last executing test programs: 4.726363659s ago: executing program 3 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8100, 0x10) setreuid(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.707369699s ago: executing program 3 (id=174): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/96) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00030000000000000000"]}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002780)={&(0x7f0000001f00)={0xa, 0x4e23, 0x1fe3, @mcast2, 0x6}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000001f40)="273b1a9e937c813f9b5fcb9f3927f3c6440f31fe66d84d937002f9e264d46d139cd675486393ff374ef04dc9d6f1", 0x2e}, {&(0x7f0000001f80)="50d7c1df11d8f3c634b6502dadda6933651746052fc0ee7a7f02d33333b286032e4a15710fa3aa4dbc78e4daa88650fac06046993182305882ea17e6f462b57dfe68c9a1e7cccd923085a2c6892a4405766804c309805f04cc18e0a2a85625b6f51a483ededeeb6711265da2bb92365e69976f8143f7afdb89a365ba56e3f5f4e2aabfac982cd0251bed98d9187b77f12890d068b17d2e8823757b5109fbd76247d6a38f04164c65e0295c6731ea18346899670498ad6286e99670de199ecb85628b6b832ae9be6ba4746520a15a8a86e89b8f7b0fbc1a93e1a9e2bfda6bb916c7dabe57891ff43d3f494afd083775281ee626b9", 0xf4}, {&(0x7f00000020c0)="08c05247f4b40ac016123aa0cc8182f43eb166ffc4e0c0ea23748239db69f19551ebec56b567e4af160ae95fcedfc27f94a02d68281fa367b2939a80a380afb2672b4903a929237bb70c4a6b692eef0d385c49d08a6201ad3ed0ab8d5ed280e585e1d67915cea925f71cd9daba04e3b7080201f5268997bfaf0bb9fd61f52841684caa27ec3baa3f5663afd70047cd474d79c86fd2ec2159c1cb3e19bcbf1ee674db0b36f867712f3a27fd5671194d7c779e408961c1f10727495e698d53aca2a91656d3f28b440a057b3ae937ee77da161ed1bb588099ffb2e1556f75ad", 0xde}, {&(0x7f00000021c0)="72adb94b83b5ed3bcc72c2b911e287ccf7f9ba39eecaa0b809879295428e28f3b7adab06e11440180d8b57b8f1f3163be427d58a43bd0af5bb82f15b5e112bb3fe0d78e2bfde67d61b2fca56ea3e6fa79b081a7df1828242938c28fa2eaa61b8bc94f4ac3850a2ce8ae02ef1a67a91163b985da07f9f6cde4a0c82b95a7bb9e32965b2c5da39c38d4fa99e539288d11232bc40ac7be5f02a26dcc8553a06b7eb3cb587f854d4ac31bfaf634b1e6e0d1b10d2fa22ad9bf0d8", 0xb8}, {&(0x7f0000002280)="308231e52d41db7decd155eafaa8970cabec45c1acfd05503b6fd075f344a75d5b3d312e1e1ff5663f57dc394606284ad19f79094564a88c325c22b48c4972eac5c191dd956c01c6b03b2b59ac4b0d2594909a2012d1ed25ab74148556ec4aa14bdc865ed8d5f3d01d81c56d2fbd20d4f8756bea9025a2c5e06f7b7c45b0bbeedda18763f55483f35aedcf298d20a5405d00d3764c545898fecb5a6de2e5d74a5d3893212e8107c23145cb40dacbb280653977f55fc0f3091ccb1e765bfc5ee1ef8e85825269838d11ab3fb67e18ead8043c4eba6a4a29299386c45d380f8985", 0xe0}, {&(0x7f0000002380)="dabcfe8872a7902afcfb1385aba717b99b5819a5dea79bbc8740cb4052e4fad0d53865147c2345", 0x27}, {&(0x7f00000023c0)="22f34f0e1f8f6941761166e0ee7f93bba535f6de2cd1caa282761b1ee594c791cd1e62613ff53a311f141bf0d7178b45ff03893ff9e0e155ef8c94c7dd9b79183c2072319209df575ddcd4b3d194ed25ea65cae5b3760ffb1d07e68c1ca34ead5443bbba9959fdfc195f54920e88ecb78d26ad27a4171400e6f99551257a81f7809af2dc557c9d82c610db73f4ed820be38f1aeee5388ce9f90ea41cb4b9963a55a8915c40bf6018273c41b1fbe5844a625e47c2f4626bad0c6cfaeb310c3684e75416d2e3a4c067793e0ed1cfb53572010a4637156802b878c20ce972ed9b7968d9e06f45b4cf76c51906632a136d90873c", 0xf2}], 0x7, &(0x7f00000025c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x0, 0x14, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x9, 0x62, "4fa7ad07fcf127e9af4163ce7301fd1c50f56377372033dbc9a509bb8f95bdf611b62b74230c016e43555c92979255b19ff9ecc7771df17f9fab6e47cff2dfd7f74ca0ad5c79a9732cf173da06ca6a6a60b46e33120a838cc0169f4e99cd190824ab"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0x7, [0x5, 0x0, 0x8, 0x7fff]}}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x1d, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x148}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000140)=0x9a1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x7, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x102, 0xc, 0x5, 0x5, 0x8, [0x80000005, 0x9]}}) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724"], 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r6, &(0x7f00000002c0)={&(0x7f0000000180)=@caif, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="dfc628da4b29aaa443bfcb48a08f309454f3ca8457c075e505f40ca6e4f47fee", 0x20}], 0x1}, 0x800) r7 = syz_usb_connect$cdc_ecm(0x4, 0x67, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x4, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xf4, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "033f144af6af"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1b, 0x101, 0x8, 0x5}, [@acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x3, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x79, 0x4, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x94, 0x8, 0x5c}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x6a0, 0x9, 0xf, 0x80, 0x10, 0x2}, 0x1a, &(0x7f00000003c0)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9, 0xe, 0x7, 0xe, 0x7}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x12, &(0x7f0000000440)=@string={0x12, 0x3, "6e9463b32024bfcb082c7d2a26e86d92"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3412}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0x3, 0x71, {0x71, 0x6, "dd2815fde149964f835c489d022b34ad83398545184c29c6150f197bde14cac5107186cfc7698bd23e6152f5e253cef5bafcd14176e5e75e11d0b2cd7fdace29a5f52be6b745003691e3dd21cba4bf031b3563f106f92882350d59736f945d0309269dcc88b64a5c07d1b362f0b79c"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x0, 0x17, 0xa0, "9617ca784bb9b64886e91c7f9574810cf80a31114f9de79aca834ccb62cf6164cba93e805a52fcc0807bf94e4354d29e7b8e5b7dd17a52e0a543762844f5f67ad4cb40428d1f5aa58bf32848969b0e303f4d006aa22065dced962cc62691e696b0c9d39218fdbc2ede59db56005cdc40cbcb91c9e7137b92a30500b0263a938de3ca59df3ef5ed72d59500852284aa252622a55e8c7e8f3eb3c59be4e25c65db"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x66053000) 3.888389805s ago: executing program 0 (id=182): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, 0x0) utimensat(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3ffffffe}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x400042, 0x1, 0x2}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@cache_readahead}, {@msize={'msize', 0x3d, 0xffffffffffffffff}}, {@afid={'afid', 0x3d, 0x3}}], [{@pcr={'pcr', 0x3d, 0x5}}], 0x6b}}) r11 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r12 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r12, r11, 0x0, 0xffffffff) 3.858585275s ago: executing program 0 (id=183): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x52}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "acb9bce9ee41a13d824f64e00e0bc20e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_SSID={0x19, 0x34, @random="9de0f869c9c7d03b17c8fdd95bd59311f176768c58"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000002480)={@remote, r8}, 0x14) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = eventfd(0x5) mount$fuse(0x0, 0x0, &(0x7f0000000600), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xf0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000140)={r11, 0x7, 0x2, r11}) read$eventfd(r11, &(0x7f0000000200), 0x8) readv(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.741561936s ago: executing program 0 (id=184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x8, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x5e}}}}}]}}]}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013"], 0x24}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x400}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'pimreg1\x00', 0x2}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000002c0)={0x0, @aes256, 0x0, @desc4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0x1100, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/152, 0x98, 0x0, 0xb}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.247637678s ago: executing program 3 (id=185): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vlan1\x00', @random="010000201000"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0x50, 0xf3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) gettid() (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback={0x0, 0x7ffffffe}, 0x23}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback={0x0, 0x7ffffffe}, 0x23}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x17c17dc2, 0x100000000, 0x0, 0x1000000000000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0x5], 0x80a0000, 0x200}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x17c17dc2, 0x100000000, 0x0, 0x1000000000000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0x5], 0x80a0000, 0x200}) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 3.03730049s ago: executing program 3 (id=188): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000080)='.\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) 3.01491628s ago: executing program 3 (id=190): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) memfd_secret(0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) getdents(r2, 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/193, 0xc1) 2.656301723s ago: executing program 0 (id=195): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 2.650176023s ago: executing program 0 (id=196): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, r0, 0xffffb000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000003c00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r3, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40020, &(0x7f0000000080)={[{@nfs_export_off}, {@uuid_off}, {@default_permissions}, {@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@uuid_on}], [{@appraise}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '/:'}}, {@subj_role={'subj_role', 0x3d, '{:'}}, {@uid_lt={'uid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='ro'}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40020, &(0x7f0000000080)={[{@nfs_export_off}, {@uuid_off}, {@default_permissions}, {@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@uuid_on}], [{@appraise}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, '/:'}}, {@subj_role={'subj_role', 0x3d, '{:'}}, {@uid_lt={'uid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@flag='ro'}]}) 2.628434363s ago: executing program 0 (id=197): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x80000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1d, [{{0x9, 0x4, 0x0, 0xf7, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffed, 0x2a, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='@\r\a\x00\x00\x00\a!