6, 0x45, 0x2, 0xb, 0x9, 0x36]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x8}, {0x6}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x8}, {}, {0x4, 0x9}, {0x4, 0xa}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x3, 0x8}, {0x4}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {0x3}, {0x3, 0x3}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x7}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x9}, {0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x2, 0x3}, {0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x5, 0x5}, {0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff4, 0x3, 0x6, 0x3, 0x0, 0xaa, 0xfffb]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x48, 0x16, 0x3, 0xb, 0x36, 0x60, 0x18, 0x2, 0x1, 0x5, 0x60, 0x0, 0x6c, 0x1, 0x1b, 0x60, 0x1, 0x0, 0x9, 0x2, 0x9, 0x18, 0x2, 0x6c, 0x2, 0x48, 0x24, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x1ff, 0xff81, 0xcb, 0x7, 0x3ff, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x60, 0x18, 0x1b, 0x30, 0x16, 0x3, 0x1b, 0x6, 0x12, 0x48, 0x1b]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x6, 0x16, 0x77, 0x5, 0xb, 0x60, 0x12, 0x12, 0x9, 0x18, 0x5]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xc, 0x4, 0x6, 0x18, 0x16, 0x5, 0x5, 0xb, 0x6, 0x2, 0x3, 0xc, 0x36, 0x12, 0x5, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x6}, {0x7, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x6}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x2, 0x7, 0x2, 0x9, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x8}, {0x2}, {0x2, 0x3}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x5, 0xa}, {0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x7}, {0x2, 0xa}, {}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x2, 0x7, 0x5, 0xfff, 0x6, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x5}, {0x7, 0x3}, {0x4}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x3}, {0x1}, {0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x5, 0x3, 0x800, 0x8, 0x4, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0x916, 0x92e2, 0x9, 0xff57, 0x9, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x8, 0x0, 0x1, 0x7a, 0x4, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcd, 0xe0, 0x0, 0x61, 0x0, 0x2, 0x400, 0x8]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3f, 0x9, 0x0, 0xc, 0x36, 0x9, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x16, 0x36, 0x9, 0xb, 0x0, 0xa, 0x30, 0x36, 0x24, 0x36, 0x9, 0x18, 0x4, 0xc, 0x30, 0x1b, 0x3, 0x36, 0x1e, 0x60, 0x24, 0x24, 0x9, 0x2, 0x4, 0x16, 0x9, 0x1b, 0x1, 0x5c]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe, 0xfff, 0xe, 0x8, 0x0, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0x3, 0xa434, 0x2, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x9}, {0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x6, 0x5}, {0x6, 0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x4}, {0x1}, {0x7, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8, 0x6, 0xca01, 0x4, 0x9, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x5, 0xb6, 0xff, 0x2, 0x8001, 0xfe01]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x48, 0x2, 0x1, 0x36, 0x9, 0x6, 0x25, 0x48, 0xb, 0x1b, 0x1b, 0xb, 0x2, 0x18, 0xb, 0x1, 0xb, 0x1b, 0x24, 0xb, 0x39, 0x2a]}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x24, 0x0, 0x24, 0x18, 0x1, 0x12, 0x60, 0x3, 0xb, 0x16, 0x6c, 0x6c, 0x3, 0x1, 0x48, 0x48, 0x48, 0x36, 0x3, 0x6, 0x6, 0xc, 0x24, 0x6c, 0xc, 0x4, 0x36, 0x1b, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x1}, {0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x6, 0xa}, {}, {0x5, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x4}, {0x7, 0x3}, {0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x7}, {0x2, 0x6}, {0x2}, {0x7, 0x5}, {0x0, 0x2}, {}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0x9}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0x8}, {0x3, 0x8}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0xa}, {0x6, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x8}, {0x4, 0x8}, {0x5, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x6, 0x8}, {0x5}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x3}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x0, 0x3ff, 0x400, 0x0, 0x8, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x0, 0x9, 0x1, 0x3394, 0x8, 0x7]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x0, 0x6, 0x9, 0x3, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xfff0, 0x5, 0xf839, 0x80, 0x5, 0xa]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}]}]}, @NL80211_ATTR_TID_CONFIG={0x3fc, 0x11d, 0x0, 0x1, [{0x294, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x27c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x3}, {0x2, 0x4}, {0x4, 0x8}, {0x3, 0x8}, {0x7, 0x1}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x4, 0x9}, {0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x1}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x6}, {0x5, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x9}, {0x5, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x7}, {0x6}, {0x4, 0x8}, {0x6, 0x8}, {0x4, 0xa}, {0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x16}, {0x2, 0x9}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x1}, {0x0, 0x19}, {0x2}, {0x0, 0x8}, {0x2}, {0x5, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0xb, 0x1b, 0xb, 0x12, 0x64, 0x48, 0x3, 0x9, 0x48, 0x5, 0xea5e1f9c20d7b06f, 0x2, 0x2, 0x1, 0x2, 0x5, 0xc, 0x4, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2b9, 0x0, 0xf, 0x1000, 0x400, 0x8, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfffb, 0x3, 0xf, 0x9, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4b, 0x9, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x1, 0xfffd, 0x0, 0x4, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x5, 0xb, 0x7, 0x1, 0xab, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x85, 0x4, 0x81, 0xb, 0x9, 0xff81]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x8, 0x3f7, 0xb, 0x8, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x0, 0x5, 0x5, 0x8000, 0x2, 0x9b3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x5}, {0x5}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x6}, {0x7, 0x5}, {0x3, 0x9}, {0x7, 0x3}, {0x7}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa, 0x5000, 0x7, 0x5, 0x4, 0x1, 0xfffa]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8000, 0x42, 0xc18, 0x5de, 0x7ff, 0x4, 0x100]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x18, 0x6, 0x1, 0x4, 0x9, 0x4, 0x16, 0x24, 0xb, 0x36, 0x18, 0x18, 0x6, 0x12, 0x48, 0x4, 0x3, 0x24, 0x60, 0x1, 0x6c, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x3a63, 0x0, 0x4, 0x5, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x980b, 0x0, 0xc40, 0x8, 0x48, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0xc, 0xe, 0x2, 0xe01, 0x401, 0x2, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffa}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x8, 0x5, 0x7, 0x5, 0x1, 0x1000, 0x2]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3b, 0xc, 0x1b, 0x11, 0x77, 0x48, 0x16, 0x1b, 0x4, 0x9, 0x12, 0x2, 0x6c]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x38}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe78}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}]}, @NL80211_ATTR_TID_CONFIG={0x278, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x224, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x86, 0x4, 0x3, 0x85, 0x3, 0x641c, 0x7ff]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x2, 0x4}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x2, 0x5}, {0x3, 0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x6, 0x2f, 0x36, 0x18, 0x5, 0x2, 0x12, 0xc, 0xb, 0x9, 0x6, 0x4e, 0x16, 0x9, 0x18, 0x5f]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x2}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x6, 0x5}, {0x2, 0x1}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x1}, {0x5, 0x7}, {0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x7, 0x8}, {0x3, 0x3}, {0x2}, {0x3, 0x4}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0xa}, {}, {0x0, 0x9}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x107, 0x7fff, 0x3d59, 0xd, 0x0, 0x8, 0x1290, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x36, 0x48, 0x48, 0xc, 0x9, 0x6, 0x36, 0x3, 0x30, 0x24, 0x36, 0x18, 0x30, 0x2, 0x48, 0x18, 0x18, 0x5, 0x1, 0x60, 0x4, 0x6, 0x2, 0x1b, 0xb, 0x16, 0x6c, 0x2]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x5}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x9, 0x40, 0x7, 0xff, 0x7ef2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x18, 0x18, 0x60, 0x3, 0x18, 0x9, 0x1, 0x6c, 0x18, 0x3, 0x9, 0x9, 0x16, 0x4]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x1}, {0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x8}, {}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x2}, {0x4, 0x8}, {0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x5, 0x9}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x1}, {0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x5}, {0x5, 0x8}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x40, 0x4, 0xeb0, 0x6, 0x4, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x1e}, {0x7, 0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff, 0xb9, 0xfa, 0xffff, 0xfffd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xd14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001200)={'pimreg0\x00', {0x2, 0x4e21, @loopback}}) r7 = open_tree(r6, &(0x7f0000001240)='./file0\x00', 0x80900) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r8, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001440)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x88c1}, 0x40044) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000001480)={0x4, 0x5}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200850}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, r8, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "81b1"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000004}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001600)={0x1, 'veth0_macvtap\x00', {}, 0x8}) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001640), 0x800, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r7) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r11, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r12, 0x484, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) ioctl$KVM_RUN(r7, 0xae80, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001880)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'ip6_vti0\x00', 0x0, 0x4, 0xea, 0x80, 0x2, 0x24, @mcast1, @mcast2, 0x700, 0x20, 0x6, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001980)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000001dc0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x194, r13, 0x401, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 51.972823165s ago: executing program 5 (id=2925): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x3000}}, 0x50) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0xd, 0x90, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb23, 0xd}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x1, "91"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x2, 0x0, "0cd2", "6018"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0xfe, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0xb5d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4d, 0x2, 0x4, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x99, 0x6, 0x9, {0x7, 0x25, 0x1, 0x2, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0xffb5) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r3 = syz_clone3(0x0, 0x0) rt_tgsigqueueinfo(r3, 0x0, 0x2e, &(0x7f00000003c0)={0xe, 0x2, 0x6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r4, 0x40806685, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160015000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timerfd_create(0x6, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r9 = syz_pidfd_open(r8, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) 48.743054459s ago: executing program 5 (id=2975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xffffffff, 0x35) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) (async) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x5}], 0x1, 0x40002042, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) gettid() (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) (async) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) 48.614397331s ago: executing program 5 (id=2978): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788801609102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffe}, 0x1c) socket$unix(0x1, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r6, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x10, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) openat$incfs(r6, &(0x7f0000000100)='.log\x00', 0x80000, 0xc2) getsockname$unix(r5, &(0x7f0000000180), &(0x7f00000002c0)=0x6e) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 48.597097252s ago: executing program 5 (id=2979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) pipe2$9p(&(0x7f0000000080), 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_clone(0x0, &(0x7f0000000140)="bc07fd430b64aff3e63a4cd9e8c909576c21b3a5b995f1515c89ef6f998c12776a6deb0a0f0057b0b7ac4607d6db19ea7436075fae96043dbe53539118960a59c148fa5d4a8b0bc386ff29ada863562d632685fae4dc28a3769fc5b960e6af112599a1ee5d6114dbc397eda607988edfc9c39dd824d93c300795c017feb7bbd4090b3c6b3462d7f5d2253572666f795a8af9bb5681b2f43631b0ad99953167140fa92485761ba90aff76bde56326b8adfa766eb87570c10583f2a5", 0xbb, &(0x7f00000000c0), &(0x7f0000001240), &(0x7f0000001280)="671ebfce9c489b7e3ef1aa55a81c4f7f2d72fd55f8035dc45bf566264c39c5d2a621a689250b6849fb4b1599cd9e9129945f3347803c10bee3") wait4(r1, &(0x7f00000012c0), 0x2, &(0x7f00000013c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 48.466176124s ago: executing program 5 (id=2980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10ec83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 48.465927064s ago: executing program 35 (id=2980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10ec83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 11.228770729s ago: executing program 4 (id=3641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) setreuid(0xffffffffffffffff, r3) 11.17198927s ago: executing program 4 (id=3642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000049000100000000000010ff000a00866e"], 0x1c}}, 0x4008000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) (async) fstatfs(r0, &(0x7f00000003c0)=""/84) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x8001000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 11.17100125s ago: executing program 4 (id=3643): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x10) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(r4, 0xfffffffffffff000, 0x0) write(r3, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x5, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000002240)=ANY=[@ANYRESDEC], 0x18}, 0x4840) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) clock_gettime(0x4, &(0x7f00000004c0)) 11.17063687s ago: executing program 4 (id=3644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000040)) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)={0x804180, 0x40, 0x20}, 0x18) r3 = openat(r2, 0x0, 0x424801, 0x1b2) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffff7f) fchmod(r3, 0x81) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 11.1702901s ago: executing program 4 (id=3645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r1, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000002080)={0x1, 0x1, 0x9}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/power/pm_debug_messages', 0x80000, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000000)={0xcc, 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f4440f20c03504000000440f8cc066ba4267663e66460fe750bf26430858fac4a2fd252f410f2ed8f30fc7303439c74424000c000000c7442402bb000000c7442406000000000f0114244e48c2c971dd13", 0x51}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) 11.084468922s ago: executing program 4 (id=3646): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 11.065204402s ago: executing program 36 (id=3646): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 3.272524756s ago: executing program 8 (id=3784): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)='./cgroup\x00', 0x9, 0x0) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)='./cgroup\x00', 0x9, 0x0) 3.158688628s ago: executing program 8 (id=3787): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0x24, 0x5b, {0x5b, 0xa, "079cfd596eb03e8a662db3e7e3ebbd80cc21fbdea22e38fbbf5906d844f867bc270d3cfcdffebf8a5210027bae9518ce077cac726123a7bb1af1548ca31db5da42bdc903595c98d0070979dbf7c8e350c811a2592de56dadca"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}}, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x0, 0x15, 0xcc, "b6f5c14e516257f2fbc8a6e000ae2064809d9c4344a16223f00a2a2191f217cd6c90e01e1c3d057de5fabb7b6519784ac004a087d2fcc45ec6dffe1b93cc5b261afec2a1a9c5f04748fa56ed601cdb1eefaa018c6388c47201a2e523716bf42fadba7efa87ec0ff4b3954d09431c9add5a7c19c9374fc541011f8938abc56076af815f9bcd9fcd7ac0e9ee60546dd86d5f579e698a0a4e46db9b11804745ecfea3ef0e6c2744bf511674e94d6cfbc36a10c3dc3dbf6c8cdbedd736a3abab28c0bda57717be9c3dae62ffab00"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8e}, &(0x7f0000000340)={0xc0, 0x5, 0x1, 'q'}, &(0x7f00000004c0)}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f0000001240)=ANY=[@ANYBLOB="401546000000f63e12d474b343087e9eb73f35c5d17688d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fbc4e1e845273a132ff4425581146b91279e42b8830ff"], &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000600)={0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="000c0f0000000f243ca906ec63e642ebf19c4a299fcd4b19bc7ab6502a43f5efdd0f8404"], &(0x7f0000000580)={0x0, 0x3, 0x69, @string={0x69, 0x3, "cb615491be64c9da8cd64ff85968b5e998c96d08adeaa6f16e4bea00e606a022fb4098b83ef76ccb1313e3d37ce19b78371028a864b3f4ed9ec7b38fd903c88fd134fdd25ed71bcc1dc4b07215e3086ffe26999656858bcfeb1022a0f2393512e3d96470fed9ac"}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000640)={0x0, 0x17, 0xa0, "0b9b1a48b10a539ee708dc2e00b455bbbbe1682b3fb9657da68fdae0eb7c0f7490013a6293d688d579d5be98ad1201c26ab94896cea1fb1fe8f63d45e25f85b257458c4da8dc8c50c587bc2b2a387ee20322bb97bceccf6c4eca0dc186d0fba1d097e815ac90e2836b4015e0a8e86475ddb6b9be0427faf91779183708d30fe3ea5c96a5ca86f981a44d6c42814be5cba3691cc1407963376fdeb13b757af66d"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0xc0, 0x5, 0x2, "e722"}, &(0x7f0000001180)=ANY=[@ANYBLOB="40f104700000e4c7a883d03d59b89b45bc35986a5da5c9c24b3314e00e422c2b9bca6bbfec5836846ae3d8fa0b3984da84c9583b26ccee31adf870000c0922b7e17b24cd8221f47f9ef9c3463e0fc7d94618f3daa12987a89dbdb7dd6f546195e543ffb367f78f4ef9629e89b4a96c35878b18d20748f48857bd72d2ef8ed5d00072e951e445b43252f0e7e871eae00209ccf9b07f7aae055fd8b44305c45a191373"]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000e40)={0x14, &(0x7f0000000d80)={0x40, 0x10, 0x48, {0x48, 0x7, "bf188c5653159129d37ec335da9b26edf3db1b4cc1842c4ce04f69458f1a16b2b802720b4fb4e4e24d0f4ed70fdd97dfa777e952ba7ad538551ab2185d64a7587388b3bb6a06"}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001100)={0x44, &(0x7f0000000e80)={0x0, 0x16, 0xba, "f8ea40b2c85acd7fbdf2a6588b813648282c13d8233ddc9e7c8f95528fa9fc1688704c1da2dab9de7dd1c188127cd6bdcda338e62ee528990a5aa2375c872cf303b28502de4bd772e204fb79101a9be3478475dba11996ec20aac82380b85d2f244ff995033ff05ce261065a6fa3780e38576d09a688b610b4a70a4c8dd1f655cf6357cb0281b1973fa49a61b9af54bb6f540fff3e235d98f1b2f2ecd86de98763bdf09e6b19a24a1591af6e84397b0150cd577fb9121ae823e9"}, &(0x7f0000000f40)={0x0, 