$\x00\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0xb, 0xc4, {0xc4, 0xe, "667dc3a56e1772c2a89bae00d0f007c9a9e2e999ec87312120fe51e2dbb21950d4650b12c5930a6a3927161ffbbf92c05156fcbed593e7b82272771362ac204cdd818c9d4dabe5ad4d10c4a0af3be609480dbf17fd5432e0a547e0fb99f72f45dc085e4f69304d9f99f0cc9c260280e52a3d0870e3147b59380045e74cdbee804138d98429ac6003e8227af45fe46203c4fff263a34461936421c422d00dddde721a75adde3b2621d9af0a9aada9f05fe46e0799fd71c46e7584e3dad18589db74ab"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="00038e0000008e033f771f0e3c7e6f84c53e666c2ac05ae38abc5cd6b00ac42f47f92d6aec6d39eee1872a4c13731ae4d1c2e2d40a89af7e82daa9b54f46ebbaace3c150c8fdc17031fdf23719d91cbf9205ce25ce32f41d93b2e90c3759e5eeb5c0a113aaa5e6c82f2163c53ae2f7a3665ee07f9be240895150a49d0b640bb530e899abb98c20ab87847317f0ca5ecb97075ade"], &(0x7f00000001c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x3, "0e6a045c"}, @global=@item_4={0x3, 0x1, 0xb, "78029623"}, @global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xb0, 0x1, {0x22, 0xf34}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0x30, 0x17, "0b95b4e15c417ebcb868632ec8468b22e0423d92201f0e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x1, 0x7a, "f13a7e7b86ad76458d1cad65cd63cfd74adaaa6c588ff9dbce84cac1752a775ab3ace3f6aaa6c8d4907bc460fb04c9c5c12b9322eaa0486f5272ef31530c22b7c930f6c2a2714fa4317eb344291f6d85845281699be6c760b294a640072a4cb36197242eb41a1ffc6cdfde50c341489431149b35e0e474e26c5b"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xd}}) 1.749848659s ago: executing program 1 (id=204): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 1.674468219s ago: executing program 1 (id=205): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x0, 0x0, 0x0}) 1.663938349s ago: executing program 1 (id=206): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}], 0x18}}], 0x1, 0x8090) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4011) 1.647894929s ago: executing program 1 (id=207): syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0xa, 0x4}, 0x10) (async) write(r0, &(0x7f0000000280)="240000001e005f0214ffffffffff08001f000000000000000800"/36, 0x24) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x4, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) (async) prctl$PR_MCE_KILL(0x26, 0x0, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0xa00) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/4096) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61783d3030e949303030303030303030303030303030303030312c7374617473"]) 1.034779913s ago: executing program 1 (id=208): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x80000) recvfrom$packet(r0, &(0x7f0000000080)=""/247, 0xf7, 0x1c1, &(0x7f0000000180)={0x11, 0x11, 0x0, 0x1, 0x8e, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x46}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x40}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r1, 0x7, 0x8, 0xf, 0x81, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x67, 0x0, 0x4c, 0x0, 0x0, @multicast1, @multicast2, {[@noop, @timestamp={0x44, 0x18, 0xb6, 0x0, 0x6, [0x4, 0x2, 0x6, 0x2, 0x8001]}, @noop, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x140, r6, 0xe00, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x400) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000840)=[@in_dx={0x82, 0x20, {0xe4fd, 0xf}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x71, {"0f219766baf80cb8f0d9cd88ef66bafc0cb80c000000efc42105659236c70000f00fc023c4217a101248b8b5000000000000000f23c00f21f835030006000f23f8490fc7680fb9800000c00f3235010000000f30b9160900000f32c4017d50df"}}, @rdmsr={0x32, 0x18, {0xe5f}}, @cpuid={0x14, 0x18, {0xe020}}, @out_dx={0xaa, 0x28, {0x5f86, 0x2, 0x200}}, @code={0xa, 0x73, {"2667f3ab0f20d835080000000f22d8c744240002000000c744240203700000c7442406000000000f011c24400f01cb64430f0743c742d4b20c000048b800000000008000000f23d00f21f835100000040f23f8660f638600800000460f0742dd4630"}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @wr_drn={0x6e, 0x20, {0x4, 0xdba}}, @rdmsr={0x32, 0x18, {0xdc1}}, @out_dx={0xaa, 0x28, {0x9619, 0x0, 0x8}}, @set_irq_handler={0xbe, 0x20, {0x27, 0x2}}, @cpuid={0x14, 0x18, {0x3}}, @rdmsr={0x32, 0x18, {0x40000095}}, @set_irq_handler={0xbe, 0x20, {0xa0, 0x2}}, @code={0xa, 0x4d, {"8f2858b6830000000012c442b10212a90c000000b93d0b00000f32c4c3f914636f914785c6c4e17a7e35ed000000364f0fae064480dda2420facca00"}}, @wr_drn={0x6e, 0x20, {0x0, 0xfffffffffffffffc}}, @set_irq_handler={0xbe, 0x20, {0xbf}}, @rdmsr={0x32, 0x18, {0x221}}, @out_dx={0xaa, 0x28, {0x9db4, 0x5, 0x7}}], 0x349}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000c00)={0x3, 'veth1_macvtap\x00', {0x6}, 0x10}) r9 = socket(0x22, 0x6, 0x0) sendto$packet(r9, &(0x7f0000000c40)="0c5ee1cd135c4bbde5826d8f4fdc8055e80767f58ef83e3f08f4402fc4c076b134820c6b8e88955204452d156ee16c1a4403e0b613ddd5754b5e06158bd9d7089a71713e295f32ecb39fbcb25af1ae69e827a35bf790db91b711224b", 0x5c, 0x4001, &(0x7f0000000cc0)={0x11, 0xc, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x1) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) signalfd4(r10, &(0x7f0000000e40)={[0x8]}, 0x8, 0x80800) inotify_init() ppoll(&(0x7f0000000e80)=[{r9, 0x404}], 0x1, &(0x7f0000000ec0), &(0x7f0000000f00)={[0x4ecb]}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r10) sendmsg$TIPC_CMD_SET_LINK_TOL(r11, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x68, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000080) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r13, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x200d1) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r14, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x20040001) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, r3, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xd}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000004}, 0x2400c040) 1.031747573s ago: executing program 1 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0xf3, 0x1}, {0x6, 0x7}, {0x5, 0x5}, {0x81, 0x5}, {0x4, 0x1}, {}, {0x81, 0x3}, {0x3, 0x4}, {0xa0, 0x5}, {0x6, 0x3}, {0x7, 0x5}, {0x10, 0x6}, {0x10}, {0x8, 0x7}, {0x5, 0x5}], "47d5137622af7b93"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x1, 0x6}, {0x8}, {0x5, 0x6}, {0x5}, {0x8, 0x6}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x55, 0x1}], "e87ff78921518a43"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x4}, {0xe}, {0x1, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x4}, {0x3, 0x4}], "861ecfb5cdffe8c1"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x240088c5}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x64a67d9d, 0x39}}}}, [@NL80211_ATTR_IE={0x69, 0x2a, [@chsw_timing={0x68, 0x4, {0x22, 0x4}}, @preq={0x82, 0x46, {{0x1}, 0x7f, 0x9, 0xa, @device_b, 0x6, @void, 0x80000001, 0x1ff, 0x4, [{{0x1}, @device_a, 0x280}, {{0x0, 0x0, 0x1}, @broadcast, 0xae}, {{}, @device_b, 0x3}, {{0x1}, @broadcast, 0xd}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x88}}, @ibss={0x6, 0x2, 0x96}, @mesh_chsw={0x76, 0x6, {0x2, 0x3, 0x3c, 0x4}}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0xfe}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xb8}, 0x1, 0x0, 0x0, 0x5}, 0x20000011) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044040}, 0x2048051) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r6, &(0x7f0000000540)={0x2, 0x4e23, @multicast1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xe7, 0x56a, 0x5e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5f, 0x4, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xbd7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x4, 0xc0}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x9, 0x1, 0xca, 0x20, 0x8}, 0x2d, &(0x7f0000000740)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x7, 0x0, 0x81, [0xffff0f, 0xff00cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b7604dbef127ea23927a879329400c2f"}]}, 0x3, [{0xba, &(0x7f0000000780)=@string={0xba, 0x3, "e518ae49285dea811be74aa671e9ade0b5f238783285e31081006000b6eaa18f8cef09cacbc7ac78ffc4e6552cbee5105c2411342db0a1d38a0efacdb9afb70d1511ce6518e49f384e5b9c08df37dce4c0754a712fc6691f78923b6fdd88f24b32e9cc89a04c0517246faf2cb13d8de78fdbe47ac419ea86437b44b606f05f1596c5bcf528797836de8e76c1f53966b489cfa1c3475feed5f8f10b6671a76ed4c07532d1e934492b4cc38f65fd2a3f8eb16b6ef23ab485b6"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2c16}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000033c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003380)={&(0x7f00000009c0)={0x2994, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_FRAME={0x4a8, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4848}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x5}}, 0x120, 0x2c, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x68, "63fbfc01ac36773162789002431c280f08d84b666bb0a9bb39a190486edf16b5a17ab9bc33092254ba862c26cdbb445bc1b667e0a31e55a2d21dfc281eaf0e300fc60ba302f46b2d877b842d6c6adb641ceee926b106fb0a378b32d80593be84482e9edea1f22386"}, {0xdd, 0x64, "296899c1398119a6a6fa88b35c3a7abd74897fd050fc1d7d7fb1b4301c51d016ccc11b03c011affab35ec208ad861ce01fc9eba2d5f797d6ba93f4117a4c5c5fc7256abd4c765e7f19887a9c3ccc2c88cc4587c36a3fa89b6dc5c5393201f0adb80e67db"}, {0xdd, 0xe0, "d919674129c3ee5fe22004859ca6ce01cc454e8a694d9cc0ebdfc716f54ca853144077aebdccc052f7bc7381130a84b78bc6c0a87a9471b000f503044adca971100ed0124f5bd19ac7eb9e4cfb5febec98c0b0dce06f25581a2384ddbd9ea8ecaca289bda96f5ad1aa9cd5f96c82e9a84642c41de26e8c5860776cd4b6ff8f255dd15ff81ce4a5bd5a13a42e6014cad077b9c7744d5bf80d8324e36c0566f21cef141173db57d09c3c63b8cd96ec7910cb1214ecc267e1f123752c17e7e282997ad00f43d7ffb7b4481fa4aed2d6f4baef1512812074a53717e44cee01533b34"}, {0xdd, 0xbf, "eb0e21963690acbeeb4434db6fd0ce8a68e72b820582fb7c92067e50b1c24d0695cba48cbad747e7c16ab7310e23fa163993d7c37d151de3407d39d76afe89afe3f8eb8f8bdf24dba119b35baa0f7355f4b2f2d6a0e11f321fcf94bbcdead6785f812a35f9fa769bb1a4bfd0ab2a080f36162d230954a6165b6c1c773e03abf7789590da04bf3062e6e48127f85b90948ed08267525ed683219813b18b56ba8fa8ecc0e57362970899c619fa8c270a07d62a7e5d36bf9d2fcc3d68ed1636e3"}, {0xdd, 0x58, "86fd8955f104f922a6e1abd9221d34c896defdc2091efd2958a3e1f06e316a8e9584de1941253a48f7a98d3d7dc47a715e7a3ce2b58a8012efc4dee1a11b0e8b5800d80f1d780b724a81d913af615f717e103660f8468025"}, {0xdd, 0xce, "16ca563dc421a63f7a0c7a4de2039bcd31740136b21d75a3879863ea817c662cc181bd1fe619f3a49cde09851574d1ae24917ec15e4448ee52048f99ee8f11dac497eef1307f1f5f6c27a6f58a0f3d573aaf9bb191821ae3b209de76c4bbd1aac4924a39f9048c052a582cb3023b1d4484513661c53150c6e3874757328dd53b39d33e525b91d45f0fd157972b1cca3d5117620a3c5e71e568659b5376708b0b9af71c5632fb1925215de92a2c295586d7e7bf4ae055de17acd9cec197ca928e4e62dfc6a32268889998038a8013"}, {0xdd, 0xe1, "b58b14d91bede5558616db3ad71d065e9d75e15f171cd55086e3ea94ddbf3c97a9156869846583fcf2897d71656671ee25223cb6411b4c9a19c6dc6d9ed719952bb719a5a613c9b4a624622f659d159d40b7d93669d1bec32c4635c076365541d402dd948c500b89e9cd0ad951a9df1d607d8ce2f47bd99b11f0d4cec9ffe1a84fffd51db284a25ae8b9ad73dac0ffa4414567561e3df12b9aca492df5c9f4a4dbccdd10bd82a1220d98aaecdaa51cce34352e4d54bc30eabf29600a8d38e4af8ec7f1453232b57e41f0262be7eab414ca76e43572576c5c03163f12461bb513aa"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}}}, @NL80211_ATTR_FRAME={0x2470, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @from_mac=@broadcast, @device_b, @device_a, {0xd, 0x848}}, @a_msdu=[{@device_a, @device_b, 0x29, "842c0bdae06c5ad8f2da9262bb2938b1a6b3734dac5825855418f65de28e3694645f2801f540545a2b"}, {@device_a, @broadcast, 0x1000, "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"}, {@device_a, @device_a, 0xf5, "4081eff4e517d066d3427c6d173105bb6087ca5d8d707ac2c2a1579ff54faad92c2a020ff2fe725efa47a540b2700b7b3e288d6a34375874aa4ae07b6d05be3774aa772623b86819bea6a21bd4e6e08de68f59b982899c9cac2b3bd6be919ac05781842ab7e7b99e39aa18de93510499f5da2c463e68f61c40034040d423de4dda16fcd285b994f1ff6f7747a7d073cf75c14487d7f031aca70cff2a415665a2363cab2b8928b565010a99f101e0e7ca4b6142044bb4489172d965777f792c4e820132febccadeaaa37ae2f625c60584fe9e7c0b5da7737f31abe98b096c157ce45d15fb76aa4e08cb59e8aab3220a6816ead5d6a1"}, {@device_a, @device_a, 0x1000, "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"}, {@broadcast, @broadcast, 0xda, "722c9725a9e4b932136f219f1148b06a96275488045d7c50ce8458d58f4e3cf00d4f8c4a5468f726c0ae56487ece2be9632f423a559dff6e4371e0d60a64fa20ab5de1f3dd947210b344390f7a34317b9fd7994d7c453fbb058b669633b951485f5159090a1c8c09394fa2526a43d18f47c20d84c4515d2701f822b4eb6a90094a9fd2780b2cf689f55b3aa70a4e2a51a60c6cdcf31230b5077c1731d3c173dc2c44cd34623cf3db6bb6249c66799ec65e202a315a94efcb8bac619bb9570ec1d63c6232f58b5629d27983e023d1ea6f8f23aa72a181372417b4"}, {@device_a, @device_a, 