0xa, 0x1}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000fc0)={0x20, 0x80, 0x1c, {0xa, 0x7, 0x200, 0xffff, 0x4e5, 0x8ede, 0x5, 0x5, 0x6, 0x1, 0x1, 0x7}}, &(0x7f0000001000)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000001040)={0x20, 0x83, 0x2}, &(0x7f0000001080)={0x20, 0x87, 0x2, 0xf}, &(0x7f00000010c0)={0x20, 0x89, 0x2, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000000, &(0x7f00000006c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe9dd}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r7 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r8, r9+10000000}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_int(r4, 0x0, 0x2, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r10, 0xffffffffffffffff, 0x0) 1.632771058s ago: executing program 7 (id=3797): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$getflags(r0, 0x408) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.632653628s ago: executing program 7 (id=3798): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.632440408s ago: executing program 7 (id=3799): r0 = inotify_init1(0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000004c0)) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x6e, 0x80000) getsockname(r3, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000200)=0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)={0x2, 'bond_slave_0\x00', {0xfffffff9}, 0x2}) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x96) r4 = syz_clone(0x90008000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) sched_setattr(r4, &(0x7f0000000380)={0x38, 0x0, 0x10000000, 0xb82, 0x9, 0x2, 0xe, 0x5, 0x5, 0x8}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x8a) fchdir(r9) ioctl$KVM_GET_TSC_KHZ_cpu(r9, 0xaea3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x8f7899802e03fca3, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x1, 0x7f, 0x1, {0x22, 0xf2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1, 0x80}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r10, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1.348942334s ago: executing program 6 (id=3807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020315030b000000ff0e000000000000010009000000000003000600000000000200000000000000000000000000000002000200"], 0x58}, 0x1, 0x7}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000080)=[@enter_looper, @increfs_done], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) 1.268029706s ago: executing program 6 (id=3808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000010078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000bd47604b63ab6f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$getflags(r5, 0x40a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="65a5640f01ca670f01f566b9b40000400f3266b9800000c00f326635004000000f30660f38f8286464f30f09f2643e6229f30f2aad62e866b9740a00000f32", 0x3f}], 0x1, 0xe, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x20000001, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2004cb, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7], 0x8000000, 0x210}) creat(&(0x7f00000001c0)='./file0\x00', 0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) fsopen(&(0x7f0000000100)='aufs\x00', 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) io_setup(0x82, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000240)) 1.149543018s ago: executing program 6 (id=3809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x40081) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000000c0)={[0x2000, 0x4, 0xffff1000, 0x8000000], 0x7a37, 0x31, 0x5}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0x5000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0x1, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0xf000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x31}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2102, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000340)="0f01c40f30f30f09f20f1b98526f33440fc75d5665f20f06666d66b814000f00d866660fea80000001000f0119", 0x2d}], 0x1, 0x51, 0x0, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getpgid(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r11, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314d70, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async, rerun: 64) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000080200000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) (async) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r13, 0x80605414, &(0x7f0000000540)) 961.637032ms ago: executing program 6 (id=3810): lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0xdc, &(0x7f0000000000)={0x0, 0x0, 0x6e, 0x4e, ""/78}, &(0x7f00000000c0)=0x6e, 0x1) setns(0xffffffffffffffff, 0x24020000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 958.945222ms ago: executing program 7 (id=3811): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/87, 0x57}, 0x3}], 0x1, 0x3010, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r1, 0xffffffffffffffff, 0x0) 958.606572ms ago: executing program 6 (id=3812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x70, 0x0, &(0x7f00000001c0)=[@request_death={0x400c630e, 0x2}, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/183, 0xb7, 0x2}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @release], 0x0, 0x0, 0x0}) 828.921394ms ago: executing program 2 (id=3814): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x6, 0x12) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0xa242) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x5, {0x2a00, 0x80010000, 0x0, 0x7, 0x1, 0x0, 0x5, 0x1c, 0x4, "fee8a2ab78fc1791d1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000bab000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01eb733d458dac00000000000000000000003b00000000000000000200", "90be8b030000000000000000090001c4f700000000000000000000008000", [0x4, 0x3ffffffffffffc]}}) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000200)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r7, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)=@secondary) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, r2}) r8 = dup(0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f00000002c0)={0x100, r2}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) close_range(r8, r1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x40010, r10, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x4d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, r5, 0x0) 828.307045ms ago: executing program 2 (id=3815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd000111"], 0x7a) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f806000100"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 732.519086ms ago: executing program 6 (id=3816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xa7) unshare(0x62040200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_usb_connect$uac1(0x5, 0x96, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010002000000086b1d010140000102030109028400030101b8050904000000010100000a24010700040201020c240200010201073c0509010724070201000009040100000102000009040101010102000009050109ff0309010707250181030200090402000001020000090402010101"], 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x101, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x2, 0x1, 0x87, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "14cdc6f5b895"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x1000, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mdlm_detail={0x4e, 0x24, 0x13, 0x8, "401fb3ac7ac3875c341ab36c817d38a28e52296fe0e098ef6529b4fb79ca68649da227b80ca5c4948dd6f2f28d70d2cef97671d4604596c9976fcbb02de87371d1eefa2fbec2cacb113c"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x2d, 0x24, 0x13, 0x9, "22e67e7fcda9cec1faf879313288964d0d95e410da5377a69975ecf522fc0d52f827ee6cf78d15ce2a"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3cf, 0xb, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0xff, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x0, 0x64}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x4, 0x25, 0x68, 0x3}, 0x59, &(0x7f0000000280)={0x5, 0xf, 0x59, 0x5, [@generic={0x28, 0x10, 0x3, "be7a1a41f0630ab1160268717f38d6e68e3984bb02f75dbd58e1288b2fdc7df02bdd72f662"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x2, 0x49}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x5, 0x1100, 0x9, [0xc030, 0xff0000, 0x3f, 0xc0]}]}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x88, &(0x7f0000000680)=@string={0x88, 0x3, "60130c715eb10093ca14ce1434051f9c39d89d96522d4e3f646b04556a791d0e167921fb1ed9c35f5bb128ed0de7b4046639752eca9299f3a9f5ac3201b4e4c1c7590983585139c956f7d76290985c7373c9bedf2e4c71102520a0ee1d02c09dd6bf07c276d61747c65977a0f4bcd05ec13d17883b3453f67741ad35d007f8efff83e40216c9"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x422}}, {0x5d, &(0x7f0000000480)=@string={0x5d, 0x3, "adcde9bd74a27f93a4638afe3ecafdf03cbabc78778be4b5ce2a8657dea3941d23090d22be2f35ca750bdbd331b27ce4e4ad616bcfcdcde4cd7f11b8ab38c03dd6a1cde45fd1cdbd1dfc36a81ea4e08da27c4530605151b9f42f47"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x827}}, {0x88, &(0x7f0000000780)=@string={0x88, 0x3, "5916596651424bfb81b47f4d63e2c561ec822694a2046f7b10c802fb3c9407ea1b945820f5da95f40f862f67f09be0d35ba5fb800cdbd2ea982f099b7040f0c315eb0aeaab9b1d5c30b03a5e1c16ef604272687a0f48daa4532ce86fb73063b7c46d976fe263df88a81c503e89988c9b59493f48610881403f683100e8b6316d85b137e5f6d8"}}, {0x23, &(0x7f0000000840)=@string={0x23, 0x3, "67ddc8b4d95b9aa919b4afc8b55562859e6652aa208ca2566e50c7d449304eb6bf"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xf4dc}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x44f}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x2, 0x3, 0x31, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x10, 0x8, 0xffff}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r9, r9, 0x0, 0x7a680000) getgroups(0x8, &(0x7f0000000ec0)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x0]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0}, &(0x7f00000010c0)=0xc) read$FUSE(r8, &(0x7f0000005980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = getgid() syz_fuse_handle_req(r9, &(0x7f0000001940)="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", 0x2000, &(0x7f00000014c0)={&(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x8, {0x7, 0x2b, 0x8, 0x80, 0x5, 0x6000, 0x9fe1, 0x0, 0x0, 0x0, 0x10, 0x80}}, &(0x7f0000000440)={0x18, 0x0, 0x5, {0xbf5}}, &(0x7f00000005c0)={0x18, 0x0, 0x3, {0xa}}, &(0x7f0000000600)={0x18, 0x0, 0x3d03, {0x9}}, &(0x7f0000000640)={0x18, 0x0, 0xfffffffffffffff7, {0x7ff}}, &(0x7f00000009c0)={0x28, 0x0, 0x7, {{0x4, 0xe, 0x1}}}, &(0x7f0000000a00)={0x60, 0x0, 0x1, {{0x100000000, 0x94b, 0x4, 0x4, 0x6, 0x6, 0x0, 0x7ff}}}, &(0x7f0000000a80)={0x18, 0x0, 0x80000001, {0x6c881b12}}, &(0x7f0000000c80)={0x16, 0x0, 0x7, {'\xc8--((\x00'}}, &(0x7f0000000cc0)={0x20, 0x0, 0x100000000, {0x0, 0x14}}, &(0x7f0000000d00)={0x78, 0xfffffffffffffff5, 0x7, {0x9, 0x80000001, 0x0, {0x1, 0x4d6, 0xa5d, 0xfff, 0x2, 0x92f0, 0x8, 0x5, 0x10001, 0xc000, 0x5, 0xee00, 0x0, 0x5, 0x6}}}, &(0x7f0000000f00)={0x90, 0x0, 0x5, {0x0, 0x1, 0x7, 0x4, 0xa, 0x200, {0x1, 0xfffffffffffffff6, 0xc8cc, 0x1, 0x6, 0x10, 0x5, 0x0, 0x2, 0x4000, 0x42, 0x0, r10, 0x91, 0xffff0000}}}, &(0x7f0000000fc0)={0xb0, 0x0, 0xfff, [{0x1, 0x9, 0x3, 0x4, '%.!'}, {0x2, 0x1, 0x13, 0x7, './binderfs/binder1\x00'}, {0x6, 0x5, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x6}, {0x0, 0xffffffff, 0x5, 0x4, 'wfdno'}]}, &(0x7f0000001100)={0xa8, 0xfffffffffffffffe, 0x3e8, [{{0x3, 0x2, 0x3, 0x80, 0x6, 0x6, {0x0, 0xfffffffffffffb30, 0x400, 0x8, 0x2, 0x3, 0x2, 0x5, 0x8c3, 0x1000, 0x2, r11, 0xffffffffffffffff, 0xf6, 0x8001}}, {0x6, 0x6e3, 0x0, 0x100}}]}, &(0x7f00000011c0)={0xa0, 0x0, 0x7, {{0x6, 0x0, 0xcc66, 0xff00000000000000, 0x3, 0x4, {0x6, 0x3, 0x5, 0xfffffffffffffffd, 0x3, 0x9, 0xa, 0x800000, 0xe, 0xc000, 0x6, 0x0, r12, 0xffffffff, 0x8}}, {0x0, 0x10}}}, &(0x7f0000001280)={0x20, 0x0, 0xffffffffffffff80, {0x400, 0x0, 0x3, 0x5}}, &(0x7f0000001380)={0x130, 0xfffffffffffffff5, 0xe16, {0x9, 0xfff, 0x0, '\x00', {0x2000, 0xff, 0x1, 0x2, 0x0, r13, 0xc000, '\x00', 0x4, 0x605c7052, 0xc91, 0x64, {0x8001, 0x9}, {0x3, 0xfff}, {0x4, 0x7}, {0x6, 0x3ff}, 0x7fff, 0x6, 0x6, 0x9}}}}) close_range(r0, 0xffffffffffffffff, 0x0) 307.097334ms ago: executing program 2 (id=3817): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16]) 245.765946ms ago: executing program 2 (id=3818): mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) (async) pipe2$9p(&(0x7f0000000140), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x29) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) (async) write(r2, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 245.631146ms ago: executing program 2 (id=3819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 162.259607ms ago: executing program 2 (id=3820): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0xf4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x0, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0xce, 0xb}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0xff, 0x7e, 0x20}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x0, 0x8}]}, 0x5, [{0x75, &(0x7f00000000c0)=@string={0x75, 0x3, "1aac00660b5fcd99b5ea0231b9b287bb3538f8e3d11c097afe3a92b0c0eecd82cdaf4eccbf1701c218576e42a3c0c670ebe269019fdfc0e6158f556aa4080088a87b549d320d454fed0ad5c1aa8df223bc503f726eca5fee0be499c75d7353a9b74ac8178088df115a985e3ca4c59bbea4a77c"}}, {0xb5, &(0x7f0000000140)=@string={0xb5, 0x3, "8f901d6e80938b8e71a1f69bf467bc83d70ae4ea7f9f01433a02bd8d55cd27d8f5d9d27b8f86154fe449db55a7a4cdbc011b01c40edcf5ca08ff149cef83e2be7568e9e1de785360174e883a6b4c2226be819994af4e2e33f351cace4004e2ca9c5a50e4e9244cab50a5b868f97d3c9643abc039caf142a16d50b6e61ca1e002f211956f0fbe2bd699596bcbce3182d60c3900927fd7bab96063a789e4fca9648ef93e577f0ce0da36ee1d380ebaab34f088d6"}}, {0xcc, &(0x7f0000000200)=@string={0xcc, 0x3, "b823d11ba6300205915df40a75ab210799b4af28ba3dff7a7c6d9d7fe1c091a1aedc870935631bbac8d0ff87a11c3c662849648965db0e0b1fbc78c13736bb3b0ee7f89c9ec5b2449f7095298fb3accd4bb7963b5f9fb33a8b9975476469edbc29872f45fbf122f33bd11a340577153cc830f019290dc33bbb460082a2282a5740e6abd3b65ad755e4559b823ab80df1dc0cd15adec144070e7698038bde4f0765ee60a4969513b42c21bcb13ca275770f09e3e1dceee3f0f4666ba7d1e893b786f9da71e34df1b4daf4"}}, {0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "0d1f8a02eaf334cbbc25167f5e9bda0f04bfde25270fe89bf22ec5f86710e69fae8d3406ee098625be1f5dd2dcf25ce432fab68b40fdc21d95bfa82092cb62bd04aa0e05dc1c7837a7d557b4e6e0baca75f9228246f77bd464b96633a89f03acefb6c7c989887040c2e9537dbb01b95bcfc4225d825d6c36f717861ef60a71f72489bedb9747695eddb407b8c7046c3273723e3799ff3dff7e7421a128cbb20971ee44d20283e22eff674328dceff5af05085f84812f8c97d82329c72a994a009b7d01f83174ea36e3b7673eedf9bfdf7da8af80b44dd0e545f9969f9407841e6ade78"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0xb, 0x6b, {0x6b, 0x10, "e5ce39e63758fee39cd0d43019871badb5f5f65d5ba5e2d728891787e2b8ae7b9b7f683f7a526265d62dad617a34be18ec4792fcc034cee18185d0bd4a8b0788bbb723c1db8030de4a5c44a9f73f5a2c0354e0cb9654ffa5175fbcc3381917a9c7694956ef78f54c93"}}, &(0x7f0000000540)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "563bc59f343a1edb66a8172a71126d6cea26774cbc1380c63caafb107bbb6b27e22b080ff4b478a363dcad90f63d776b636e12fbc33daf8d390d27ee5f543c3c7afbe1bf210a8b43aa20cbccdb"}}, &(0x7f00000005c0)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6, 0x8, 0xb8}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x200, 0x7800, 0xdeaf, [0xc03f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x0, 0x5, 0xed}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x4, 0x7, 0xa, "042466f4", "ba8ad6ae"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0xb, 0x6, 0x0, 0x400, 0xcdd}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0xa, 0xea, "f9dc7d0725865c906ee5db28a1f6e12e895e25b67bfa71e954554b78a9e83c44f4436ad9dcf5388bd321791d02b22915d6abfa59f490fb85fc41fe2d1752833bef00d4af20deebfff945fa146bf84172bbd89901e2602065682b2e0fed2233b6459660ba244d78ef6ad1b787561f0f982c7f9bdbaadfb137fabd8ec16ea8443ef049370f9211473e9847b4db8e20575b863b071288a8d3cf3833694149247522405028a942ee5fefb1d59f56c2ea60ca280d974da852d588ac56e7af1296a92b17fafd4f9a7a9c13bf8835a93d70daad91657f76c85a0f011f1b040a6cd0c863c52a704fa8aeea217fc3"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1e0, 0x60}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000940)={0x40, 0xb, 0x2, "068e"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a40)={0x40, 0x19, 0x2, '_M'}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x95}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000b00)={0x40, 0x1e, 0x1}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c40)={0x40, 0x11, 0x2f, {0x2f, 0x7, "cccaf72c3df1d041a66df6a3bc5b718cfbac3438fb5fb363427eab78ed1b0e7b1b19202432d78d1b8d4b6f6ec2"}}, &(0x7f0000000c80)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "539a3b93ec461b041cf9fde71c1e2c37e2d88c1299f9a3480f66e7595f95f7b5d15d6af9620e30858349d191ae46d3631391f3570a715b94c9a6fc85994e882b70adfe3ca36d5e11bf8bd2e069311ca1dbee71684e8681d720141ffbca682390dbdac9bbf02d2991b5c02fd1e3d462542e62649b10ea327e9e4a"}}, &(0x7f0000000d40)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x6, 0x3}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0xa, 0x4, "2d709564", "dfd61dec"}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x68, 0x8, 0x0, 0xa, 0x8, 0x9, 0xff}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e40)={0x20, 0x24, 0x40, "6f3cdb808dd90d8176a749280d47658dd2b2ee0693bc3a9e41d4d129aab94a2c19c5b7dfc7d8af1e17dbbbf95080d1508943db58a2782e97f7ddab91607dc155"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x1000, 0x28, [0xf0f0]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x402}, &(0x7f0000001000)={0x40, 0x9, 0x1}, &(0x7f0000001040)={0x40, 0xb, 0x2, "15a2"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xfff7}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000001100)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001140)={0x40, 0x19, 0x2, "fc57"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x81}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x69}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x3}}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000001340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0xce, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x6c9, 0xba, 0x4, 0x3, 0x10, 0x9}, 0x16, &(0x7f00000013c0)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xde, 0x9, 0xa1, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0x2c, &(0x7f0000001400)=@string={0x2c, 0x3, "dbdd011e1336ad8fe50e14ee51063fc3b6a412adb39a0716f3d910c984a56603f852f23e9e5a6adf49ca"}}]}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000001480), 0x4) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000014c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x430}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x10, 0x61}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0xf2, 0x2}}]}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x211, 0x7f, 0xe5, 0xf7, 0x10, 0x6}, 0xf, &(0x7f0000001540)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x2, 0xffff}, @ptm_cap={0x3}]}, 0x4, [{0xe3, &(0x7f0000001580)=@string={0xe3, 0x3, "ad326117227b09f29d6adaaf5fc70c6c11a05047bb5cae51a8571105325d3cabe62eb1d02334656896fdd29e22e57e70b1fee20c60aebb6c8960dea8ecde2642ddc68a017e9334221173fd56ef4d2c7188b6772adcd14d956e766aa69927e77916ab7d1d0845e261117145b1e203e0d62dc7e5f1bf00548fe6eac7450e1f782d2bdbd771639512cd3bf16cc77ffdef13fcb807e802340e642fd523dccce2f8d41c4bf8b667198e4a57efc41a540ec86740f2aaba247645b3969878da4b857803c5694294a9030213b74913c7e7dd8231a3d0bf2a709ce834cbedd820346dfbab4b"}}, {0x45, &(0x7f0000001680)=@string={0x45, 0x3, "774a3a9afd475019948a3d150de0b6b5ba1f05f8d6022d15148e8d6c8f823c496a4b19b7ab8d7573aa0bb0f640e2856b1b34043f457f33a87be46756f373387efdacc1"}}, {0x34, &(0x7f0000001700)=@string={0x34, 0x3, "1a3147f73f8a40955de3658a00fef283234ae79eebb19844e395f140731f92d2a8a74984d1ca3e4dbf4418d945e10becb33e"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001940)={0x24, &(0x7f0000001800)={0x40, 0x24, 0x5b, {0x5b, 0x9, "1af395fb1888388bf2cd657c94cbde43b23ef2e951c91010dbb11b90aa27d3467dda0ad53279dc4d88701e87d6a6541a053e0550aeb4bc08376fb3f8003bf3f45fa96de60052adbd5738a0e6d21676e2b5861ad70e5f9fff9e"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f00000018c0)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x7, "28daca38"}, @local=@item_012={0x1, 0x2, 0x5, "c6"}, @main=@item_4={0x3, 0x0, 0x0, "c43cb88c"}, @local=@item_012={0x2, 0x2, 0x7, '\f<'}, @main=@item_4={0x3, 0x0, 0xc, "bc5f9111"}]}}, &(0x7f0000001900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0xb19}}}}, &(0x7f0000001bc0)={0x2c, &(0x7f0000001980)={0x40, 0x13, 0x58, "9f776cbd16bcb2e092d78b9c84c8f0f3aa267506ec75e6760db6f45f66b1da40ed2158077768bc5781e301f7b633e160c9c837b6441f916ab3c0aa5a93561ddbafb62f98b8dd2239adf059fc673126926827828992cdb7aa"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001a80)={0x20, 0x1, 0xdf, "f9b6ee361d8fe11baba6677aa0ec7dd289692a79faf8d4ff018226689aad7cbb544de3efb1855f761d4338d6c0badf2cb234b09d2d6567ccc3d57636446d059e546ebe78cb885464d151ca2e9c941c07932106aab79fe0e2b23b6dd7ce53d5f77617dbbfdd547f7d426c8153860f7b9b5d731ddfcbd87928c660cd5629ed271af3d3083562567b0c5068fdccb2de86c244c74200830faa4533b20e964744af34c70945bb5fbb1c9af232cde9b107bb5d0dcb741c14a1aa647fa6adca2c6eddeea2fb8a9b4360efe8ee23ab383a0fb305de2f018d94f83899b84c7cfdcd76fc"}, &(0x7f0000001b80)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r2, &(0x7f0000001d40)={0x24, &(0x7f0000001c00)={0x20, 0xe, 0x52, {0x52, 0xe, "b183878550dbf505a84e30fca384c17f4092e6e59aa25d38baef5a1f686beb8053e5ce88be3da7726c00cef452096016c965c9820b08fbf92831dbcdaadf5e2b6cbbd367653d277e03a9f933ab0787b5"}}, &(0x7f0000001c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000001cc0)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0x7, "dd1f"}, @main=@item_4={0x3, 0x0, 0x8, "bb7037cb"}]}}, &(0x7f0000001d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0xde, 0x2, 0x1, {0x22, 0x6f2}}}}, &(0x7f0000001f00)={0x2c, &(0x7f0000001d80)={0x40, 0x12, 0x57, "285edae37efc1c32961bdffa2d8e127deee4482102b76e85758849db6c232f0ca492ade6bb901c0559cd8764715f5a1bad0e1dade2b8c2d275ea8c926a5c816d6819017a0b6660f6bf291dd19b12ed56dad60c1b5c2e13"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x5d}, &(0x7f0000001e80)={0x20, 0x1, 0x2b, "d49ef86efb5d91e9650fff0a3d90a51986b7faa23d1c855f3070223b803233223798045ff372fe52cdff57"}, &(0x7f0000001ec0)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$hid(r2, &(0x7f0000002080)={0x24, &(0x7f0000001f40)={0x0, 0x21, 0x27, {0x27, 0xc, "089a5f3806a67c7df6b7849e9a67007577de22a0926f91b64451ff0e5ba46e9c3e76095c35"}}, &(0x7f0000001f80)={0x0, 0x3, 0x78, @string={0x78, 0x3, "d7976e01d0d14b72fea90e8be5a099c302f9b8f8bce77f6e6615df5bc1759f50f5786b3dee025289bb0d9bd2eb14563e48d1a8228308418c1febd4eb856b125512094defd16e628b8d830af595f023a74f8a03fbe41ebb744789e646f280e87b387994bc72281b6d15df8575b0fcacd159ac5c057c13"}}, &(0x7f0000002000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x7, "e1"}, @local=@item_4={0x3, 0x2, 0xa, "c54cd5ec"}]}}, &(0x7f0000002040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x46, 0x1, {0x22, 0x4e0}}}}, &(0x7f00000022c0)={0x2c, &(0x7f00000020c0)={0x0, 0x3, 0xd1, "bdd9d23faa1a57680adb88fd2f0098335c5799d90925531b06e687a95f3808e6cab12826afe1ee7c392a86d5e0b8643c84d9660789f0d82d63ab1e21b746386363915ae2d755575a95e04a0e20e5545f3e038ea680c7a43d91917f6973fe4022dce55ed2909733ac9ff6515cd47a46b907fe012a78bba2b61a2a75edca09897f444fb43fe8ff9a217e8aa18ab2d444b3ab391ff2477061f98f785a6097b10a86f4c6d46253bfc52529d3c258aecb62a6be6cc11ae082ae8fae5a1d5dde5747ee08a16faadf42ab2a925dda4c367dc35b23"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000002240)={0x20, 0x1, 0x1a, "ee5ebc315a1873b7bcaf8d4e96b15966e6aac1bb45238c713a4f"}, &(0x7f0000002280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect$cdc_ecm(0x6, 0x64, &(0x7f0000002300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x9, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "ef00"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x8, 0x2f}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2b, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000002680)={0xa, &(0x7f0000002380)={0xa, 0x6, 0x100, 0x6, 0xc1, 0x5, 0x10, 0x8}, 0x28, &(0x7f00000023c0)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x1, 0x0, 0x5, [0x1fe3f30, 0x30, 0xc000, 0x0, 0xff3f30]}, @ptm_cap={0x3}]}, 0x7, [{0x4e, &(0x7f0000002400)=@string={0x4e, 0x3, "8041168b5c4f788f8114cffed518ba2b666c3a778727d3925a2926928e102f3f902e5d889ae0d937d441db6d60848c2c603b4fb4808791cf64b47e1d31111fd8061967e4f8140630cd3b44f8"}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x2f, &(0x7f0000002500)=@string={0x2f, 0x3, "7ec98bdab0580c7fb24c69cde3af0bf37800084a3536be4d39160361c135d4e911a2c6fea8ab220c398da38656"}}, {0x2b, &(0x7f0000002540)=@string={0x2b, 0x3, "aaea1292acc4a4ff4309f34aaf4b194fa4c98b9351c9413bf49e30f001478e7c13e7cb3b9feddb96d1"}}, {0x82, &(0x7f0000002580)=@string={0x82, 0x3, "4b2b4d73fb6aebdd35b652845872023a06421f1236f33e02d982eec28855d81d4a63d63d53b85f91e9480d1d1e3d7760b84058f39c44dee880a3555367a8fea48d14eb3cdefe1bc3ec901e8ed0d6c9f4afc8301e2dcbf957d12c3f615caf65f1a82ac75eee57eb6417be801d6ec15b7cd25447c6140dce37f3069bf4e017413b"}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x1007}}]}) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000002700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000002800)={0x14, &(0x7f0000002740)={0x20, 0x3, 0x4f, {0x4f, 0x6, "3de772db8f8667f6365d66959e6800707edfa313fb3a66dc289333d75ac200b08ac072eecb6a79d91f06c8e0a397a864fb01204a1708381c01c530f9690e00217f6993c774042d802f1043c2db"}}, &(0x7f00000027c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000002a80)={0x34, &(0x7f0000002840)={0x20, 0x31, 0xeb, "dc2343e5eb4e95ef64b389d361d4ecdae89c33f647f6e77eb6f3cdb251c32635c0f988420d11b5ee7be379e338f91054fe43782f6056bd1ba240d382937daf6f1c46a6e225152af3afc72684143b4461cb37d0d278a565643537c7914dd12ab742a9ceac671d9a819ad7d9f28037200e02f0514fca7197b20dc0fbccb0833656ce5b8259bda6b0775f8e98beb47ee6a36db8d486b692c0826415d698358d311970ab51b47d3f1c0d24bc24aa35bdf4be60cfb7d7900ea4980856356cae064cf984840f714e3f322d42b398d73cd37e0d886b186d893c3bcff8324846aa2e7159bd0880d39680d61bcc0cb8"}, &(0x7f0000002940)={0x0, 0xa, 0x1}, &(0x7f0000002980)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000029c0)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000002a00)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000002a40)={0xc0, 0xa2, 0x2f, "ddb7129ad7b2632c77d5e888e7e8e52e57883914ffa222069e786e3a6575323c95186eb73b5b2e64aaf1715fe764d9"}}) socket(0x8, 0x6, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x78, &(0x7f0000002b40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x3, 0x50, 0x86, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "e87c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa3, 0x1ff, 0xc}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xf8, 0x8, 0xba, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x2, 0xa, 0xf}, @mdlm={0x15, 0x24, 0x12, 0xf000}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0xa, 0x7f}}}}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x310, 0x10, 0x3, 0xf, 0xff, 0x1}, 0x41, &(0x7f0000002c00)={0x5, 0xf, 0x41, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x8, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x6, 0xec, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4451bfaac8a9d869b0f0b6d44e48947c"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "aa9be4670b51df7a173496f0f5eb4963"}]}, 0x6, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x244e}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x83e}}, {0x18, &(0x7f0000002dc0)=@string={0x18, 0x3, "c651c2249e5145c239c03ce3ddf7ac66d5a2aa55f7dd"}}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000002e80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x30, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x967}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x70, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000003180)={0xa, &(0x7f0000002ec0)={0xa, 0x6, 0x250, 0x1, 0x6, 0x43, 0xff, 0x7}, 0x5, &(0x7f0000002f00)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000002f40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0xc01}}, {0x73, &(0x7f0000003000)=@string={0x73, 0x3, "23853fdd31b783443b06d456c3674f645fe48b7624dea734fcbebbf6c594c4e2b558c9b0211a3dc33ee794e090a91475402a3602f5df371080e5c68b43b5c7e686eb5a676a6dd00b0cdb589a76aabb171944a2df9d7a711e9a34064519cab8239ff123384bf4f47974034b605aafb3bf63"}}, {0xb0, &(0x7f0000003080)=@string={0xb0, 0x3, "6532647d7faf9500e14f37c88eed98c4e6dfe55f1d5a9a3baabc30e4635b83aa825a2548416a3f30105f2c8fc3902f346f9b87493de949aee5d9a40307e0f24e6ca5e2856a9b103d4608ad48b77ec5c31f1640bea5ddf912e35634bdd41845510a025142dd14919fb129f19351c8aff2e5d63a792048841184219ba50524345d5b271508ee7fca0b99ff05044556f944f4e7354a20d0a4acf0e8cf1c61c49db61a23a541b1c13b65e304c477a5fe"}}, {0x4, &(0x7f0000003140)=@lang_id={0x4, 0x3, 0x437}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000003200)='./binderfs/custom0\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000003240), 0x686100, 0x0) write$tun(r4, &(0x7f0000003280)={@val={0x0, 0x890d}, @val={0x1, 0x4, 0x5, 0x7, 0x100, 0x7f}, @mpls={[{0x8000, 0x0, 0x1}, {0xe}, {0x1, 0x0, 0x1}], @ipv4=@igmp={{0xc, 0x4, 0x1, 0x3c, 0x39, 0x68, 0x0, 0x81, 0x2, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x97, [@dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @end]}}, {0x17, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, 'V'}}}}, 0x53) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000003300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xba, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0xaf, 0x2, 0x7, 0x1, 0x1, 0x79, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xde, 0x16, 0xe6}}}}}]}}]}}, &(0x7f0000003580)={0xa, &(0x7f0000003340)={0xa, 0x6, 0x300, 0x9, 0x9, 0x5, 0x8, 0x2}, 0x2d, &(0x7f0000003380)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "0dd8eb142b42ed798b3376e861b6623f"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4f4c3bfa85ac42640256eb2f97fbed35"}]}, 0x3, [{0x73, &(0x7f00000033c0)=@string={0x73, 0x3, "20486b2637bdaf674605a3069f0b9a31eedf052a4c8974d254a55e04b24856178976219bb83c6a9dd06edae260dbe67e06c138a007e527535af64686cacf06f5d69b6917382d5e0367153d11a94707d9585fa6e5adab3c0ad64b00b247f1987e5d96d4617dbe01905a4b1840f119d7a67e"}}, {0x9a, &(0x7f0000003440)=@string={0x9a, 0x3, "b10ee859bcfe7448dcf0ee1e1c236ca4276e3e2c44a6cc7a9c09c9fe6a2ddaa9468e641807c2fe4bd5d304f39f72c19dd9beb8c0296d37902dc7f4bf5847263f9a329cf6fd5516aad99fe6dcdccdb3f4b6942fa2b58f7499017aba400f30541abd5ba218d783c7d884f9838c9b100c1aa685a4bf0c23795011d37bb6906d452e433a9630f4fb2b4241f2dd37f20ab805c0979f5d1addc61b"}}, {0x7d, &(0x7f0000003500)=@string={0x7d, 0x3, "04768d16bb252264baaea38f4b930bb30111ec9850e216feac3162647ccfe737daf3b57158f828305f64c1bdefd1a8ed0333e57c9cc0a7975df35f40b9601b82effe1185cbe287d5634dbddb4ca3d9efff741ca45fbe58a424c01c11cf6fe8efe43c58fe4036ce106bdc32364f303afea850306cb406027fa97ffe"}}]}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000035c0), 0x80000, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000003600)="189f93da08b4476be0002e75e412db08cbbec6791d9c81ae522f03bf913f442f2817192cb070497bf0dddce994e188fae25c925b39f632ea5a80ba39ab4af47c17e91b3c33124a737325d4ae04e639d4b77ee53109d4d0c40dcd42e04d273172e6f3de69f0b841f4534555538c230510b3c02a8a27b2b2d424b13ed6324fcfcfdd32ffad72a1e39e163d2f85c96e4974949319c6bc51fd1b323dd6df9247746c5ae96eff54d4fe") r6 = open$dir(&(0x7f00000036c0)='./file0\x00', 0x18000, 0x140) mkdirat(r6, &(0x7f0000003700)='./file0\x00', 0x80) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000003740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000003840)={0x14, &(0x7f0000003780)={0x20, 0xb, 0x6d, {0x6d, 0x5, "f071dd15c52ae19189c1fd52cc21a365454984c866a1043dec194e3db8770508074bcc94b51f174c1a16d88855747f655c5aa4230c93a10f1e51b30cf2c7ecbc2030d2840c104de48c6e2d537164e445d9f0611bf604a8ffded74a7d471dbf92c446cd86f5e90ad984f642"}}, &(0x7f0000003800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000003b00)={0x34, &(0x7f0000003880)={0x20, 0x31, 0xcf, "622c833a0db2efb9bcc2d445d691c2c5a666947d4dbe434a76776d108743a0af9cdc4c3746deb7def36281c7ec2421861645fc661dd0b747c2689eee36403d18fe3382d5dfaa15292139d10e02c98eb9d19303827d6c775c91ffedf7df70153204b283e5fe6c0eeb0a15446e42a97ca9ba3f54758574d5994e649d7d63898f276f447e275142241f3147d9963d617ec1aa808ed960c1521d2821c757d1692fff58f3957f482c19970db943ee98f8bdb7fb6c23c79968cd6dad8f344ad62477566a820227af85cf1dfbee4c2aaf5a25"}, &(0x7f0000003980)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000039c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003a00)={0x20, 0x0, 0x73, {0x71, "361f2f2b5d627672106e250768911e1b7aa65e37ec42358f4876d3c5f46e657f3c96d63c1174dbfd213d87a91bb82be385ea80c39f5f95848125158d6bc7ba7eab4841aad870684d11cc108c56c59441fa29938d06cc04793b32fc3346efa5cdfdd8e1b1a16daf19f2f56886999beebe06"}}, &(0x7f0000003a80)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000003ac0)={0x20, 0x0, 0x1, 0x1}}) pipe(&(0x7f0000003b40)={0xffffffffffffffff}) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000003b80)={0xb, 0x8, [{0x1, 0x0, 0x6}, {0x3, 0x0, 0x1ee}, {0x401, 0x0, 0x2}, {0x8, 0x0, 0x7fffffffffffffff}, {0xef, 0x0, 0x1}, {0x7ef6, 0x0, 0x9}, {0x6, 0x0, 0x9}, {0xfffffffd, 0x0, 0x7fffffffffffffff}, {0x80000001, 0x0, 0x400}, {0x0, 0x0, 0x80000001}, {0xffffffff, 0x0, 0x9}, {0x4, 0x0, 0x8116}, {0x1ff, 0x0, 0x8}, {0x3}, {0x6, 0x0, 0x6}, {0x1000, 0x0, 0x100}]}) 126.751458ms ago: executing program 8 (id=3821): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x12004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64063d30303030303030303030303030303030303130303030302c757365725f69645f518be72b5cdfed89de6e8b37ab35676f3fe9154a67a59c62d16047a11477f7629664022d69c946dc9132d946a0c521ce03cd61d6fcdb906faec70abd0eaa7687124a5b67f9cb62c36e87b94008b4dfc0dce288ef0c4801892a77c78f85e69ae6aefa1bf692736ea07e9f642618f7ace475831a462f1f1c803fcc84cc7b17", @ANYRESDEC, @ANYBLOB=',grou', @ANYRESDEC, @ANYBLOB]) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21.0027ms ago: executing program 7 (id=3822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) recvfrom(r1, &(0x7f0000000040)=""/27, 0x1b, 0x2020, &(0x7f0000000080)=@ax25={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, 0x0}, 0x20) (async) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000240)=0x80000001, &(0x7f0000000280)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x400, 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1101, 0x2}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 19.94609ms ago: executing program 7 (id=3823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x533, 0x505800) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{0x77359400}, 0x15, 0x3ff, 0x8}, {{r2, r3/1000+10000}, 0x17}, {{0x77359400}, 0x18, 0x8, 0xdaaf}, {{0x0, 0x2710}, 0x3e, 0x0, 0x1}, {{0x0, 0xea60}, 0x14, 0x4, 0x6}, {{0x0, 0x2710}, 0xb, 0x8001, 0x5}, {{}, 0x0, 0x3, 0x3}, {{0x77359400}, 0x15, 0xfff2, 0x800}, {{}, 0x4, 0xb4e, 0x9}], 0xd8) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000200)={{r1}, "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"}) pipe2$9p(&(0x7f0000001200), 0x80) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001240)=0x3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x2002, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000012c0)={0x1, 0xe}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000001300)=""/147) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000013c0)={0x51540951, 0x0, 0x1}) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x4) fsetxattr$security_selinux(r4, &(0x7f0000001440), &(0x7f0000001480)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f00000014c0)=0xff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001580)={'gretap0\x00', &(0x7f0000001500)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x80, 0x8, {{0xc, 0x4, 0x3, 0x3a, 0x30, 0x66, 0x0, 0xf, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x3, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x2}]}]}}}}}) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000015c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x20}, r8}, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001740)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/88, 0x58, 0x1, &(0x7f0000001680)=""/133, 0x85}, &(0x7f0000001780)=0x40) epoll_pwait2(r6, &(0x7f00000017c0)=[{}, {}], 0x2, &(0x7f0000001800), &(0x7f0000001840)={[0x3]}, 0x8) mknodat$loop(r6, &(0x7f0000001880)='./file0\x00', 0xc000, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000018c0)={@loopback, @private=0xa010102, 0x0, "e9d27552589cccd7b7c4625c4bcb62874a2160750d04d0ddab2e4521d9d5f76c", 0xa7, 0xefec, 0x800, 0x9}, 0x3c) fadvise64(r5, 0x8, 0xf00, 0x4) setsockopt$inet_buf(r7, 0x0, 0x28, &(0x7f0000001900)="42d0626b3a2dadae504501b42158b3b15c34c215bec9ce466dafa2c579d454b71eae4e1139962191db9cb5746286e9f73ef515733ba1a67c9ad116081c56ebe01860ae9bb5a6c5ac055aae88a626cabb3f3334785fd35acc37449818c2b308ca581935d26b99a2bf4cb046e9987db8ee874fd3855734a2f6e429c9eeb01207e10841beb1e6eefb03085daed23e4deed1c252", 0x92) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000019c0)={'wg2\x00'}) read$FUSE(r5, &(0x7f0000001a00)={0x2020}, 0x2020) r10 = syz_open_dev$evdev(&(0x7f0000003a40), 0x6, 0xcc03) ioctl$EVIOCGMTSLOTS(r10, 0x8040450a, &(0x7f0000003a80)=""/137) 19.75339ms ago: executing program 8 (id=3824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0xf866, {{0xa, 0x4e21, 0xffffffff, @mcast1, 0x5}}}, 0x88) 11.588411ms ago: executing program 8 (id=3825): r0 = getpid() (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000100)) (async) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000600)={'sit0\x00', 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0x6}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="780000001a0001002a1094d87dbd7000003e9e180f7a509dfa"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x4810) (async) fsetxattr$security_selinux(r2, &(0x7f0000000180), &(0x7f0000000280)='system_u:object_r:random_device_t:s0\x00', 0x25, 0x1) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) (async) r7 = userfaultfd(0x80001) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={@rand_addr=0x64010102, 0x1, 0x0, 0x90, 0x0, [{@remote}, {@empty}, {}, {@initdev}, {@initdev}, {@loopback}, {@multicast2}, {@initdev}, {@local}]}}) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0xf, 0x0, &(0x7f0000000080)) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) (async) syz_pidfd_open(r0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) (async) r10 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r10, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=3826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x1, r2, &(0x7f00000004c0), 0x7fff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): rejected, failed to enable media [ 163.793603][ T7952] tipc: Enabling of bearer rejected, failed to enable media [ 163.802961][ T7952] tipc: Enabling of bearer rejected, failed to enable media [ 163.816386][ T760] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 163.839452][ T36] audit: type=1326 audit(2000000101.937:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7970 comm="syz.2.2437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb79598ebe9 code=0x0 [ 163.886067][ T7978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 163.886321][ T7980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.920740][ T36] audit: type=1400 audit(2000000102.003:845): avc: denied { validate_trans } for pid=7983 comm="syz.5.2440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.921848][ T7984] rust_binder: Write failure EFAULT in pid:269 [ 163.927661][ T7985] rust_binder: Write failure EFAULT in pid:269 [ 163.950559][ T7986] netlink: 'syz.2.2437': attribute type 12 has an invalid length. [ 163.977856][ T760] usb 7-1: No LPM exit latency info found, disabling LPM. [ 163.989447][ T760] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.998574][ T760] usb 7-1: config 1 has no interface number 1 [ 164.004652][ T760] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 164.017625][ T760] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 164.030593][ T760] usb 7-1: string descriptor 0 read error: -22 [ 164.036823][ T760] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.046653][ T760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.058183][ T760] usb 7-1: low speed audio streaming not supported [ 164.066410][ T7997] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 164.273502][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.291262][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.313895][ T7960] rust_binder: Error while translating object. [ 164.313979][ T7960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.320260][ T7960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 164.351140][ T686] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 164.500878][ T686] usb 6-1: device descriptor read/64, error -71 [ 164.757630][ T686] usb 6-1: device descriptor read/64, error -71 [ 164.979027][ T8015] overlayfs: failed to clone upperpath [ 165.014284][ T686] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 165.153313][ T686] usb 6-1: device descriptor read/64, error -71 [ 165.409987][ T686] usb 6-1: device descriptor read/64, error -71 [ 165.527688][ T686] usb usb6-port1: attempt power cycle [ 165.891256][ T686] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 165.914195][ T686] usb 6-1: device descriptor read/8, error -71 [ 166.052674][ T686] usb 6-1: device descriptor read/8, error -71 [ 166.180300][ T8037] overlayfs: failed to clone upperpath [ 166.318082][ T8048] netlink: 'syz.4.2461': attribute type 4 has an invalid length. [ 166.326442][ T686] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 166.329481][ T8048] netlink: 'syz.4.2461': attribute type 17 has an invalid length. [ 166.352140][ T686] usb 6-1: device descriptor read/8, error -71 [ 166.376117][ T8060] GUP no longer grows the stack in syz.4.2465 (8060): 200000005000-200000008000 (200000004000) [ 166.386785][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.4.2465 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 166.386812][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.386821][ T8060] Call Trace: [ 166.386827][ T8060] [ 166.386832][ T8060] __dump_stack+0x21/0x30 [ 166.386860][ T8060] dump_stack_lvl+0x10c/0x190 [ 166.386881][ T8060] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.386902][ T8060] ? futex_lock_pi_atomic+0xdd/0xc70 [ 166.386922][ T8060] dump_stack+0x19/0x20 [ 166.386932][ T8060] fixup_user_fault+0x63d/0x6d0 [ 166.386944][ T8060] fault_in_user_writeable+0x76/0xe0 [ 166.386953][ T8060] futex_lock_pi+0x258/0xa10 [ 166.386962][ T8060] ? futex_unqueue+0x136/0x160 [ 166.386970][ T8060] ? __cfi_futex_lock_pi+0x10/0x10 [ 166.386980][ T8060] ? __cfi_futex_wake_mark+0x10/0x10 [ 166.386990][ T8060] ? futex_setup_timer+0xb4/0xd0 [ 166.386998][ T8060] ? __cfi_futex_wake_mark+0x10/0x10 [ 166.387010][ T8060] ? mas_find+0x358/0x5f0 [ 166.387020][ T8060] ? __kasan_check_write+0x18/0x20 [ 166.387032][ T8060] do_futex+0x25c/0x500 [ 166.387040][ T8060] ? __cfi_do_futex+0x10/0x10 [ 166.387049][ T8060] ? __vm_munmap+0x2c7/0x370 [ 166.387057][ T8060] __se_sys_futex+0x28f/0x300 [ 166.387066][ T8060] ? __x64_sys_futex+0x110/0x110 [ 166.387075][ T8060] ? __kasan_check_write+0x18/0x20 [ 166.387086][ T8060] __x64_sys_futex+0xe9/0x110 [ 166.387094][ T8060] x64_sys_call+0x227f/0x2ee0 [ 166.387106][ T8060] do_syscall_64+0x58/0xf0 [ 166.387117][ T8060] ? clear_bhb_loop+0x50/0xa0 [ 166.387130][ T8060] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.387141][ T8060] RIP: 0033:0x7f5378b8ebe9 [ 166.387149][ T8060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.387160][ T8060] RSP: 002b:00007f53799e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.387175][ T8060] RAX: ffffffffffffffda RBX: 00007f5378dc5fa0 RCX: 00007f5378b8ebe9 [ 166.387183][ T8060] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 166.387190][ T8060] RBP: 00007f5378c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 166.387196][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.387202][ T8060] R13: 00007f5378dc6038 R14: 00007f5378dc5fa0 R15: 00007ffee8135fd8 [ 166.387210][ T8060] [ 166.388492][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 166.501892][ T686] usb 6-1: device descriptor read/8, error -71 [ 166.504611][ T8060] bridge_slave_1: left allmulticast mode [ 166.629313][ T686] usb usb6-port1: unable to enumerate USB device [ 166.634986][ T8060] bridge_slave_1: left promiscuous mode [ 166.653327][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.660810][ T8060] bridge_slave_0: left allmulticast mode [ 166.666537][ T8060] bridge_slave_0: left promiscuous mode [ 166.672285][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.802061][ T686] usb 7-1: USB disconnect, device number 5 [ 166.811999][ T8063] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 167.207714][ T8085] overlay: ./file0 is not a directory [ 167.286603][ T8082] netlink: 'syz.2.2472': attribute type 4 has an invalid length. [ 167.389242][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 167.389261][ T36] audit: type=1400 audit(2000000105.257:860): avc: denied { create } for pid=8119 comm="syz.4.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 167.390861][ T8121] incfs: Options parsing error. -22 [ 167.421649][ T8121] incfs: mount failed -22 [ 167.502809][ T36] audit: type=1400 audit(2000000105.350:861): avc: denied { setattr } for pid=8113 comm="syz.5.2480" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.526201][ T36] audit: type=1400 audit(2000000105.350:862): avc: denied { map } for pid=8113 comm="syz.5.2480" path="pipe:[26495]" dev="pipefs" ino=26495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 167.531529][ T8124] rust_binder: Write failure EFAULT in pid:291 [ 167.592122][ T8141] netlink: 'syz.4.2490': attribute type 4 has an invalid length. [ 167.870726][ T8154] fuseblk: Bad value for 'fd' [ 167.878637][ T8156] fuseblk: Bad value for 'fd' [ 167.879672][ T36] audit: type=1400 audit(2000000105.705:863): avc: denied { setopt } for pid=8153 comm="syz.2.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.897466][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 167.926316][ T8159] fuse: Bad value for 'fd' [ 168.209729][ T36] audit: type=1400 audit(2000000106.014:864): avc: denied { accept } for pid=8175 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.378712][ T8197] loop9: detected capacity change from 0 to 7 [ 168.385136][ T8197] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.393059][ T8197] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.402397][ T8197] loop9: unable to read partition table [ 168.408292][ T8197] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 168.408292][ T8197] ) failed (rc=-5) [ 168.410137][ T6111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.430054][ T6111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.438364][ T6111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.446369][ T6111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.455280][ T6111] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.552413][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'. [ 168.612471][ T36] audit: type=1400 audit(2000000106.397:865): avc: denied { read } for pid=8212 comm="syz.2.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.616651][ T8219] tipc: Enabling of bearer rejected, failed to enable media [ 168.671904][ T36] audit: type=1400 audit(2000000106.444:866): avc: denied { execute } for pid=8224 comm="syz.4.2517" path="/memory.events.local" dev="ramfs" ino=37834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 168.716515][ T36] audit: type=1400 audit(2000000106.491:867): avc: denied { getopt } for pid=8228 comm="syz.4.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.717089][ T8229] netlink: 'syz.4.2519': attribute type 4 has an invalid length. [ 168.744270][ T8229] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2519'. [ 168.761659][ T8229] overlayfs: failed to resolve './file0/file0': -2 [ 168.769299][ T36] audit: type=1400 audit(2000000106.547:868): avc: denied { ioctl } for pid=8228 comm="syz.4.2519" path="socket:[37944]" dev="sockfs" ino=37944 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.810412][ T8242] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000006ZY<' [ 168.818003][ T8242] No source specified [ 168.981630][ T36] audit: type=1400 audit(2000000106.734:869): avc: denied { map } for pid=8263 comm="syz.6.2529" path="socket:[38934]" dev="sockfs" ino=38934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.564787][ T8297] binder: Unknown parameter 'dirsy' [ 169.595523][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.595550][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.602109][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.608827][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.662444][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2541'. [ 169.684382][ T8313] rust_binder: Error while translating object. [ 169.684411][ T8313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 169.690821][ T8313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:188 [ 170.363162][ T8348] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2556'. [ 170.441719][ T8350] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.450861][ T8350] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 170.458842][ T8350] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2557'. [ 171.087451][ T8368] 9pnet_virtio: no channels available for device syz [ 171.137684][ T8374] fuse: Unknown parameter '†' [ 171.227742][ T8377] overlayfs: failed to clone upperpath [ 171.499690][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 171.506961][ T8381] Bluetooth: hci1: unexpected event 0x02 length: 0 < 1 [ 171.816448][ T379] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.816515][ T8381] Bluetooth: hci0: command 0x1003 tx timeout [ 172.038903][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2576'. [ 172.048618][ T8407] fuse: Unknown parameter 'ß|BÂÔbŽ×íˆ@4„†t?NXY…µµWG `«9¼±9¶.' [ 172.247014][ T686] rust_binder: 8418: removing orphan mapping 0:96 [ 172.253679][ T686] rust_binder: 0: removing orphan mapping 96:24 [ 172.361675][ T8444] netlink: 'syz.2.2588': attribute type 11 has an invalid length. [ 172.435137][ T8448] syzkaller0: entered promiscuous mode [ 172.440712][ T8448] syzkaller0: entered allmulticast mode [ 172.584128][ T8454] rust_binder: Write failure EFAULT in pid:358 [ 172.898528][ T8462] x_tables: unsorted underflow at hook 2 [ 172.955992][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 172.956014][ T36] audit: type=1400 audit(2000000110.455:883): avc: denied { mount } for pid=8473 comm="syz.2.2598" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.074836][ T8487] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2604'. [ 173.147399][ T36] audit: type=1400 audit(2000000370.641:884): avc: denied { setattr } for pid=8497 comm="syz.4.2609" path="/" dev="configfs" ino=2658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.194521][ T36] audit: type=1400 audit(2000000370.669:885): avc: denied { mounton } for pid=8500 comm="syz.4.2610" path="/bus" dev="ramfs" ino=39450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 173.194856][ T8501] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 173.241093][ T36] audit: type=1326 audit(2000000370.726:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.2.2612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb79598ebe9 code=0x0 [ 173.374591][ T36] audit: type=1400 audit(2000000370.847:887): avc: denied { bind } for pid=8506 comm="syz.4.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.393806][ T36] audit: type=1400 audit(2000000370.847:888): avc: denied { map } for pid=8506 comm="syz.4.2613" path="socket:[39461]" dev="sockfs" ino=39461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.419052][ T36] audit: type=1400 audit(2000000370.847:889): avc: denied { read } for pid=8506 comm="syz.4.2613" path="socket:[39461]" dev="sockfs" ino=39461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.519403][ T36] audit: type=1400 audit(2000000370.987:890): avc: denied { read } for pid=8516 comm="syz.4.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.552181][ T8519] netlink: 'syz.4.2618': attribute type 27 has an invalid length. [ 173.577523][ T8521] overlayfs: failed to clone lowerpath [ 173.698732][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 173.699575][ T379] Bluetooth: hci1: command 0x1003 tx timeout [ 173.931755][ T8536] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 173.995748][ T8541] netlink: 'syz.4.2625': attribute type 4 has an invalid length. [ 174.412108][ T8573] rust_binder: 213: no such ref 2 [ 174.417660][ T8573] rust_binder: inc_ref_done called when no active inc_refs [ 174.417684][ T8573] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 174.432664][ T8574] rust_binder: 213: no such ref 2 [ 174.438038][ T8574] rust_binder: inc_ref_done called when no active inc_refs [ 174.438059][ T8574] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 174.615060][ T8598] rust_binder: Error while translating object. [ 174.615113][ T8598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.621403][ T8598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 174.658823][ T8605] veth1_macvtap: left promiscuous mode [ 174.674077][ T8605] macsec0: entered allmulticast mode [ 174.928489][ T686] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 175.088898][ T686] usb 7-1: Using ep0 maxpacket: 16 [ 175.095118][ T686] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 175.105251][ T686] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.116130][ T686] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.126033][ T686] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.138840][ T686] usb 7-1: config 7 interface 0 has no altsetting 0 [ 175.145460][ T686] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 175.155015][ T686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.222252][ T8613] fuse: Unknown parameter '0x0000000000000004' [ 175.230165][ T8613] overlay: ./bus is not a directory [ 175.598286][ T686] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.000E/input/input25 [ 175.616227][ T686] kye 0003:0458:5010.000E: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 175.773294][ T45] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 175.806221][ T8625] overlayfs: failed to clone upperpath [ 175.914614][ T8629] veth1_macvtap: entered promiscuous mode [ 175.920511][ T8629] veth1_macvtap: entered allmulticast mode [ 175.929406][ T8629] macsec0: left allmulticast mode [ 175.935144][ T8629] veth1_macvtap: left allmulticast mode [ 175.942057][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.958200][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.967810][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.975885][ T45] usb 6-1: Product: syz [ 175.980506][ T45] usb 6-1: Manufacturer: syz [ 175.985185][ T45] usb 6-1: SerialNumber: syz [ 176.225722][ T8651] overlayfs: failed to clone upperpath [ 176.453190][ T8653] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 176.611126][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2664'. [ 176.676752][ T36] audit: type=1400 audit(2000000373.933:891): avc: denied { create } for pid=8657 comm="syz.2.2664" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 176.697741][ C1] kye 0003:0458:5010.000E: usb_submit_urb(ctrl) failed: -1 [ 176.797682][ T36] audit: type=1400 audit(2000000374.045:892): avc: denied { mount } for pid=8667 comm="syz.2.2667" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.840778][ T8674] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2669'. [ 176.869435][ T8678] overlayfs: failed to clone upperpath [ 177.064794][ T45] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 177.071685][ T45] cdc_ncm 6-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 177.079736][ T45] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 177.391142][ T45] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 177.405733][ T45] usb 6-1: USB disconnect, device number 17 [ 177.420533][ T8717] overlayfs: missing 'workdir' [ 177.420557][ T45] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 177.791885][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 177.816075][ T406] usb 7-1: USB disconnect, device number 6 [ 177.873607][ T8744] fuseblk: Unknown parameter 'rootmode' [ 177.965602][ T406] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 178.127111][ T406] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 178.136234][ T406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.144796][ T406] usb 7-1: config 0 descriptor?? [ 178.211057][ T8748] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2695'. [ 178.320587][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 178.320606][ T36] audit: type=1400 audit(2000000375.476:905): avc: denied { create } for pid=8770 comm="syz.4.