0xfb, "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"}, {@device_b, @device_b, 0xf6, "c79ad72343395c7a3ee035747e1b1931be3cd2123b7bc7dbb6f562247d2ebab3fc20d81a0fc37448b7a9cc54d187c1992e7405373956fdb9b0b64c02518b062277e1e45adebbf5bfd4607bbd0fc3831f5e5b2e90e15fa1a82e7402869e893289fa85945ed6871a8c761ce005ac90286e3da4b6b519574ca49e5468fd18570fa0375aebc635117c90a307c78b4fa532f3653ba5a1a08b527a15d47924b7e5e052dfa68d2e405f6e97e18922c68aa2a54092eef4e5c3dc21fa56d21ba0259905a34e9f16cee9c3e60d24d30cf321e718697c918f04f8afbf6b30f89029dd936188d17c1e5de2d2769479de484ce4798def9ebf668b8139"}]}}]}, 0x2994}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003400)) r11 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f00000034c0)={r12, 0x2, r9, 0x3, 0x80000}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x110, r6, 0xcfcea000) socket$inet6_tcp(0xa, 0x1, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003540), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000004040)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003580)={0xa70, r13, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2e4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x7}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x24, 0x15, 0x1b, 0x5, 0x6e, 0x5, 0x12, 0x4, 0x36, 0x1b, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x20d, 0x0, 0x6162, 0x2, 0x5d, 0x4]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x1}, {0x4, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x800, 0x3, 0x3, 0x2, 0x401, 0xfdb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1000, 0x4, 0x7fff, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8000, 0x5, 0x1, 0x5, 0xd, 0x1, 0x3e5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0xc, 0x1, 0x6, 0x24, 0x9, 0x6, 0x3, 0x36, 0x9, 0x6c, 0x6, 0x60, 0x48, 0xb, 0x18, 0x48, 0x6c, 0x16, 0x0, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x71, 0x7, 0x8001, 0xfffa, 0x5cee, 0x9, 0x79a0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x30, 0x6, 0x16, 0x16, 0x0, 0x12, 0x12, 0x4, 0x24, 0x4, 0x2, 0x0, 0x1, 0x36, 0x27, 0x1, 0x1, 0x0, 0xb, 0x2, 0x5275e1483346f971, 0x1, 0x0, 0x5, 0x3, 0x16, 0x6, 0x9]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x5}, {0x4, 0x7}, {0x4}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x7, 0x36, 0x1, 0xf, 0x7, 0x5def]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xe7cf, 0x8, 0x101, 0x6, 0x0, 0x6, 0x7]}}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf97, 0x3ff6, 0x6, 0xa, 0x8, 0xfff, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x101, 0x3, 0x7f, 0x6b86, 0x3, 0x200, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x12, 0xb, 0x2, 0x32, 0x0, 0x1, 0x4, 0x2, 0x31, 0x1, 0x1, 0x30, 0x3, 0x24, 0x4, 0x6, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x48, 0x4, 0x6c, 0x5, 0xc, 0x4, 0x9, 0x36, 0x9, 0x3, 0x60, 0x3, 0x5, 0x36, 0x1b, 0x2, 0x6, 0x2, 0x36, 0x6c, 0x36, 0x18, 0x1b, 0x0, 0xb, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x5, 0x58, 0x60, 0x60, 0xc, 0x3c, 0x48, 0xb, 0xb, 0xc, 0x4, 0x2, 0x30, 0x3c, 0x3, 0x60, 0x36, 0x3a, 0x1b, 0x18, 0x1, 0x60, 0x0, 0x3, 0x2, 0x5, 0x24, 0xb, 0x3c, 0x12]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0xa}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {}, {0x1, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x6}, {0x7, 0x9}, {0x5, 0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x8}, {0x3, 0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {}, {0x3, 0x8}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {}, {0x4, 0x9}, {0x7, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x5}, {0x4, 0x9}, {0x6, 0x1}, {0x1, 0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x7}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2ec, 0x11d, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x1}, {0x3, 0x7}, {0x3}, {0x3}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x2}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x5}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x1}, {0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x0, 0x3, 0x80, 0x0, 0xffff, 0x45]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x7, 0x4, 0x4, 0x2e, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3922, 0xd, 0x4, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x21, 0x100, 0x9, 0x8001, 0x9, 0x2, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x1, 0xc, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x2, 0x4, 0x6, 0x80, 0xb, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x5, 0x2, 0x30, 0x6, 0x4b, 0x48, 0x6c, 0x16, 0x16]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x1c, 0x16, 0xc, 0x60, 0xb, 0x4, 0x5, 0x24, 0x5f8eddd11d913fdc]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x1}, {0x2, 0x3}, {0x7, 0x9}, {0x5, 0x9}, {0x6}, {0x1, 0x7}, {0x2}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x10}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x1a}, {0x7, 0xa}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x3, 0x5}, {0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xd2d, 0x3, 0x3, 0x0, 0x3, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x7, 0x10, 0x24, 0x5a, 0xc, 0x48, 0x48, 0x36, 0x1b, 0x6c, 0xb, 0x30, 0x4, 0xb, 0x12, 0x1d, 0xb, 0xc, 0x36, 0x16, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x7, 0xf6, 0x3, 0x3, 0x10, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x4, 0x0, 0x48, 0x60, 0x60, 0x4, 0x6c, 0x2, 0x16, 0x5b, 0x9, 0x2, 0x16, 0x2f, 0x1b, 0x6, 0x1, 0x4, 0x0, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xcb80, 0x4, 0x18, 0x8, 0xca, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0xc, 0x1, 0x2, 0x6c, 0x60, 0x18, 0x36, 0x12, 0x3f, 0x9, 0x16, 0x5, 0xc, 0xb, 0x5, 0x1b]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x8, 0x2, 0x0, 0x1, 0xce, 0x7, 0x8b9a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffe, 0x5, 0x4, 0xb, 0x8, 0xd, 0xe22e]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x48c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff71}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x101, 0x1, 0x101, 0x3, 0xfbff, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x3, 0x3, 0x6c, 0x1b, 0x4, 0x24, 0x16, 0x3, 0x1b, 0x2, 0x6, 0x1b, 0x1b, 0x30, 0xc, 0x6, 0x3, 0x48, 0x3, 0x16, 0x2, 0x4, 0x1, 0x5, 0x0, 0xb, 0x48, 0x18, 0xb, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x72, 0x3fc, 0x0, 0xa, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x5, 0x4, 0x5, 0x1, 0x9, 0xb, 0x1b, 0x30, 0x992aaf18d1ee5647, 0x36, 0x3, 0x3, 0xc, 0xc, 0x1, 0x2, 0x18, 0x9, 0x16, 0x0, 0x1b, 0x12, 0x16, 0x5, 0xb, 0x24, 0x24, 0x30, 0x4, 0x1, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x0, 0x6, 0x4, 0xffff, 0x0, 0x8d16, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x9, 0xffff, 0x1, 0x200, 0xd5e, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x7, 0x1, 0x0, 0x3, 0x5, 0xfffb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x7}, {0x3, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xfff8, 0x7f, 0x9, 0x1, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x34, 0x7fff, 0x6, 0x6, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x7, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x5, 0x5}, {0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x4}, {0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x6, 0x7, 0x3, 0x200, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ac, 0x1, 0x3, 0x1, 0xc6, 0x9, 0xfff, 0x3]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x6}, {0x4, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x4, 0x6}, {0x4}, {0x1}, {0x2, 0x7}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x5}, {0x6, 0xa}, {0x5, 0x6}, {0x4, 0x4}, {0x6, 0x3}, {}, {0x3, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x3}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x8}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x3}, {0x7, 0x5}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0xa}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0x2}, {0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x7}, {0x5, 0xa}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x7}, {0x5, 0x1}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x1b, 0xc, 0x1b, 0x24, 0x12, 0x48, 0x2, 0x36, 0x1, 0x30, 0x3, 0xb, 0x6c, 0x4, 0x2, 0x48]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x1, 0x12, 0x0, 0xb, 0x24, 0x36, 0x4, 0x36, 0xc, 0x3, 0x5, 0x1b, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x1, 0xd1a, 0x2, 0x401, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa, 0xd43b, 0x7, 0x1, 0x1, 0x2, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff9, 0x1, 0x3, 0x5, 0x77, 0x93, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x11, 0x2923b9043e1de7db, 0x3, 0x2, 0x3, 0x18, 0x1, 0x12, 0x36, 0x41, 0x48, 0x60, 0x12, 0x24, 0xc, 0x2c, 0x4, 0x1, 0x5a, 0x24, 0x18, 0x1d]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x9, 0x6c, 0x36, 0x1, 0x48, 0x18, 0xb, 0x48, 0x2, 0x18, 0x5, 0x6, 0xc, 0x16, 0x4, 0x2, 0x16, 0x4, 0x9, 0x36, 0x12, 0x6c, 0x60, 0x9, 0x5, 0xb, 0x6c, 0xb, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x7, 0x81, 0x52, 0x3ff, 0x7fff, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff97ec}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xa70}, 0x1, 0x0, 0x0, 0x4008}, 0x4000001) ioctl$RTC_ALM_SET(r11, 0x40247007, &(0x7f0000004080)={0xf, 0x0, 0x12, 0x3, 0x4, 0xe44, 0x0, 0x16a}) 809.593875ms ago: executing program 2 (id=215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000240)={{0x2000, 0xeeee0000, 0x3, 0xfd, 0x2, 0x4, 0x9, 0x4, 0x8, 0x6, 0x5, 0x80}, {0x8080000, 0xdddd0000, 0x0, 0xc3, 0xc6, 0x0, 0x5, 0x1, 0x0, 0xc, 0x3d, 0x5}, {0x6000, 0x100000, 0x3, 0xff, 0x3, 0xcd, 0x1, 0x7, 0xff, 0x6, 0x3, 0xff}, {0xf000, 0xeeee8000, 0xb, 0xe4, 0x0, 0x8, 0x1, 0x9, 0x47, 0x4, 0x6, 0xa}, {0x4, 0x2, 0xc, 0x10, 0x81, 0x3b, 0x7, 0x2, 0x3, 0x9, 0x19, 0x8}, {0x10000, 0x5000, 0x4, 0x6, 0x4, 0x8, 0x6, 0x3b, 0x2, 0x9, 0x6, 0x4}, {0x6000, 0xeeee8000, 0xf, 0xfc, 0x0, 0x40, 0x5, 0x5, 0x21, 0xb, 0x3}, {0xeeef0000, 0x6000, 0x4, 0x9, 0x9, 0x9, 0x8, 0x8, 0x80, 0x7f, 0x7, 0x10}, {0xd000, 0x6}, {0xffff1008, 0x7}, 0x1, 0x0, 0xd000, 0x112016, 0x9, 0x4401, 0x6000, 0x0, [0x6, 0x0, 0x5, 0xffffffffffffffff]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r5 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862) ioctl$BLKFLSBUF(r5, 0x1261, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r4, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/2, 0x2}, 0x2}], 0x1, 0x40010002, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x100) openat(r6, &(0x7f0000000100)='.\x00', 0x737f0c778641db39, 0x408) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 734.419145ms ago: executing program 2 (id=216): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x7fffffffffffffff}, @wrmsr={0x1e, 0x20, {0xb11, 0x401}}, @wrmsr={0x1e, 0x20, {0x29f, 0x8}}, @set_irq_handler={0xbe, 0x20, {0x20, 0x2}}, @uexit={0x0, 0x18, 0x2}, @in_dx={0x82, 0x20, {0x352d}}, @uexit={0x0, 0x18, 0x7}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @rdmsr={0x32, 0x18, {0x80c}}, @set_irq_handler={0xbe, 0x20, {0x85, 0x2}}, @wr_drn={0x6e, 0x20, {0x7, 0x1115}}, @wr_crn={0x46, 0x20, {0x8, 0x7fff}}, @uexit={0x0, 0x18, 0x4}, @set_irq_handler={0xbe, 0x20, {0xb0, 0x2}}, @rdmsr={0x32, 0x18, {0xad0}}, @cpuid={0x14, 0x18, {0x3, 0x7fff}}, @wr_drn={0x6e, 0x20, {0x3, 0x2}}, @wr_drn={0x6e, 0x20, {0x1, 0xf}}, @set_irq_handler={0xbe, 0x20, {0xbd, 0x1}}, @set_irq_handler={0xbe, 0x20, {0x1c, 0x1}}, @code={0xa, 0x60, {"c4e2a9b70366b86f000f00d0b9c40d0000b8709105b3ba000000000f3066b833008ec80f20d835200000000f22d84f0fc76908c482fd2174ac03b9800000c00f3235000100000f300f01c964f342ab"}}, @out_dx={0xaa, 0x28, {0x4b2, 0x7, 0x4}}, @code={0xa, 0x7f, {"66baf80cb8dcea9d8def66bafc0cb8c8bd0000ef48b8a5000000000000000f23d80f21f835400000800f23f83e3e2e470f010ca366360fa3510f48b85d73a134000000000f23d00f21f8350000000d0f23f8400f090f013d000000003643d9ecc442fd2a0d00000000400fac3706"}}, @uexit={0x0, 0x18, 0x7}, @wr_crn={0x46, 0x20, {0x7, 0x1}}, @uexit={0x0, 0x18, 0x9417}, @code={0xa, 0x7f, {"b9250b00000f323e440f38020166baf80cb85c21608aef66bafc0ced0f01c866baa000b83d000000efc4c1bd72e100c7442400e4fa0000c744240202710000c7442406000000000f011c24c744240005010000c7442402e4450000ff1c24c422e13f5e20c4e27d0abccf7b000000"}}, @wr_crn={0x46, 0x20, {0x8, 0x7}}, @set_irq_handler={0xbe, 0x20, {0xfa, 0x2}}, @rdmsr={0x32, 0x18, {0x3fd}}, @in_dx={0x82, 0x20, {0x8302, 0x3}}], 0x496}) ioctl$KVM_RUN(r0, 0xae80, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000540)) ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x3f) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000005c0)={"09bcb1cbd6503f0d328d06045a477983", 0x0, 0x0, {0x6, 0xffff}, {0x8, 0x2}, 0x0, [0x6, 0x1ff, 0x6, 0x6400, 0xa86, 0xfffffffffffffff7, 0x8, 0x3, 0xfffffffffffffff8, 0x15, 0xaa4c, 0x7ff, 0x7fffffffffffffff, 0x4e, 0xd, 0x5]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000740)={{r2}, r3, 0x0, @inherit={0x78, &(0x7f00000006c0)={0x0, 0x6, 0x0, 0x4, {0x30, 0x100, 0xc, 0x7, 0x6}, [0x6, 0x80000000, 0x401, 0x1ff, 0x7, 0x5]}}, @name="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"}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001740)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001780)={{r0}, "6ef319a6775e6ad2c143c762df01588f77598bc9cc65afda2667dc56ba38b9d72fe44b68db73b0626da0e5fa0df7d1ad6b0282f3313d6d297f9189c68c961b8c1ede8f8c1c3286ec77e351d924009d10d970976f4be4d4c0cade8fa9e2f19febac8556557af305482789c414d701199cac197c671e4a0eb4809ea610b4104e1e1a92bb56d1da33a59282a4b6661fb1363a017da4a2722d4d760e1fb201cf18b8ea2e269a369a266d5dfff6a03a4265d5240edb8b896567248869a5360c4ecc73db120f876b7447fe15903eba6c47525663663cc1b929ff4c8cff97308926c87f46f9b8a64eb25ca633cfcaaa7d9a326f348e8afe82823e6c34ced3a883fbc316d6c2b8c188cbca508f5086062d5106a44f1fcaebb409d6d81930d6448465f084c596ac1b1c0b6d51523859e3447a0ac8b43b7fd88a71a3cd442af2e4fc7b07d1e52fe29fdd9e4c8cebf882ba0d0d5d537e06910ff237d7a1ca4830535c00679f4932ae6c564193491eecf605c725f366d5968ca87498d34961c4b2bd5c6fa58da745ff9f484ac94907d45692cd6d97b6a71ac64f99d47bfa58366f1feb350f78807246475a57baf9586f705937e53511c7f0e844e634fa0382a7fb254570f0ca9bd54fa5637833f7665d89ba22a70eb2d08b9797393ed507163af99877f6ae2aa5b96bbb8a5eab6849af3c295153718ebfe46410ac460b9634612169e54551fd9a115cd6206d8a1312ead704989b928bf2a67999b0b73cb3829034d95cfc585258d89e23a42d7e87a21e0be9bb9d9761efa64e5564bd0427f935a89daabee4291e45a7528098285616b44cc541107cfb57f01d1f19f5da047df0515b8ec18ccb4698ac086e5d0998e492aa1055b58fdff9d5fb7bd2061bbab0fa42b03d81fc224a21fe681b24fa41e947bfbfb42e1d1190293930dcb67448db909be228e9fab69436a6e38220c0f3deaa0f941f8846e8e917e2912b2e1885d8e818534ad7d1e1961d466238ec7d228c46bbd2265e0c9de4183d6def712db4950d6d3eca71c629448be269716ce4678abaf15fb8282de82c235d0d2db7ab227769623ef96a0b5bbde67f9aaad3b469952b025bab4b1b760c769de63b8791137cb820e452640e6d9d012de50df7b65243c04aa121af53bbb99599574ca47a0b87394e940f831cdd5aa84d9d08c06338f7c4e02538dd2e19b7a84329d4bf045c24e95cd0c0052652bd10b2a6ebe446695504f67fad9466dbeb11836011453622c8bbd62e75463a5475a5f017863f576ef20ade872a484ab15dc9f989d9bef23f6bdc2cbc3bbcff034172c916cf294360415d4ba8f0853c79bc2646991a59c18a3b0ffd6c9487288f1b978339d3bf783671ceede0783d3da67723c6bafa0c35dee63e041842cbecb3e3e3b885b8b9ba3489ec9f3bac62276d430bdb7b3ded673d9efadadd95c7a1ad5b726ab765e7b10391e7c29a232f7cd34ba52b65cfa4d63610915047cc9c16b74c5b1b005f6f7ef8700672428b6117def835986724e2ffcc8d3c59c297cfd9f875255024b5f80cc4bac463a0e78112dcc2beb8f9e41456989a182dc66b89dac82b147e63975ed21746fbeef46b539018f937a9625d2897c8fa89dd537b06e7beb38a34288e90ccd841d4a491cb0ca729fbc3fb55d48b6751a49aa888450f7268f6051b7a22021409f3b7a26eccb7b757f45e92e30ca92ec05093b9d96a7c518311682eb5f623f1a61ce51f5221236621641612553fef792930b37e2a61755f87c7768be1dff54d1f26a5feb94660dd7cdd1c13943b2d0296c424cfc824a618bca4eaee5d9bfee045e7ad8efa65dbb08ac43d0496e67e6c89eba93a0d71f51113f1920863514dc6637dcb6376a6d839fad089c90b728c231405de443cb3518a5c6ada9e0ad3084a89867e9c11eac5b7061bd2337ddb611a842d1d025c0bf3dccfc2415962cd987decc49c74d8128600e73ec8fabaeb28724fcf67df415979c02e19271cb75a147ada89452aff02cec2a1534de281cc089b54118f68b415e8ea01d14861031538c35e1585c0e06573282a113a2ff039275f39f24f886373f20a7567a6047ec8521383c54712676ed1573d9495c940fa2d46ba61f31494985b78dcc7552e9995975e6b330e3aa973ab27bd51c10065a0d134b9fb5261397546631eefa732e3bd7f8e43f310cdbf4e611fd4e2eb8308b65d891b55e41922818d6acb224876d8555eb4de57d88ab34baf9b8937b74c036f862cada282e4a642928c1cde880e82c42dc0ac01a519f09fdbbfce674556dcf73a45e883615b31d98c731279868a98658d64ac6cf0b7268c87c72874eda62906a4cf8d7d15e34074283e4c425ac859296a20e35542a96ba27058b963b28e409a59e00717e207c2cedcc737c6a471987ad9cc56187430503527c5acc0894245176cd15d76434b2b6a3f3c533e8f9ec64e0c3ea635e143f3b6040b03ad110862a65f1a0e0ca29a8e6d568f0bc7c9bd57d1c705878e0584dfa1408574a0c3aa0325fce80205dc9680b9e6141ec26d3b2267b5da28719dc02ef12c9e577d818a3e8ceb40ded7ade9383ca0e4313d11a17a2ba803a60175373b46e8aecfe2359eb5c7ce87e591d603ec28aa376300c2992bf9bda55253a03b2a06200f6938f21c4ab0c6c385d1d16d3e96b89763b856a3f2dbd7802d96115bc10c8a16384f7d1c7117d1165056a7fe291b9d9ab9ba7d51f876cd074d59e18b8a19ad220ed60c653ae54d7e25c1997e5dbd2ccdc29402bc6149e4e26786b3f3f28885e2e20af9214cf9945dfa741bd13b4411f787ee19ec10de955895faeb1b5db26a277a1c384a89eec15b0e0d14229c6d7632252bc9c86276203aa35337a19d5c30f7e358a94b89606c1c1616f6b99ac88c4156bd01c7c03ce95afe87c6bcfcf3e2102558f15d7449c7eecd77f9003420fba206fe82ff5291a06f0526ea14580993dd79c606519ba7726264991509cf96bec5762410cf334d253abbf4cc8077984f688824002839fd2d77a1a5b5dab0716a3ffe106bd5dac93e0ab6959f90bc9fb68d794e3b5f5a4f65f3d511b034dd4e77563980c65571cfcbb06e29e05a49d9b626d1710780c17fa27ba9cf3d88ce1da6c90096e58f2a68a6f980cbda8a1e387cfb3508ebdfb39c8fcd65c8e2e4cd7ffb985b69959287da5e41caea2c415ec30c3a6b759543f2b4ad22d6aade2c9085f0b76ad5e49273f30ea4b150b680c50dc63096d7ba0a62bc572751865bfa70792367bd87c941c5622cc3348b4747efc28d3902e00046df2c0d47d141d3f2273b2f364eb4f7b7ac81886d23aebbedb6382bff4f1707e5a5b2acae7ba8c07882af999fa542835e2363acf9f06a1ef5ab0f1c336539cf14f42f362840988b4c3a5dac6e2bf55f2390eed756e83e66e3cbdd0fc1bc809ba962c60a1de1647fd7cc5c84e7ca8aefb68b02530bf44a49eb7ac5fd46386e1f7c1d4057b141452ccd83f4101926940a33797f25f5ce4a0a688eef2c1002f3b3303ff12b2bcb51391921d6cfe0b38babdebb8a1cbc647723a3f0579633e8d98506a958f1ae9771e9555cfb5dc6f5e8c78db9c0bbfb7bb83668463ea8ff8e763b1f78c07233654bcf143df2da89c598931c54479ebeae04794e82f55c0672b7a9163b5ac027374f5d828c01b915271bcc10247485a241bc5d31a49163aa5287ff81a56ddc967a38d1585b2d6b502a19e06a5cc6ed4f02b3495dd4b2a67cf84f8d0cbe9080c310e724b9bd375172f066018f50de8a34b0065487401c6dd1c61c53d46c57dda4cde13f9a04c77f16c03f80ee3b02350f43cc78d8e1603afdadd1dc8b5dfd65b7a509541882388a746b493e53c9427a13a50ec5a465d35c993e27bd4430a7f6c69b8425bad9f82e2b216dc88dfa7dfbe2c16ae2f5b8d763492feeea052e207ef2ce15ab00f267adcfb4ae2ff6d674085fd777cc322f12222f37fd69890c5c3c65cab9400585ec08a995730565871ebaf3fe40d5ed4cbaed1091b07847b8e315048790e947cd7d8eb86f074930f0999b8a126391bb45983b258bbc5ebfc4d2975b4d20e9eeb79549cd80371a7274b4118ee731b89666215d0128e5244326b3ee3fd65eadbad7f81a6404c191536feb53b54f572f137b4b705353f0ade0bb5d265b7683f87cc37052bc86bed4ff55f4c5015389cff5d330c6cf2ec72426a1e7b1b1b70344fb877a00df40313000ef0af65522c3ff00289e6cf0ad3b5d3283ff6abaab305bff011141878f9e4a4e3308fdde050168f197e9baebabbc172a53049bdd464042af523cbe2ed41fa47508812b723c170025c6f0aee63ed32a4c362d264aa5044450263f2c49c44230e20831520bb0d421cef4b2fd0a9c48a34556b34a85443859f6c31c9aa09b3d8e33d2d4a07a7cab34d99e63b07691f40df289e24732fcfbb9edb7a35f310e524918807fcd131384882f2c6094d744bb579233e7e777d9b645f58940aa239abc01788bc5729c4350ad2fb033ff8c1baed8ccad2f128b05add9bb143560986f2000d25440006718d4b59d0d261aa544853f7a6c328b3f3925e12a233e81f1e80e3180ec8e37b464016118ad2ef7f82ece3eee906fce063d467dbc377a115c56aecaae110d341ac000b79b1c6fe308a4e272b7a610adcbc0449b6cb817ff7a2a2bab522c8913dea9bf18230f8c3a6cffb1aa02736d39d17c9130835e5164192f7c26f48fb141cb596aa9aa2482d86b708286618afef8ed8fd58ffac722dd1e7764d69dc352950bf0272d12ce2766c98f8643bc5350c66e8f27ac26414c336525c1ebe36792411fa9c82de9ffd9d3962e77db5675bce597cc54890e1c34092a4b4a21dfb1eddae6b8aea392af76513cd31303b95ca0c9f92d2c977aad3eec6f9364dec96548ba24ef96681f54505aeb54cedfc4a5ec9c4d8702c26c3257f39add5ef8b42e7ec07271f2bc474c8140a9d60c515834dacd0d1212bb3811c892fbbabf21addae4241d5e6c5af807a8ce654c048f860c3769ab9eb97c7b0c6f2b69c778e1c8ac6b1200548f3a6f9c7fe62d424f524c39de3acae2edbaa09d0f6c7a9d30b19a0c69c35b957b915921ca4111548dafa9f3fa6bedfbb46aaabb66096709bbd0ba6a88ddfdeef7c627e4820d88db8f8f2aa15e30db4c32d67f4f8c553be833fc4b3e7fc30386904d7216ef3271384f0e22118ddde624ee1953282c2398d95f5ae488c7c7956ced227dc0193fa672ee8f7892fb731f1e12a567af4a17ec7a6246d68efd1a45a4610636de5eb57e64a15768abad7ab61fa98320c2b381683e9ee7604472ffb0d21031efccc72e375634f12b9c15f59a29b7e84588f6a4db65d785dc1da677115dbf426b6c1154aea9928ccedded702aca38276f2d68403e854dd7e4c70c9f827f53568aa1261470ee06f24dfb37aa4c2636b95dad1d70cf3c74d03edb70929fcb440668ce95089a49db1f420ada7000a21238c8d3332798c01f3cc0b727142cedb35087199e6eae4a7b7276cb17539d428a637f3ee4fd38b486e1bbb3b53dd99a6555e60b89f955ec93366fb977503f94b613acc37a0962ed5f439dd353583651cd983dd50197941a60c1e5e280b5576bfce8eaa09d37b70b488c52ca270763464c24738f1613a673bd1f9a26556baa6d5088478311c3da3f4f85befaedcd247f4c9283fa964ab0e01af45c1c2a0acb045b1e4e24d6f179817713a21977fcae49cd4a98bcd93377ee6991e17de79fa43ef43aefa95980e712885cf11797115fc033577cc08854950c65127cd0635a2784"}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000002780)={0x40000018}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002840)=[@text32={0x20, &(0x7f00000027c0)="c4e26500c18fc978cb38b98a030000b8cc0c9df1ba2ea472730f300f0f9c8da8000000b466ba2100edb805000000b9030000000f01d9c4e1f9173cae0f01d10f32c4e1e573de00", 0x47}], 0x1, 0x1, &(0x7f0000002880)=[@dstype0={0x6, 0xb}], 0x1) r4 = accept$inet(r1, 0x0, &(0x7f00000028c0)) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000002900)) ioctl$FITHAW(r1, 0xc0045878) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000029c0)={0x9, &(0x7f0000002940)=[{0x16a, 0x4, 0x8, 0x4}, {0x6, 0x7d, 0x7e, 0x3}, {0x6, 0x3, 0x6, 0x6}, {0xad, 0x4, 0x9, 0x4}, {0xfff4, 0xa4, 0x6, 0x10001}, {0x7, 0x0, 0x7f, 0x81}, {0x3, 0x7, 0x3, 0xef}, {0x2f, 0x4, 0x2, 0x33c}, {0x75c, 0xa, 0xfa, 0xffffffff}]}) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000002a00)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000002ac0)={0x3, &(0x7f0000002a80)=[{0x5, 0x81, 0xf7, 0x24}, {0x7fff, 0x1, 0x3, 0xb}, {0x4, 0x28, 0x7}]}, 0x10) openat$cgroup_subtree(r2, &(0x7f0000002b00), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x40, 0x79}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000002c80)=0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002d40)={0x9, &(0x7f0000002cc0)=[{0x2, 0x1, 0x1, 0x5}, {0x2, 0x32, 0x7}, {0x7, 0x0, 0x2, 0x1d00000}, {0x0, 0x5, 0x3, 0x5}, {0x3, 0x7f, 0x2, 0x1}, {0x5, 0x1, 0x0, 0x8}, {0x0, 0x3, 0x8, 0xcce}, {0x1, 0x8, 0x8, 0x3}, {0xc, 0xa, 0x3, 