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 178.381739][ T406] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 178.585768][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 178.596710][ T406] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 178.606781][ T406] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 178.618824][ T406] asix 7-1:0.0: probe with driver asix failed with error -71 [ 178.632936][ T406] usb 7-1: USB disconnect, device number 7 [ 178.710345][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 178.720315][ T8803] 9pnet_fd: Insufficient options for proto=fd [ 178.752531][ T9] usb 6-1: config 0 has an invalid interface number: 242 but max is 0 [ 178.760999][ T9] usb 6-1: config 0 has no interface number 0 [ 178.767145][ T9] usb 6-1: config 0 interface 242 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 178.778266][ T9] usb 6-1: New USB device found, idVendor=326a, idProduct=03fd, bcdDevice= 0.00 [ 178.787293][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.796170][ T9] usb 6-1: config 0 descriptor?? [ 178.801460][ T8773] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 179.217605][ T8807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.217639][ T8807] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 179.227094][ T8807] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:256 [ 179.243662][ T9] hid-generic 0003:326A:03FD.000F: hidraw0: USB HID v1.01 Device [HID 326a:03fd] on usb-dummy_hcd.5-1/input242 [ 179.511704][ T8833] tipc: Enabling of bearer rejected, failed to enable media [ 179.974053][ T8839] fuse: Unknown parameter 'ý` [ 179.974053][ T8839] {[+¢;}éÖÓ Þ²Ûë‚B¢ rejected, failed to enable media [ 185.894623][ T9192] netlink: 'syz.4.2829': attribute type 63 has an invalid length. [ 185.902701][ T9192] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2829'. [ 185.946819][ T9196] overlayfs: failed to clone upperpath [ 186.973113][ T9235] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2843'. [ 187.002599][ T9242] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.2845'. [ 187.005933][ T36] audit: type=1400 audit(2000000383.593:926): avc: denied { read write } for pid=9228 comm="syz.5.2841" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.035742][ T36] audit: type=1400 audit(2000000383.593:927): avc: denied { open } for pid=9228 comm="syz.5.2841" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 187.041446][ T9230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.067765][ T9247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.076275][ T9247] rust_binder: Write failure EFAULT in pid:311 [ 187.090333][ T9249] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 187.107402][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.110022][ T9251] incfs: Options parsing error. -22 [ 187.115566][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.122112][ T9251] incfs: mount failed -22 [ 187.258430][ T9] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 187.419930][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 187.428655][ T9] usb 6-1: string descriptor 0 read error: -22 [ 187.434913][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 187.444053][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.729563][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 187.735582][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 187.744278][ T9] usb 6-1: USB disconnect, device number 21 [ 187.796295][ T9262] rust_binder: Write failure EFAULT in pid:505 [ 187.811377][ T10] rust_binder: 9263: removing orphan mapping 0:24 [ 187.818817][ T36] audit: type=1400 audit(2000000384.360:928): avc: denied { write } for pid=9268 comm="syz.5.2854" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 187.829470][ T9269] random: crng reseeded on system resumption [ 187.917631][ T9269] SELinux: security_context_str_to_sid () failed with errno=-22 [ 187.995095][ T9273] tipc: Started in network mode [ 188.000064][ T9273] tipc: Node identity dacc45cafec9, cluster identity 4711 [ 188.007595][ T9273] tipc: Enabled bearer , priority 0 [ 188.022668][ T9273] syzkaller0: entered promiscuous mode [ 188.028184][ T9273] syzkaller0: entered allmulticast mode [ 188.034063][ T9273] tipc: Resetting bearer [ 188.041761][ T9273] tipc: Resetting bearer [ 188.052539][ T9273] tipc: Disabling bearer [ 188.347832][ T36] audit: type=1400 audit(2000000384.846:929): avc: denied { mount } for pid=9301 comm="syz.2.2864" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 188.909618][ T36] audit: type=1401 audit(2000000385.370:930): op=fscreate invalid_context=CFA7AE [ 188.972528][ T9324] binder: Unknown parameter 'stat(ÇZ3G-ËŽ*>¯tk; .L!}Üue07ù…§KçëµSØ¿¾Ò¹²L¡×tS+ëð‰ç(xŪ«Z[ïÔ' [ 189.268855][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.268884][ T379] Bluetooth: hci0: command 0x1003 tx timeout [ 189.394693][ T36] audit: type=1400 audit(2000000385.818:931): avc: denied { getopt } for pid=9343 comm="syz.6.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.482723][ T36] audit: type=1400 audit(2000000385.903:932): avc: denied { read write } for pid=9343 comm="syz.6.2876" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 189.505677][ T36] audit: type=1400 audit(2000000385.903:933): avc: denied { open } for pid=9343 comm="syz.6.2876" path="/99/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 189.564089][ T9356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.564826][ T9356] rust_binder: Error while translating object. [ 189.571571][ T9356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 189.577778][ T9356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:326 [ 189.889118][ T406] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 190.009236][ T36] audit: type=1400 audit(2000000386.398:934): avc: denied { append } for pid=9369 comm="syz.5.2886" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.060211][ T406] usb 7-1: Using ep0 maxpacket: 32 [ 190.066416][ T406] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 190.074805][ T406] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.090032][ T406] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.099590][ T406] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.111472][ T406] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.121981][ T406] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.135285][ T406] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.144504][ T406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.153390][ T406] usb 7-1: config 0 descriptor?? [ 190.378618][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.388196][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.393026][ T36] audit: type=1400 audit(2000000386.754:935): avc: denied { attach_queue } for pid=9383 comm="syz.5.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 190.398800][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.426490][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.435532][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.444591][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.453368][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.462350][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.471129][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.484261][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.501875][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=9393 comm=syz.4.2894 [ 190.508991][ T406] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 190.514646][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9393 comm=syz.4.2894 [ 190.534978][ T406] usb 7-1: USB disconnect, device number 10 [ 190.543408][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9393 comm=syz.4.2894 [ 190.548624][ T406] usblp0: removed [ 190.808768][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 190.890331][ T36] audit: type=1400 audit(2000000387.221:936): avc: denied { create } for pid=9419 comm="syz.4.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 190.969180][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 190.975338][ T10] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 190.983799][ T10] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 190.992407][ T10] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 191.001505][ T10] usb 6-1: config 250 has no interface number 0 [ 191.007845][ T10] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 191.019520][ T10] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 191.030028][ T10] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.040354][ T10] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 191.050736][ T10] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 191.064242][ T10] usb 6-1: config 250 interface 228 has no altsetting 0 [ 191.072403][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 191.081595][ T10] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 191.089979][ T10] usb 6-1: Product: syz [ 191.094121][ T10] usb 6-1: SerialNumber: syz [ 191.100688][ T10] hub 6-1:250.228: bad descriptor, ignoring hub [ 191.106970][ T10] hub 6-1:250.228: probe with driver hub failed with error -5 [ 191.299649][ T9432] tipc: Can't bind to reserved service type 0 [ 191.315611][ T9398] 2N: renamed from vcan0 (while UP) [ 191.347038][ T10] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 191.375958][ T10] usb 6-1: USB disconnect, device number 22 [ 191.382448][ T10] usblp0: removed [ 191.508765][ T9443] fuse: Bad value for 'group_id' [ 191.513809][ T9443] fuse: Bad value for 'group_id' [ 192.210279][ T36] audit: type=1400 audit(2000000388.465:937): avc: denied { getopt } for pid=9479 comm="syz.6.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.487698][ T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 192.660861][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 192.669496][ T9] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 192.680536][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 192.692014][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 192.701100][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.710537][ T9] usb 7-1: Product: syz [ 192.715048][ T9] usb 7-1: Manufacturer: syz [ 192.721278][ T9] usb 7-1: SerialNumber: syz [ 192.728186][ T9480] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 192.864368][ T9484] SELinux: policydb version 164461020 does not match my version range 15-33 [ 192.873643][ T9484] SELinux: failed to load policy [ 192.954393][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 192.960454][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 192.969615][ T9] usb 7-1: USB disconnect, device number 11 [ 193.172156][ T10] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 193.338193][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 193.347153][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 193.359292][ T36] audit: type=1400 audit(2000000389.531:938): avc: denied { ioctl } for pid=9499 comm="syz.2.2930" path="socket:[42614]" dev="sockfs" ino=42614 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.387445][ T10] usb 6-1: config 1 has an invalid interface number: 6 but max is 2 [ 193.397216][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 193.403240][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2933'. [ 193.406073][ T10] usb 6-1: config 1 has no interface number 1 [ 193.426621][ T10] usb 6-1: too many endpoints for config 1 interface 6 altsetting 1: 145, using maximum allowed: 30 [ 193.439242][ T10] usb 6-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 193.452896][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 4 [ 193.464255][ T10] usb 6-1: config 1 interface 6 has no altsetting 0 [ 193.473381][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.482467][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.490610][ T10] usb 6-1: Product: syz [ 193.494994][ T10] usb 6-1: Manufacturer: syz [ 193.499616][ T10] usb 6-1: SerialNumber: syz [ 193.513740][ T36] audit: type=1400 audit(2000000389.671:939): avc: denied { map } for pid=9526 comm="syz.6.2940" path="socket:[42671]" dev="sockfs" ino=42671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 193.835279][ T9541] netlink: 'syz.5.2925': attribute type 4 has an invalid length. [ 193.843156][ T9541] netlink: 'syz.5.2925': attribute type 21 has an invalid length. [ 193.851105][ T9541] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2925'. [ 194.637140][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 194.798960][ T9] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 194.808307][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.816839][ T9] usb 7-1: config 0 descriptor?? [ 195.046532][ T9597] fuse: Invalid rootmode [ 196.125497][ T10] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 196.148532][ T10] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 196.163794][ T10] hub 6-1:1.6: Invalid hub with more than one config or interface [ 196.171903][ T10] hub 6-1:1.6: probe with driver hub failed with error -22 [ 196.188718][ T10] usb 6-1: USB disconnect, device number 23 [ 196.199675][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.324495][ T9] usb 7-1: Cannot set autoneg [ 196.329398][ T9] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 196.344272][ T9] usb 7-1: USB disconnect, device number 12 [ 196.353001][ T13] bridge_slave_1: left allmulticast mode [ 196.362932][ T13] bridge_slave_1: left promiscuous mode [ 196.372061][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.379885][ T13] bridge_slave_0: left allmulticast mode [ 196.386754][ T13] bridge_slave_0: left promiscuous mode [ 196.392618][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.505090][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.512212][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.519373][ T9654] bridge_slave_0: entered allmulticast mode [ 196.525545][ T9654] bridge_slave_0: entered promiscuous mode [ 196.532162][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.539467][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.546800][ T9654] bridge_slave_1: entered allmulticast mode [ 196.553110][ T9654] bridge_slave_1: entered promiscuous mode [ 196.559083][ T13] tipc: Left network mode [ 196.564154][ T13] veth1_macvtap: left promiscuous mode [ 196.569714][ T13] veth0_vlan: left promiscuous mode [ 196.621763][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.628925][ T9654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.636183][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.643214][ T9654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.685385][ T9654] veth0_vlan: entered promiscuous mode [ 196.694794][ T9654] veth1_macvtap: entered promiscuous mode [ 196.714207][ T36] audit: type=1400 audit(2000000392.673:940): avc: denied { mounton } for pid=9654 comm="syz-executor" path="/root/syzkaller.6L8X5E/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 196.739299][ T36] audit: type=1400 audit(2000000392.673:941): avc: denied { mounton } for pid=9654 comm="syz-executor" path="/root/syzkaller.6L8X5E/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 196.766165][ T36] audit: type=1400 audit(2000000392.673:942): avc: denied { mounton } for pid=9654 comm="syz-executor" path="/root/syzkaller.6L8X5E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 196.795109][ T36] audit: type=1400 audit(2000000392.692:943): avc: denied { mounton } for pid=9654 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 196.819441][ T36] audit: type=1400 audit(2000000392.692:944): avc: denied { mounton } for pid=9654 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 196.823051][ T9669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9669 comm=syz.7.2981 [ 196.865379][ T9669] __vm_enough_memory: pid: 9669, comm: syz.7.2981, bytes: 18014402804453376 not enough memory for the allocation [ 196.890665][ T9681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.927021][ T9683] rust_binder: Write failure EFAULT in pid:4 [ 197.225079][ T406] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 197.312728][ T36] audit: type=1400 audit(2000000393.234:945): avc: denied { create } for pid=9700 comm="syz.2.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 197.408389][ T406] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 197.417974][ T406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.429017][ T406] usb 7-1: config 0 descriptor?? [ 197.442190][ T9706] /dev/rnullb0: Can't lookup blockdev [ 198.018656][ T9718] fusectl: Unknown parameter '8’_¾Û@ðõÕ†!…W–w¯xfŠ†žÚn0¾_4˜_¤º [ 198.018656][ T9718] c!{΀£7? Ü–BZdZ"øù‡CùµZ¶LAĸ˜šÚÙm| [ 198.018656][ T9718] \8ž€+°ÝáÛß&tÒêʬYí' [ 198.045857][ T9720] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3003'. [ 198.073364][ T9728] /dev/rnullb0: Can't lookup blockdev [ 198.074450][ T9730] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 198.080391][ T9733] /dev/rnullb0: Can't lookup blockdev [ 198.488467][ T36] audit: type=1326 audit(2000000394.337:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.4.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5378b8ebe9 code=0x7fc00000 [ 198.657477][ T36] audit: type=1400 audit(2000000394.487:947): avc: denied { nlmsg_tty_audit } for pid=9802 comm="syz.4.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 198.688551][ T9805] fuse: Bad value for 'fd' [ 198.694528][ T9805] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3031'. [ 198.704496][ T9805] overlay: ./file0 is not a directory [ 198.737770][ T406] usb 7-1: Cannot set autoneg [ 198.742698][ T406] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 198.755130][ T406] usb 7-1: USB disconnect, device number 13 [ 199.287065][ T9827] /dev/rnullb0: Can't open blockdev [ 199.292468][ T9829] /dev/rnullb0: Can't open blockdev [ 199.300751][ T36] audit: type=1400 audit(2000000395.095:948): avc: denied { sqpoll } for pid=9824 comm="syz.6.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.359303][ T9837] 9pnet_fd: Insufficient options for proto=fd [ 199.366670][ T9837] netlink: 'syz.4.3041': attribute type 15 has an invalid length. [ 199.381742][ T9839] overlayfs: failed to clone upperpath [ 199.381865][ T9840] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3042'. [ 199.439335][ T9843] netlink: 'syz.4.3043': attribute type 4 has an invalid length. [ 199.700740][ T36] audit: type=1326 audit(2000000395.459:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9810 comm="syz.2.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79598ebe9 code=0x7fc00000 [ 199.730802][ T9870] bpf: Bad value for 'uid' [ 199.833503][ T9890] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3058'. [ 199.842662][ T9890] 0ªö»ôM: renamed from gretap0 (while UP) [ 199.849068][ T9890] 0ªö»ôM: entered allmulticast mode [ 199.854569][ T9890] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 199.879326][ T9893] /dev/rnullb0: Can't lookup blockdev [ 199.891924][ T9896] /dev/rnullb0: Can't lookup blockdev [ 200.016695][ T9918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.025467][ T9918] overlayfs: missing 'lowerdir' [ 200.037525][ T9921] netlink: 'syz.2.3069': attribute type 25 has an invalid length. [ 200.136928][ T9928] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 200.183522][ T9932] input: syz1 as /devices/virtual/input/input26 [ 200.191199][ T9932] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 200.550856][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 200.712737][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.728514][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 200.746331][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.756253][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.764456][ T9] usb 7-1: Product: syz [ 200.778463][ T9] usb 7-1: Manufacturer: syz [ 200.789580][ T9] usb 7-1: SerialNumber: syz [ 200.935485][ T9996] fuse: Unknown parameter '' [ 201.018053][ T9938] fuse: Bad value for 'fd' [ 201.026322][ T9] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 201.038262][ T9] usb 7-1: USB disconnect, device number 14 [ 201.651938][T10029] syzkaller0: entered promiscuous mode [ 201.663460][T10029] syzkaller0: entered allmulticast mode [ 201.925748][T10064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.938320][T10064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.989765][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'. [ 202.114514][ T760] rust_binder: 0: removing orphan mapping 0:24 [ 202.198901][T10110] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 202.278346][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.303480][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.315034][T10108] bridge_slave_0: entered allmulticast mode [ 202.325931][T10108] bridge_slave_0: entered promiscuous mode [ 202.344852][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.356378][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.368047][T10108] bridge_slave_1: entered allmulticast mode [ 202.377903][T10108] bridge_slave_1: entered promiscuous mode [ 202.537713][T10108] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.544845][T10108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.552281][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.559412][T10108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.593543][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.601015][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.611812][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.618930][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.632517][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.639603][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.687691][T10108] veth0_vlan: entered promiscuous mode [ 202.703071][T10108] veth1_macvtap: entered promiscuous mode [ 202.727137][T10136] incfs: Options parsing error. -22 [ 202.733569][T10136] incfs: mount failed -22 [ 202.756982][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.768773][T10142] 9pnet_fd: Insufficient options for proto=fd [ 203.441879][T10149] fuseblk: Bad value for 'user_id' [ 203.447121][T10149] fuseblk: Bad value for 'user_id' [ 203.462332][ T36] kauditd_printk_skb: 4769 callbacks suppressed [ 203.462353][ T36] audit: type=1400 audit(2000000398.985:5719): avc: denied { bind } for pid=10150 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.530548][T10155] syz.6.3143: attempt to access beyond end of device [ 203.530548][T10155] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 203.543428][T10155] FAT-fs (loop6): unable to read boot sector [ 204.253003][T10167] /dev/rnullb0: Can't lookup blockdev [ 204.381761][T10182] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000fffffffd not found [ 204.390099][T10182] rust_binder: Write failure EINVAL in pid:399 [ 204.390445][T10184] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000fffffffd not found [ 204.405130][T10184] rust_binder: Write failure EINVAL in pid:399 [ 204.419884][T10188] rust_binder: Error while translating object. [ 204.426285][T10188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 204.432571][T10188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:402 [ 204.457384][T10195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.475270][T10195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.484999][T10192] netlink: 'syz.6.3157': attribute type 13 has an invalid length. [ 204.494627][T10192] rust_binder: Error while translating object. [ 204.494679][T10192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.502936][T10192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 204.710708][ T686] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 204.860459][ T686] usb 7-1: device descriptor read/64, error -71 [ 204.924619][ T379] Bluetooth: hci0: command 0x1003 tx timeout [ 204.924648][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.063805][ T36] audit: type=1400 audit(2000000400.481:5720): avc: denied { create } for pid=10205 comm="syz.2.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.083807][ T36] audit: type=1400 audit(2000000400.481:5721): avc: denied { create } for pid=10205 comm="syz.2.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.111404][T10211] /dev/rnullb0: Can't lookup blockdev [ 205.117086][ T686] usb 7-1: device descriptor read/64, error -71 [ 205.213328][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 205.352339][ T9] usb 5-1: device descriptor read/64, error -71 [ 205.373770][ T686] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 205.523439][ T686] usb 7-1: device descriptor read/64, error -71 [ 205.609038][ T9] usb 5-1: device descriptor read/64, error -71 [ 205.683138][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3167'. [ 205.780163][ T686] usb 7-1: device descriptor read/64, error -71 [ 205.812045][ T36] audit: type=1400 audit(2000000401.173:5722): avc: denied { create } for pid=10232 comm="syz.2.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 205.833015][ T36] audit: type=1400 audit(2000000401.192:5723): avc: denied { sys_admin } for pid=10232 comm="syz.2.3170" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 205.865909][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 205.897808][ T686] usb usb7-port1: attempt power cycle [ 206.026071][ T9] usb 5-1: device descriptor read/64, error -71 [ 206.282721][ T686] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 206.293888][ T9] usb 5-1: device descriptor read/64, error -71 [ 206.315892][ T686] usb 7-1: device descriptor read/8, error -71 [ 206.411173][ T9] usb usb5-port1: attempt power cycle [ 206.476250][ T686] usb 7-1: device descriptor read/8, error -71 [ 206.742596][ T686] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 206.774599][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 206.775624][ T686] usb 7-1: device descriptor read/8, error -71 [ 206.807994][ T9] usb 5-1: device descriptor read/8, error -71 [ 206.929434][ T686] usb 7-1: device descriptor read/8, error -71 [ 206.946758][ T9] usb 5-1: device descriptor read/8, error -71 [ 207.052754][ T686] usb usb7-port1: unable to enumerate USB device [ 207.202375][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 207.224794][ T9] usb 5-1: device descriptor read/8, error -71 [ 207.297620][ T36] audit: type=1326 audit(2000000402.566:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10296 comm="syz.7.3191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f335e78ebe9 code=0x0 [ 207.363769][ T9] usb 5-1: device descriptor read/8, error -71 [ 207.488285][ T9] usb usb5-port1: unable to enumerate USB device [ 207.710093][T10324] netlink: 'syz.6.3198': attribute type 11 has an invalid length. [ 208.036469][ T406] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 208.175375][T10332] rust_binder: Error while translating object. [ 208.175431][T10332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 208.182061][T10332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:7 [ 208.192673][ T406] usb 7-1: device descriptor read/64, error -71 [ 208.322037][T10337] fuseblk: Bad value for 'fd' [ 208.396052][T10343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=10343 comm=syz.4.3205 [ 208.409376][T10343] rust_binder: 12: no such ref 1 [ 208.414443][T10343] rust_binder: 12: no such ref 1 [ 208.419444][T10343] rust_binder: 12: no such ref 0 [ 208.424394][T10343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 208.464256][ T406] usb 7-1: device descriptor read/64, error -71 [ 208.731610][ T406] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 208.763643][ T686] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 208.870639][ T406] usb 7-1: device descriptor read/64, error -71 [ 208.897096][ T36] audit: type=1326 audit(2000000404.063:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.7.3212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f335e78ebe9 code=0x0 [ 208.925284][ T686] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.934042][ T686] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 208.943628][ T686] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.954796][ T686] usb 5-1: config 220 has no interface number 2 [ 208.961299][ T686] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.974592][ T686] usb 5-1: config 220 interface 0 has no altsetting 0 [ 208.981374][ T686] usb 5-1: config 220 interface 76 has no altsetting 0 [ 208.988464][ T686] usb 5-1: config 220 interface 1 has no altsetting 0 [ 208.996735][ T686] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.006042][ T686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.014490][ T686] usb 5-1: Product: syz [ 209.018653][ T686] usb 5-1: Manufacturer: syz [ 209.023276][ T686] usb 5-1: SerialNumber: syz [ 209.128729][ T406] usb 7-1: device descriptor read/64, error -71 [ 209.243769][T10355] rust_binder: Error while translating object. [ 209.243823][T10355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.250181][ T406] usb usb7-port1: attempt power cycle [ 209.250434][T10355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 209.269853][ T686] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 209.285317][ T686] usb 5-1: No valid video chain found. [ 209.291459][ T686] usb 5-1: selecting invalid altsetting 0 [ 209.299957][ T686] usb 5-1: USB disconnect, device number 41 [ 209.619171][ T406] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 209.641666][ T406] usb 7-1: device descriptor read/8, error -71 [ 209.780553][ T406] usb 7-1: device descriptor read/8, error -71 [ 209.801312][T10383] /dev/loop0: Can't lookup blockdev [ 209.830302][ T36] audit: type=1400 audit(2000000404.932:5726): avc: denied { create } for pid=10388 comm="syz.4.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 209.865430][ T36] audit: type=1400 audit(2000000404.970:5727): avc: denied { setattr } for pid=10390 comm="syz.2.3221" name="secretmem" dev="secretmem" ino=47314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.892861][T10389] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß®x [ 209.892861][T10389] ) failed with errno=-22 [ 210.036222][ T406] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 210.058667][ T406] usb 7-1: device descriptor read/8, error -71 [ 210.197635][ T406] usb 7-1: device descriptor read/8, error -71 [ 210.260802][ T686] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 210.314361][ T406] usb usb7-port1: unable to enumerate USB device [ 210.386927][T10415] devtmpfs: Unknown parameter 'fuse' [ 210.421177][ T686] usb 5-1: Using ep0 maxpacket: 32 [ 210.431329][ T686] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.440581][ T686] usb 5-1: config 14 has an invalid interface number: 120 but max is 0 [ 210.450661][ T686] usb 5-1: config 14 has no interface number 0 [ 210.454979][ T36] audit: type=1400 audit(2000000405.521:5728): avc: denied { mount } for pid=10436 comm="syz.7.3234" name="/" dev="pstore" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 210.457311][ T686] usb 5-1: config 14 interface 120 has no altsetting 0 [ 210.487927][ T686] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 210.499114][ T686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.507345][ T686] usb 5-1: Product: syz [ 210.511742][ T686] usb 5-1: Manufacturer: syz [ 210.516504][ T686] usb 5-1: SerialNumber: syz [ 210.738587][ T686] ftdi_sio 5-1:14.120: FTDI USB Serial Device converter detected [ 210.746640][ T686] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 210.754690][ T686] usb 5-1: USB disconnect, device number 42 [ 210.761679][ T686] ftdi_sio 5-1:14.120: device disconnected [ 211.004169][ T36] audit: type=1400 audit(2000000406.036:5729): avc: denied { append } for pid=10457 comm="syz.6.3241" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.004813][T10458] 9pnet_fd: Insufficient options for proto=fd [ 211.041984][ T36] audit: type=1400 audit(2000000406.073:5730): avc: denied { read } for pid=10459 comm="syz.7.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.132236][T10488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.132481][T10489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.139622][T10489] rust_binder: Error while translating object. [ 211.141903][T10488] rust_binder: Error while translating object. [ 211.146122][T10489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 211.152331][T10488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 211.158599][T10489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442 [ 211.168125][T10488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442 [ 211.266423][T10497] 9pnet_fd: Insufficient options for proto=fd [ 211.943487][T10523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.145894][T10540] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 212.156635][T10540] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3266'. [ 212.175045][ T36] audit: type=1326 audit(2000000407.120:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.6.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bb18ebe9 code=0x7ffc0000 [ 212.176428][T10542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3267'. [ 212.199494][ T36] audit: type=1326 audit(2000000407.130:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.6.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bb18ebe9 code=0x7ffc0000 [ 212.233624][ T36] audit: type=1326 audit(2000000407.130:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.6.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f31bb18ebe9 code=0x7ffc0000 [ 212.265245][ T36] audit: type=1326 audit(2000000407.130:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.6.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bb18ebe9 code=0x7ffc0000 [ 212.265553][T10544] overlayfs: failed to clone upperpath [ 212.303989][T10552] rust_binder: Error while translating object. [ 212.304045][T10552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 212.312624][T10549] SELinux: ebitmap: truncated map [ 212.313762][T10552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:483 [ 212.324241][T10549] SELinux: failed to load policy [ 212.345124][T10559] netlink: 'syz.2.3272': attribute type 29 has an invalid length. [ 212.355078][T10559] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3272'. [ 212.974795][T10584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 213.337588][T10598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.347444][T10598] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 213.361505][T10598] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 213.494449][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3286'. [ 213.630639][T10617] /dev/rnullb0: Can't lookup blockdev [ 213.667703][T10629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3296'. [ 213.677049][T10630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3296'. [ 214.304866][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 214.304889][ T36] audit: type=1326 audit(2000000409.112:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.2.3307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb79598ebe9 code=0x0 [ 214.392575][ T36] audit: type=1400 audit(2000000409.206:5760): avc: denied { mounton } for pid=10673 comm="syz.6.3309" path="/154/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 214.427971][T10674] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 214.452121][ T36] audit: type=1400 audit(2000000409.253:5761): avc: denied { unmount } for pid=7155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 214.502472][ T36] audit: type=1400 audit(2000000409.299:5762): avc: denied { remount } for pid=10692 comm="syz.6.3314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 214.679778][T10703] pim6reg1: entered promiscuous mode [ 214.685362][T10703] pim6reg1: entered allmulticast mode [ 214.778750][T10705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.781331][T10705] overlayfs: failed to resolve './file1': -2 [ 214.795845][T10705] rust_binder: Write failure EFAULT in pid:521 [ 214.802584][T10707] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.823390][T10709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.823878][T10709] rust_binder: Error in use_page_slow: ESRCH [ 214.830401][T10709] rust_binder: use_range failure ESRCH [ 214.836654][T10709] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 214.842212][T10709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 214.850285][T10709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:525 [ 214.958616][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.974897][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.045763][T10723] netlink: 'syz.6.3325': attribute type 1 has an invalid length. [ 215.057058][T10723] input: syz1 as /devices/virtual/input/input28 [ 215.147055][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3331'. [ 215.156193][T10736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3331'. [ 215.215741][T10745] fuse: Unknown parameter 'group_i' [ 215.318992][ T45] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 215.461123][T10789] rust_binder: 75: no such ref 0 [ 215.480491][ T45] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.496701][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.508941][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.522175][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.536068][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.545805][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.556022][T10807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 215.564441][ T45] usb 7-1: config 0 descriptor?? [ 215.832244][ T760] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 215.981985][ T760] usb 5-1: device descriptor read/64, error -71 [ 216.009537][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.017036][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.024520][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.031941][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.039349][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.046749][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.054132][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.061518][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.068899][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.076363][ T45] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 216.083906][ T45] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 216.092683][ T45] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 216.249316][ T760] usb 5-1: device descriptor read/64, error -71 [ 216.259852][T10843] netlink: 'syz.2.3366': attribute type 6 has an invalid length. [ 216.267764][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 216.294321][ T9] usb 7-1: USB disconnect, device number 23 [ 216.310915][T10849] 9pnet_fd: Insufficient options for proto=fd [ 216.505984][ T760] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 216.645043][ T760] usb 5-1: device descriptor read/64, error -71 [ 216.864516][T10875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.864773][T10875] rust_binder: Error in use_page_slow: ESRCH [ 216.872118][T10875] rust_binder: use_range failure ESRCH [ 216.882184][T10875] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 216.887709][T10875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 216.895811][T10875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:544 [ 216.905323][ T760] usb 5-1: device descriptor read/64, error -71 [ 216.977029][ T36] audit: type=1400 audit(2000000411.618:5763): avc: denied { setattr } for pid=10888 comm="syz.2.3382" name="" dev="pipefs" ino=49445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 217.028961][T10895] tipc: Enabling of bearer rejected, failed to enable media [ 217.043261][ T760] usb usb5-port1: attempt power cycle [ 217.425631][ T760] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 217.447991][ T760] usb 5-1: device descriptor read/8, error -71 [ 217.587184][ T760] usb 5-1: device descriptor read/8, error -71 [ 217.763791][ T36] audit: type=1400 audit(2000000412.357:5764): avc: denied { accept } for pid=10920 comm="syz.6.