0x7}]}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002dc0)=[@textreal={0x8, &(0x7f0000002d80)="2626f30f090f070f01dd0fc77f4926f30f2c5600a666b96b09000066b8f000000066ba000000000f300f060f20520fc7b8062e", 0x33}], 0x1, 0x1, &(0x7f0000002e00)=[@cr4={0x1, 0x400}], 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000002f40)={0x0, 0x800}) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) unshare(0x100) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000002f80)=""/4096) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000003f80)='dvmrp1\x00') 732.224225ms ago: executing program 2 (id=217): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)=""/12, &(0x7f0000000080)=0xc) unlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x48, 0x0, &(0x7f0000000100)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper], 0x0, 0x0, 0x0}) 731.786425ms ago: executing program 2 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@decrefs], 0x6f, 0x0, &(0x7f0000000100)="08058f01c9ac9b0d69889426de75ac673e85842337d43d5811b4c3bbcbb227599ee0674cc6bcb9b7bac48a935df4fe56b2a5dc0e4589fe07c56e93e5ec822b4e09613ceadeea75e3690e1cb3b907ec5daf70cc485848cfaa18ac99058c5c439e5db5c3454d0f24ed14f6358306dab2"}) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000004a00010000000000000000000a00806e00000000fdb0640fed01c900"], 0x20}}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x1b}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x68, 0x0, &(0x7f0000000440)="79cf8f38f077fb4631f7a82e29577a94f8c8f2046804f04b15c82e0388a84ea4ef2c8711ebf2feaa48e1b7c583e2fd4f80ff641e38e0c8b4bbd9f6d63be42707cb6a68ad171602580d0fb8c076932bb9b9e6583483eccd376c2027e4f8aa89c0d9140a1157ce0c37"}) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 731.352455ms ago: executing program 2 (id=219): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) umount2(0x0, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x8f79, 0x6, [{0x8, 0x1}, {0x6}, {0x6}, {0x1}, {0xa, 0x1}, {0x7, 0x1}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 724.722725ms ago: executing program 2 (id=220): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x3f, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 0s ago: executing program 3 (id=221): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$read(0xb, r1, &(0x7f0000000200)=""/4, 0x4) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="96af59407daed7f89415d078f36cfaaa8aa36d1dc87f11cf0e33b463a84aa837857c43fcf8749292bb574c95efde955ecfa30d31d5649fc5e122d851faf485b565392ada0bfd3ace637595952095d9d40a8567df19a441bb7274f0925fc27263b1f8b0200bef8f153e1a05645a8aceebfb453372d673ba82", 0x78, r1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r5, r5, 0x0, 0x7a680000) read$FUSE(r5, 0x0, 0xeffd) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 23.480869][ T36] audit: type=1400 audit(1761709922.950:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.482702][ T282] cgroup: Unknown subsys name 'net' [ 23.503605][ T36] audit: type=1400 audit(1761709922.950:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.530969][ T36] audit: type=1400 audit(1761709922.980:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.531110][ T282] cgroup: Unknown subsys name 'devices' [ 23.736118][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.741740][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.916581][ T36] audit: type=1400 audit(1761709923.390:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.939776][ T36] audit: type=1400 audit(1761709923.390:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.964579][ T36] audit: type=1400 audit(1761709923.390:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.975845][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.996429][ T36] audit: type=1400 audit(1761709923.470:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.021852][ T36] audit: type=1400 audit(1761709923.470:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.059917][ T36] audit: type=1400 audit(1761709923.530:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.085469][ T36] audit: type=1400 audit(1761709923.530:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.085836][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.319666][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.326741][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.333798][ T290] bridge_slave_0: entered allmulticast mode [ 25.340171][ T290] bridge_slave_0: entered promiscuous mode [ 25.346570][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.353612][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.360699][ T289] bridge_slave_0: entered allmulticast mode [ 25.366929][ T289] bridge_slave_0: entered promiscuous mode [ 25.376098][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.383131][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.390248][ T290] bridge_slave_1: entered allmulticast mode [ 25.396644][ T290] bridge_slave_1: entered promiscuous mode [ 25.402695][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.409748][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.416835][ T289] bridge_slave_1: entered allmulticast mode [ 25.423049][ T289] bridge_slave_1: entered promiscuous mode [ 25.460724][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.467783][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.474965][ T292] bridge_slave_0: entered allmulticast mode [ 25.481185][ T292] bridge_slave_0: entered promiscuous mode [ 25.497002][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.504037][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.511119][ T292] bridge_slave_1: entered allmulticast mode [ 25.517394][ T292] bridge_slave_1: entered promiscuous mode [ 25.548720][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.555784][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.562832][ T291] bridge_slave_0: entered allmulticast mode [ 25.569194][ T291] bridge_slave_0: entered promiscuous mode [ 25.582172][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.589275][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.596400][ T291] bridge_slave_1: entered allmulticast mode [ 25.602598][ T291] bridge_slave_1: entered promiscuous mode [ 25.741886][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.748967][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.756326][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.763361][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.773671][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.780739][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.788098][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.795137][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.806802][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.813851][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.821144][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.828185][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.858752][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.865807][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.873108][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.880160][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.901963][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.909262][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.916763][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.924007][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.931393][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.938692][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.946375][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.953514][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.978125][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.985193][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.993022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.000082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.007800][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.014870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.028784][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.035942][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.057616][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.064671][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.072183][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.079240][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.112350][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.119445][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.128350][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.135407][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.162351][ T292] veth0_vlan: entered promiscuous mode [ 26.172826][ T290] veth0_vlan: entered promiscuous mode [ 26.192387][ T291] veth0_vlan: entered promiscuous mode [ 26.205357][ T292] veth1_macvtap: entered promiscuous mode [ 26.224012][ T290] veth1_macvtap: entered promiscuous mode [ 26.239735][ T291] veth1_macvtap: entered promiscuous mode [ 26.248535][ T289] veth0_vlan: entered promiscuous mode [ 26.277416][ T289] veth1_macvtap: entered promiscuous mode [ 26.286005][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.317195][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.402946][ T342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 26.435334][ T353] binder: Unknown parameter '00000000000000000000003' [ 26.466335][ T355] rust_binder: Error while translating object. [ 26.466388][ T355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 26.472563][ T355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:6 [ 26.484698][ T338] binder: Unknown parameter 'uid<00000000000000000000' [ 26.526619][ T362] overlayfs: conflicting options: nfs_export=on,index=off [ 26.611228][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.611254][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.617967][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.626050][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.632491][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.640757][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.648412][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.661201][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.668050][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:12 [ 26.675630][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.686141][ T375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.692781][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.703056][ T375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:12 [ 26.709918][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.720075][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.729744][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.740586][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.747194][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.753674][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.760331][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.766969][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.773507][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.780043][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.786526][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.787616][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.795207][ T394] rust_binder: 393 RLIMIT_NICE not set [ 26.800531][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.813012][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.823052][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.829816][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.836713][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.843193][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.849860][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.856616][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.863083][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.869980][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.876583][ T374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.944128][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 26.957291][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 26.966104][ T10] usb 1-1: config 0 has no interface number 0 [ 26.973798][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 26.985238][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.993476][ T10] usb 1-1: Product: syz [ 26.998128][ T10] usb 1-1: Manufacturer: syz [ 27.004245][ T10] usb 1-1: SerialNumber: syz [ 27.011661][ T10] usb 1-1: config 0 descriptor?? [ 27.017807][ T10] smsc95xx v2.0.0 [ 27.025290][ T402] netlink: 100 bytes leftover after parsing attributes in process `syz.2.21'. [ 27.101046][ T410] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23'. [ 27.166409][ T411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 27.177468][ T411] tipc: Enabling of bearer rejected, failed to enable media [ 27.254155][ T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.405491][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.416493][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.426428][ T63] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 27.435587][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.444475][ T63] usb 2-1: config 0 descriptor?? [ 27.583870][ T414] __vm_enough_memory: pid: 414, comm: syz.3.24, bytes: 18014402804453376 not enough memory for the allocation [ 27.761320][ T425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.761352][ T425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 27.827537][ T361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.845395][ T361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.855373][ T63] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 27.862393][ T63] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 27.869423][ T63] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 27.876568][ T63] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 27.883554][ T63] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 27.891501][ T63] aureal 0003:0755:2626.0001: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 28.054286][ T361] IPv6: NLM_F_CREATE should be specified when creating new route [ 28.074214][ T361] IPv6: NLM_F_REPLACE set, but no existing node found! [ 28.084206][ T332] usb 2-1: USB disconnect, device number 2 [ 28.222272][ T459] ======================================================= [ 28.222272][ T459] WARNING: The mand mount option has been deprecated and [ 28.222272][ T459] and is ignored by this kernel. Remove the mand [ 28.222272][ T459] option from the mount to silence this warning. [ 28.222272][ T459] ======================================================= [ 28.296678][ T361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.311282][ T361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.544126][ T332] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.604581][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 28.604600][ T36] audit: type=1400 audit(1761709928.080:178): avc: denied { setopt } for pid=468 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.641224][ T469] kvm: MONITOR instruction emulated as NOP! [ 28.649760][ T36] audit: type=1400 audit(1761709928.120:179): avc: denied { bind } for pid=468 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.704161][ T332] usb 4-1: Using ep0 maxpacket: 8 [ 28.710630][ T332] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 28.720830][ T361] binder: Bad value for 'max' [ 28.721139][ T332] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.738878][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 28.749635][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.758967][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 28.769946][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 28.778365][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.787442][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.795519][ T332] usb 4-1: SerialNumber: syz [ 28.801959][ T10] usb 1-1: USB disconnect, device number 2 [ 28.806216][ T473] netlink: 'syz.1.40': attribute type 11 has an invalid length. [ 28.808309][ T36] audit: type=1400 audit(1761709928.270:180): avc: denied { ioctl } for pid=472 comm="syz.1.40" path="socket:[4904]" dev="sockfs" ino=4904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.832165][ T473] rust_binder: Error while translating object. [ 28.840903][ T473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.843298][ T332] cdc_acm 4-1:1.0: skipping garbage [ 28.850665][ T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:28 [ 28.856566][ T332] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 28.879257][ T332] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 28.885764][ T332] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 28.911649][ T36] audit: type=1400 audit(1761709928.380:181): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 28.992184][ T36] audit: type=1400 audit(1761709928.460:182): avc: denied { read write } for pid=479 comm="syz.1.42" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.033348][ T36] audit: type=1400 audit(1761709928.460:183): avc: denied { open } for pid=479 comm="syz.1.42" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.117889][ T63] usb 4-1: USB disconnect, device number 2 [ 29.268100][ T36] audit: type=1400 audit(1761709928.740:184): avc: denied { write } for pid=486 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.288218][ T36] audit: type=1400 audit(1761709928.760:185): avc: denied { getopt } for pid=486 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.308103][ T412] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.464128][ T412] usb 3-1: Using ep0 maxpacket: 16 [ 29.474489][ T412] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.484312][ T412] usb 3-1: config index 0 descriptor too short (expected 61, got 45) [ 29.495929][ T412] usb 3-1: config 157 has an invalid interface number: 116 but max is 0 [ 29.516565][ T412] usb 3-1: config 157 has no interface number 0 [ 29.533047][ T412] usb 3-1: config 157 interface 116 altsetting 241 endpoint 0xE has invalid maxpacket 510, setting to 64 [ 29.548102][ T412] usb 3-1: config 157 interface 116 has no altsetting 0 [ 29.566550][ T412] usb 3-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=9c.e8 [ 29.575701][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.583714][ T412] usb 3-1: Product: syz [ 29.594123][ T332] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.594176][ T412] usb 3-1: Manufacturer: syz [ 29.617394][ T412] usb 3-1: SerialNumber: syz [ 29.666459][ T496] ip6_vti0: entered allmulticast mode [ 29.691220][ T498] rust_binder: Write failure EINVAL in pid:42 [ 29.752569][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 29.782843][ T502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 29.783785][ T332] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 29.806733][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.809285][ T504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.815866][ T332] usb 1-1: config 0 descriptor?? [ 29.818938][ T504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 29.822608][ T490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 29.839691][ T482] 9pnet_fd: Insufficient options for proto=fd [ 29.851303][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.860037][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.869093][ T36] audit: type=1400 audit(1761709929.340:186): avc: denied { map } for pid=481 comm="syz.2.43" path="/proc/43/task/44/smaps_rollup" dev="proc" ino=3908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 29.894962][ T412] zaurus 3-1:157.116: skipping garbage [ 29.900460][ T412] usb 3-1: bad CDC descriptors [ 29.914058][ T412] usb 3-1: USB disconnect, device number 2 [ 30.247309][ T332] hid-generic 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 30.427273][ T36] audit: type=1400 audit(1761709929.900:187): avc: denied { bind } for pid=509 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.486287][ T511] binder: Bad value for 'stats' [ 30.496405][ T63] usb 1-1: USB disconnect, device number 3 [ 30.537916][ T513] tmpfs: Unknown parameter 'usrquota' [ 30.544218][ T515] tmpfs: Unknown parameter 'usrquota' [ 30.864139][ T412] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.015337][ T412] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 31.024460][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.033222][ T412] usb 4-1: config 0 descriptor?? [ 31.053074][ T523] rust_binder: Read failure Err(EAGAIN) in pid:15 [ 31.181776][ T532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 31.211286][ T534] rust_binder: 27: no such ref 1 [ 31.216498][ T534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 31.231500][ T539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 31.240692][ T539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:32 [ 31.294766][ T548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 31.306228][ T548] rust_binder: Read failure Err(EFAULT) in pid:39 [ 31.450486][ T520] rust_binder: Error while translating object. [ 31.457394][ T520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.463581][ T520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 31.473355][ T554] rust_binder: 553 RLIMIT_NICE not set [ 31.482585][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.506693][ T412] usb 4-1: Cannot read MAC address [ 31.534155][ T412] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 31.556134][ T412] usb 4-1: USB disconnect, device number 3 [ 31.580860][ T567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.728516][ T573] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 31.736580][ T573] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 31.745147][ T573] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 31.753074][ T573] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 31.778456][ T575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.804137][ T63] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.898701][ T579] binder: Bad value for 'defcontext' [ 31.911982][ T579] 9pnet_fd: Insufficient options for proto=fd [ 31.933941][ T581] capability: warning: `syz.3.75' uses deprecated v2 capabilities in a way that may be insecure [ 31.945261][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem binding to privport [ 31.958093][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem binding to privport [ 31.974129][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 31.980458][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.991203][ T63] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.002217][ T63] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.012094][ T63] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 32.025238][ T63] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.031838][ T63] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 32.040882][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.051232][ T63] usb 