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 217.763928][T10921] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 217.791700][T10921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:548 [ 217.853397][ T760] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 217.886482][ T760] usb 5-1: device descriptor read/8, error -71 [ 218.025549][ T760] usb 5-1: device descriptor read/8, error -71 [ 218.142187][ T760] usb usb5-port1: unable to enumerate USB device [ 218.157434][ T36] audit: type=1400 audit(2000000412.722:5765): avc: denied { ioctl } for pid=10938 comm="syz.7.3399" path="socket:[48635]" dev="sockfs" ino=48635 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.364820][T10949] fuse: Unknown parameter '' [ 218.390472][T10953] fuse: Bad value for 'fd' [ 218.750122][T10962] overlay: ./file0 is not a directory [ 218.762965][T10964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.796935][T10964] rust_binder: Error while translating object. [ 218.803603][T10964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.810970][T10964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 218.878986][T10971] rust_binder: Write failure EFAULT in pid:89 [ 218.921463][T10968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=10968 comm=syz.6.3411 [ 219.168744][ T45] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 219.265013][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 219.307746][ T45] usb 5-1: device descriptor read/64, error -71 [ 219.425379][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 219.431628][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.441820][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.452216][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.461336][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.469335][ T9] usb 7-1: Product: syz [ 219.473559][ T9] usb 7-1: Manufacturer: syz [ 219.478149][ T9] usb 7-1: SerialNumber: syz [ 219.564385][ T45] usb 5-1: device descriptor read/64, error -71 [ 219.699048][T10986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.699086][T10986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 219.712309][ T9] usb 7-1: 0:2 : does not exist [ 219.737357][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 219.760160][ T9] usb 7-1: USB disconnect, device number 24 [ 219.777515][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 219.797654][ T36] audit: type=1400 audit(2000000414.255:5766): avc: denied { mounton } for pid=11015 comm="syz.2.3426" path="/416/file0" dev="tmpfs" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 219.797688][T11016] cgroup: No subsys list or none specified [ 219.831329][ T45] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 219.981456][ T45] usb 5-1: device descriptor read/64, error -71 [ 220.238135][ T45] usb 5-1: device descriptor read/64, error -71 [ 220.355805][ T45] usb usb5-port1: attempt power cycle [ 220.719356][ T45] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 220.741780][ T45] usb 5-1: device descriptor read/8, error -71 [ 220.881240][ T45] usb 5-1: device descriptor read/8, error -71 [ 221.136374][ T45] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 221.158841][ T45] usb 5-1: device descriptor read/8, error -71 [ 221.297895][ T45] usb 5-1: device descriptor read/8, error -71 [ 221.414528][ T45] usb usb5-port1: unable to enumerate USB device [ 221.740217][ T36] audit: type=1400 audit(2000000416.070:5767): avc: denied { lock } for pid=11067 comm="syz.7.3445" path="socket:[49785]" dev="sockfs" ino=49785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.741201][T11068] tipc: Enabling of bearer rejected, failed to enable media [ 221.841196][ T36] audit: type=1326 audit(2000000416.163:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.3444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb79598ebe9 code=0x0 [ 222.086056][T11077] overlayfs: failed to clone upperpath [ 222.093076][T11077] netlink: 'syz.7.3448': attribute type 4 has an invalid length. [ 222.193884][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3451'. [ 222.227787][T11093] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 222.238457][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.247700][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.257055][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.266967][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.276529][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.291441][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.306769][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.316551][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.326171][T11093] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.3454'. [ 222.381061][ T36] audit: type=1400 audit(2000000416.668:5769): avc: denied { setattr } for pid=11099 comm="syz.4.3456" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 222.548552][T11108] rust_binder: Error while translating object. [ 222.548602][T11108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.555411][T11108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 222.618806][T11115] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 222.792369][T11141] rust_binder: Error while translating object. [ 222.792404][T11141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 222.798650][T11141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:127 [ 223.018754][T11165] overlayfs: maximum fs stacking depth exceeded [ 223.042245][ T36] audit: type=1400 audit(2000000417.295:5770): avc: denied { unmount } for pid=10108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 223.168225][ T45] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 223.329802][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.340822][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.350678][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.363569][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.372611][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.381069][ T45] usb 7-1: config 0 descriptor?? [ 223.729481][T11183] /dev/loop0: Can't lookup blockdev [ 223.822361][ T45] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 223.837862][T11193] 9pnet_fd: Insufficient options for proto=fd [ 223.841129][ T45] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 223.845822][T11193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11193 comm=syz.7.3486 [ 223.928887][T11199] sit0: entered promiscuous mode [ 223.936058][T11199] netlink: 'syz.7.3488': attribute type 1 has an invalid length. [ 224.084599][ T36] audit: type=1400 audit(2000000418.267:5771): avc: denied { remove_name } for pid=11223 comm="syz.4.3495" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.120982][ T760] usb 7-1: USB disconnect, device number 25 [ 224.128201][ T36] audit: type=1400 audit(2000000418.267:5772): avc: denied { unlink } for pid=11223 comm="syz.4.3495" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.160607][ T36] audit: type=1400 audit(2000000418.333:5773): avc: denied { getopt } for pid=11233 comm="syz.4.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.183709][ T36] audit: type=1400 audit(2000000418.333:5774): avc: denied { map } for pid=11233 comm="syz.4.3497" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 224.254587][ T36] audit: type=1400 audit(2000000418.426:5775): avc: denied { mount } for pid=11254 comm="syz.7.3504" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 224.821925][T11287] netlink: 'syz.7.3515': attribute type 6 has an invalid length. [ 224.829725][T11287] netlink: 'syz.7.3515': attribute type 5 has an invalid length. [ 224.837498][T11287] netlink: 'syz.7.3515': attribute type 4 has an invalid length. [ 224.949509][T11312] netlink: 'syz.7.3525': attribute type 4 has an invalid length. [ 224.957419][T11312] netlink: 'syz.7.3525': attribute type 4 has an invalid length. [ 224.967691][T11312] netlink: 'syz.7.3525': attribute type 4 has an invalid length. [ 224.975831][T11312] netlink: 'syz.7.3525': attribute type 4 has an invalid length. [ 224.988679][T11312] netlink: 'syz.7.3525': attribute type 4 has an invalid length. [ 225.029515][T11329] /dev/loop2: Can't lookup blockdev [ 225.035787][T11329] fuse: Bad value for 'rootmode' [ 225.059621][T11333] overlayfs: failed to clone upperpath [ 225.334519][T11368] /dev/rnullb0: Can't lookup blockdev [ 225.585011][ T760] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 225.746578][ T760] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.757604][ T760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.775449][ T760] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.790142][ T760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.798357][ T760] usb 5-1: Product: syz [ 225.802661][ T760] usb 5-1: Manufacturer: syz [ 225.807556][ T760] usb 5-1: SerialNumber: syz [ 225.819285][ T760] usb 5-1: selecting invalid altsetting 1 [ 225.829161][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 225.829179][ T36] audit: type=1400 audit(2000000419.894:5780): avc: denied { create } for pid=11384 comm="syz.6.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 225.852651][T11394] overlayfs: failed to clone upperpath [ 225.914921][T11402] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 225.922209][T11402] rust_binder: 632: no such ref 1 [ 225.927316][T11402] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 225.934404][T11402] rust_binder: 632: no such ref 1 [ 225.940549][T11402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.940847][T11402] rust_binder: Error in use_page_slow: ESRCH [ 225.947459][T11402] rust_binder: use_range failure ESRCH [ 225.953702][T11402] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 225.959397][T11402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 225.967345][T11402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:632 [ 226.248739][ T760] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 226.270095][ T760] cdc_ncm 5-1:1.0: bind() failure [ 226.283490][ T760] usb 5-1: USB disconnect, device number 51 [ 227.027551][T11439] 9pnet_fd: Insufficient options for proto=fd [ 227.097365][T11444] overlayfs: failed to clone upperpath [ 227.114222][ T686] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 227.167689][ T330] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 227.275643][ T686] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 227.284809][ T686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.293846][ T686] usb 5-1: config 0 descriptor?? [ 227.306728][ T330] usb 7-1: device descriptor read/64, error -71 [ 227.563361][ T330] usb 7-1: device descriptor read/64, error -71 [ 227.819995][ T330] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 227.959027][ T330] usb 7-1: device descriptor read/64, error -71 [ 228.215688][ T330] usb 7-1: device descriptor read/64, error -71 [ 228.289379][T11464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11464 comm=syz.7.3577 [ 228.302209][T11464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11464 comm=syz.7.3577 [ 228.315034][T11464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11464 comm=syz.7.3577 [ 228.327912][T11464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11464 comm=syz.7.3577 [ 228.333564][ T330] usb usb7-port1: attempt power cycle [ 228.508986][T11471] /dev/loop0: Can't lookup blockdev [ 228.554973][T11482] __nla_validate_parse: 31 callbacks suppressed [ 228.554996][T11482] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3584'. [ 228.698083][ T686] usb 5-1: Cannot set autoneg [ 228.702868][ T686] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 228.714391][ T330] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 228.722675][ T686] usb 5-1: USB disconnect, device number 52 [ 228.751373][ T330] usb 7-1: device descriptor read/8, error -71 [ 228.890583][ T330] usb 7-1: device descriptor read/8, error -71 [ 229.130511][ T36] audit: type=1326 audit(2000000422.980:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.2.3588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb79598ebe9 code=0x0 [ 229.146058][ T330] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 229.179254][ T330] usb 7-1: device descriptor read/8, error -71 [ 229.301734][T11499] rust_binder: Write failure EFAULT in pid:212 [ 229.320069][ T330] usb 7-1: device descriptor read/8, error -71 [ 229.445533][ T330] usb usb7-port1: unable to enumerate USB device [ 229.595193][ T45] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 229.766264][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 229.772530][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.780923][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.789546][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.798507][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.808140][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.817875][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.830935][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 229.839952][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.848447][ T45] usb 5-1: config 0 descriptor?? [ 230.031119][T11507] overlayfs: failed to clone upperpath [ 230.069980][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 230.082753][ T45] usb 5-1: USB disconnect, device number 53 [ 230.089326][ T45] usblp0: removed [ 230.135222][T11509] rust_binder: Write failure EINVAL in pid:643 [ 230.536230][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 230.550097][ T64] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 230.718038][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 230.724651][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 230.733057][ T64] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 230.741343][ T64] usb 7-1: config 0 has no interface number 0 [ 230.747428][ T64] usb 7-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.757286][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 230.766077][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 230.775233][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.785127][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.794921][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.807943][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 230.817230][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.825785][ T64] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 230.834827][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.843235][ T9] usb 5-1: config 0 descriptor?? [ 230.848526][ T64] usb 7-1: Product: syz [ 230.853093][ T64] usb 7-1: Manufacturer: syz [ 230.857766][ T64] usb 7-1: SerialNumber: syz [ 230.863080][ T64] usb 7-1: config 0 descriptor?? [ 230.868859][ T64] usb 7-1: Found UVC 0.00 device syz (05ac:8501) [ 230.875311][ T64] usb 7-1: No valid video chain found. [ 231.138743][ T686] usb 7-1: USB disconnect, device number 30 [ 231.169196][T11531] 9pnet: Could not find request transport: \d [ 231.184941][T11533] overlayfs: missing 'lowerdir' [ 231.191846][ T36] audit: type=1400 audit(2000000424.916:5782): avc: denied { append } for pid=11532 comm="syz.2.3602" name="file0" dev="tmpfs" ino=2527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.282682][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.294704][ T9] usb 5-1: USB disconnect, device number 54 [ 231.301427][ T9] usblp0: removed [ 231.761873][T11538] rust_binder: Error in use_page_slow: ESRCH [ 231.761890][T11538] rust_binder: use_range failure ESRCH [ 231.768026][T11538] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 231.773733][T11538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 231.781943][T11538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:648 [ 231.793356][T11542] tipc: Enabling of bearer rejected, failed to enable media [ 231.818759][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3607'. [ 232.184631][T11562] 9pnet_fd: Insufficient options for proto=fd [ 232.221621][T11569] binder: Unknown parameter 'fscontext?}' [ 232.252291][T11578] fuse: Unknown parameter 'fD' [ 232.362651][ T36] audit: type=1400 audit(2000000426.001:5783): avc: denied { write } for pid=11592 comm="syz.7.3625" name="file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.385635][ T36] audit: type=1400 audit(2000000426.001:5784): avc: denied { open } for pid=11592 comm="syz.7.3625" path="/178/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.408588][ T36] audit: type=1400 audit(2000000426.001:5785): avc: denied { lock } for pid=11592 comm="syz.7.3625" path="/178/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 232.568088][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 232.592610][ T36] audit: type=1400 audit(2000000426.225:5786): avc: denied { create } for pid=11597 comm="syz.6.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 232.595562][T11598] validate_nla: 64 callbacks suppressed [ 232.595582][T11598] netlink: 'syz.6.3627': attribute type 1 has an invalid length. [ 232.626075][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3627'. [ 232.642439][T11598] SELinux: failed to load policy [ 232.648437][T11598] input: syz1 as /devices/virtual/input/input30 [ 232.661985][ T36] audit: type=1404 audit(2000000426.281:5787): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 232.677388][ T36] audit: type=1404 audit(2000000426.309:5788): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 232.729521][ T36] audit: type=1400 audit(2000000426.356:5789): avc: denied { ioctl } for pid=11581 comm="syz.4.3620" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.755476][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.765676][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.769068][T11600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.774657][ T36] audit: type=1400 audit(2000000426.375:5790): avc: denied { read write } for pid=7155 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.801317][T11605] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 232.805433][ T36] audit: type=1400 audit(2000000426.375:5791): avc: denied { open } for pid=7155 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.813027][T11605] rust_binder: Write failure EINVAL in pid:658 [ 232.837922][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.853543][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.861572][ T9] usb 5-1: Product: syz [ 232.865726][ T9] usb 5-1: Manufacturer: syz [ 232.870334][ T9] usb 5-1: SerialNumber: syz [ 232.919553][T11609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 232.964092][T11616] /dev/loop0: Can't lookup blockdev [ 233.091475][T11630] veth1: entered allmulticast mode [ 233.097161][T11629] veth1: left allmulticast mode [ 233.098583][ T9] usb 5-1: invalid UAC_HEADER (v1) [ 233.109634][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 233.121525][ T9] usb 5-1: USB disconnect, device number 55 [ 233.122692][T11632] veth0_virt_wifi: entered allmulticast mode [ 233.135855][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.360563][T11634] veth0_virt_wifi: left allmulticast mode [ 233.736391][ T13] bridge_slave_1: left allmulticast mode [ 233.742191][ T13] bridge_slave_1: left promiscuous mode [ 233.753943][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.762987][ T13] bridge_slave_0: left allmulticast mode [ 233.768718][ T13] bridge_slave_0: left promiscuous mode [ 233.774394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.882348][T11656] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.889711][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.897511][T11656] bridge_slave_0: entered allmulticast mode [ 233.903992][T11656] bridge_slave_0: entered promiscuous mode [ 233.910620][T11656] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.917796][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.925191][T11656] bridge_slave_1: entered allmulticast mode [ 233.931789][T11656] bridge_slave_1: entered promiscuous mode [ 233.938892][ T13] veth1_macvtap: left promiscuous mode [ 234.003229][T11656] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.010306][T11656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.017682][T11656] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.024727][T11656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.049417][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.056999][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.065204][ T64] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 234.067560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.079978][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.088916][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.096567][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.123279][T11656] veth0_vlan: entered promiscuous mode [ 234.133438][T11656] veth1_macvtap: entered promiscuous mode [ 234.162537][T11674] rust_binder: Write failure EFAULT in pid:2 [ 234.162576][T11674] rust_binder: Write failure EFAULT in pid:2 [ 234.180257][T11679] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 234.214904][ T64] usb 7-1: device descriptor read/64, error -71 [ 234.325957][T11686] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 234.355046][T11688] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 234.363180][T11688] rust_binder: Read failure Err(EFAULT) in pid:16 [ 234.471569][ T64] usb 7-1: device descriptor read/64, error -71 [ 234.535068][T11711] overlayfs: failed to clone upperpath [ 234.642647][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 234.738931][ T64] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 234.803075][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 234.809258][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.820158][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.830047][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.842849][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.851898][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.860396][ T9] usb 9-1: config 0 descriptor?? [ 234.888699][ T64] usb 7-1: device descriptor read/64, error -71 [ 235.145383][ T64] usb 7-1: device descriptor read/64, error -71 [ 235.264122][ T64] usb usb7-port1: attempt power cycle [ 235.299318][ T9] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 235.307840][ T9] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 235.319437][ T9] microsoft 0003:045E:07DA.0013: no inputs found [ 235.325800][ T9] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 235.510897][T11694] rust_binder: 22: no such ref 2 [ 235.515951][T11694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 235.517064][ T45] usb 9-1: USB disconnect, device number 2 [ 235.626531][ T64] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 235.648873][ T64] usb 7-1: device descriptor read/8, error -71 [ 235.798631][ T64] usb 7-1: device descriptor read/8, error -71 [ 236.054282][ T64] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 236.068571][T11780] 9pnet_fd: Insufficient options for proto=fd [ 236.076943][ T64] usb 7-1: device descriptor read/8, error -71 [ 236.148378][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3686'. [ 236.215803][ T64] usb 7-1: device descriptor read/8, error -71 [ 236.332387][ T64] usb usb7-port1: unable to enumerate USB device [ 236.889427][T11819] 2N: renamed from vcan0 (while UP) [ 236.913173][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 236.913189][ T36] audit: type=1400 audit(2000000430.265:5893): avc: denied { mount } for pid=11822 comm="syz.7.3702" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 236.913617][T11823] overlayfs: failed to clone lowerpath [ 236.956047][ T36] audit: type=1400 audit(2000000430.302:5894): avc: denied { wake_alarm } for pid=11824 comm="syz.7.3703" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.988839][ T36] audit: type=1400 audit(2000000430.330:5895): avc: denied { unmount } for pid=11656 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 237.011954][ T36] audit: type=1400 audit(2000000430.339:5896): avc: denied { read } for pid=11830 comm="syz.8.3705" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.035652][ T36] audit: type=1400 audit(2000000430.339:5897): avc: denied { open } for pid=11830 comm="syz.8.3705" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.060488][ T36] audit: type=1400 audit(2000000430.339:5898): avc: denied { ioctl } for pid=11830 comm="syz.8.3705" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.087836][ T36] audit: type=1400 audit(2000000430.405:5899): avc: denied { watch } for pid=11832 comm="syz.7.3706" path="/199/control" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.129994][ T36] audit: type=1400 audit(2000000430.461:5900): avc: denied { read write } for pid=11841 comm="syz.6.3709" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 237.131086][T11842] rust_binder: Got transaction with invalid offset. [ 237.154802][T11842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.157559][ T36] audit: type=1400 audit(2000000430.461:5901): avc: denied { open } for pid=11841 comm="syz.6.3709" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 237.164999][T11842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:668 [ 237.205792][ T36] audit: type=1400 audit(2000000430.536:5902): avc: denied { write } for pid=11845 comm="syz.6.3711" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.028187][T11892] netlink: 'syz.2.3727': attribute type 4 has an invalid length. [ 238.036085][T11892] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.3727'. [ 238.669429][T11925] 9pnet_fd: Insufficient options for proto=fd [ 238.703123][T11934] binder: Bad value for 'max' [ 238.866529][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3744'. [ 239.321930][T11955] 9pnet_fd: Insufficient options for proto=fd [ 239.333713][T11957] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3751'. [ 239.348856][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.624566][T11975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.624991][T11975] rust_binder: Error in use_page_slow: ESRCH [ 239.631588][T11975] rust_binder: use_range failure ESRCH [ 239.637686][T11975] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 239.643212][T11975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 239.651253][T11975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:686 [ 239.734409][T11979] rust_binder: Write failure EINVAL in pid:690 [ 239.747188][ T64] rust_binder: 11978: removing orphan mapping 0:4200 [ 240.521020][T11989] binder: Unknown parameter '00000000000000000000000' [ 240.937099][T12016] 9pnet_fd: Insufficient options for proto=fd [ 240.951543][T12018] fuse: Unknown parameter 'd' [ 241.101969][T12043] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3782'. [ 241.111720][T12043] netlink: 324 bytes leftover after parsing attributes in process `syz.7.3782'. [ 241.540200][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.540213][ T379] Bluetooth: hci0: command 0x1003 tx timeout [ 241.564896][T12045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 241.565326][T12045] rust_binder: Error while translating object. [ 241.574459][T12045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 241.580653][T12045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 241.601593][T12047] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 241.618640][T12047] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 241.627658][T12047] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 241.635626][T12047] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 241.644253][T12048] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 241.652324][T12048] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 241.660974][T12048] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 241.668969][T12048] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 241.901948][T12065] 2N: renamed from vcan0 (while UP) [ 241.909957][T12065] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 241.935828][ T64] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 241.963568][T12067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.963711][T12068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.097256][ T64] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 242.113145][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.121827][ T64] usb 9-1: config 0 descriptor?? [ 242.224599][ T9] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 242.386011][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 242.395087][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.403782][ T9] usb 7-1: config 0 descriptor?? [ 242.623468][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 242.838528][T12067] netlink: 'syz.6.3790': attribute type 1 has an invalid length. [ 242.846403][T12067] netlink: 'syz.6.3790': attribute type 2 has an invalid length. [ 242.855256][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 242.865295][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 242.875573][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 242.883808][ T9] usb 7-1: USB disconnect, device number 36 [ 243.159889][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 243.159907][ T36] audit: type=1400 audit(2000000436.100:5956): avc: denied { create } for pid=12085 comm="syz.7.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 243.185906][ T36] audit: type=1400 audit(2000000436.100:5957): avc: denied { nlmsg_write } for pid=12085 comm="syz.7.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.461213][ T36] audit: type=1400 audit(2000000436.380:5958): avc: denied { unmount } for pid=7155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 243.468959][T12115] rust_binder: Write failure EFAULT in pid:747 [ 243.499526][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.499550][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.512647][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.512674][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.514158][T12119] rust_binder: Error in use_page_slow: ESRCH [ 243.519620][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.531620][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.537995][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.538391][T12119] rust_binder: use_range failure ESRCH [ 243.544600][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.556901][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.563231][T12118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.564037][T12119] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 243.576249][T12119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 243.584733][T12119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:749 [ 243.882205][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.896635][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.897815][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.900193][T12137] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 243.904824][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.920411][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.924580][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.925538][T12137] rust_binder: inc_ref_done called when no active inc_refs [ 243.939342][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.945890][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.952578][T12137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:765 [ 243.952639][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.959407][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.975870][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.981209][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.995821][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.995843][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.003811][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.010607][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.017278][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.023946][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.030469][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.037245][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.044014][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.050528][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.056991][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.063445][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.069926][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.076401][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.082840][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.089359][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.091932][T12058] fuse: blksize only supported for fuseblk [ 244.095905][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.108343][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.115008][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.121508][T12136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.155202][ T36] audit: type=1400 audit(2000000437.035:5959): avc: denied { write } for pid=12146 comm="syz.6.3816" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.192835][ T64] usb 9-1: Cannot set autoneg [ 244.197651][ T64] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 244.209866][ T64] usb 9-1: USB disconnect, device number 3 [ 244.406108][ T686] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 244.566522][ T686] usb 7-1: Using ep0 maxpacket: 8 [ 244.572879][ T686] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.581766][ T686] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.591907][ T686] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.601074][ T686] usb 7-1: config 1 has no interface number 1 [ 244.607221][ T686] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.620497][ T686] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.635369][ T686] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.644589][ T686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.652682][ T686] usb 7-1: Product: syz [ 244.657058][ T686] usb 7-1: Manufacturer: syz [ 244.661710][ T686] usb 7-1: SerialNumber: syz [ 244.709130][ T36] audit: type=1400 audit(2000000437.549:5960): avc: denied { create } for pid=12156 comm="syz.2.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 244.749256][ T36] audit: type=1400 audit(2000000437.596:5961): avc: denied { mounton } for pid=12158 comm="syz.8.3821" path="/proc/67/cgroup" dev="proc" ino=53891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 244.776038][ T36] audit: type=1400 audit(2000000437.596:5962): avc: denied { mounton } for pid=12158 comm="syz.8.3821" path="/proc/67/cgroup" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 244.872230][T12176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.882372][ T36] audit: type=1400 audit(2000000437.708:5963): avc: denied { ioctl } for pid=12146 comm="syz.6.3816" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.890423][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.922668][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.941079][ T36] audit: type=1400 audit(2000000437.774:5964): avc: denied { write } for pid=12146 comm="syz.6.3816" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.942375][T12147] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 244.962337][ T36] audit: type=1400 audit(2000000437.774:5965): avc: denied { open } for pid=12146 comm="syz.6.3816" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.974766][T12147] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 244.974789][T12147] CPU: 1 UID: 0 PID: 12147 Comm: syz.6.3816 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 244.974819][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.974834][T12147] RIP: 0010:iter_file_splice_write+0xa44/0x1100 [ 245.032938][T12147] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 01 ca e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 dd c9 e6 ff 4c 8b 1b 48 8b 3c 24 [ 245.052557][T12147] RSP: 0018:ffffc90001a9f820 EFLAGS: 00010202 [ 245.058783][T12147] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888116582600 [ 245.066751][T12147] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 245.074713][T12147] RBP: ffffc90001a9fa40 R08: ffff8881f6f72280 R09: 1ffff1103edee450 [ 245.082679][T12147] R10: 1ffff1103edee453 R11: 0000000000000fd8 R12: dffffc0000000000 [ 245.090740][T12147] R13: 7ffffffffffff9b7 R14: ffff88811fd4d838 R15: ffff88811fd4d828 [ 245.098794][T12147] FS: 00007f31bc0e06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 245.107870][T12147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.114616][T12147] CR2: 0000200000001900 CR3: 00000001155fa000 CR4: 00000000003526b0 [ 245.122599][T12147] Call Trace: [ 245.125949][T12147] [ 245.128890][T12147] ? __cfi_iter_file_splice_write+0x10/0x10 [ 245.134853][T12147] ? __kasan_kmalloc+0x96/0xb0 [ 245.139594][T12147] ? __kasan_check_write+0x18/0x20 [ 245.144695][T12147] ? __cfi_iter_file_splice_write+0x10/0x10 [ 245.150566][T12147] direct_splice_actor+0x276/0x4b0 [ 245.155747][T12147] splice_direct_to_actor+0x4fe/0xbc0 [ 245.161123][T12147] ? __cfi_direct_splice_actor+0x10/0x10 [ 245.166736][T12147] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 245.172609][T12147] do_splice_direct+0x182/0x270 [ 245.177469][T12147] ? __cfi_do_splice_direct+0x10/0x10 [ 245.182905][T12147] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 245.188884][T12147] ? security_file_permission+0x2e/0xc0 [ 245.194584][T12147] ? rw_verify_area+0xac/0x230 [ 245.199417][T12147] do_sendfile+0x5c8/0xfb0 [ 245.203906][T12147] ? vfs_writev+0xcf0/0xcf0 [ 245.208492][T12147] ? __se_sys_futex+0x28f/0x300 [ 245.213349][T12147] __x64_sys_sendfile64+0x193/0x1f0 [ 245.218581][T12147] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 245.224294][T12147] ? switch_fpu_return+0x12/0x20 [ 245.229223][T12147] x64_sys_call+0xa26/0x2ee0 [ 245.233802][T12147] do_syscall_64+0x58/0xf0 [ 245.238331][T12147] ? clear_bhb_loop+0x50/0xa0 [ 245.242999][T12147] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 245.248867][T12147] RIP: 0033:0x7f31bb18ebe9 [ 245.253285][T12147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.273101][T12147] RSP: 002b:00007f31bc0e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 245.281598][T12147] RAX: ffffffffffffffda RBX: 00007f31bb3c5fa0 RCX: 00007f31bb18ebe9 [ 245.289563][T12147] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010 [ 245.297526][T12147] RBP: 00007f31bb211e19 R08: 0000000000000000 R09: 0000000000000000 [ 245.305484][T12147] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 245.313438][T12147] R13: 00007f31bb3c6038 R14: 00007f31bb3c5fa0 R15: 00007ffe5d97dd78 [ 245.321450][T12147] [ 245.324463][T12147] Modules linked in: [ 245.328479][T12147] ---[ end trace 0000000000000000 ]--- [ 245.334487][T12147] RIP: 0010:iter_file_splice_write+0xa44/0x1100 [ 245.340960][T12147] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 01 ca e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 dd c9 e6 ff 4c 8b 1b 48 8b 3c 24 [ 245.360846][T12147] RSP: 0018:ffffc90001a9f820 EFLAGS: 00010202 [ 245.367010][T12147] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888116582600 [ 245.375075][T12147] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 245.383133][T12147] RBP: ffffc90001a9fa40 R08: ffff8881f6f72280 R09: 1ffff1103edee450 [ 245.391155][T12147] R10: 1ffff1103edee453 R11: 0000000000000fd8 R12: dffffc0000000000 [ 245.399166][T12147] R13: 7ffffffffffff9b7 R14: ffff88811fd4d838 R15: ffff88811fd4d828 [ 245.407270][T12147] FS: 00007f31bc0e06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 245.416377][T12147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.423052][T12147] CR2: 0000200000001900 CR3: 00000001155fa000 CR4: 00000000003526b0 [ 245.431106][T12147] Kernel panic - not syncing: Fatal exception [ 245.437483][T12147] Kernel Offset: disabled [ 245.441815][T12147] Rebooting in 86400 seconds..