3-1: config 0 descriptor?? [ 32.142403][ T597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 32.237720][ T605] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 32.257459][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.272772][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.273870][ T605] rust_binder: Error in use_page_slow: ESRCH [ 32.281742][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.285742][ T605] rust_binder: use_range failure ESRCH [ 32.295629][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.299850][ T605] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 32.305316][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.309779][ T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.319216][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.335789][ T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:93 [ 32.347541][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.366095][ T611] Zero length message leads to an empty skb [ 32.368564][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.380917][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.389947][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.413408][ T63] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.418498][ T616] netlink: 'syz.2.86': attribute type 6 has an invalid length. [ 32.421315][ T63] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.436734][ T63] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.445229][ T616] netlink: 'syz.2.86': attribute type 4 has an invalid length. [ 32.445533][ T63] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.461084][ T63] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 32.464672][ T616] netlink: 17 bytes leftover after parsing attributes in process `syz.2.86'. [ 32.479428][ T63] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 32.504207][ T63] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 32.512304][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 32.523190][ T63] usb 3-1: USB disconnect, device number 3 [ 32.584142][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.663841][ T642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 32.678550][ T642] rust_binder: 109: no such ref 1 [ 32.684183][ T642] rust_binder: 109: no such ref 3 [ 32.689273][ T645] rust_binder: 109: no such ref 1 [ 32.694780][ T642] rust_binder: 109: no such ref 0 [ 32.699882][ T642] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 32.707153][ T645] rust_binder: 109: no such ref 3 [ 32.712237][ T645] rust_binder: 109: no such ref 0 [ 32.717427][ T645] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 32.746478][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 32.755855][ T31] usb 2-1: config 7 has an invalid interface number: 12 but max is 0 [ 32.764151][ T31] usb 2-1: config 7 has no interface number 0 [ 32.770541][ T31] usb 2-1: config 7 interface 12 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 32.781538][ T31] usb 2-1: config 7 interface 12 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 32.792608][ T31] usb 2-1: config 7 interface 12 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 32.803706][ T31] usb 2-1: config 7 interface 12 has no altsetting 0 [ 32.812013][ T31] usb 2-1: New USB device found, idVendor=05c6, idProduct=9235, bcdDevice=40.d5 [ 32.822802][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.830969][ T31] usb 2-1: Product: 䁫옾典儁䚓墝쒲Ṭ㔱䧇龵쭒㓛륾詳磭媰⌡ሒ㺅蝦陾ࢡ㚣鿃펃ᑦ襝쩓缎蠹厠櫮喔欖搢柪삨崿掇拴숻苣넵 [ 32.847607][ T31] usb 2-1: Manufacturer: 欯ꕓ炒㗲檃쭭䮝ṍ㈭曠䠔ャ뀻꙼릀ꗻ糘䖾⪌鍅 [ 32.858010][ T31] usb 2-1: SerialNumber: Ⰹ [ 32.892212][ T667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.892246][ T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:125 [ 33.044728][ T690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'. [ 33.063696][ T690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 33.073756][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.083976][ T690] bridge_slave_0 (unregistering): left allmulticast mode [ 33.084609][ T31] usb 2-1: USB disconnect, device number 3 [ 33.097711][ T690] bridge_slave_0 (unregistering): left promiscuous mode [ 33.107127][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.177376][ T695] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 33.263427][ T711] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 33.286148][ T713] tmpfs: Unknown parameter '' [ 33.306757][ T718] syz.2.118 uses obsolete (PF_INET,SOCK_PACKET) [ 33.444282][ T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.584157][ T63] usb 1-1: device descriptor read/64, error -71 [ 33.599408][ T727] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 33.607668][ T727] rust_binder: Write failure EINVAL in pid:66 [ 33.621062][ T36] kauditd_printk_skb: 133 callbacks suppressed [ 33.621081][ T36] audit: type=1400 audit(1761709933.090:321): avc: denied { bind } for pid=728 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.684540][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 33.695770][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 33.704328][ T729] kvm: kvm [728]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 33.714148][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.722111][ T729] kvm_intel: kvm [728]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 33.734504][ T731] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.742517][ T731] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 33.751087][ T731] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.759062][ T731] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 33.824161][ T63] usb 1-1: device descriptor read/64, error -71 [ 33.872936][ T36] audit: type=1400 audit(1761709933.340:322): avc: denied { mounton } for pid=739 comm="syz.1.126" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.873148][ T740] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 33.905959][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.916895][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.926647][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.939586][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.948740][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.957567][ T10] usb 4-1: config 0 descriptor?? [ 34.040042][ T36] audit: type=1400 audit(1761709933.510:323): avc: denied { bind } for pid=743 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.068882][ T36] audit: type=1400 audit(1761709933.540:324): avc: denied { mount } for pid=748 comm="syz.1.128" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 34.071976][ T749] 9pnet_fd: Insufficient options for proto=fd [ 34.090331][ T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.100257][ T749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.103839][ T749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 34.103860][ T36] audit: type=1400 audit(1761709933.540:325): avc: denied { mounton } for pid=748 comm="syz.1.128" path="/24/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 34.148159][ T36] audit: type=1400 audit(1761709933.620:326): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 34.182086][ T36] audit: type=1400 audit(1761709933.650:327): avc: denied { ioctl } for pid=755 comm="syz.1.130" path="socket:[6914]" dev="sockfs" ino=6914 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.229121][ T760] binder: Bad value for 'max' [ 34.274124][ T63] usb 1-1: device descriptor read/64, error -71 [ 34.369945][ T10] plantronics 0003:047F:FFFF.0004: unknown global tag 0xc [ 34.377170][ T10] plantronics 0003:047F:FFFF.0004: item 0 2 1 12 parsing failed [ 34.385390][ T10] plantronics 0003:047F:FFFF.0004: parse failed [ 34.391680][ T10] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 34.478772][ T36] audit: type=1326 audit(1761709933.950:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4798efc9 code=0x7ffc0000 [ 34.483414][ T765] binder: Unknown parameter 'defcontext01777777777777777777777' [ 34.501967][ T36] audit: type=1326 audit(1761709933.950:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4798efc9 code=0x7ffc0000 [ 34.533131][ T63] usb 1-1: device descriptor read/64, error -71 [ 34.536228][ T36] audit: type=1326 audit(1761709933.950:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4798efc9 code=0x7ffc0000 [ 34.577725][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.586370][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.593843][ T774] overlayfs: conflicting options: metacopy=off,verity=require [ 34.603301][ T725] mmap: syz.3.121 (725) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.645643][ T63] usb usb1-port1: attempt power cycle [ 34.651334][ T10] usb 4-1: USB disconnect, device number 4 [ 34.747824][ T776] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.138'. [ 34.860185][ T780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 34.861645][ T781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 34.984151][ T63] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.015354][ T63] usb 1-1: device descriptor read/8, error -71 [ 35.145201][ T63] usb 1-1: device descriptor read/8, error -71 [ 35.170199][ T798] binder: Binderfs stats mode cannot be changed during a remount [ 35.218478][ T31] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 35.229307][ T31] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.255617][ T810] rust_binder: Write failure EFAULT in pid:143 [ 35.273313][ T814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.279696][ T816] /dev/rnullb0: Can't lookup blockdev [ 35.392034][ T824] fuse: Bad value for 'fd' [ 35.396564][ T63] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.425286][ T63] usb 1-1: device descriptor read/8, error -71 [ 35.480158][ T839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.514167][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.555226][ T63] usb 1-1: device descriptor read/8, error -71 [ 35.664125][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 35.670285][ T10] usb 4-1: unable to get BOS descriptor set [ 35.674220][ T63] usb usb1-port1: unable to enumerate USB device [ 35.680382][ T10] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 35.692414][ T10] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 35.703380][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 35.711648][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.720769][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.728848][ T10] usb 4-1: Product: syz [ 35.733052][ T10] usb 4-1: Manufacturer: syz [ 35.737669][ T10] usb 4-1: SerialNumber: syz [ 35.744245][ T814] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.751469][ T814] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.961505][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 35.971331][ T10] usb 4-1: USB disconnect, device number 5 [ 36.194435][ T860] /dev/sr0: Can't lookup blockdev [ 36.199815][ T860] FAT-fs (rnullb0): bogus number of reserved sectors [ 36.206560][ T860] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 36.214314][ T861] ./cgroup: Can't lookup blockdev [ 36.219783][ T862] FAT-fs (rnullb0): bogus number of reserved sectors [ 36.226894][ T862] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 36.264440][ T866] rust_binder: Write failure EINVAL in pid:74 [ 36.337012][ T874] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 36.394440][ T878] @0: renamed from bond_slave_1 [ 36.565504][ T885] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.584436][ T887] FAT-fs (rnullb0): bogus number of reserved sectors [ 36.591140][ T887] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 36.625077][ T891] rust_binder: Write failure EFAULT in pid:138 [ 36.764136][ T331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.874135][ T63] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.924111][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 36.930306][ T331] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.939094][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.949236][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.959428][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.968498][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.976510][ T331] usb 4-1: Product: syz [ 36.980677][ T331] usb 4-1: Manufacturer: syz [ 36.985295][ T331] usb 4-1: SerialNumber: syz [ 37.025172][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 37.034984][ T63] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 37.044751][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 37.054503][ T63] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 37.065665][ T63] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 37.074759][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.082767][ T63] usb 2-1: Product: syz [ 37.086971][ T63] usb 2-1: Manufacturer: syz [ 37.091669][ T63] usb 2-1: SerialNumber: syz [ 37.097065][ T63] usb 2-1: config 0 descriptor?? [ 37.104172][ T63] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 37.308849][ T902] rust_binder: Error while translating object. [ 37.308898][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 37.315166][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:85 [ 37.345077][ T63] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 37.401776][ T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.410321][ T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.466935][ T331] usb 4-1: 0:2 : does not exist [ 37.473798][ T331] usb 4-1: USB disconnect, device number 6 [ 37.482392][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.674165][ T332] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.825293][ T332] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 37.834496][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.843063][ T332] usb 1-1: config 0 descriptor?? [ 38.010728][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.019536][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.049381][ T910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 38.051242][ T332] usb 1-1: string descriptor 0 read error: -71 [ 38.068329][ T332] usbhid 1-1:0.0: can't add hid device: -71 [ 38.074324][ T332] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 38.083214][ T332] usb 1-1: USB disconnect, device number 8 [ 38.105158][ T63] usb 2-1: USB disconnect, device number 4 [ 38.163798][ T927] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 38.171747][ T927] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 38.180297][ T927] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 38.188692][ T927] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 38.313041][ T942] loop7: detected capacity change from 0 to 7 [ 38.372235][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 38.382028][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 38.564522][ T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 38.834181][ T45] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 38.995200][ T45] usb 1-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 39.006396][ T45] usb 1-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 39.019376][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.026047][ T45] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 39.035130][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.043770][ T45] usb 1-1: config 0 descriptor?? [ 39.049182][ T955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.163592][ T958] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 39.163635][ T958] rust_binder: Error while translating object. [ 39.175822][ T958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.182012][ T958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 39.393644][ T969] 9pnet_fd: Insufficient options for proto=fd [ 39.434537][ T971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.202'. [ 39.460424][ T45] itetech 0003:06CB:73F5.0006: unknown main item tag 0x0 [ 39.467562][ T45] itetech 0003:06CB:73F5.0006: item fetching failed at offset 6/7 [ 39.475648][ T45] itetech 0003:06CB:73F5.0006: probe with driver itetech failed with error -22 [ 39.496239][ T981] x_tables: duplicate underflow at hook 1 [ 39.586444][ T987] netlink: 'syz.1.207': attribute type 4 has an invalid length. [ 39.586705][ T988] binder: Bad value for 'max' [ 39.595231][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 39.595249][ T36] audit: type=1400 audit(1761709939.060:420): avc: denied { write } for pid=986 comm="syz.1.207" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.142751][ T36] audit: type=1400 audit(1761709939.610:421): avc: denied { create } for pid=989 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 40.166303][ T36] audit: type=1400 audit(1761709939.640:422): avc: denied { bind } for pid=991 comm="syz.1.209" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.186333][ T36] audit: type=1400 audit(1761709939.640:423): avc: denied { name_bind } for pid=991 comm="syz.1.209" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 40.207148][ T36] audit: type=1400 audit(1761709939.640:424): avc: denied { node_bind } for pid=991 comm="syz.1.209" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.334558][ T996] fuse: Bad value for 'fd' [ 40.339067][ T36] audit: type=1400 audit(1761709939.810:425): avc: denied { setopt } for pid=995 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.418359][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.436129][ T1016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 40.468859][ T1022] tipc: Started in network mode [ 40.473783][ T1022] tipc: Node identity ac14140f, cluster identity 4711 [ 40.480698][ T1022] tipc: New replicast peer: 255.255.255.255 [ 40.486810][ T1022] tipc: Enabled bearer , priority 10 [ 40.554139][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.794142][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.034167][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.164145][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.233260][ T36] audit: type=1400 audit(1761709940.700:426): avc: denied { write } for pid=1026 comm="syz.3.221" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.234688][ T1027] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 41.254004][ T36] audit: type=1400 audit(1761709940.700:427): avc: denied { open } for pid=1026 comm="syz.3.221" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.266381][ T1027] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 41.266413][ T1027] CPU: 0 UID: 0 PID: 1027 Comm: syz.3.221 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 41.287940][ T36] audit: type=1400 audit(1761709940.700:428): avc: denied { read } for pid=1026 comm="syz.3.221" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.295998][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.296028][ T1027] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 41.310974][ T36] audit: type=1400 audit(1761709940.710:429): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 41.327845][ T1027] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 41.327867][ T1027] RSP: 0018:ffffc9000e997820 EFLAGS: 00010202 [ 41.327889][ T1027] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888110efcc00 [ 41.327904][ T1027] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 41.327919][ T1027] RBP: ffffc9000e997a40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 41.415390][ T1027] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 41.423364][ T1027] R13: 7fffffffffff0000 R14: ffff888121177810 R15: ffff888121177800 [ 41.431336][ T1027] FS: 00007f37e34c36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.440266][ T1027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.446848][ T1027] CR2: 000000110c3470a5 CR3: 000000011e6be000 CR4: 00000000003526b0 [ 41.454819][ T1027] Call Trace: [ 41.458097][ T1027] [ 41.461042][ T1027] ? __cfi_iter_file_splice_write+0x10/0x10 [ 41.466957][ T1027] ? __kmalloc_noprof+0x271/0x530 [ 41.471982][ T1027] ? activate_task+0x38b/0x3d0 [ 41.476746][ T1027] ? __kasan_check_write+0x18/0x20 [ 41.481862][ T1027] ? __cfi_iter_file_splice_write+0x10/0x10 [ 41.487758][ T1027] direct_splice_actor+0x279/0x4b0 [ 41.492873][ T1027] splice_direct_to_actor+0x4fb/0xbc0 [ 41.498252][ T1027] ? __cfi_direct_splice_actor+0x10/0x10 [ 41.503884][ T1027] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 41.509780][ T1027] do_splice_direct+0x182/0x270 [ 41.514633][ T1027] ? __cfi_do_splice_direct+0x10/0x10 [ 41.520010][ T1027] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 41.525912][ T1027] ? security_file_permission+0x2e/0xc0 [ 41.531504][ T1027] ? rw_verify_area+0xac/0x230 [ 41.536279][ T1027] do_sendfile+0x5c8/0xfb0 [ 41.540706][ T1027] ? vfs_writev+0xcf0/0xcf0 [ 41.545220][ T1027] ? __se_sys_futex+0x28f/0x300 [ 41.550079][ T1027] __x64_sys_sendfile64+0x193/0x1f0 [ 41.554183][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.555289][ T1027] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 41.567264][ T1027] ? switch_fpu_return+0x12/0x20 [ 41.572211][ T1027] x64_sys_call+0xa26/0x2ee0 [ 41.576813][ T1027] do_syscall_64+0x58/0xf0 [ 41.581236][ T1027] ? clear_bhb_loop+0x50/0xa0 [ 41.585930][ T1027] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.591821][ T1027] RIP: 0033:0x7f37e258efc9 [ 41.596253][ T1027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.615855][ T1027] RSP: 002b:00007f37e34c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 41.624265][ T1027] RAX: ffffffffffffffda RBX: 00007f37e27e5fa0 RCX: 00007f37e258efc9 [ 41.632235][ T1027] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 41.640208][ T1027] RBP: 00007f37e2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 41.648184][ T1027] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 41.656161][ T1027] R13: 00007f37e27e6038 R14: 00007f37e27e5fa0 R15: 00007fffebbeca98 [ 41.664137][ T1027] [ 41.667155][ T1027] Modules linked in: [ 41.671322][ T1027] ---[ end trace 0000000000000000 ]--- [ 41.674825][ T45] usb usb2-port1: attempt power cycle [ 41.677170][ T331] tipc: Node number set to 2886997007 [ 41.687742][ T1027] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 41.694024][ T1027] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 41.702375][ T699] usb 1-1: USB disconnect, device number 9 [ 41.713773][ T1027] RSP: 0018:ffffc9000e997820 EFLAGS: 00010202 [ 41.713799][ T1027] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888110efcc00 [ 41.713827][ T1027] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 41.713841][ T1027] RBP: ffffc9000e997a40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 41.713857][ T1027] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 41.713873][ T1027] R13: 7fffffffffff0000 R14: ffff888121177810 R15: ffff888121177800 [ 41.713890][ T1027] FS: 00007f37e34c36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.713911][ T1027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.713926][ T1027] CR2: 000000110c3470a5 CR3: 000000011e6be000 CR4: 00000000003526b0 [ 41.713947][ T1027] Kernel panic - not syncing: Fatal exception [ 41.714248][ T1027] Kernel Offset: disabled